This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft File: kar8rbbFKYTjVYnrd1jwUKrO_HY.mft (raw, json) Hash identifier: XSZPjOwS571qouc9zKJvubKcLa49Qj64MuPU2FSAQ5M= Subject key identifier: 1A:73:CD:EA:F0:CC:12:DD:3F:FA:06:62:B5:33:A0:E6:CD:48:44:4B Authority key identifier: 91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76 Certificate issuer: /CN=91aafcadb6c52984e35589eb7758f050aacefc76 Certificate serial: 019B37FC45B91C4923E5AAB023DB1F5CE1FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft Manifest number: 1158 Signing time: Fri 19 Dec 2025 19:00:38 +0000 Manifest this update: Fri 19 Dec 2025 19:00:38 +0000 Manifest next update: Sat 20 Dec 2025 19:00:38 +0000 Files and hashes: 1: ar4zlJn9OPy16Cl_Gn2AS2uvlko.roa (hash: +l3AN0BiMMVqv2unGjaA9MppHF4gtQZMzWGcIs2HcCA=) 2: kar8rbbFKYTjVYnrd1jwUKrO_HY.crl (hash: B8+lW9QfSthpZf+v0H2chBTUYCe7WG8F/yQ0cIssuDA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:45:b9:1c:49:23:e5:aa:b0:23:db:1f:5c:e1:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91aafcadb6c52984e35589eb7758f050aacefc76 Validity Not Before: Dec 19 19:00:38 2025 GMT Not After : Dec 20 19:00:38 2025 GMT Subject: CN=1a73cdeaf0cc12dd3ffa0662b533a0e6cd48444b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:31:61:4b:9e:9a:2a:82:07:cd:b8:a3:7e:98: 74:75:45:6c:db:87:e7:03:c6:f5:8b:34:54:f8:07: e5:28:fd:20:8e:67:b9:79:95:44:b3:39:d4:67:e4: c2:d7:9a:4d:0c:9f:37:c4:29:88:4a:fe:6d:d2:90: f0:37:0c:48:c1:51:63:b5:47:3d:66:5d:9b:0a:6a: f0:58:fc:d0:ef:41:f6:0d:f2:f9:ac:e8:2b:f7:8e: 9f:f1:e2:1c:3a:75:a3:c1:c9:e7:94:3f:48:30:73: 2c:8b:80:d6:6e:47:d5:ee:b2:f8:ad:0e:30:2d:2d: 3b:b6:80:7f:13:a6:0c:79:90:e4:d1:37:4d:82:3e: e6:e4:f9:c6:23:8a:a3:72:46:cc:de:39:70:f2:2f: ad:4d:81:47:03:44:92:1e:b4:81:3b:35:86:68:40: 2f:b1:48:8d:47:7a:35:85:fb:b9:34:8a:2e:c8:fe: 03:78:fe:42:2d:a8:b0:42:04:b6:18:16:c3:ae:c6: f9:af:3b:b6:0a:b5:7a:cc:75:43:e5:79:f8:dc:02: 84:ac:91:af:59:ba:ba:85:4d:32:95:76:e1:06:77: 45:49:62:af:e4:e9:18:74:0d:97:f3:f4:f5:14:49: 10:6d:a4:03:d6:1f:72:d9:25:ee:87:09:b4:a4:c1: 7e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:73:CD:EA:F0:CC:12:DD:3F:FA:06:62:B5:33:A0:E6:CD:48:44:4B X509v3 Authority Key Identifier: keyid:91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:72:0f:54:92:e0:a3:93:40:20:71:c0:44:64:40:a2:e1:fc: 12:1e:c9:ef:30:d8:8d:f1:bf:10:61:d9:be:6b:a2:d9:c0:7a: 31:2f:db:23:2c:6d:1d:d6:68:bc:c0:3c:6c:62:be:ac:01:d4: ee:50:20:89:c6:99:e4:45:f6:3e:3d:0a:ac:31:b8:d7:54:15: ae:7a:88:c7:2e:0a:09:08:b8:53:6b:22:bf:5c:07:a8:55:7d: d0:76:d8:bd:30:f5:78:ce:af:84:5d:3d:f7:c6:3e:8a:5a:bb: 8e:29:75:4e:fd:48:34:71:84:fc:c5:8f:fd:88:ff:ae:ca:e3: 2a:94:e9:c4:5d:e8:69:f9:cd:d4:e7:16:73:39:31:ac:6b:21: b4:aa:cf:e0:fb:f5:de:bb:f1:16:23:d4:70:fb:98:82:cd:d3: 72:19:98:92:48:66:34:70:a0:5f:63:fa:f1:5c:74:4b:ea:6a: b7:ae:cf:7c:b4:c6:20:5d:72:7f:13:c2:ab:30:f9:29:c4:8a: fd:c5:a5:22:ce:5a:68:33:61:2b:8e:af:fc:e4:65:e6:ba:28: 61:88:97:dd:67:10:1a:ab:49:8a:07:de:77:48:b8:93:17:ec: 70:32:98:c3:ce:d2:72:42:b0:8d:5f:d6:dd:5e:b3:c9:7d:10: a5:ac:88:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/EW5HEkj5aqwI9sfXOH7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxYWFmY2FkYjZjNTI5ODRlMzU1ODllYjc3NThmMDUwYWFj ZWZjNzYwHhcNMjUxMjE5MTkwMDM4WhcNMjUxMjIwMTkwMDM4WjAzMTEwLwYDVQQD EygxYTczY2RlYWYwY2MxMmRkM2ZmYTA2NjJiNTMzYTBlNmNkNDg0NDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDFhS56aKoIHzbijfph0dUVs24fn A8b1izRU+AflKP0gjme5eZVEsznUZ+TC15pNDJ83xCmISv5t0pDwNwxIwVFjtUc9 Zl2bCmrwWPzQ70H2DfL5rOgr946f8eIcOnWjwcnnlD9IMHMsi4DWbkfV7rL4rQ4w LS07toB/E6YMeZDk0TdNgj7m5PnGI4qjckbM3jlw8i+tTYFHA0SSHrSBOzWGaEAv sUiNR3o1hfu5NIouyP4DeP5CLaiwQgS2GBbDrsb5rzu2CrV6zHVD5Xn43AKErJGv Wbq6hU0ylXbhBndFSWKv5OkYdA2X8/T1FEkQbaQD1h9y2SXuhwm0pMF+RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBpzzerwzBLdP/oGYrUzoObNSERLMB8GA1UdIwQY MBaAFJGq/K22xSmE41WJ63dY8FCqzvx2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2FyOHJiYkZLWVRqVllucmQxandVS3JPX0hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9hMTJiMGEtZDQ4ZC00ZDNiLWJjNDct MDU1N2JkNzIxN2YxLzEva2FyOHJiYkZLWVRqVllucmQxandVS3JPX0hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9hMTJiMGEtZDQ4ZC00ZDNiLWJjNDctMDU1N2JkNzIxN2Yx LzEva2FyOHJiYkZLWVRqVllucmQxandVS3JPX0hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATnIPVJLg o5NAIHHARGRAouH8Eh7J7zDYjfG/EGHZvmui2cB6MS/bIyxtHdZovMA8bGK+rAHU 7lAgicaZ5EX2Pj0KrDG411QVrnqIxy4KCQi4U2siv1wHqFV90HbYvTD1eM6vhF09 98Y+ilq7jil1Tv1INHGE/MWP/Yj/rsrjKpTpxF3oafnN1OcWczkxrGshtKrP4Pv1 3rvxFiPUcPuYgs3TchmYkkhmNHCgX2P68Vx0S+pqt67PfLTGIF1yfxPCqzD5KcSK /cWlIs5aaDNhK46v/ORl5rooYYiX3WcQGqtJigfed0i4kxfscDKYw87SckKwjV/W 3V6zyX0QpayIEA== -----END CERTIFICATE-----Generated at Fri Dec 19 22:09:28 2025 by rpki-client