This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft File: kebTJCJXspZbYnj_jBfhb_PwiyE.mft (raw, json) Hash identifier: K48H5S6bKH9/Eo6B82g7cZ/Lbm5jdKgTHRkL4wGzoiM= Subject key identifier: 3B:59:C8:D8:91:9C:DD:71:5D:24:29:70:F7:2E:3B:4D:BF:8E:1A:2A Authority key identifier: 91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21 Certificate issuer: /CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21 Certificate serial: 019B33E8E603619527663C37015028CD8598 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft Manifest number: 1783 Signing time: Fri 19 Dec 2025 00:00:59 +0000 Manifest this update: Fri 19 Dec 2025 00:00:59 +0000 Manifest next update: Sat 20 Dec 2025 00:00:59 +0000 Files and hashes: 1: HjQkm2JT356OOTfVxzC91MAJejE.roa (hash: 6EBMcahxPvJvcaJie71cxhJd2CWIr+iW37GbqtuijiY=) 2: kebTJCJXspZbYnj_jBfhb_PwiyE.crl (hash: 73JQVwC81T6EU5Nr1Gz7VAIkEnLhSt3HjmyvcHR6mgM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:e6:03:61:95:27:66:3c:37:01:50:28:cd:85:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21 Validity Not Before: Dec 19 00:00:59 2025 GMT Not After : Dec 20 00:00:59 2025 GMT Subject: CN=3b59c8d8919cdd715d242970f72e3b4dbf8e1a2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ff:84:30:4d:28:b8:8b:f5:c4:1a:43:f4:85: ff:04:6b:fc:fb:85:4d:e7:fd:25:eb:d8:de:df:27: f8:1c:90:81:57:df:ee:b2:00:3c:cc:b6:ba:99:a7: 18:ec:34:ea:a0:35:de:bc:65:23:0a:f6:bf:57:0a: 01:fc:6f:3d:9f:93:a6:8a:41:ed:13:3e:e8:6e:bc: 33:4f:c0:11:98:33:b3:03:2e:84:02:1f:8e:ca:8e: 62:f5:8d:e5:85:9d:b0:a2:23:6b:67:62:53:ae:d4: 4c:e4:4b:ec:b9:00:7b:a4:3d:9f:9a:a8:be:05:2a: eb:6c:36:3b:ed:7c:a4:b6:72:a8:1d:ab:0d:9b:16: 7f:59:fd:11:92:c6:6d:f5:73:55:53:2a:1d:10:4e: da:9e:9e:60:2c:f9:6f:83:37:16:cd:3b:ac:36:1b: 65:58:63:76:b4:82:f8:55:40:9a:40:9a:1c:1e:f8: aa:58:f9:67:de:1d:ae:94:98:65:ca:73:a8:46:e4: bd:4d:2b:0d:53:72:1c:62:1e:5e:b8:c8:27:f9:bc: d1:7f:84:d6:93:6c:dd:4a:65:12:04:df:b0:e2:8c: 04:ce:91:b9:42:e5:39:ae:c4:cf:31:76:3d:01:56: 1d:23:01:5e:69:1c:2e:de:34:d8:fe:a0:ba:7d:22: b8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:59:C8:D8:91:9C:DD:71:5D:24:29:70:F7:2E:3B:4D:BF:8E:1A:2A X509v3 Authority Key Identifier: keyid:91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:39:84:2b:e6:10:21:3b:fa:8f:a5:76:bf:67:5d:ae:87:06: 9d:e6:31:e9:19:ef:5e:04:14:40:d6:7d:fe:ef:83:84:7a:20: eb:c1:19:38:53:cb:ad:d5:a7:27:b3:e1:1a:ca:7e:74:63:4b: c4:4d:4a:ee:0c:b0:0f:d6:f9:c5:d6:ba:94:f5:a3:c5:3d:01: 3d:9e:eb:9e:62:ee:02:17:c9:39:ed:58:59:90:31:ca:5e:75: 91:22:95:29:bb:28:23:b5:18:96:d2:c8:7e:54:58:f6:a3:76: 04:cb:f2:15:c0:98:88:cb:19:13:ae:9e:f9:e9:de:b2:ad:b9: 17:bd:60:c2:48:6f:fb:98:4c:37:35:cc:52:d8:72:fa:aa:bf: da:60:fd:af:d3:4f:35:3c:d4:e5:9f:4d:5d:27:a5:2a:7f:48: dc:2b:2b:9f:b2:8d:a3:0c:de:d8:6e:6f:a4:5d:6f:40:4b:33: ce:b7:5f:6b:ec:1b:3d:91:1d:10:86:f4:b9:fa:7b:0b:91:18: 33:01:77:47:d7:15:bb:06:3f:c9:4b:94:4c:67:de:cd:19:17: 42:e5:e8:e3:59:94:b0:5d:87:65:cd:6b:da:de:e6:40:40:08: f7:0e:ba:a4:40:03:b9:36:0f:e8:27:fd:af:ee:63:42:9b:e2: be:d6:86:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6OYDYZUnZjw3AVAozYWYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZTZkMzI0MjI1N2IyOTY1YjYyNzhmZjhjMTdlMTZmZjNm MDhiMjEwHhcNMjUxMjE5MDAwMDU5WhcNMjUxMjIwMDAwMDU5WjAzMTEwLwYDVQQD EygzYjU5YzhkODkxOWNkZDcxNWQyNDI5NzBmNzJlM2I0ZGJmOGUxYTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtP+EME0ouIv1xBpD9IX/BGv8+4VN 5/0l69je3yf4HJCBV9/usgA8zLa6macY7DTqoDXevGUjCva/VwoB/G89n5OmikHt Ez7obrwzT8ARmDOzAy6EAh+Oyo5i9Y3lhZ2woiNrZ2JTrtRM5EvsuQB7pD2fmqi+ BSrrbDY77XyktnKoHasNmxZ/Wf0RksZt9XNVUyodEE7anp5gLPlvgzcWzTusNhtl WGN2tIL4VUCaQJocHviqWPln3h2ulJhlynOoRuS9TSsNU3IcYh5euMgn+bzRf4TW k2zdSmUSBN+w4owEzpG5QuU5rsTPMXY9AVYdIwFeaRwu3jTY/qC6fSK4CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDtZyNiRnN1xXSQpcPcuO02/jhoqMB8GA1UdIwQY MBaAFJHm0yQiV7KWW2J4/4wX4W/z8IshMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2ViVEpDSlhzcFpiWW5qX2pCZmhiX1B3aXlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8wYzBmNjEtYjY5Yy00NjU3LTk4Njct N2U3NGE2YTk4ZWNkLzEva2ViVEpDSlhzcFpiWW5qX2pCZmhiX1B3aXlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8wYzBmNjEtYjY5Yy00NjU3LTk4NjctN2U3NGE2YTk4ZWNk LzEva2ViVEpDSlhzcFpiWW5qX2pCZmhiX1B3aXlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAazmEK+YQ ITv6j6V2v2ddrocGneYx6RnvXgQUQNZ9/u+DhHog68EZOFPLrdWnJ7PhGsp+dGNL xE1K7gywD9b5xda6lPWjxT0BPZ7rnmLuAhfJOe1YWZAxyl51kSKVKbsoI7UYltLI flRY9qN2BMvyFcCYiMsZE66e+enesq25F71gwkhv+5hMNzXMUthy+qq/2mD9r9NP NTzU5Z9NXSelKn9I3Csrn7KNowze2G5vpF1vQEszzrdfa+wbPZEdEIb0ufp7C5EY MwF3R9cVuwY/yUuUTGfezRkXQuXo41mUsF2HZc1r2t7mQEAI9w66pEADuTYP6Cf9 r+5jQpvivtaGuA== -----END CERTIFICATE-----Generated at Fri Dec 19 01:56:49 2025 by rpki-client