This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft File: kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft (raw, json) Hash identifier: zhUpVyAGXPWXv1oiWZlaureDYrzX9Io/DFGYTKR/spI= Subject key identifier: 7A:6F:DB:29:A9:9F:71:5D:4A:77:A1:7F:49:AF:11:6D:E8:F0:B0:35 Authority key identifier: 90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39 Certificate issuer: /CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39 Certificate serial: 019B217521558D150D46DA25F57F7DF80632 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft Manifest number: 177D Signing time: Mon 15 Dec 2025 10:01:22 +0000 Manifest this update: Mon 15 Dec 2025 10:01:22 +0000 Manifest next update: Tue 16 Dec 2025 10:01:22 +0000 Files and hashes: 1: _wZ7w3Scv14H15k_iZCT9mnEPVI.roa (hash: JHtZU8B5JlDmryEaVYDxAxM9JobFikDH6+vwZ+Ii1xM=) 2: kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl (hash: jw1+PELOCzlWovZYtDjvwZu0+5KT7IyLOhkBxIG3deg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:21:55:8d:15:0d:46:da:25:f5:7f:7d:f8:06:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39 Validity Not Before: Dec 15 10:01:22 2025 GMT Not After : Dec 16 10:01:22 2025 GMT Subject: CN=7a6fdb29a99f715d4a77a17f49af116de8f0b035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:87:eb:3e:9e:c3:ce:d4:09:49:ec:6c:7b:9e: c7:40:d1:42:ae:0b:5e:2b:1b:3d:d6:1b:1e:92:04: 7a:85:fc:da:77:4a:54:5c:14:b1:9e:07:af:3b:8d: 27:07:ce:16:72:2b:a7:19:fb:77:2c:45:fb:69:50: 87:6c:fe:5a:f7:0d:5f:5f:54:02:60:d7:27:52:9e: 16:9d:42:74:e0:2a:de:7e:e9:f4:f1:13:f9:47:fe: 1c:cc:6a:0c:50:08:da:a6:5f:8f:7f:3d:fd:02:75: bf:e5:67:f4:51:61:f5:2f:e9:7d:2f:96:f4:e7:2b: 39:0d:3f:00:ac:6f:15:90:23:21:35:81:25:e7:09: ec:96:48:e6:54:35:9f:7d:ad:81:25:da:ff:19:13: 04:34:81:05:b4:61:94:06:fc:e2:15:2d:b3:98:14: 00:ce:c4:37:b9:1e:3e:5b:05:d8:28:f1:77:4c:82: b9:0d:3e:6d:90:34:fb:e5:b8:90:f9:6d:30:fd:5e: b2:8a:d3:4f:5e:34:f5:4e:6a:08:07:6f:8d:0a:76: e5:24:9d:ef:8f:24:2f:c5:1d:b4:d6:62:e0:24:f2: af:61:1b:dd:58:72:cc:50:b9:33:82:d7:d6:d8:d9: 62:64:d2:75:72:52:dc:63:e7:11:10:da:60:a2:ed: 2f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:6F:DB:29:A9:9F:71:5D:4A:77:A1:7F:49:AF:11:6D:E8:F0:B0:35 X509v3 Authority Key Identifier: keyid:90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:45:26:ce:7b:b1:5e:87:d1:b9:81:08:10:07:b7:11:51:d0: 84:51:70:99:bb:e5:d3:ee:f5:0c:6f:df:bb:b3:2d:2d:0e:d7: 63:75:18:86:56:a3:65:c8:f9:cb:60:41:6f:f2:f2:99:26:e9: 08:e9:64:d2:9e:ed:d3:a8:4b:f7:95:99:40:4e:bf:c0:20:90: 74:67:a6:dc:51:48:20:1d:aa:39:34:28:41:55:bf:6e:f8:35: 06:06:04:5f:a6:d0:93:ae:be:2e:3a:f4:30:ff:f3:13:c4:b8: 07:bc:33:23:b5:ab:30:2e:73:00:8c:db:d3:f0:b4:e5:89:25: 91:67:01:6f:ca:99:7a:f5:f5:b0:07:14:04:55:a6:48:e0:20: 16:8c:0e:b7:71:d5:ee:86:5e:73:10:b2:4c:6e:3c:c3:37:98: 06:89:b0:7f:74:c4:83:59:b6:0e:ee:17:f7:77:59:f4:bc:cd: 0c:a4:b3:b6:85:0a:c1:7e:bb:91:5f:bd:a8:ac:ce:12:4c:a1: c3:05:0d:37:17:cf:1c:18:89:2c:e7:d0:3a:77:36:4d:9c:92: 07:42:bb:e8:f5:b9:63:57:b0:b1:eb:cb:f1:bc:16:c8:c3:b9: b1:a0:60:12:5d:7c:e7:16:ba:84:9f:90:d8:13:d4:de:ae:9c: 22:2c:20:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdSFVjRUNRtol9X99+AYyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwYWU1MzhlMmE5MTM0NmYwNDAyNTk4YjBmZjJmYjlhOTVj MDdjMzkwHhcNMjUxMjE1MTAwMTIyWhcNMjUxMjE2MTAwMTIyWjAzMTEwLwYDVQQD Eyg3YTZmZGIyOWE5OWY3MTVkNGE3N2ExN2Y0OWFmMTE2ZGU4ZjBiMDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ofrPp7DztQJSexse57HQNFCrgte Kxs91hsekgR6hfzad0pUXBSxngevO40nB84WciunGft3LEX7aVCHbP5a9w1fX1QC YNcnUp4WnUJ04Crefun08RP5R/4czGoMUAjapl+Pfz39AnW/5Wf0UWH1L+l9L5b0 5ys5DT8ArG8VkCMhNYEl5wnslkjmVDWffa2BJdr/GRMENIEFtGGUBvziFS2zmBQA zsQ3uR4+WwXYKPF3TIK5DT5tkDT75biQ+W0w/V6yitNPXjT1TmoIB2+NCnblJJ3v jyQvxR201mLgJPKvYRvdWHLMULkzgtfW2NliZNJ1clLcY+cRENpgou0vOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHpv2ympn3FdSnehf0mvEW3o8LA1MB8GA1UdIwQY MBaAFJCuU44qkTRvBAJZiw/y+5qVwHw5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0s1VGppcVJORzhFQWxtTERfTDdtcFhBZkRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kNDc5MDktYTU2MC00MDljLWI4Mzkt YzVlNzgyMTU3OWYxLzEva0s1VGppcVJORzhFQWxtTERfTDdtcFhBZkRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9kNDc5MDktYTU2MC00MDljLWI4MzktYzVlNzgyMTU3OWYx LzEva0s1VGppcVJORzhFQWxtTERfTDdtcFhBZkRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVEUmznux XofRuYEIEAe3EVHQhFFwmbvl0+71DG/fu7MtLQ7XY3UYhlajZcj5y2BBb/LymSbp COlk0p7t06hL95WZQE6/wCCQdGem3FFIIB2qOTQoQVW/bvg1BgYEX6bQk66+Ljr0 MP/zE8S4B7wzI7WrMC5zAIzb0/C05YklkWcBb8qZevX1sAcUBFWmSOAgFowOt3HV 7oZecxCyTG48wzeYBomwf3TEg1m2Du4X93dZ9LzNDKSztoUKwX67kV+9qKzOEkyh wwUNNxfPHBiJLOfQOnc2TZySB0K76PW5Y1ewsevL8bwWyMO5saBgEl185xa6hJ+Q 2BPU3q6cIiwgmQ== -----END CERTIFICATE-----Generated at Mon Dec 15 13:23:04 2025 by rpki-client