This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft File: kxqerhFBEi0V8KZO8HjIAp_r_jw.mft (raw, json) Hash identifier: nljlg6gJ/WFhMvLdQYCqBEz5NG++okC+o6Z0YLdae8Q= Subject key identifier: 44:3E:2A:BA:51:C0:E7:64:99:D0:08:DA:5E:BF:A2:CA:88:46:2D:44 Authority key identifier: 93:1A:9E:AE:11:41:12:2D:15:F0:A6:4E:F0:78:C8:02:9F:EB:FE:3C Certificate issuer: /CN=931a9eae1141122d15f0a64ef078c8029febfe3c Certificate serial: 019B0F00B337B6902F531B0D0CC180025A14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kxqerhFBEi0V8KZO8HjIAp_r_jw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft Manifest number: 176D Signing time: Thu 11 Dec 2025 20:01:02 +0000 Manifest this update: Thu 11 Dec 2025 20:01:02 +0000 Manifest next update: Fri 12 Dec 2025 20:01:02 +0000 Files and hashes: 1: kxqerhFBEi0V8KZO8HjIAp_r_jw.crl (hash: LUKkAAHC5UmHGTF83WyiijPpN1BljtxOxA2+eVpqWDw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft rsync://rpki.ripe.net/repository/DEFAULT/kxqerhFBEi0V8KZO8HjIAp_r_jw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:b3:37:b6:90:2f:53:1b:0d:0c:c1:80:02:5a:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=931a9eae1141122d15f0a64ef078c8029febfe3c Validity Not Before: Dec 11 20:01:02 2025 GMT Not After : Dec 12 20:01:02 2025 GMT Subject: CN=443e2aba51c0e76499d008da5ebfa2ca88462d44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:68:f9:84:19:e7:3f:5f:cb:1c:2b:bd:db:0b: 93:65:ff:54:43:50:92:40:f5:89:92:c8:00:ed:8e: 32:1d:8f:15:1e:78:62:10:ae:53:cc:a8:c8:40:23: ac:81:6c:ff:b1:f4:da:81:e0:2c:c3:3b:d4:ae:08: 2a:21:c6:57:0e:ca:65:03:ed:09:d5:b6:92:11:9a: 6a:b5:f9:0c:e4:1c:35:52:fd:71:ee:90:e2:8d:67: e1:d7:a3:c8:d6:75:5c:8e:6c:bb:c5:04:46:ae:27: 8d:79:73:56:84:19:af:e1:60:e7:fb:37:d9:da:ad: 13:4f:71:a6:a8:84:11:56:3d:f6:fb:ba:4b:ef:0a: 75:09:5b:c1:b9:ff:8a:47:44:e1:5a:6f:58:ba:f2: 5a:ce:5c:47:e4:08:2a:20:db:a0:a7:8b:dc:db:49: fc:1e:8b:9d:99:27:92:be:15:3b:bb:3b:71:bb:12: c5:84:28:5c:62:f1:2b:6b:cc:9d:e6:c3:8d:6f:97: 90:22:16:16:f6:a6:52:f7:a7:d4:27:3a:65:c5:33: 4d:6b:dc:02:36:0d:8b:cf:53:cc:93:cf:de:57:f1: 34:83:58:10:0d:5a:ab:4a:a4:fa:ff:17:ef:68:92: 5e:43:48:d1:e9:fd:30:7b:81:80:7e:fc:0c:22:c6: 49:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:3E:2A:BA:51:C0:E7:64:99:D0:08:DA:5E:BF:A2:CA:88:46:2D:44 X509v3 Authority Key Identifier: keyid:93:1A:9E:AE:11:41:12:2D:15:F0:A6:4E:F0:78:C8:02:9F:EB:FE:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kxqerhFBEi0V8KZO8HjIAp_r_jw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:29:b0:3d:c7:57:48:8f:4f:bc:e4:3a:91:08:14:42:63:cb: 8c:f4:65:17:c3:59:62:d7:aa:76:94:2b:cf:4a:9a:33:25:2f: fc:40:f6:f4:dd:1a:e0:19:90:2c:72:11:e1:b6:ca:b2:38:8d: 89:13:67:01:82:eb:a1:a9:c7:b8:9a:e6:df:ae:6e:ab:7c:cb: f1:14:c6:56:b7:0c:f5:bc:d9:d4:f8:4e:04:a2:06:df:4d:cd: fa:4f:9a:bb:ea:63:13:78:e8:10:a3:3c:a4:cb:41:8b:91:7b: 7b:cf:6e:40:ad:6e:c3:db:96:1c:db:ef:26:1d:30:c4:fb:54: 25:1e:2f:19:07:30:52:95:4b:6b:9b:8a:52:6a:48:5b:6f:65: e9:67:78:cd:ac:40:4a:df:e4:b1:4e:67:70:2e:3a:53:42:ae: 44:6a:9e:8f:4a:fc:92:85:8a:5a:83:ed:35:f6:a3:90:2a:02: 15:ee:26:16:10:be:61:d2:1d:ce:14:33:be:62:21:1f:fd:c6: d6:e0:7a:96:dd:91:ec:9f:cf:e3:df:9e:85:ce:24:66:95:85: 3a:6a:f5:49:a5:13:ee:4d:55:a9:6d:e3:6e:74:97:88:5a:29: 1a:23:8a:ee:cd:c0:28:25:a4:7d:45:b6:ed:cd:05:44:27:68: 6d:b1:5c:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPALM3tpAvUxsNDMGAAloUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMWE5ZWFlMTE0MTEyMmQxNWYwYTY0ZWYwNzhjODAyOWZl YmZlM2MwHhcNMjUxMjExMjAwMTAyWhcNMjUxMjEyMjAwMTAyWjAzMTEwLwYDVQQD Eyg0NDNlMmFiYTUxYzBlNzY0OTlkMDA4ZGE1ZWJmYTJjYTg4NDYyZDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmj5hBnnP1/LHCu92wuTZf9UQ1CS QPWJksgA7Y4yHY8VHnhiEK5TzKjIQCOsgWz/sfTageAswzvUrggqIcZXDsplA+0J 1baSEZpqtfkM5Bw1Uv1x7pDijWfh16PI1nVcjmy7xQRGrieNeXNWhBmv4WDn+zfZ 2q0TT3GmqIQRVj32+7pL7wp1CVvBuf+KR0ThWm9YuvJazlxH5AgqINugp4vc20n8 HoudmSeSvhU7uztxuxLFhChcYvEra8yd5sONb5eQIhYW9qZS96fUJzplxTNNa9wC Ng2Lz1PMk8/eV/E0g1gQDVqrSqT6/xfvaJJeQ0jR6f0we4GAfvwMIsZJzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEQ+KrpRwOdkmdAI2l6/osqIRi1EMB8GA1UdIwQY MBaAFJManq4RQRItFfCmTvB4yAKf6/48MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3hxZXJoRkJFaTBWOEtaTzhIaklBcF9yX2p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi80NzM3NjgtM2E1OS00YjBiLWFkMjYt MTkxMzZiN2IwMzk2LzEva3hxZXJoRkJFaTBWOEtaTzhIaklBcF9yX2p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi80NzM3NjgtM2E1OS00YjBiLWFkMjYtMTkxMzZiN2IwMzk2 LzEva3hxZXJoRkJFaTBWOEtaTzhIaklBcF9yX2p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAASmwPcdX SI9PvOQ6kQgUQmPLjPRlF8NZYteqdpQrz0qaMyUv/ED29N0a4BmQLHIR4bbKsjiN iRNnAYLroanHuJrm365uq3zL8RTGVrcM9bzZ1PhOBKIG303N+k+au+pjE3joEKM8 pMtBi5F7e89uQK1uw9uWHNvvJh0wxPtUJR4vGQcwUpVLa5uKUmpIW29l6Wd4zaxA St/ksU5ncC46U0KuRGqej0r8koWKWoPtNfajkCoCFe4mFhC+YdIdzhQzvmIhH/3G 1uB6lt2R7J/P49+ehc4kZpWFOmr1SaUT7k1VqW3jbnSXiFopGiOK7s3AKCWkfUW2 7c0FRCdobbFcow== -----END CERTIFICATE-----Generated at Fri Dec 12 04:03:39 2025 by rpki-client