This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft File: kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft (raw, json) Hash identifier: wxWiAolhKlAuLv1l3OVszPHeg2W1puImNV+ThzkGfhs= Subject key identifier: 6B:49:CB:CE:6D:6F:2E:3B:58:AA:C8:ED:F6:D5:3A:9D:0F:3C:62:2C Authority key identifier: 90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39 Certificate issuer: /CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39 Certificate serial: 019B2D0B402A181CB2BED0EAE5693E2B4C96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft Manifest number: 1783 Signing time: Wed 17 Dec 2025 16:01:10 +0000 Manifest this update: Wed 17 Dec 2025 16:01:10 +0000 Manifest next update: Thu 18 Dec 2025 16:01:10 +0000 Files and hashes: 1: _wZ7w3Scv14H15k_iZCT9mnEPVI.roa (hash: JHtZU8B5JlDmryEaVYDxAxM9JobFikDH6+vwZ+Ii1xM=) 2: kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl (hash: aUzKDAKdWTSn4+pwy5gstlL4FWG1Pz/Qsv9b7GOpNLw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:40:2a:18:1c:b2:be:d0:ea:e5:69:3e:2b:4c:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39 Validity Not Before: Dec 17 16:01:10 2025 GMT Not After : Dec 18 16:01:10 2025 GMT Subject: CN=6b49cbce6d6f2e3b58aac8edf6d53a9d0f3c622c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3d:ff:8b:46:f8:ec:dc:81:0c:30:fb:bc:80: 99:3e:d8:64:74:c2:0d:5e:a8:c3:f5:77:3f:17:de: ee:76:9b:85:81:03:cd:2f:fb:d4:60:3a:9b:de:92: 0c:be:1b:21:30:2d:3a:83:31:74:f5:78:63:58:96: 86:31:c3:9f:aa:50:5e:3e:89:6f:d2:07:50:b6:8a: 81:86:2f:89:a2:be:2d:d6:89:fc:c8:f3:c4:57:67: 98:69:b1:f1:e1:d9:64:a7:08:98:c0:92:ac:2e:fc: a0:dd:e8:f4:51:7d:b9:b3:12:2e:6d:1a:a1:de:d4: 13:c2:f7:dc:ea:d1:7a:6d:46:f2:7f:80:a3:60:95: ba:61:57:82:10:84:8a:a4:e3:61:b3:c5:35:a2:7f: 95:36:76:ee:40:f2:db:c9:9b:87:1f:28:e0:11:2b: d3:fe:c1:ed:f4:49:2d:2b:99:05:4b:ff:54:f4:e8: d8:45:39:17:56:f7:de:ba:24:94:e5:3a:0c:37:7a: aa:5b:45:e9:13:21:79:0e:28:29:71:8c:b5:d3:23: 4c:26:96:c9:4e:69:0b:cf:86:de:2e:80:b4:87:cf: 55:51:40:6e:8c:bb:aa:fa:6b:74:23:8c:91:93:c0: e4:f4:f9:2f:b8:4e:17:fc:65:65:0b:f6:d6:01:5c: df:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:49:CB:CE:6D:6F:2E:3B:58:AA:C8:ED:F6:D5:3A:9D:0F:3C:62:2C X509v3 Authority Key Identifier: keyid:90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:c4:39:5b:2c:f4:f6:b3:57:dd:21:59:b3:e6:ac:b9:0c:cb: f9:bf:8f:72:d4:ab:be:4a:d4:89:6b:41:22:06:0a:c8:1d:5d: 88:0f:4b:77:2a:b1:b5:62:52:6f:e6:da:49:30:46:c2:00:78: a6:60:0a:51:96:92:6c:57:b6:f1:3f:6c:a6:8e:95:6c:c4:ee: 4c:6d:16:d0:2f:f7:63:5b:1f:1c:dc:1d:d4:c9:0b:4d:63:58: d8:69:e4:71:06:81:df:c5:c5:5c:a4:9c:72:4e:3e:de:1a:56: d6:ac:bd:88:b7:9f:b6:17:bc:31:f4:82:21:ad:fb:75:89:8d: b9:fb:18:26:1c:17:da:11:95:24:44:2e:fa:b0:25:73:e1:c7: e0:33:06:b4:91:42:66:27:04:39:c1:0e:6a:1b:28:b7:52:d0: ac:5c:4a:0a:64:ed:ee:bb:14:94:9f:8f:76:d2:b2:c6:3c:5d: 05:9a:fc:29:bd:b3:63:5f:a4:1c:06:63:57:a1:ca:37:8b:56: 62:82:19:52:85:4c:2b:9e:93:40:bb:5b:7d:82:6a:82:a8:7a: b2:91:02:ab:3d:e5:e6:41:58:2a:1d:2f:38:0a:56:c7:f9:6b: 1d:bc:d9:4b:a1:29:86:f0:e0:e2:44:9b:14:0d:57:fb:c4:ab: 5c:f2:d4:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstC0AqGByyvtDq5Wk+K0yWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwYWU1MzhlMmE5MTM0NmYwNDAyNTk4YjBmZjJmYjlhOTVj MDdjMzkwHhcNMjUxMjE3MTYwMTEwWhcNMjUxMjE4MTYwMTEwWjAzMTEwLwYDVQQD Eyg2YjQ5Y2JjZTZkNmYyZTNiNThhYWM4ZWRmNmQ1M2E5ZDBmM2M2MjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApj3/i0b47NyBDDD7vICZPthkdMIN XqjD9Xc/F97udpuFgQPNL/vUYDqb3pIMvhshMC06gzF09XhjWJaGMcOfqlBePolv 0gdQtoqBhi+Jor4t1on8yPPEV2eYabHx4dlkpwiYwJKsLvyg3ej0UX25sxIubRqh 3tQTwvfc6tF6bUbyf4CjYJW6YVeCEISKpONhs8U1on+VNnbuQPLbyZuHHyjgESvT /sHt9EktK5kFS/9U9OjYRTkXVvfeuiSU5ToMN3qqW0XpEyF5DigpcYy10yNMJpbJ TmkLz4beLoC0h89VUUBujLuq+mt0I4yRk8Dk9PkvuE4X/GVlC/bWAVzfmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGtJy85tby47WKrI7fbVOp0PPGIsMB8GA1UdIwQY MBaAFJCuU44qkTRvBAJZiw/y+5qVwHw5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0s1VGppcVJORzhFQWxtTERfTDdtcFhBZkRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kNDc5MDktYTU2MC00MDljLWI4Mzkt YzVlNzgyMTU3OWYxLzEva0s1VGppcVJORzhFQWxtTERfTDdtcFhBZkRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9kNDc5MDktYTU2MC00MDljLWI4MzktYzVlNzgyMTU3OWYx LzEva0s1VGppcVJORzhFQWxtTERfTDdtcFhBZkRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAisQ5Wyz0 9rNX3SFZs+asuQzL+b+PctSrvkrUiWtBIgYKyB1diA9LdyqxtWJSb+baSTBGwgB4 pmAKUZaSbFe28T9spo6VbMTuTG0W0C/3Y1sfHNwd1MkLTWNY2GnkcQaB38XFXKSc ck4+3hpW1qy9iLefthe8MfSCIa37dYmNufsYJhwX2hGVJEQu+rAlc+HH4DMGtJFC ZicEOcEOahsot1LQrFxKCmTt7rsUlJ+PdtKyxjxdBZr8Kb2zY1+kHAZjV6HKN4tW YoIZUoVMK56TQLtbfYJqgqh6spECqz3l5kFYKh0vOApWx/lrHbzZS6EphvDg4kSb FA1X+8SrXPLU9g== -----END CERTIFICATE-----Generated at Wed Dec 17 19:02:38 2025 by rpki-client