This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft File: kPJeamiT9GbSaV6QZwwEdENkNwE.mft (raw, json) Hash identifier: R+k2UGpx0XSmMtIGQ+nUmcQA0LZKzpmivwgwpns5VuQ= Subject key identifier: 73:1E:AF:26:B8:95:D8:28:A5:18:43:EA:5C:74:A2:0B:EA:71:A0:62 Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01 Certificate issuer: /CN=90f25e6a6893f466d2695e90670c047443643701 Certificate serial: 019AF4D2AE6B5F9DF25DDC74D47CDE5EB4A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft Manifest number: 1777 Signing time: Sat 06 Dec 2025 18:00:39 +0000 Manifest this update: Sat 06 Dec 2025 18:00:39 +0000 Manifest next update: Sun 07 Dec 2025 18:00:39 +0000 Files and hashes: 1: 2yys3LU7mts-Gl7bPeFVNGNeuMo.roa (hash: Yt+g7nPKVN9s0l9R0GhUZc17Zle6twg1T3pZzSdURFs=) 2: 9_JGTVW5qMW7yCkdP0E_-NpXB0s.roa (hash: WnTsDGxoDG2mHWxyzgJxMMHknGyiRAiwLMWZ5xXwktI=) 3: GEAFSRO55yyL2hanen4IQZHuURY.roa (hash: 2FshQLANrdy2nUZzMPBP36DvAVDN+Uv1owhoY0rOS8I=) 4: H8DQXyH0KVxtyAs-rlTWAJw5n0M.roa (hash: dDFoBjvjKcHyX8s6IHYrzZBS6btcUzoDxFIxBvgUAfs=) 5: d5-pkB3Ay6XEnASQ842eqa4zFQk.roa (hash: L45Bt9lWf+G6vwKrnrElP/rJXXbR6PzfYe43SPRGryg=) 6: kPJeamiT9GbSaV6QZwwEdENkNwE.crl (hash: XZKsQC4/jJyYMUYlTF954khizOeHBfgODpgof+lFQ5M=) 7: zlsE5y8ISkml9LwmthjQE4JtzdI.roa (hash: P7L80Xo0dmoEjCHpVucHdGzStrd3j71piAYh2Bx9HXg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 18:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:d2:ae:6b:5f:9d:f2:5d:dc:74:d4:7c:de:5e:b4:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90f25e6a6893f466d2695e90670c047443643701 Validity Not Before: Dec 6 18:00:39 2025 GMT Not After : Dec 7 18:00:39 2025 GMT Subject: CN=731eaf26b895d828a51843ea5c74a20bea71a062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e6:78:10:b6:1b:fe:4a:d5:cb:c3:5f:2f:1a: 91:7a:c1:87:af:de:2a:ba:3b:bf:10:8e:63:74:70: 9c:c4:ac:9b:09:53:b0:36:61:4c:be:48:60:24:38: 69:ee:fa:69:94:3d:db:91:49:2c:4f:70:8b:8e:de: 4b:dd:ab:ae:8a:bb:14:19:f2:4e:3f:dd:2f:b8:64: b4:8e:45:0c:c2:31:4c:67:43:b8:e3:19:04:47:fd: 95:b5:9d:42:0b:62:c8:2e:4d:d8:97:8f:50:dd:92: cc:55:9f:77:c7:d4:0d:b6:25:00:51:c6:e9:9c:5b: bd:39:18:20:7c:2b:d6:a2:1a:d0:0c:f2:3a:c6:93: d5:f7:98:f3:ff:3a:d8:b3:97:b1:24:9d:8c:20:fc: 39:5b:4a:41:6c:4b:b0:ff:8b:3b:02:4c:c4:56:b1: 8e:fb:bd:29:64:e9:1f:20:2c:e2:90:43:3c:14:37: 3c:58:72:95:8c:4e:8c:4f:9e:e8:6e:62:cb:e8:5a: 7a:58:6b:42:1c:b3:aa:8e:19:72:15:5c:5b:e6:4c: d2:27:e5:ce:34:d2:a5:4d:3c:92:f8:2a:57:27:a8: 10:f0:09:56:5e:c5:99:e1:92:f2:61:c7:3f:a7:a6: 4b:12:39:24:a3:81:61:a3:db:cb:75:4b:1d:af:98: 25:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:1E:AF:26:B8:95:D8:28:A5:18:43:EA:5C:74:A2:0B:EA:71:A0:62 X509v3 Authority Key Identifier: keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:73:02:a6:b9:7c:40:e0:be:2a:69:71:e8:40:12:df:ba:ad: 5a:66:da:f5:1c:02:5f:04:fc:e0:a8:f8:5a:7f:c8:69:e9:60: 02:f3:fe:0e:4a:80:fe:42:33:b6:01:48:a6:40:b6:bc:a0:92: ec:88:a2:7c:e9:04:55:e9:cd:26:68:10:28:bf:c5:08:9f:fe: f9:6f:d8:54:8f:2c:46:54:19:9b:15:b2:30:af:7b:5b:2c:13: e4:dd:f7:a4:45:fa:47:c9:22:d6:93:89:07:b5:c3:38:9e:b9: 9f:61:0d:2f:15:fd:79:41:38:33:48:4e:21:14:2e:9a:5b:16: 80:7e:b8:49:7c:35:81:93:f4:a2:6e:31:da:7e:f8:e1:e2:2f: bc:61:f8:51:17:96:8f:28:f3:c2:1b:57:cd:af:77:1b:ea:10: 6e:80:ff:45:59:10:7b:a8:f4:0c:20:3a:ff:8f:0a:99:d0:58: 8c:89:bc:e1:38:e2:a2:18:9b:18:28:86:a8:5d:3f:64:0c:03: 1d:dd:24:d6:44:b1:a8:3a:7b:64:2b:91:4d:51:a9:a2:1d:44: 37:a9:f8:80:24:ef:2b:ed:b4:b2:59:4e:ba:f3:f3:29:ca:97: 2a:0d:dd:58:eb:72:3c:cd:5a:44:ba:2d:84:75:f5:28:8a:f2: e8:b4:a7:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr00q5rX53yXdx01HzeXrSlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZjI1ZTZhNjg5M2Y0NjZkMjY5NWU5MDY3MGMwNDc0NDM2 NDM3MDEwHhcNMjUxMjA2MTgwMDM5WhcNMjUxMjA3MTgwMDM5WjAzMTEwLwYDVQQD Eyg3MzFlYWYyNmI4OTVkODI4YTUxODQzZWE1Yzc0YTIwYmVhNzFhMDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuZ4ELYb/krVy8NfLxqResGHr94q uju/EI5jdHCcxKybCVOwNmFMvkhgJDhp7vpplD3bkUksT3CLjt5L3auuirsUGfJO P90vuGS0jkUMwjFMZ0O44xkER/2VtZ1CC2LILk3Yl49Q3ZLMVZ93x9QNtiUAUcbp nFu9ORggfCvWohrQDPI6xpPV95jz/zrYs5exJJ2MIPw5W0pBbEuw/4s7AkzEVrGO +70pZOkfICzikEM8FDc8WHKVjE6MT57obmLL6Fp6WGtCHLOqjhlyFVxb5kzSJ+XO NNKlTTyS+CpXJ6gQ8AlWXsWZ4ZLyYcc/p6ZLEjkko4Fho9vLdUsdr5gltQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHMerya4ldgopRhD6lx0ogvqcaBiMB8GA1UdIwQY MBaAFJDyXmpok/Rm0mlekGcMBHRDZDcBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEt M2IwYjRiOGEyOTgzLzEva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEtM2IwYjRiOGEyOTgz LzEva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeXMCprl8 QOC+Kmlx6EAS37qtWmba9RwCXwT84Kj4Wn/IaelgAvP+DkqA/kIztgFIpkC2vKCS 7IiifOkEVenNJmgQKL/FCJ/++W/YVI8sRlQZmxWyMK97WywT5N33pEX6R8ki1pOJ B7XDOJ65n2ENLxX9eUE4M0hOIRQumlsWgH64SXw1gZP0om4x2n744eIvvGH4UReW jyjzwhtXza93G+oQboD/RVkQe6j0DCA6/48KmdBYjIm84TjiohibGCiGqF0/ZAwD Hd0k1kSxqDp7ZCuRTVGpoh1EN6n4gCTvK+20sllOuvPzKcqXKg3dWOtyPM1aRLot hHX1KIry6LSnlQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:08:44 2025 by rpki-client