This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft File: kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft (raw, json) Hash identifier: ZarjHDYZmqy7tccVzkXJ7jtOVNLyzJ3h6RK8SnTws7I= Subject key identifier: D6:45:94:0C:11:59:F3:DC:71:B2:2B:FF:D9:32:C1:5C:51:91:01:B1 Authority key identifier: 90:F8:FA:FC:F7:C4:41:AE:49:C1:CE:F9:5C:51:8B:28:22:8C:7C:62 Certificate issuer: /CN=90f8fafcf7c441ae49c1cef95c518b28228c7c62 Certificate serial: 019B0F37597F41AC0F2D3C247F225C37E30B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft Manifest number: 0A6D Signing time: Thu 11 Dec 2025 21:00:44 +0000 Manifest this update: Thu 11 Dec 2025 21:00:44 +0000 Manifest next update: Fri 12 Dec 2025 21:00:44 +0000 Files and hashes: 1: NfRATxtwxdk8t5k10NmnaIEBcI8.roa (hash: 48zogp0gFyhuprEhPJDieZAGrOKDhLcNh+8XpGM82yA=) 2: kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl (hash: Qmezkav/oGv1IWUTy1piPQbOM4a2qsYe1lMD/UsUL/A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 21:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:59:7f:41:ac:0f:2d:3c:24:7f:22:5c:37:e3:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90f8fafcf7c441ae49c1cef95c518b28228c7c62 Validity Not Before: Dec 11 21:00:44 2025 GMT Not After : Dec 12 21:00:44 2025 GMT Subject: CN=d645940c1159f3dc71b22bffd932c15c519101b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fc:2b:b1:17:9b:bd:84:b5:6d:f3:f8:2b:66: 68:e8:69:71:ae:c8:ab:cb:6a:4c:54:b5:9d:47:c5: 2f:51:89:19:ef:bf:29:c7:77:8b:34:f6:2d:6e:e5: 1f:10:66:28:a1:a9:77:70:12:d5:e5:51:51:62:67: c8:54:f2:aa:b5:82:22:32:21:e5:6e:ec:bb:ce:7d: f4:3f:e8:dc:b0:d7:0c:c5:52:d5:34:a3:db:61:63: fa:e0:e4:d4:81:5b:a0:5d:23:b8:3e:c2:e0:9a:09: 21:11:05:9a:3a:86:fb:c0:15:b8:14:ac:1c:ea:30: b1:e2:5a:a8:51:d4:2c:28:b1:c7:59:f5:b0:dd:78: a5:86:9c:ba:00:ce:5a:73:d5:6f:38:8c:98:c9:e1: 6e:61:f6:ea:1e:a1:eb:22:16:73:22:6e:49:a3:b7: 1d:59:66:fd:0d:5c:15:08:f3:6a:69:bb:f4:c6:e7: 44:8d:4b:47:bb:00:16:d8:47:af:d2:13:35:ba:d2: d9:0e:f4:10:c0:af:19:18:a4:30:b3:24:ef:fe:af: 55:89:d1:56:10:96:32:a6:8b:c8:ad:58:22:a4:66: 6a:18:db:8c:be:3a:c2:09:f0:1b:dc:42:7c:c1:72: 3f:93:52:a0:4f:5e:dd:d9:2e:74:1f:00:06:b0:4d: 3f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:45:94:0C:11:59:F3:DC:71:B2:2B:FF:D9:32:C1:5C:51:91:01:B1 X509v3 Authority Key Identifier: keyid:90:F8:FA:FC:F7:C4:41:AE:49:C1:CE:F9:5C:51:8B:28:22:8C:7C:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:69:40:73:04:67:97:44:20:87:fb:76:ac:98:fd:69:54:a2: 29:06:76:c9:fa:d2:f4:8b:03:36:e4:67:21:f7:3a:ba:88:f8: 0f:88:42:c1:8d:74:1c:fb:24:ab:78:db:24:55:83:dc:d4:ab: 80:31:2c:db:cd:08:ae:e4:36:71:9c:20:06:68:c8:e3:56:ad: c8:59:0a:83:8a:ca:7e:06:a2:9c:16:02:0d:ab:14:9d:d6:a0: c2:ef:bd:19:cf:fc:b5:55:66:d3:18:b1:60:6b:17:f4:c2:d7: 3e:5f:27:fa:8a:a5:19:76:0d:32:81:41:2e:2a:82:f7:12:5e: f2:09:08:bd:ff:cd:68:4d:43:70:2f:a6:ff:e0:8d:88:14:c8: 0b:76:f8:ac:eb:54:c6:16:ab:cf:cc:42:50:f7:51:c7:fa:b1: 83:40:0f:64:6a:d5:a5:90:3a:7a:04:ba:e2:91:64:24:82:dd: f7:4a:99:87:e3:c7:3f:04:39:d6:a5:69:3a:ad:0f:ca:b3:1c: 2e:78:f7:fb:ab:23:e6:e6:13:9f:03:7a:1c:54:7c:62:3c:96: d7:d7:65:b1:5e:88:7b:9a:14:b6:53:4d:ca:05:b1:db:a2:4d: 7d:1d:e5:f0:5c:06:19:a7:5b:a9:a8:5d:2b:82:c6:88:a1:bd: ad:fa:a2:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN1l/QawPLTwkfyJcN+MLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZjhmYWZjZjdjNDQxYWU0OWMxY2VmOTVjNTE4YjI4MjI4 YzdjNjIwHhcNMjUxMjExMjEwMDQ0WhcNMjUxMjEyMjEwMDQ0WjAzMTEwLwYDVQQD EyhkNjQ1OTQwYzExNTlmM2RjNzFiMjJiZmZkOTMyYzE1YzUxOTEwMWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfwrsRebvYS1bfP4K2Zo6Glxrsir y2pMVLWdR8UvUYkZ778px3eLNPYtbuUfEGYooal3cBLV5VFRYmfIVPKqtYIiMiHl buy7zn30P+jcsNcMxVLVNKPbYWP64OTUgVugXSO4PsLgmgkhEQWaOob7wBW4FKwc 6jCx4lqoUdQsKLHHWfWw3Xilhpy6AM5ac9VvOIyYyeFuYfbqHqHrIhZzIm5Jo7cd WWb9DVwVCPNqabv0xudEjUtHuwAW2Eev0hM1utLZDvQQwK8ZGKQwsyTv/q9VidFW EJYypovIrVgipGZqGNuMvjrCCfAb3EJ8wXI/k1KgT17d2S50HwAGsE0/LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNZFlAwRWfPccbIr/9kywVxRkQGxMB8GA1UdIwQY MBaAFJD4+vz3xEGuScHO+VxRiygijHxiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1BqNl9QZkVRYTVKd2M3NVhGR0xLQ0tNZkdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9iNzhlNjktMjlkYy00ZTVjLWFjNDct OGFhNGViYWQ0ZTY1LzEva1BqNl9QZkVRYTVKd2M3NVhGR0xLQ0tNZkdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9iNzhlNjktMjlkYy00ZTVjLWFjNDctOGFhNGViYWQ0ZTY1 LzEva1BqNl9QZkVRYTVKd2M3NVhGR0xLQ0tNZkdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALmlAcwRn l0Qgh/t2rJj9aVSiKQZ2yfrS9IsDNuRnIfc6uoj4D4hCwY10HPskq3jbJFWD3NSr gDEs280IruQ2cZwgBmjI41atyFkKg4rKfgainBYCDasUndagwu+9Gc/8tVVm0xix YGsX9MLXPl8n+oqlGXYNMoFBLiqC9xJe8gkIvf/NaE1DcC+m/+CNiBTIC3b4rOtU xharz8xCUPdRx/qxg0APZGrVpZA6egS64pFkJILd90qZh+PHPwQ51qVpOq0PyrMc Lnj3+6sj5uYTnwN6HFR8YjyW19dlsV6Ie5oUtlNNygWx26JNfR3l8FwGGadbqahd K4LGiKG9rfqiMA== -----END CERTIFICATE-----Generated at Fri Dec 12 05:19:03 2025 by rpki-client