This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft File: kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft (raw, json) Hash identifier: qz7QOkG8Ao8ayg1mYzZuvVx18oPxruhyfZBzv0U+130= Subject key identifier: FC:BE:F7:64:C5:6D:70:59:4B:6D:FF:C3:F3:21:27:5F:69:4A:FD:EA Authority key identifier: 90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39 Certificate issuer: /CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39 Certificate serial: 019B19BB5471095ECB6A83CB50572FA7C6CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft Manifest number: 1779 Signing time: Sat 13 Dec 2025 22:01:05 +0000 Manifest this update: Sat 13 Dec 2025 22:01:05 +0000 Manifest next update: Sun 14 Dec 2025 22:01:05 +0000 Files and hashes: 1: _wZ7w3Scv14H15k_iZCT9mnEPVI.roa (hash: JHtZU8B5JlDmryEaVYDxAxM9JobFikDH6+vwZ+Ii1xM=) 2: kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl (hash: DJmdFpRB3BflktaE0avaOGTUFsh0112bRbuFwPNSJbY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:54:71:09:5e:cb:6a:83:cb:50:57:2f:a7:c6:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39 Validity Not Before: Dec 13 22:01:05 2025 GMT Not After : Dec 14 22:01:05 2025 GMT Subject: CN=fcbef764c56d70594b6dffc3f321275f694afdea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:60:27:0e:20:23:9d:54:c0:bf:ca:42:56:88: 52:5d:5a:8e:b5:63:d7:11:5c:be:87:64:38:d6:3a: dc:38:c0:02:ca:56:22:03:c6:36:4c:88:bb:a1:12: ed:eb:0e:40:fb:ad:59:1c:bb:a3:19:a3:53:c7:b7: b3:cf:dc:aa:4b:f5:23:cb:89:6e:77:1a:fb:14:95: 4f:ed:47:7b:69:be:9e:23:97:14:e0:a4:7e:41:78: 75:56:66:76:06:cf:e4:5c:b3:1b:7d:49:64:de:dc: 31:62:ea:31:07:ce:0f:34:ae:a2:8a:1b:57:89:ec: 2e:d9:c4:94:2c:7c:fd:0e:b2:fb:e4:43:68:cf:37: 44:26:20:5c:6c:68:af:be:b7:19:4a:da:d2:f6:4f: 2a:a9:ea:9c:c3:55:da:f5:a7:14:8d:05:49:a5:1d: d3:1c:4e:2b:81:15:93:e1:c3:2b:5c:5c:95:1b:7d: c7:72:e7:48:46:d2:fd:c6:ae:1c:63:76:03:d6:b2: 4e:0e:cf:a9:f4:68:2f:4b:1f:d2:8f:ef:f1:fe:26: 41:d3:db:55:99:a7:60:4e:7e:9d:13:6b:16:03:5a: 44:f6:c7:29:4d:59:0c:10:e6:19:bf:bf:4e:e6:ab: 72:f2:30:1e:2e:e6:ad:5a:79:69:8e:54:a7:0f:ee: 59:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:BE:F7:64:C5:6D:70:59:4B:6D:FF:C3:F3:21:27:5F:69:4A:FD:EA X509v3 Authority Key Identifier: keyid:90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:10:35:64:4a:ec:a1:89:fc:55:f0:7a:f5:97:24:9a:65:6a: 5b:85:d8:04:4f:91:86:64:75:fe:dd:10:35:32:31:1e:c9:1b: 62:6b:48:2f:a9:c8:a1:33:c4:52:26:b7:08:28:91:84:8b:4f: 5e:b8:39:f4:e6:bf:a4:e6:09:5e:7b:57:42:67:e7:ef:f4:f1: 97:51:c4:fc:2c:2d:f8:e8:c8:7e:59:b6:20:16:da:5b:79:de: 2b:25:bf:91:d0:c6:22:70:9b:c3:0e:d5:b2:54:f2:7c:7c:58: dc:26:29:47:27:1b:fc:4d:4a:f4:8e:3f:d6:de:d4:c4:7e:29: 3b:3c:ea:18:2b:41:7f:0a:12:0e:2e:f5:34:d3:4a:85:44:a9: 8c:ed:c8:bc:68:e0:2f:01:35:1b:41:38:ec:12:66:a2:98:39: 8f:89:38:34:71:86:b2:3d:69:97:d1:32:97:33:c5:ae:2f:23: c0:88:15:56:b5:26:7d:78:55:86:3c:bd:f2:5a:e0:f6:7a:40: fd:1e:df:da:19:0c:75:4d:40:f0:bc:6b:60:45:78:7f:db:05: 80:06:19:8e:b4:70:c6:dc:10:aa:4b:0a:c7:32:6e:71:15:ee: b1:7a:bc:dc:b1:97:89:fd:85:4d:02:c9:87:fc:46:67:11:25: 4f:6a:a3:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZu1RxCV7LaoPLUFcvp8bMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwYWU1MzhlMmE5MTM0NmYwNDAyNTk4YjBmZjJmYjlhOTVj MDdjMzkwHhcNMjUxMjEzMjIwMTA1WhcNMjUxMjE0MjIwMTA1WjAzMTEwLwYDVQQD EyhmY2JlZjc2NGM1NmQ3MDU5NGI2ZGZmYzNmMzIxMjc1ZjY5NGFmZGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmAnDiAjnVTAv8pCVohSXVqOtWPX EVy+h2Q41jrcOMACylYiA8Y2TIi7oRLt6w5A+61ZHLujGaNTx7ezz9yqS/Ujy4lu dxr7FJVP7Ud7ab6eI5cU4KR+QXh1VmZ2Bs/kXLMbfUlk3twxYuoxB84PNK6iihtX iewu2cSULHz9DrL75ENozzdEJiBcbGivvrcZStrS9k8qqeqcw1Xa9acUjQVJpR3T HE4rgRWT4cMrXFyVG33HcudIRtL9xq4cY3YD1rJODs+p9GgvSx/Sj+/x/iZB09tV madgTn6dE2sWA1pE9scpTVkMEOYZv79O5qty8jAeLuatWnlpjlSnD+5Z3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPy+92TFbXBZS23/w/MhJ19pSv3qMB8GA1UdIwQY MBaAFJCuU44qkTRvBAJZiw/y+5qVwHw5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0s1VGppcVJORzhFQWxtTERfTDdtcFhBZkRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kNDc5MDktYTU2MC00MDljLWI4Mzkt YzVlNzgyMTU3OWYxLzEva0s1VGppcVJORzhFQWxtTERfTDdtcFhBZkRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9kNDc5MDktYTU2MC00MDljLWI4MzktYzVlNzgyMTU3OWYx LzEva0s1VGppcVJORzhFQWxtTERfTDdtcFhBZkRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbBA1ZErs oYn8VfB69ZckmmVqW4XYBE+RhmR1/t0QNTIxHskbYmtIL6nIoTPEUia3CCiRhItP Xrg59Oa/pOYJXntXQmfn7/Txl1HE/Cwt+OjIflm2IBbaW3neKyW/kdDGInCbww7V slTyfHxY3CYpRycb/E1K9I4/1t7UxH4pOzzqGCtBfwoSDi71NNNKhUSpjO3IvGjg LwE1G0E47BJmopg5j4k4NHGGsj1pl9EylzPFri8jwIgVVrUmfXhVhjy98lrg9npA /R7f2hkMdU1A8LxrYEV4f9sFgAYZjrRwxtwQqksKxzJucRXusXq83LGXif2FTQLJ h/xGZxElT2qjRA== -----END CERTIFICATE-----Generated at Sun Dec 14 03:45:32 2025 by rpki-client