This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft File: ktkImo4yjTLW3hbX2iV7gRsFI50.mft (raw, json) Hash identifier: a6Fcf84UeEExeGmm84Vi6nhEb26FpoMrdiuuB0lLZd8= Subject key identifier: 93:68:84:41:09:77:E3:A8:5F:11:A4:63:EB:37:A7:4A:1F:BD:68:FC Authority key identifier: 92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D Certificate issuer: /CN=92d9089a8e328d32d6de16d7da257b811b05239d Certificate serial: 019AAC156D45F506E54E6F99D3A656AFE811 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft Manifest number: 0698 Signing time: Sat 22 Nov 2025 15:01:16 +0000 Manifest this update: Sat 22 Nov 2025 15:01:16 +0000 Manifest next update: Sun 23 Nov 2025 15:01:16 +0000 Files and hashes: 1: BEBiIFhite7xZ0bNEP-JA8QrqMg.roa (hash: QbnrrPHP3fwKy8016pI0qpDqUM0JJdXwZKXHEa0y/SQ=) 2: LARL1hIKcaD4vW3zR5MLoEhaFxc.roa (hash: b6NkmGlDSYN3he0zDu5SwrD1JA7+YMRtU9hknGZasjA=) 3: ktkImo4yjTLW3hbX2iV7gRsFI50.crl (hash: sZGorBsZnQnZDMmAvLNDMH38Nbv23aFQSFOZ5JFp4KQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:15:6d:45:f5:06:e5:4e:6f:99:d3:a6:56:af:e8:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d9089a8e328d32d6de16d7da257b811b05239d Validity Not Before: Nov 22 15:01:16 2025 GMT Not After : Nov 23 15:01:16 2025 GMT Subject: CN=936884410977e3a85f11a463eb37a74a1fbd68fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6d:66:fd:44:98:c9:69:43:96:8f:19:24:4b: 89:c2:62:09:96:59:8c:96:cf:bb:68:35:34:19:76: 59:2a:ee:d2:fc:63:f0:2f:0e:9d:a5:6a:86:81:26: f0:10:09:52:a1:ee:ba:aa:e3:23:b6:cc:b8:77:51: d9:3b:77:ef:5d:da:c7:ad:42:8f:a3:1c:4a:ad:f1: 76:eb:63:d8:4a:ef:c8:95:1b:93:09:70:3d:9c:01: da:3e:21:81:b7:98:b1:95:d2:e5:f2:a6:84:fb:8b: d8:f6:2e:9c:a0:da:32:4c:dd:b0:dd:c7:3f:db:6c: dc:8b:39:20:de:66:e8:ac:31:15:3a:9b:1b:96:d8: 63:9f:e3:09:2d:26:6d:3d:ce:ec:f3:e6:2c:6f:d7: 92:4b:9e:76:fc:28:98:38:95:7c:2b:9e:a1:8e:6e: 9e:76:ee:1c:82:f4:37:cd:09:e9:c1:bc:22:d1:bc: 28:6b:a2:e6:27:60:ef:a6:ea:9f:04:85:66:87:da: 54:01:2f:d0:7a:43:76:d4:9e:30:d6:28:03:58:a9: 43:91:03:1f:d3:82:ba:8b:3e:3b:0e:0c:0c:40:5d: 89:c2:0c:07:03:3e:bf:c1:fa:79:60:e4:4f:87:22: 85:15:c1:6f:46:c0:bd:d5:a0:10:90:23:27:f0:a8: 64:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:68:84:41:09:77:E3:A8:5F:11:A4:63:EB:37:A7:4A:1F:BD:68:FC X509v3 Authority Key Identifier: keyid:92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:11:17:6b:02:91:cf:75:77:60:67:4b:d1:bc:79:2b:db:fe: f5:d3:92:8d:8a:3f:a5:ac:75:f8:aa:30:a1:55:a6:8d:7d:eb: 7c:0a:7c:67:2a:99:7c:91:c9:ac:40:e8:ae:7b:4a:04:c1:98: 98:0f:1e:22:68:b2:e7:3a:79:f4:c6:43:83:a7:04:8e:75:fd: 95:4b:dc:76:57:94:f8:c7:69:df:05:d9:24:2f:44:12:67:3a: f1:09:61:4d:3c:55:dc:37:b6:3b:f0:92:e5:97:ad:2c:5d:74: 86:1f:73:77:ae:18:4e:9e:b9:bf:3f:49:fe:eb:80:e5:29:80: 2a:f1:9a:25:e8:ef:17:85:0c:93:a8:ec:fb:57:da:bb:81:6a: fd:14:55:13:4f:d6:e7:0c:18:1b:96:dc:69:9e:d1:07:fc:8f: 09:04:2b:85:15:05:e9:10:3b:d5:97:aa:0a:f3:f7:db:76:f5: d2:63:81:92:68:2a:22:67:de:19:e9:9b:6a:4b:aa:26:6d:da: 11:1a:87:cc:dc:d4:9c:dd:c8:d5:3d:5c:65:46:af:11:b3:e0: fb:19:cc:cc:40:2c:e4:15:bb:7c:2d:f4:d9:3b:06:a6:ab:05: 60:26:90:c6:48:56:b0:e9:52:86:16:89:f2:fe:df:4e:33:32: 6f:31:a1:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsFW1F9QblTm+Z06ZWr+gRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDkwODlhOGUzMjhkMzJkNmRlMTZkN2RhMjU3YjgxMWIw NTIzOWQwHhcNMjUxMTIyMTUwMTE2WhcNMjUxMTIzMTUwMTE2WjAzMTEwLwYDVQQD Eyg5MzY4ODQ0MTA5NzdlM2E4NWYxMWE0NjNlYjM3YTc0YTFmYmQ2OGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr21m/USYyWlDlo8ZJEuJwmIJllmM ls+7aDU0GXZZKu7S/GPwLw6dpWqGgSbwEAlSoe66quMjtsy4d1HZO3fvXdrHrUKP oxxKrfF262PYSu/IlRuTCXA9nAHaPiGBt5ixldLl8qaE+4vY9i6coNoyTN2w3cc/ 22zcizkg3mborDEVOpsblthjn+MJLSZtPc7s8+Ysb9eSS552/CiYOJV8K56hjm6e du4cgvQ3zQnpwbwi0bwoa6LmJ2DvpuqfBIVmh9pUAS/QekN21J4w1igDWKlDkQMf 04K6iz47DgwMQF2JwgwHAz6/wfp5YORPhyKFFcFvRsC91aAQkCMn8KhktwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJNohEEJd+OoXxGkY+s3p0ofvWj8MB8GA1UdIwQY MBaAFJLZCJqOMo0y1t4W19ole4EbBSOdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RrSW1vNHlqVExXM2hiWDJpVjdnUnNGSTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC80MzE2MzQtMzVjYi00NTQ1LTg3N2It ZGYzYzA3ZjM0MTFlLzEva3RrSW1vNHlqVExXM2hiWDJpVjdnUnNGSTUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC80MzE2MzQtMzVjYi00NTQ1LTg3N2ItZGYzYzA3ZjM0MTFl LzEva3RrSW1vNHlqVExXM2hiWDJpVjdnUnNGSTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHhEXawKR z3V3YGdL0bx5K9v+9dOSjYo/pax1+KowoVWmjX3rfAp8ZyqZfJHJrEDorntKBMGY mA8eImiy5zp59MZDg6cEjnX9lUvcdleU+Mdp3wXZJC9EEmc68QlhTTxV3De2O/CS 5ZetLF10hh9zd64YTp65vz9J/uuA5SmAKvGaJejvF4UMk6js+1fau4Fq/RRVE0/W 5wwYG5bcaZ7RB/yPCQQrhRUF6RA71ZeqCvP323b10mOBkmgqImfeGembakuqJm3a ERqHzNzUnN3I1T1cZUavEbPg+xnMzEAs5BW7fC302TsGpqsFYCaQxkhWsOlShhaJ 8v7fTjMybzGh2w== -----END CERTIFICATE-----Generated at Sat Nov 22 21:36:03 2025 by rpki-client