This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft File: kiBfWmTqH7CQrSbc_bGM77mqvY0.mft (raw, json) Hash identifier: 2maNIQX9FJA7t+mykCMhbfPgVGZ0Na2r69q0m85bDzs= Subject key identifier: 3A:27:CE:27:77:F9:A0:EA:4F:9D:96:B7:0C:A4:73:8B:F7:53:14:DB Authority key identifier: 92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D Certificate issuer: /CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d Certificate serial: 019B1FBD207D7F502463F1D7635771766C0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft Manifest number: 133C Signing time: Mon 15 Dec 2025 02:00:46 +0000 Manifest this update: Mon 15 Dec 2025 02:00:46 +0000 Manifest next update: Tue 16 Dec 2025 02:00:46 +0000 Files and hashes: 1: CWePTkWPKqmq8XCrzmvHtdzJ66c.roa (hash: w47SbHpgg+8nHiedozoZtpn2WeqKZNjvBRbXbOYH5sQ=) 2: QxrO5EAVR8eFM8jH9BCfhqlcchk.roa (hash: YI48GxiCUKeQBfw8EzcAM9WtfO8HGqURFBVLVXq05fo=) 3: kiBfWmTqH7CQrSbc_bGM77mqvY0.crl (hash: +L2uMz6mf9FawhbtbkBwib/WwhKAyIk8iP3+nM8Zeg0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:bd:20:7d:7f:50:24:63:f1:d7:63:57:71:76:6c:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d Validity Not Before: Dec 15 02:00:46 2025 GMT Not After : Dec 16 02:00:46 2025 GMT Subject: CN=3a27ce2777f9a0ea4f9d96b70ca4738bf75314db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6b:58:ee:bc:98:9a:cd:a6:44:91:9c:d6:91: 6f:dd:89:c9:77:fd:92:e2:1b:de:1c:dd:40:fd:94: d1:04:ec:d7:d0:eb:7a:9c:8c:14:1f:cd:4e:61:01: 18:7a:f5:c1:6b:28:96:53:be:f9:ab:32:cf:b6:59: c9:e8:68:b9:21:d2:6c:33:79:ed:ce:a0:5d:36:67: 90:73:13:a9:06:0d:20:f1:42:ae:d4:4e:92:f4:49: 4c:87:0b:8f:b9:70:88:b1:ef:6b:05:4f:8c:2a:b9: f0:ab:0b:43:5a:a1:8d:43:c9:7a:9d:69:b1:f6:08: 15:5a:bb:8f:d5:a7:e4:5f:7f:5b:b4:a8:b6:eb:56: 85:a9:c9:fe:cc:63:7d:43:b9:2f:c6:c9:65:80:00: 2a:b5:22:77:72:ed:40:f9:d3:c2:2d:fa:7a:26:17: 04:c8:af:e8:56:2e:75:6e:8b:52:e8:c2:42:40:74: ea:ba:0f:f2:cc:99:1f:fa:2c:f2:c8:60:a7:9f:a7: 41:85:5f:19:8b:9e:3f:e4:28:2a:61:c4:ec:fa:45: 35:fd:02:1c:9a:68:ee:c2:a0:f0:d2:05:44:26:5b: 48:2e:d5:68:5f:3a:b1:a7:c0:47:1d:2c:94:39:0f: 9d:b5:32:55:8c:69:d4:92:32:89:04:cf:2a:e6:ca: db:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:27:CE:27:77:F9:A0:EA:4F:9D:96:B7:0C:A4:73:8B:F7:53:14:DB X509v3 Authority Key Identifier: keyid:92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:bc:27:59:77:f7:74:bc:3e:7b:f7:6e:ad:be:a7:39:9b:03: b4:9f:ff:0a:e7:c7:53:1b:03:ef:86:40:9b:4c:c8:91:a0:b9: 1b:47:8e:6e:67:ac:85:d1:57:85:e6:33:d8:07:75:a5:c9:3b: 66:b4:64:34:78:2b:0c:c7:34:be:33:57:c9:98:9a:5b:14:a7: e1:f9:1b:34:4a:33:24:a0:ad:d9:61:42:36:30:3b:dc:93:0a: 8d:9f:72:08:a4:e9:09:a2:44:95:f6:bf:8f:31:a0:6d:a6:61: 4c:6c:db:45:1c:a0:64:8d:b0:79:87:23:56:c5:3c:10:a3:b8: 67:a8:80:17:c2:c8:a4:78:64:83:82:07:6d:d1:90:80:f5:86: 84:d2:47:9c:2b:5a:d2:a4:8d:ef:e7:8b:f9:cc:9a:d0:61:b4: d4:02:63:69:19:fb:b0:83:fc:c6:7a:e5:5c:34:08:c9:72:c6: 34:d1:df:9e:62:2f:48:1b:78:c4:2d:3d:bb:c1:2b:56:0a:bb: 48:2b:fa:b3:04:5e:a9:f2:93:44:a6:5d:30:36:52:3f:0d:e2: 4c:b1:24:0a:60:c6:48:45:81:c8:a2:da:cd:e3:15:a2:6f:2f: 68:1c:eb:36:0e:8b:4a:2c:8f:95:15:c3:3d:2e:63:b8:45:73: 8d:d8:56:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfvSB9f1AkY/HXY1dxdmwLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMjA1ZjVhNjRlYTFmYjA5MGFkMjZkY2ZkYjE4Y2VmYjlh YWJkOGQwHhcNMjUxMjE1MDIwMDQ2WhcNMjUxMjE2MDIwMDQ2WjAzMTEwLwYDVQQD EygzYTI3Y2UyNzc3ZjlhMGVhNGY5ZDk2YjcwY2E0NzM4YmY3NTMxNGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWtY7ryYms2mRJGc1pFv3YnJd/2S 4hveHN1A/ZTRBOzX0Ot6nIwUH81OYQEYevXBayiWU775qzLPtlnJ6Gi5IdJsM3nt zqBdNmeQcxOpBg0g8UKu1E6S9ElMhwuPuXCIse9rBU+MKrnwqwtDWqGNQ8l6nWmx 9ggVWruP1afkX39btKi261aFqcn+zGN9Q7kvxsllgAAqtSJ3cu1A+dPCLfp6JhcE yK/oVi51botS6MJCQHTqug/yzJkf+izyyGCnn6dBhV8Zi54/5CgqYcTs+kU1/QIc mmjuwqDw0gVEJltILtVoXzqxp8BHHSyUOQ+dtTJVjGnUkjKJBM8q5srb/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDonzid3+aDqT52Wtwykc4v3UxTbMB8GA1UdIwQY MBaAFJIgX1pk6h+wkK0m3P2xjO+5qr2NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2lCZldtVHFIN0NRclNiY19iR003N21xdlkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82NTIyNjctZWExMy00ODkyLTlmZmEt MDljMWI3MzM2YTUxLzEva2lCZldtVHFIN0NRclNiY19iR003N21xdlkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS82NTIyNjctZWExMy00ODkyLTlmZmEtMDljMWI3MzM2YTUx LzEva2lCZldtVHFIN0NRclNiY19iR003N21xdlkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH7wnWXf3 dLw+e/durb6nOZsDtJ//CufHUxsD74ZAm0zIkaC5G0eObmeshdFXheYz2Ad1pck7 ZrRkNHgrDMc0vjNXyZiaWxSn4fkbNEozJKCt2WFCNjA73JMKjZ9yCKTpCaJElfa/ jzGgbaZhTGzbRRygZI2weYcjVsU8EKO4Z6iAF8LIpHhkg4IHbdGQgPWGhNJHnCta 0qSN7+eL+cya0GG01AJjaRn7sIP8xnrlXDQIyXLGNNHfnmIvSBt4xC09u8ErVgq7 SCv6swReqfKTRKZdMDZSPw3iTLEkCmDGSEWByKLazeMVom8vaBzrNg6LSiyPlRXD PS5juEVzjdhWbA== -----END CERTIFICATE-----Generated at Mon Dec 15 04:33:13 2025 by rpki-client