This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft File: kJrEshegjDSPstyft0IuHekY9Rc.mft (raw, json) Hash identifier: wUwpQ85IpzsFMuJxQS5xrxkMRUWVJrXSq+B8hKuz2L4= Subject key identifier: CC:4D:47:CF:7C:C8:9F:F3:A3:D5:4A:CD:CC:41:B8:F4:F4:F1:42:DE Authority key identifier: 90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17 Certificate issuer: /CN=909ac4b217a08c348fb2dc9fb7422e1de918f517 Certificate serial: 019B1201B20465BBA44DF5F9788E202E2A55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft Manifest number: 0A67 Signing time: Fri 12 Dec 2025 10:00:59 +0000 Manifest this update: Fri 12 Dec 2025 10:00:59 +0000 Manifest next update: Sat 13 Dec 2025 10:00:59 +0000 Files and hashes: 1: 68fsEjYkrgR4by_fTbemVJ74S4g.roa (hash: llyOhetb8mMlkTVijjj2HRYaNacwV37b8WoQhej4dKA=) 2: 6GUg_eGgnlwGaZPq01uGg5LgvFA.roa (hash: aAq0jIcn0dtcVSjsOoB6mFGUamTJv2Ofxf6NLQamzvw=) 3: kJrEshegjDSPstyft0IuHekY9Rc.crl (hash: 2wtAPgPEO62ouAVInXg9lpLztwl+82nxT+uoUQGru94=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:01:b2:04:65:bb:a4:4d:f5:f9:78:8e:20:2e:2a:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=909ac4b217a08c348fb2dc9fb7422e1de918f517 Validity Not Before: Dec 12 10:00:59 2025 GMT Not After : Dec 13 10:00:59 2025 GMT Subject: CN=cc4d47cf7cc89ff3a3d54acdcc41b8f4f4f142de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:05:78:4c:10:ff:14:89:d4:c2:cb:61:16:b6: 3a:2e:93:90:5f:6b:af:f0:70:45:ef:bd:fe:81:4e: 0b:46:65:e4:96:eb:1f:68:32:e8:96:a8:dc:e1:fd: 17:55:48:0d:81:b3:2d:b7:d3:37:d2:27:ea:a9:37: 8d:5c:c8:44:5a:68:b3:b9:2c:a7:60:45:29:12:ea: b7:27:02:06:83:5a:1f:22:10:ab:de:2e:60:f1:d2: 09:dd:3d:99:34:8f:b2:4a:7c:eb:5c:d2:51:d1:19: 72:28:af:0f:0b:cf:a1:54:31:83:77:85:80:cc:3e: c5:da:46:8e:b8:e0:e5:c6:10:f8:4c:f7:07:b5:b3: c7:83:3a:cc:42:37:91:de:10:11:d7:0a:28:ae:42: d9:60:21:a6:b7:91:f8:65:b6:dc:60:df:bf:2c:b7: f1:69:9a:18:a3:72:ba:b3:da:8c:72:0a:fb:79:d1: 2f:a6:34:db:c2:6b:91:5f:c5:d6:a9:ab:34:c7:83: 88:1b:f1:77:71:98:70:b8:87:1e:a9:92:e2:42:56: 15:9b:10:a4:be:f0:94:7f:ee:1e:54:1b:8c:ae:44: 4f:e2:7a:9e:03:34:ee:c0:46:c3:04:03:ba:4b:ff: e1:4f:35:8d:ee:de:bf:86:d1:6e:83:4c:3a:0e:20: 8b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:4D:47:CF:7C:C8:9F:F3:A3:D5:4A:CD:CC:41:B8:F4:F4:F1:42:DE X509v3 Authority Key Identifier: keyid:90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:8a:32:67:65:1f:5e:60:64:cb:f1:58:a0:d6:16:86:11:0b: ef:bc:9c:df:f9:8c:e3:7d:78:29:c4:3d:5d:10:51:4c:bc:df: dc:a7:94:f1:38:33:7b:47:a7:c5:51:87:1b:d9:8d:d2:ff:bb: d3:37:10:7b:19:3f:02:23:dc:09:2a:06:cb:5f:1b:6b:11:04: 67:b8:73:35:e3:23:72:82:9d:eb:64:9d:0c:3c:12:c0:72:a8: 11:34:6e:bd:69:d5:86:18:0e:73:83:43:d1:a8:9c:40:55:23: a4:e9:90:7b:49:19:76:ce:f3:70:0e:71:e5:be:aa:9a:1e:8d: 02:3f:10:8e:c3:68:28:f0:23:7f:44:31:8e:da:50:51:50:a7: 1b:0c:93:24:47:d8:91:47:cc:57:7b:29:90:94:fd:02:a0:cf: 23:89:10:39:7c:77:a6:0c:11:0d:f9:f7:a4:c8:fe:9a:ba:d0: 16:e3:1f:2b:95:2d:d3:a4:38:c1:bb:66:aa:5d:d6:36:a8:ec: d5:21:a8:b8:04:6f:b0:12:7e:f6:de:d3:78:ad:9d:cb:ca:53: 1f:e6:af:15:d1:37:41:05:09:bb:c8:ef:a1:5b:7a:96:0e:44: 37:88:77:6f:69:cb:64:10:c7:c6:72:f1:46:74:5f:46:23:78: 09:56:73:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSAbIEZbukTfX5eI4gLipVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwOWFjNGIyMTdhMDhjMzQ4ZmIyZGM5ZmI3NDIyZTFkZTkx OGY1MTcwHhcNMjUxMjEyMTAwMDU5WhcNMjUxMjEzMTAwMDU5WjAzMTEwLwYDVQQD EyhjYzRkNDdjZjdjYzg5ZmYzYTNkNTRhY2RjYzQxYjhmNGY0ZjE0MmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgV4TBD/FInUwsthFrY6LpOQX2uv 8HBF773+gU4LRmXklusfaDLolqjc4f0XVUgNgbMtt9M30ifqqTeNXMhEWmizuSyn YEUpEuq3JwIGg1ofIhCr3i5g8dIJ3T2ZNI+ySnzrXNJR0RlyKK8PC8+hVDGDd4WA zD7F2kaOuODlxhD4TPcHtbPHgzrMQjeR3hAR1woorkLZYCGmt5H4ZbbcYN+/LLfx aZoYo3K6s9qMcgr7edEvpjTbwmuRX8XWqas0x4OIG/F3cZhwuIceqZLiQlYVmxCk vvCUf+4eVBuMrkRP4nqeAzTuwEbDBAO6S//hTzWN7t6/htFug0w6DiCL6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMxNR898yJ/zo9VKzcxBuPT08ULeMB8GA1UdIwQY MBaAFJCaxLIXoIw0j7Lcn7dCLh3pGPUXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0pyRXNoZWdqRFNQc3R5ZnQwSXVIZWtZOVJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xNzQzZGYtMDQ2Mi00Y2FjLTgyNTAt ZGVkYzUyYTJlZDhmLzEva0pyRXNoZWdqRFNQc3R5ZnQwSXVIZWtZOVJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8xNzQzZGYtMDQ2Mi00Y2FjLTgyNTAtZGVkYzUyYTJlZDhm LzEva0pyRXNoZWdqRFNQc3R5ZnQwSXVIZWtZOVJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ4oyZ2Uf XmBky/FYoNYWhhEL77yc3/mM4314KcQ9XRBRTLzf3KeU8Tgze0enxVGHG9mN0v+7 0zcQexk/AiPcCSoGy18baxEEZ7hzNeMjcoKd62SdDDwSwHKoETRuvWnVhhgOc4ND 0aicQFUjpOmQe0kZds7zcA5x5b6qmh6NAj8QjsNoKPAjf0QxjtpQUVCnGwyTJEfY kUfMV3spkJT9AqDPI4kQOXx3pgwRDfn3pMj+mrrQFuMfK5Ut06Q4wbtmql3WNqjs 1SGouARvsBJ+9t7TeK2dy8pTH+avFdE3QQUJu8jvoVt6lg5EN4h3b2nLZBDHxnLx RnRfRiN4CVZzHw== -----END CERTIFICATE-----Generated at Fri Dec 12 13:00:51 2025 by rpki-client