This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft File: kPJeamiT9GbSaV6QZwwEdENkNwE.mft (raw, json) Hash identifier: 4Y6/m0fy92n1gjlJ+6nGUf7nep7AAnmhNOFmzmwgeZw= Subject key identifier: 69:F4:76:BD:54:73:8F:33:0A:3B:D4:C1:75:FC:5E:E3:2E:28:C7:AF Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01 Certificate issuer: /CN=90f25e6a6893f466d2695e90670c047443643701 Certificate serial: 019B337B32A0443B4EE89E56644C2023296D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft Manifest number: 1799 Signing time: Thu 18 Dec 2025 22:01:10 +0000 Manifest this update: Thu 18 Dec 2025 22:01:10 +0000 Manifest next update: Fri 19 Dec 2025 22:01:10 +0000 Files and hashes: 1: 2yys3LU7mts-Gl7bPeFVNGNeuMo.roa (hash: Yt+g7nPKVN9s0l9R0GhUZc17Zle6twg1T3pZzSdURFs=) 2: 9_JGTVW5qMW7yCkdP0E_-NpXB0s.roa (hash: WnTsDGxoDG2mHWxyzgJxMMHknGyiRAiwLMWZ5xXwktI=) 3: GEAFSRO55yyL2hanen4IQZHuURY.roa (hash: 2FshQLANrdy2nUZzMPBP36DvAVDN+Uv1owhoY0rOS8I=) 4: H8DQXyH0KVxtyAs-rlTWAJw5n0M.roa (hash: dDFoBjvjKcHyX8s6IHYrzZBS6btcUzoDxFIxBvgUAfs=) 5: R2FNO1Ygep-crgCBZOCm6rPiC1g.asa (hash: ApEGVteE4lW6zOIWL6jC0gxWXUXXinVHVBq0ULy5NCg=) 6: Xij9xh5DddLLuqwtCNwg7qmWYfY.asa (hash: 3EqZun6qc3DEqBJqVt9g499WWwGeNostKOQ4l981464=) 7: bt7v5S1iGVK94mqOZQHRX86O4nE.asa (hash: swB8MgNoQmF6xNb6V+G76LxIip8Z23hDxriDFCYhY6o=) 8: d5-pkB3Ay6XEnASQ842eqa4zFQk.roa (hash: L45Bt9lWf+G6vwKrnrElP/rJXXbR6PzfYe43SPRGryg=) 9: kPJeamiT9GbSaV6QZwwEdENkNwE.crl (hash: JfY+DYh5o+AWq46d6l32SJnYkoQmK892R/gFvA76sU4=) 10: zlsE5y8ISkml9LwmthjQE4JtzdI.roa (hash: P7L80Xo0dmoEjCHpVucHdGzStrd3j71piAYh2Bx9HXg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:32:a0:44:3b:4e:e8:9e:56:64:4c:20:23:29:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90f25e6a6893f466d2695e90670c047443643701 Validity Not Before: Dec 18 22:01:10 2025 GMT Not After : Dec 19 22:01:10 2025 GMT Subject: CN=69f476bd54738f330a3bd4c175fc5ee32e28c7af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:87:bd:33:33:65:f0:86:bd:fa:a6:bc:5c:72: bb:d5:2d:38:73:6c:98:f2:78:9e:31:f6:0e:d3:70: 30:8e:64:51:2d:00:0b:8b:60:6e:e5:86:76:bb:12: ad:48:d5:26:e6:5b:f2:34:fa:3f:12:57:46:06:e6: e0:22:70:81:f1:0d:ec:ad:4f:82:ad:47:a4:5b:8a: 4e:fa:03:be:87:07:af:f8:f1:92:df:c3:a5:09:d2: 26:16:4e:39:7b:cb:86:37:e1:87:63:b8:b8:2e:7b: 79:b2:48:ca:ad:6d:40:ad:16:93:40:dc:dc:11:fa: 31:42:77:e8:c5:41:ca:75:58:4f:69:7e:8d:c2:75: 17:e0:d9:ec:05:fb:a7:0f:4c:d8:7f:0f:7b:ec:4c: a9:6f:0d:1d:28:66:55:01:09:1d:27:ca:a8:63:ca: c4:65:1a:13:32:54:31:51:d1:7a:53:30:31:bc:5f: 85:b4:48:49:81:fe:8c:63:61:64:c0:f2:6f:81:6c: a1:34:2a:cb:b0:3a:b1:c2:30:ac:ce:8a:bc:79:48: 9d:af:ac:bd:2b:4e:34:7d:75:82:45:b3:a2:5f:c5: 80:ab:c8:00:06:15:81:dc:04:dd:7f:d9:cf:c5:53: 6d:d3:8c:00:23:5a:2a:bc:9e:fe:a4:20:38:56:2b: 74:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F4:76:BD:54:73:8F:33:0A:3B:D4:C1:75:FC:5E:E3:2E:28:C7:AF X509v3 Authority Key Identifier: keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:99:e9:c4:07:51:a6:fb:0a:1d:8d:a9:c5:ab:67:0b:ed:da: a1:57:fb:ad:94:e2:db:4d:65:81:bc:89:5c:f3:a8:f8:5d:88: 02:1d:03:13:1a:f7:cf:9d:85:f3:04:b1:f7:ff:6e:43:0b:14: 3b:21:f0:f6:fa:e3:fb:ef:ad:b6:c7:91:32:2d:10:57:65:73: df:97:56:db:3e:91:f9:96:90:63:59:77:2f:ce:bb:e2:a3:4e: ff:19:c9:f8:e4:f5:93:ec:a6:d9:76:7f:c4:69:7a:a7:c3:be: 25:76:cc:3b:a7:aa:80:76:9f:5d:59:92:ee:cf:e1:d5:14:41: 28:bf:a7:db:0b:04:b1:88:24:df:a9:75:96:a5:0e:48:7a:08: 92:4c:ca:2f:4d:fb:2d:39:0d:64:a1:ae:94:6c:73:7d:a7:3d: 53:ce:7b:97:c4:3b:09:22:fa:3f:10:40:70:91:e5:33:38:cd: 27:fa:e8:a3:b4:e3:6e:19:88:c8:4d:ac:00:05:25:84:7e:fd: 1e:a2:9f:91:7a:2c:d0:d5:32:a6:8f:3f:c4:cc:08:45:8a:a0: d4:25:19:8e:f0:73:d5:d8:72:1d:0e:ad:82:71:de:2c:23:ff: 22:71:8d:35:88:14:44:1e:4d:ac:d3:de:0d:66:f7:b5:a7:1c: 28:24:a4:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszezKgRDtO6J5WZEwgIyltMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZjI1ZTZhNjg5M2Y0NjZkMjY5NWU5MDY3MGMwNDc0NDM2 NDM3MDEwHhcNMjUxMjE4MjIwMTEwWhcNMjUxMjE5MjIwMTEwWjAzMTEwLwYDVQQD Eyg2OWY0NzZiZDU0NzM4ZjMzMGEzYmQ0YzE3NWZjNWVlMzJlMjhjN2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroe9MzNl8Ia9+qa8XHK71S04c2yY 8nieMfYO03AwjmRRLQALi2Bu5YZ2uxKtSNUm5lvyNPo/EldGBubgInCB8Q3srU+C rUekW4pO+gO+hwev+PGS38OlCdImFk45e8uGN+GHY7i4Lnt5skjKrW1ArRaTQNzc EfoxQnfoxUHKdVhPaX6NwnUX4NnsBfunD0zYfw977Eypbw0dKGZVAQkdJ8qoY8rE ZRoTMlQxUdF6UzAxvF+FtEhJgf6MY2FkwPJvgWyhNCrLsDqxwjCszoq8eUidr6y9 K040fXWCRbOiX8WAq8gABhWB3ATdf9nPxVNt04wAI1oqvJ7+pCA4Vit03QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGn0dr1Uc48zCjvUwXX8XuMuKMevMB8GA1UdIwQY MBaAFJDyXmpok/Rm0mlekGcMBHRDZDcBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEt M2IwYjRiOGEyOTgzLzEva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEtM2IwYjRiOGEyOTgz LzEva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgZnpxAdR pvsKHY2pxatnC+3aoVf7rZTi201lgbyJXPOo+F2IAh0DExr3z52F8wSx9/9uQwsU OyHw9vrj+++ttseRMi0QV2Vz35dW2z6R+ZaQY1l3L8674qNO/xnJ+OT1k+ym2XZ/ xGl6p8O+JXbMO6eqgHafXVmS7s/h1RRBKL+n2wsEsYgk36l1lqUOSHoIkkzKL037 LTkNZKGulGxzfac9U857l8Q7CSL6PxBAcJHlMzjNJ/roo7TjbhmIyE2sAAUlhH79 HqKfkXos0NUypo8/xMwIRYqg1CUZjvBz1dhyHQ6tgnHeLCP/InGNNYgURB5NrNPe DWb3taccKCSk0A== -----END CERTIFICATE-----Generated at Fri Dec 19 04:54:23 2025 by rpki-client