This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft File: kGlKYihmrhWO0ofSUz1AuqvqbX0.mft (raw, json) Hash identifier: kdBa2rheiYecCqz0OlO8RXeE5bT/pRf31PXMfn5cMh4= Subject key identifier: DD:1A:1D:58:25:4A:F0:A6:91:16:B9:D3:74:DB:A8:4D:EE:F9:43:51 Authority key identifier: 90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D Certificate issuer: /CN=90694a622866ae158ed287d2533d40baabea6d7d Certificate serial: 019B0890924708D67CA5A0830D99C03D4D90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft Manifest number: 05C8 Signing time: Wed 10 Dec 2025 14:00:50 +0000 Manifest this update: Wed 10 Dec 2025 14:00:50 +0000 Manifest next update: Thu 11 Dec 2025 14:00:50 +0000 Files and hashes: 1: 9VYK0oHjjTC_b68oAyoNi7RTStA.roa (hash: 95NE4Wq8cotxnefZwzo13t7L9p4u4ZGJ0NIa1wNiJCg=) 2: bq3CHdF3ToMivmK2PU155LcLlRo.roa (hash: E2q6lH9inJ5ZH1jaNhC41RHD+yk7srEkGUdyytaHjj0=) 3: kGlKYihmrhWO0ofSUz1AuqvqbX0.crl (hash: TxRIA66ockHGPDiVHKkS/tKQYPMYNLOuLJAe7HVO6GU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:90:92:47:08:d6:7c:a5:a0:83:0d:99:c0:3d:4d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90694a622866ae158ed287d2533d40baabea6d7d Validity Not Before: Dec 10 14:00:50 2025 GMT Not After : Dec 11 14:00:50 2025 GMT Subject: CN=dd1a1d58254af0a69116b9d374dba84deef94351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ef:1f:33:04:20:42:b2:ae:95:69:59:7c:db: 3c:1b:86:9d:33:3f:53:2f:74:6b:52:b2:b1:06:45: 61:c6:35:81:06:95:7c:bb:3e:cd:2e:d8:73:aa:ad: c9:93:33:2f:b5:be:98:58:f2:71:89:87:75:30:6a: 44:14:af:93:53:fc:e6:0e:e3:67:1f:a7:4c:29:83: 0b:e7:98:7c:aa:3c:91:21:51:a9:0f:bf:03:67:ef: 31:5b:1d:0a:b3:89:d9:0d:f8:8c:e0:84:49:e3:23: bb:67:fe:a8:49:cc:07:7f:fb:b2:93:a1:62:d4:e4: a2:dd:13:67:55:91:2d:9d:f7:06:a5:71:16:27:b5: 88:51:cd:24:db:b0:66:96:c4:b6:fc:c1:ec:cd:3e: d3:d1:a2:5f:1b:03:ac:bb:68:3d:03:4c:70:45:2b: 2e:f0:5f:37:ec:3f:a7:7b:bc:a3:b7:04:4a:d9:d4: 45:ef:cd:04:dd:a7:c6:3d:7d:11:81:36:00:c5:c5: 64:5e:d8:55:c8:67:f7:1c:f4:f7:10:13:a3:c5:7b: b3:1b:33:da:b9:89:a2:53:3d:b3:5c:d5:ca:e6:c0: 59:74:d9:53:b6:f7:3d:ff:e4:aa:01:89:f4:c8:5a: 77:13:22:07:06:97:80:c4:ca:b8:e6:fc:81:92:ab: 65:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:1A:1D:58:25:4A:F0:A6:91:16:B9:D3:74:DB:A8:4D:EE:F9:43:51 X509v3 Authority Key Identifier: keyid:90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:3b:07:45:4c:58:d6:fd:81:43:f8:e8:63:49:ea:60:8c:57: 03:98:49:50:6d:59:33:5a:7a:59:04:92:79:48:fb:d1:c9:af: 25:c6:c1:90:1a:e9:8a:bf:11:b7:37:c5:30:ff:3d:42:65:da: 63:bc:12:97:92:d1:90:18:02:2e:ac:38:51:eb:54:8f:fc:37: 74:a0:b4:26:78:76:a5:95:42:5f:cc:80:c5:eb:ad:d2:f7:a8: 77:4d:4c:80:2c:1e:28:18:91:4c:5e:90:14:d4:f5:6b:e2:a9: 2c:c9:57:08:05:a1:7a:2b:81:94:5e:be:c8:a0:b0:23:9c:8f: 6a:c9:ce:54:bd:0b:14:2b:25:b0:5a:d3:8c:77:5f:41:5d:3d: 21:83:39:e9:b2:9c:7e:d0:0f:ee:45:f1:35:9c:26:9d:5a:9c: 91:b8:01:4d:b2:82:d4:0b:95:c5:62:e1:59:b0:22:04:3d:22: ef:19:02:26:50:02:78:37:92:b0:9f:55:28:29:bb:e2:ca:a0: a8:f3:0c:cf:15:87:8d:df:2b:0c:78:6b:de:f6:71:f5:81:25: 96:28:0c:71:71:49:f8:f2:f5:d3:1f:53:93:36:70:1b:21:f8: cf:e8:a7:5f:08:3f:e4:ba:98:fc:9b:1d:41:b8:6b:db:da:9f: e7:ab:3a:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIkJJHCNZ8paCDDZnAPU2QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwNjk0YTYyMjg2NmFlMTU4ZWQyODdkMjUzM2Q0MGJhYWJl YTZkN2QwHhcNMjUxMjEwMTQwMDUwWhcNMjUxMjExMTQwMDUwWjAzMTEwLwYDVQQD EyhkZDFhMWQ1ODI1NGFmMGE2OTExNmI5ZDM3NGRiYTg0ZGVlZjk0MzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwO8fMwQgQrKulWlZfNs8G4adMz9T L3RrUrKxBkVhxjWBBpV8uz7NLthzqq3JkzMvtb6YWPJxiYd1MGpEFK+TU/zmDuNn H6dMKYML55h8qjyRIVGpD78DZ+8xWx0Ks4nZDfiM4IRJ4yO7Z/6oScwHf/uyk6Fi 1OSi3RNnVZEtnfcGpXEWJ7WIUc0k27BmlsS2/MHszT7T0aJfGwOsu2g9A0xwRSsu 8F837D+ne7yjtwRK2dRF780E3afGPX0RgTYAxcVkXthVyGf3HPT3EBOjxXuzGzPa uYmiUz2zXNXK5sBZdNlTtvc9/+SqAYn0yFp3EyIHBpeAxMq45vyBkqtluwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN0aHVglSvCmkRa503TbqE3u+UNRMB8GA1UdIwQY MBaAFJBpSmIoZq4VjtKH0lM9QLqr6m19MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0dsS1lpaG1yaFdPMG9mU1V6MUF1cXZxYlgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iOWUyZjctMjFkYy00MmMwLTk0YjAt MTNjMGE2MzNlOWY0LzEva0dsS1lpaG1yaFdPMG9mU1V6MUF1cXZxYlgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9iOWUyZjctMjFkYy00MmMwLTk0YjAtMTNjMGE2MzNlOWY0 LzEva0dsS1lpaG1yaFdPMG9mU1V6MUF1cXZxYlgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuzsHRUxY 1v2BQ/joY0nqYIxXA5hJUG1ZM1p6WQSSeUj70cmvJcbBkBrpir8RtzfFMP89QmXa Y7wSl5LRkBgCLqw4UetUj/w3dKC0Jnh2pZVCX8yAxeut0veod01MgCweKBiRTF6Q FNT1a+KpLMlXCAWheiuBlF6+yKCwI5yPasnOVL0LFCslsFrTjHdfQV09IYM56bKc ftAP7kXxNZwmnVqckbgBTbKC1AuVxWLhWbAiBD0i7xkCJlACeDeSsJ9VKCm74sqg qPMMzxWHjd8rDHhr3vZx9YElligMcXFJ+PL10x9TkzZwGyH4z+inXwg/5LqY/Jsd Qbhr29qf56s63w== -----END CERTIFICATE-----Generated at Wed Dec 10 18:47:43 2025 by rpki-client