This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft File: kJgVO94ONFhLrJH6GGjX7yTWi88.mft (raw, json) Hash identifier: MaMl68OqZFHip/iqjuiUtQX6Jb7wwBYYo7xxoGVVmBE= Subject key identifier: 06:96:55:EF:8E:0C:C3:8F:97:53:33:B9:60:9D:64:88:B5:7C:2F:38 Authority key identifier: 90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF Certificate issuer: /CN=9098153bde0e34584bac91fa1868d7ef24d68bcf Certificate serial: 019B0FA57AB8082100EE042ECC9D8425F0C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft Manifest number: 1469 Signing time: Thu 11 Dec 2025 23:01:01 +0000 Manifest this update: Thu 11 Dec 2025 23:01:01 +0000 Manifest next update: Fri 12 Dec 2025 23:01:01 +0000 Files and hashes: 1: kGuaXeFXRy7zk4r_fksHu1gERzY.roa (hash: eMXSEjP4L4hwARJ1cK2WpXviS5zDUtCbinSWtpWSvYQ=) 2: kJgVO94ONFhLrJH6GGjX7yTWi88.crl (hash: 9a3y/8wEy9/nOmYkd8ze5nWeHrmbKw+6GiLg7/OQF+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:7a:b8:08:21:00:ee:04:2e:cc:9d:84:25:f0:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9098153bde0e34584bac91fa1868d7ef24d68bcf Validity Not Before: Dec 11 23:01:01 2025 GMT Not After : Dec 12 23:01:01 2025 GMT Subject: CN=069655ef8e0cc38f975333b9609d6488b57c2f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:61:1d:66:85:8d:ea:a9:e9:8c:62:8a:39:d1: 52:5b:00:33:47:58:ed:dd:3e:46:3b:0f:bb:f5:7a: 88:6e:bf:51:78:71:32:24:ed:df:73:60:a0:1f:c4: bc:50:95:0f:be:d5:11:34:5c:8f:a2:97:5b:91:de: 25:5e:88:ac:54:5f:da:15:1d:3a:92:f2:2d:d0:06: e9:0d:a6:92:73:f5:3d:99:fc:05:35:80:6c:59:e0: b0:72:94:ef:35:b1:d4:b9:ee:f4:88:db:f9:5d:9d: 94:51:9c:50:1f:69:15:54:46:d6:94:87:17:4c:86: 3a:46:2e:31:b5:18:7b:25:02:14:c0:8e:a4:87:e3: 8a:c5:e0:9f:a9:e8:5b:1c:30:a0:1e:6c:53:9d:64: 94:f8:6c:e4:75:0f:24:4e:7e:71:2f:ef:6c:a0:5e: 05:f8:11:26:5c:30:42:71:0a:57:e4:ea:f4:cc:ce: 7f:03:15:1d:75:ce:89:f6:24:8c:65:81:d8:ec:f0: d7:3b:82:bf:1f:0a:63:5f:a4:73:d1:13:bd:24:be: a9:3b:7d:af:a1:1c:16:68:f8:62:0b:5d:e6:08:c6: 4c:3a:65:e4:e3:08:d8:a5:cd:d4:f4:a5:6b:47:72: 4e:89:76:89:03:be:f0:13:2f:09:6f:b7:5d:24:0b: a4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:96:55:EF:8E:0C:C3:8F:97:53:33:B9:60:9D:64:88:B5:7C:2F:38 X509v3 Authority Key Identifier: keyid:90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:0f:f5:ee:79:68:1e:e2:4d:23:d1:81:77:5b:ed:e2:29:6a: c4:5d:a5:00:97:e2:2d:50:59:11:97:16:34:7f:a0:86:ee:54: d0:78:f0:25:c6:e4:d4:c1:41:bd:2e:44:32:da:48:0f:61:ab: 39:fe:68:4a:17:58:02:37:3b:61:04:61:9c:7f:12:8a:2d:a5: 8c:56:23:82:4e:4f:b3:3b:49:6d:01:01:a2:b5:59:2e:0e:41: 72:7a:82:60:4e:98:b1:ee:65:81:33:36:31:00:89:a5:e1:47: 95:ac:41:a3:9b:d4:29:9b:86:7d:7e:83:54:6d:06:ed:4d:0e: 0d:2e:aa:51:36:f1:65:30:84:46:a7:d1:74:70:65:5b:41:33: d3:95:6a:2c:6e:b6:06:99:be:51:b2:fa:59:45:c4:c8:72:1c: a3:65:dc:a7:5b:cb:30:00:c2:60:d5:cd:2f:79:17:af:80:4c: de:8a:54:5f:c5:ef:08:2d:41:25:9b:0d:e1:6f:97:16:86:d2: 58:fa:5f:02:ac:19:8d:0e:d9:20:99:8e:cb:43:9d:0f:73:17: ea:f9:1f:0a:1d:b7:d8:a2:38:20:66:9a:f8:a2:f2:70:63:7c: 44:92:5a:2d:7d:41:04:ac:77:08:12:26:2f:3b:b0:14:ce:23: c0:aa:cc:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpXq4CCEA7gQuzJ2EJfDCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwOTgxNTNiZGUwZTM0NTg0YmFjOTFmYTE4NjhkN2VmMjRk NjhiY2YwHhcNMjUxMjExMjMwMTAxWhcNMjUxMjEyMjMwMTAxWjAzMTEwLwYDVQQD EygwNjk2NTVlZjhlMGNjMzhmOTc1MzMzYjk2MDlkNjQ4OGI1N2MyZjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmEdZoWN6qnpjGKKOdFSWwAzR1jt 3T5GOw+79XqIbr9ReHEyJO3fc2CgH8S8UJUPvtURNFyPopdbkd4lXoisVF/aFR06 kvIt0AbpDaaSc/U9mfwFNYBsWeCwcpTvNbHUue70iNv5XZ2UUZxQH2kVVEbWlIcX TIY6Ri4xtRh7JQIUwI6kh+OKxeCfqehbHDCgHmxTnWSU+GzkdQ8kTn5xL+9soF4F +BEmXDBCcQpX5Or0zM5/AxUddc6J9iSMZYHY7PDXO4K/HwpjX6Rz0RO9JL6pO32v oRwWaPhiC13mCMZMOmXk4wjYpc3U9KVrR3JOiXaJA77wEy8Jb7ddJAuk2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAaWVe+ODMOPl1MzuWCdZIi1fC84MB8GA1UdIwQY MBaAFJCYFTveDjRYS6yR+hho1+8k1ovPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0pnVk85NE9ORmhMckpINkdHalg3eVRXaTg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9iYTkwMDMtZDQzMy00MDk1LTg0Yjct MmY5MzNkOTg5NmUwLzEva0pnVk85NE9ORmhMckpINkdHalg3eVRXaTg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9iYTkwMDMtZDQzMy00MDk1LTg0YjctMmY5MzNkOTg5NmUw LzEva0pnVk85NE9ORmhMckpINkdHalg3eVRXaTg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVw/17nlo HuJNI9GBd1vt4ilqxF2lAJfiLVBZEZcWNH+ghu5U0HjwJcbk1MFBvS5EMtpID2Gr Of5oShdYAjc7YQRhnH8Sii2ljFYjgk5PsztJbQEBorVZLg5BcnqCYE6Yse5lgTM2 MQCJpeFHlaxBo5vUKZuGfX6DVG0G7U0ODS6qUTbxZTCERqfRdHBlW0Ez05VqLG62 Bpm+UbL6WUXEyHIco2Xcp1vLMADCYNXNL3kXr4BM3opUX8XvCC1BJZsN4W+XFobS WPpfAqwZjQ7ZIJmOy0OdD3MX6vkfCh232KI4IGaa+KLycGN8RJJaLX1BBKx3CBIm LzuwFM4jwKrMPw== -----END CERTIFICATE-----Generated at Fri Dec 12 03:42:48 2025 by rpki-client