This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft File: kIp-pxKAHkyP64Wz8HjQW6EBquE.mft (raw, json) Hash identifier: bIFnnC1DW9Mo3F15ROf75VKLzWTnt7YUeTWLWJUP3OA= Subject key identifier: 51:39:66:B2:3F:AD:60:30:CF:AA:06:17:71:12:71:08:E4:B9:E5:3C Authority key identifier: 90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1 Certificate issuer: /CN=908a7ea712801e4c8feb85b3f078d05ba101aae1 Certificate serial: 019B1F860B7E57613AC211DDD7C58340D50D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft Manifest number: 1779 Signing time: Mon 15 Dec 2025 01:00:37 +0000 Manifest this update: Mon 15 Dec 2025 01:00:37 +0000 Manifest next update: Tue 16 Dec 2025 01:00:37 +0000 Files and hashes: 1: 5otqJznFN06_a5lb9QnpMCQFqQI.roa (hash: NxQ406RCVAu9Gv14nckV258lPo22JEB7yBMbejU2osI=) 2: kIp-pxKAHkyP64Wz8HjQW6EBquE.crl (hash: eMNNHHHMYHujjaqZqbFcfvoc5kvJzeH4invDFkZO5cg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:86:0b:7e:57:61:3a:c2:11:dd:d7:c5:83:40:d5:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908a7ea712801e4c8feb85b3f078d05ba101aae1 Validity Not Before: Dec 15 01:00:37 2025 GMT Not After : Dec 16 01:00:37 2025 GMT Subject: CN=513966b23fad6030cfaa061771127108e4b9e53c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:21:24:2c:2e:17:93:dc:7b:cd:49:48:b6:01: 95:a7:55:9b:d3:81:e5:4f:3f:ae:63:a6:f3:7f:7f: 3d:2a:2c:64:90:61:94:ab:bc:e1:ca:ec:8e:fc:19: 1c:6c:0c:9b:77:a9:8a:15:bd:30:3f:c2:ed:43:2b: 17:57:79:4c:cc:c8:a1:98:df:d0:9a:85:2b:37:10: 55:a1:6b:f0:97:5b:f4:29:97:a3:1f:3a:e5:49:fd: 9e:45:7c:94:7b:03:42:d9:9e:c0:16:ae:b7:f0:0b: b6:e7:7d:7d:03:42:18:3d:a5:8e:3f:91:ee:c9:19: ca:da:9a:5e:de:58:5c:36:d9:1c:34:44:3a:9e:c4: 0c:c2:50:c5:62:53:8f:49:10:07:86:18:cc:8f:6c: f1:fa:95:a3:cc:34:ea:af:07:d6:71:5e:e7:72:59: 59:84:63:44:30:d6:8d:9b:f7:45:85:ae:bb:bb:b5: 3f:41:e8:5a:ba:7c:be:da:b1:dc:e4:ca:e5:c4:fc: 70:9a:3f:95:f2:4b:3d:69:60:b3:fa:85:e7:11:e5: 65:ff:66:c0:26:b1:38:75:be:a2:9d:70:43:06:43: f8:95:ee:ee:d8:b6:d1:8a:26:fb:38:10:41:bd:93: 8e:4b:85:aa:e5:0e:c2:37:91:30:ba:e5:f1:fb:63: fd:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:39:66:B2:3F:AD:60:30:CF:AA:06:17:71:12:71:08:E4:B9:E5:3C X509v3 Authority Key Identifier: keyid:90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:db:1e:c4:31:4a:47:d6:cd:1f:43:6b:ba:d5:fa:11:c5:c6: 3d:d0:d6:ac:14:32:ee:6b:be:2c:80:ea:ea:33:0b:c7:c8:12: 80:db:9c:a0:19:ce:93:b4:f0:f8:54:35:33:c7:6f:98:75:b6: ba:e0:54:32:44:4d:4e:e7:9b:ec:3b:89:cd:32:0b:b0:90:6d: 50:33:d2:ba:44:ca:b1:59:95:67:b9:e3:28:15:05:09:dc:2c: 09:af:59:2a:c7:1e:ba:86:90:7d:ad:5b:6d:3d:92:18:9a:13: 24:1a:6b:1a:52:05:80:fa:69:7f:dd:cf:46:d5:fc:2f:42:88: 46:bb:66:6a:83:fc:2c:b6:79:c4:c0:6e:e7:cc:ba:1a:c1:fd: 0c:15:ce:20:e8:42:d4:ca:0b:54:c7:c2:fd:e8:c2:26:e1:f3: 42:c8:8a:d5:0e:49:0b:3d:f0:8e:ee:17:79:fd:1c:62:89:7d: ed:86:55:70:af:fe:c8:27:5f:84:e7:47:63:72:01:ce:ff:64: 57:e7:8e:87:63:79:62:5e:86:c2:66:36:4e:fe:b0:0e:3b:d4: 27:1f:ec:b0:76:55:80:ad:b9:94:c5:11:85:a8:34:c6:ea:16: bd:c8:e5:88:d6:aa:96:73:89:0b:12:25:2b:4b:2a:cd:6c:0c: aa:ce:b5:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfhgt+V2E6whHd18WDQNUNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwOGE3ZWE3MTI4MDFlNGM4ZmViODViM2YwNzhkMDViYTEw MWFhZTEwHhcNMjUxMjE1MDEwMDM3WhcNMjUxMjE2MDEwMDM3WjAzMTEwLwYDVQQD Eyg1MTM5NjZiMjNmYWQ2MDMwY2ZhYTA2MTc3MTEyNzEwOGU0YjllNTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CEkLC4Xk9x7zUlItgGVp1Wb04Hl Tz+uY6bzf389KixkkGGUq7zhyuyO/BkcbAybd6mKFb0wP8LtQysXV3lMzMihmN/Q moUrNxBVoWvwl1v0KZejHzrlSf2eRXyUewNC2Z7AFq638Au25319A0IYPaWOP5Hu yRnK2ppe3lhcNtkcNEQ6nsQMwlDFYlOPSRAHhhjMj2zx+pWjzDTqrwfWcV7ncllZ hGNEMNaNm/dFha67u7U/Qehauny+2rHc5MrlxPxwmj+V8ks9aWCz+oXnEeVl/2bA JrE4db6inXBDBkP4le7u2LbRiib7OBBBvZOOS4Wq5Q7CN5EwuuXx+2P96QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFE5ZrI/rWAwz6oGF3EScQjkueU8MB8GA1UdIwQY MBaAFJCKfqcSgB5Mj+uFs/B40FuhAarhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0lwLXB4S0FIa3lQNjRXejhIalFXNkVCcXVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84NjA1ZTYtZDlmNC00YzMyLWI0ZDEt MWExMmNjMGIwNDA2LzEva0lwLXB4S0FIa3lQNjRXejhIalFXNkVCcXVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC84NjA1ZTYtZDlmNC00YzMyLWI0ZDEtMWExMmNjMGIwNDA2 LzEva0lwLXB4S0FIa3lQNjRXejhIalFXNkVCcXVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZNsexDFK R9bNH0NrutX6EcXGPdDWrBQy7mu+LIDq6jMLx8gSgNucoBnOk7Tw+FQ1M8dvmHW2 uuBUMkRNTueb7DuJzTILsJBtUDPSukTKsVmVZ7njKBUFCdwsCa9ZKsceuoaQfa1b bT2SGJoTJBprGlIFgPppf93PRtX8L0KIRrtmaoP8LLZ5xMBu58y6GsH9DBXOIOhC 1MoLVMfC/ejCJuHzQsiK1Q5JCz3wju4Xef0cYol97YZVcK/+yCdfhOdHY3IBzv9k V+eOh2N5Yl6GwmY2Tv6wDjvUJx/ssHZVgK25lMURhag0xuoWvcjliNaqlnOJCxIl K0sqzWwMqs613g== -----END CERTIFICATE-----Generated at Mon Dec 15 04:53:26 2025 by rpki-client