This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft File: ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft (raw, json) Hash identifier: NjXkS/U/AqmZpJcf7qjTltHG0+s8j2pE3Y5BHCStotY= Subject key identifier: 37:AA:25:5D:23:E1:55:3B:7F:02:B4:57:E1:2B:E7:7A:DE:AA:BF:C0 Authority key identifier: 92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0 Certificate issuer: /CN=922e330b5879590abae81bf40a91a5101bc18fa0 Certificate serial: 019AF8E68443DF0420E3EF139A57DE04004B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft Manifest number: 1764 Signing time: Sun 07 Dec 2025 13:00:47 +0000 Manifest this update: Sun 07 Dec 2025 13:00:47 +0000 Manifest next update: Mon 08 Dec 2025 13:00:47 +0000 Files and hashes: 1: deIOkmJ8ssMd2RwtI-v-jMre1M8.roa (hash: 1DQjFOIdMCv4n8BARwPWSteFX1+/0FvbC04tqMoZb0Q=) 2: ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl (hash: MXPQIXS5dvnbRez3TCWTgRBXl8GiwHSyPgk0xQzIdjk=) 3: pNxIm0SmH7kBUMbare2mFQXDHOk.roa (hash: FL47b2q1GAJAcT+EDiWHDQ+iV/Lo12DMIiUY1wrMTeU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 13:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:e6:84:43:df:04:20:e3:ef:13:9a:57:de:04:00:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=922e330b5879590abae81bf40a91a5101bc18fa0 Validity Not Before: Dec 7 13:00:47 2025 GMT Not After : Dec 8 13:00:47 2025 GMT Subject: CN=37aa255d23e1553b7f02b457e12be77adeaabfc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:00:c2:b6:c8:0a:da:09:c9:3a:dc:04:d2:42: e7:45:5a:1e:a4:2e:49:0d:f9:59:67:4f:0a:10:68: 90:7a:4e:c7:ad:1c:d2:24:5c:71:49:6c:96:fd:ff: 8d:89:a9:b0:b5:e4:03:fc:07:10:bd:1c:c0:89:f5: c4:f9:61:d2:b5:2a:0f:31:e4:e0:84:cc:d9:35:d3: 09:a6:1f:44:fe:d9:23:a9:64:8a:25:05:c4:e4:5a: 06:d7:f6:da:24:fb:67:9a:38:86:6c:e8:10:f1:c7: d8:4c:ac:a3:27:6b:da:61:92:1e:58:fd:a0:27:87: 97:e9:2c:22:d1:3f:e4:0d:c7:cd:f4:3a:b3:6f:97: 8f:77:f1:a0:f9:36:0a:02:58:d1:a5:ad:3e:b6:91: 1b:e1:a3:17:01:0c:04:cb:50:7e:8e:cd:bc:7f:7c: ba:f1:2d:c4:43:54:6a:2f:f9:bc:a1:21:6f:2f:6d: e6:45:76:77:0e:a1:a0:dd:21:f1:52:85:aa:01:3b: 7c:89:de:01:0d:cd:37:10:77:3d:f5:9a:a8:fc:65: f8:8c:f5:2d:c7:d2:35:ff:ef:bd:c4:69:16:50:e4: cf:50:13:bf:fa:4b:f1:53:cc:84:c3:b9:f2:72:18: ef:44:e0:38:27:87:34:22:3a:c5:b4:a1:38:d0:06: 67:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:AA:25:5D:23:E1:55:3B:7F:02:B4:57:E1:2B:E7:7A:DE:AA:BF:C0 X509v3 Authority Key Identifier: keyid:92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:07:a4:c2:de:14:7a:f6:83:bb:30:d5:1d:73:8b:f5:00:72: 63:5a:52:a1:a6:aa:aa:a8:79:14:e0:fb:0c:32:02:88:37:fc: 0d:b2:cf:2b:ed:76:43:53:20:d6:47:d5:2d:4d:f0:9a:72:b0: ae:66:cf:2f:ec:3b:4a:4f:2e:7f:6f:9b:20:ff:88:20:81:cf: d3:10:2f:03:91:80:c5:e3:2b:0e:41:f5:23:4a:11:ab:a7:47: 7a:9e:6a:b7:86:e4:97:5f:04:d0:73:6e:d6:d2:7e:44:9d:4d: 32:d5:06:db:e2:c3:f8:31:60:09:92:0b:f9:54:46:ab:0e:48: ab:00:2e:0a:1d:29:01:4c:b2:c6:4a:30:f1:0b:2b:31:9f:f3: 57:24:f2:13:8c:50:38:5d:af:30:ac:eb:89:ac:bf:53:91:2c: 52:c0:4b:a8:04:c7:11:a9:f7:af:25:a1:ca:b0:d9:6b:8d:c4: 07:78:00:69:d8:f0:66:1b:77:42:9f:f5:2e:01:80:bb:f2:e2: f4:3c:1d:a6:c4:f5:87:60:7a:74:0e:e9:df:54:cc:20:68:96: 53:07:bf:26:52:10:b7:ee:9c:4c:03:53:22:f9:ce:d1:33:a9: aa:df:4f:7b:e2:ac:0c:26:90:b4:07:85:44:8b:44:73:3e:d1: 9c:fa:b8:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr45oRD3wQg4+8TmlfeBABLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMmUzMzBiNTg3OTU5MGFiYWU4MWJmNDBhOTFhNTEwMWJj MThmYTAwHhcNMjUxMjA3MTMwMDQ3WhcNMjUxMjA4MTMwMDQ3WjAzMTEwLwYDVQQD EygzN2FhMjU1ZDIzZTE1NTNiN2YwMmI0NTdlMTJiZTc3YWRlYWFiZmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvADCtsgK2gnJOtwE0kLnRVoepC5J DflZZ08KEGiQek7HrRzSJFxxSWyW/f+NiamwteQD/AcQvRzAifXE+WHStSoPMeTg hMzZNdMJph9E/tkjqWSKJQXE5FoG1/baJPtnmjiGbOgQ8cfYTKyjJ2vaYZIeWP2g J4eX6Swi0T/kDcfN9Dqzb5ePd/Gg+TYKAljRpa0+tpEb4aMXAQwEy1B+js28f3y6 8S3EQ1RqL/m8oSFvL23mRXZ3DqGg3SHxUoWqATt8id4BDc03EHc99Zqo/GX4jPUt x9I1/++9xGkWUOTPUBO/+kvxU8yEw7nychjvROA4J4c0IjrFtKE40AZntQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDeqJV0j4VU7fwK0V+Er53reqr/AMB8GA1UdIwQY MBaAFJIuMwtYeVkKuugb9AqRpRAbwY+gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2k0ekMxaDVXUXE2NkJ2MENwR2xFQnZCajZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mMTgwZmYtMzM2Yy00YjQ1LTkzNzgt NTY4NjcyYzI1Y2E4LzEva2k0ekMxaDVXUXE2NkJ2MENwR2xFQnZCajZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9mMTgwZmYtMzM2Yy00YjQ1LTkzNzgtNTY4NjcyYzI1Y2E4 LzEva2k0ekMxaDVXUXE2NkJ2MENwR2xFQnZCajZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYQekwt4U evaDuzDVHXOL9QByY1pSoaaqqqh5FOD7DDICiDf8DbLPK+12Q1Mg1kfVLU3wmnKw rmbPL+w7Sk8uf2+bIP+IIIHP0xAvA5GAxeMrDkH1I0oRq6dHep5qt4bkl18E0HNu 1tJ+RJ1NMtUG2+LD+DFgCZIL+VRGqw5IqwAuCh0pAUyyxkow8QsrMZ/zVyTyE4xQ OF2vMKzriay/U5EsUsBLqATHEan3ryWhyrDZa43EB3gAadjwZht3Qp/1LgGAu/Li 9DwdpsT1h2B6dA7p31TMIGiWUwe/JlIQt+6cTANTIvnO0TOpqt9Pe+KsDCaQtAeF RItEcz7RnPq4tw== -----END CERTIFICATE-----Generated at Sun Dec 7 21:34:51 2025 by rpki-client