This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.mft File: kAhyNvFhxccF73Pf6eXjmG5xJsg.mft (raw, json) Hash identifier: NL7SoyBgbQNU9Oq12uFEjDkZ/np8BgWSApEiyCbRm00= Subject key identifier: CE:BD:CA:48:BF:61:F6:0A:4D:32:7B:CE:6C:38:A2:BD:FF:BD:5A:49 Authority key identifier: 90:08:72:36:F1:61:C5:C7:05:EF:73:DF:E9:E5:E3:98:6E:71:26:C8 Certificate issuer: /CN=90087236f161c5c705ef73dfe9e5e3986e7126c8 Certificate serial: 019B4814A8EF212C39B3729A2354EA569753 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kAhyNvFhxccF73Pf6eXjmG5xJsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.mft Manifest number: 0749 Signing time: Mon 22 Dec 2025 22:01:12 +0000 Manifest this update: Mon 22 Dec 2025 22:01:12 +0000 Manifest next update: Tue 23 Dec 2025 22:01:12 +0000 Files and hashes: 1: ilmUYJP9An2tvy3PssJlCv8HfSc.roa (hash: 1qXew5Oe7BdIwNw0qvNlQOP+TeLMGt2S2brGQ7Jg7lc=) 2: kAhyNvFhxccF73Pf6eXjmG5xJsg.crl (hash: og197u0jIdry2wNoKhj6ygLIF6k+0ZMaVjK7Hs3w1S4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.crl rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.mft rsync://rpki.ripe.net/repository/DEFAULT/kAhyNvFhxccF73Pf6eXjmG5xJsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:14:a8:ef:21:2c:39:b3:72:9a:23:54:ea:56:97:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90087236f161c5c705ef73dfe9e5e3986e7126c8 Validity Not Before: Dec 22 22:01:12 2025 GMT Not After : Dec 23 22:01:12 2025 GMT Subject: CN=cebdca48bf61f60a4d327bce6c38a2bdffbd5a49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:16:bb:fb:c0:46:06:3d:6f:3c:4f:04:2e:c8: e5:bf:4c:6b:7f:60:bd:b7:37:38:4e:01:a5:f4:8e: ac:fe:6f:5b:7b:5e:76:be:0d:9f:f5:2b:7a:1a:7e: ab:42:a5:25:9f:67:80:04:4c:ce:58:1a:b2:a0:dd: 9b:c9:b9:f0:0c:fc:c1:4f:b1:bb:f0:cc:5d:a4:dd: 83:ca:46:7f:1d:69:22:89:e4:89:51:cb:1d:17:77: 4f:65:22:43:50:54:2b:10:8e:f0:8e:18:1e:8d:e9: b9:e2:39:47:35:39:38:99:82:b4:57:81:c6:b2:18: 38:56:a5:ab:48:39:b3:4f:97:99:62:d2:ac:0d:17: dc:49:13:8d:0c:6e:eb:aa:35:36:14:30:eb:48:cf: d1:69:57:42:c3:55:12:f3:29:65:cf:e2:43:57:bb: 6c:79:b5:dd:20:eb:59:da:d9:d5:e7:55:af:07:fd: 39:71:19:f6:c6:47:8d:9b:c0:37:e6:3b:c6:88:3c: 85:ab:ff:fc:e3:00:72:95:7a:68:bc:27:b4:b0:a2: 9e:2f:09:21:ca:4b:92:00:8d:90:27:b5:e6:40:1d: 0e:73:5c:0c:1d:a2:aa:f9:19:08:50:a4:cf:fb:a4: 2c:8a:11:77:67:31:db:f9:1a:c0:72:da:59:ce:9f: 12:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:BD:CA:48:BF:61:F6:0A:4D:32:7B:CE:6C:38:A2:BD:FF:BD:5A:49 X509v3 Authority Key Identifier: keyid:90:08:72:36:F1:61:C5:C7:05:EF:73:DF:E9:E5:E3:98:6E:71:26:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kAhyNvFhxccF73Pf6eXjmG5xJsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:54:83:77:fb:30:bc:50:c2:fb:4b:be:cf:fd:52:cc:67:78: f1:a2:97:99:b7:99:ad:37:c7:4a:15:2d:32:6b:93:57:5e:28: f2:15:42:45:a4:85:cd:68:2c:ad:13:84:95:39:17:4d:d6:38: f9:c8:0f:b8:d7:9c:b9:61:16:0e:5a:5a:75:fb:66:35:c0:82: cd:16:c8:cf:5a:81:4f:cc:6a:b2:da:dc:56:4a:45:50:48:af: 2b:87:52:f1:3b:af:c8:6e:1f:49:67:ef:b9:3a:ac:46:44:93: ec:09:b7:b8:7b:a3:e8:e0:36:8e:76:a2:d9:ea:bc:cf:c5:d6: 65:d4:24:71:37:c6:62:b9:af:bc:52:8f:28:bc:bf:31:9c:1d: 5b:9f:a2:24:c1:ea:b3:82:46:5e:eb:54:fc:f6:01:a3:94:1a: 52:05:c8:81:a8:ba:63:bd:77:79:e0:d7:a4:9a:05:ba:d5:25: 85:2f:4a:75:c7:02:11:db:fa:8f:00:21:2d:f6:9b:5c:04:28: 83:47:46:3e:c5:af:93:b7:d1:83:a6:bd:d0:54:97:d6:0a:09: 3a:ca:c3:56:2a:23:0b:e8:05:24:69:8f:d2:b1:60:56:7b:53: 49:99:18:31:0c:1e:fa:a8:b6:87:2a:ff:5e:89:c5:e4:e4:74: fc:c5:34:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFKjvISw5s3KaI1TqVpdTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwMDg3MjM2ZjE2MWM1YzcwNWVmNzNkZmU5ZTVlMzk4NmU3 MTI2YzgwHhcNMjUxMjIyMjIwMTEyWhcNMjUxMjIzMjIwMTEyWjAzMTEwLwYDVQQD EyhjZWJkY2E0OGJmNjFmNjBhNGQzMjdiY2U2YzM4YTJiZGZmYmQ1YTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBa7+8BGBj1vPE8ELsjlv0xrf2C9 tzc4TgGl9I6s/m9be152vg2f9St6Gn6rQqUln2eABEzOWBqyoN2bybnwDPzBT7G7 8MxdpN2DykZ/HWkiieSJUcsdF3dPZSJDUFQrEI7wjhgejem54jlHNTk4mYK0V4HG shg4VqWrSDmzT5eZYtKsDRfcSRONDG7rqjU2FDDrSM/RaVdCw1US8yllz+JDV7ts ebXdIOtZ2tnV51WvB/05cRn2xkeNm8A35jvGiDyFq//84wBylXpovCe0sKKeLwkh ykuSAI2QJ7XmQB0Oc1wMHaKq+RkIUKTP+6QsihF3ZzHb+RrActpZzp8SUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM69yki/YfYKTTJ7zmw4or3/vVpJMB8GA1UdIwQY MBaAFJAIcjbxYcXHBe9z3+nl45hucSbIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0FoeU52Rmh4Y2NGNzNQZjZlWGptRzV4SnNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9kZjgzM2ItYzg3YS00MWZjLWJhMmUt ZTUzYzVlYzVkNDAyLzEva0FoeU52Rmh4Y2NGNzNQZjZlWGptRzV4SnNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9kZjgzM2ItYzg3YS00MWZjLWJhMmUtZTUzYzVlYzVkNDAy LzEva0FoeU52Rmh4Y2NGNzNQZjZlWGptRzV4SnNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgFSDd/sw vFDC+0u+z/1SzGd48aKXmbeZrTfHShUtMmuTV14o8hVCRaSFzWgsrROElTkXTdY4 +cgPuNecuWEWDlpadftmNcCCzRbIz1qBT8xqstrcVkpFUEivK4dS8TuvyG4fSWfv uTqsRkST7Am3uHuj6OA2jnai2eq8z8XWZdQkcTfGYrmvvFKPKLy/MZwdW5+iJMHq s4JGXutU/PYBo5QaUgXIgai6Y713eeDXpJoFutUlhS9KdccCEdv6jwAhLfabXAQo g0dGPsWvk7fRg6a90FSX1goJOsrDViojC+gFJGmP0rFgVntTSZkYMQwe+qi2hyr/ XonF5OR0/MU00g== -----END CERTIFICATE-----Generated at Tue Dec 23 07:53:16 2025 by rpki-client