This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft File: kpM-ATZE25ye6bkd9y4TONuOIJc.mft (raw, json) Hash identifier: bgPfREbLG049O03j/bENYzTGe7xfDdyyllSK2dwhPrs= Subject key identifier: 79:0A:AC:38:2F:73:0A:8B:0F:9A:DC:17:F1:C0:EC:B7:21:10:0F:A4 Authority key identifier: 92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97 Certificate issuer: /CN=92933e013644db9c9ee9b91df72e1338db8e2097 Certificate serial: 019B26648E92BAF7ABDAD1BAAB47AF7C9064 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft Manifest number: 0FCD Signing time: Tue 16 Dec 2025 09:01:22 +0000 Manifest this update: Tue 16 Dec 2025 09:01:22 +0000 Manifest next update: Wed 17 Dec 2025 09:01:22 +0000 Files and hashes: 1: 6lxIW7DOsuapgRe4TkqSuAXjoOs.roa (hash: AJ9PIBCPlG0gbaqeqnRofWtKoSg8Ai8VYC5DZAVADvU=) 2: V7lXlsc_KCrBF5PGRWvxEoDs1jE.roa (hash: 3HSkq2ZQ4Tv+kukR6Ld2lDKWo32adQgvx+S4uGpggoY=) 3: kpM-ATZE25ye6bkd9y4TONuOIJc.crl (hash: eCn0VWzf56iV5v0sOrqvtX5BzYe1U0fShDv1r3xSrmU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:64:8e:92:ba:f7:ab:da:d1:ba:ab:47:af:7c:90:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92933e013644db9c9ee9b91df72e1338db8e2097 Validity Not Before: Dec 16 09:01:22 2025 GMT Not After : Dec 17 09:01:22 2025 GMT Subject: CN=790aac382f730a8b0f9adc17f1c0ecb721100fa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6b:fa:b8:48:f2:65:65:8b:fb:6f:2d:11:ed: 13:9c:74:29:21:e1:af:c6:8e:94:d2:a0:ef:68:64: 3f:b6:74:af:4f:78:37:09:5d:a5:cb:53:b4:6e:60: a9:31:b5:70:16:ac:cd:a8:3e:1e:3e:19:b0:49:8f: 95:d3:70:ef:f2:bf:c3:da:3f:dc:9e:98:5c:8a:f8: 5f:c0:c6:e0:63:21:7b:09:fb:aa:1e:cb:12:0f:5f: c5:d9:47:30:3a:88:82:75:d4:89:8d:5d:da:a8:0b: 6d:90:d6:a9:93:60:2d:15:8c:bb:a4:1b:13:fe:35: 47:e4:a1:34:c9:6b:82:cb:15:a3:cb:d8:1f:12:d1: c7:2e:9b:26:38:d8:77:95:a0:1b:0f:83:a9:b1:f5: 1d:1c:7c:a4:a1:06:75:5e:59:26:5c:c4:be:32:1b: a4:5d:af:f4:9e:31:5c:c0:f1:b5:5e:27:7b:96:28: 18:99:b8:d9:5a:1b:4a:5e:bf:a1:01:4b:52:dc:b3: 14:33:78:45:62:fa:65:60:d0:a5:39:e9:f4:c7:b3: 15:be:7c:d7:13:b1:ec:82:78:1a:cf:ac:e8:8b:9a: 24:57:bd:eb:f3:29:c2:f5:94:8b:43:46:63:3b:b4: 55:20:dc:d0:84:7d:ea:27:99:bb:94:d2:04:d1:e9: 41:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:0A:AC:38:2F:73:0A:8B:0F:9A:DC:17:F1:C0:EC:B7:21:10:0F:A4 X509v3 Authority Key Identifier: keyid:92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:08:67:ff:cc:29:f8:b6:6b:81:9e:0b:b0:fd:e4:06:09:66: 87:8e:8e:0a:bd:76:56:2c:a8:38:c4:f2:14:a0:33:d7:30:67: b5:b6:3b:c2:cb:b6:46:e6:ac:75:5e:e4:23:15:88:6d:2a:4d: 34:f9:78:e8:52:a3:bd:66:2f:ea:aa:a6:5a:da:95:36:79:d7: a8:c2:96:9b:2a:49:c0:21:bc:4b:07:33:4e:29:fc:bc:9d:60: d7:33:7e:d2:ef:a0:c5:f3:43:41:7f:4f:85:6a:be:a0:b0:bf: 24:ed:8e:11:69:bd:56:6d:47:53:49:b6:06:1d:24:30:f5:3d: 16:4f:3c:3c:92:e4:a5:a4:83:51:13:40:2b:5d:b3:a0:3f:c4: d1:8a:5b:96:d9:5d:a4:98:98:43:80:bd:59:41:b6:29:25:dd: 19:b2:20:7b:5a:37:a5:bb:11:02:32:36:ad:3b:9b:35:cd:7c: b6:fe:98:38:72:00:c3:d9:e9:45:ac:c4:9a:eb:16:14:78:eb: 16:ff:fd:97:2a:44:ae:61:84:61:14:a4:58:39:13:c1:54:c1: b8:97:c5:b5:8d:9e:b8:a7:8f:0a:da:d2:0b:b7:91:75:79:62: 40:2c:53:0b:fc:25:fd:12:a5:fd:5c:99:d6:7d:20:8f:49:c3: 19:16:fb:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmZI6Suver2tG6q0evfJBkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyOTMzZTAxMzY0NGRiOWM5ZWU5YjkxZGY3MmUxMzM4ZGI4 ZTIwOTcwHhcNMjUxMjE2MDkwMTIyWhcNMjUxMjE3MDkwMTIyWjAzMTEwLwYDVQQD Eyg3OTBhYWMzODJmNzMwYThiMGY5YWRjMTdmMWMwZWNiNzIxMTAwZmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Wv6uEjyZWWL+28tEe0TnHQpIeGv xo6U0qDvaGQ/tnSvT3g3CV2ly1O0bmCpMbVwFqzNqD4ePhmwSY+V03Dv8r/D2j/c nphcivhfwMbgYyF7CfuqHssSD1/F2UcwOoiCddSJjV3aqAttkNapk2AtFYy7pBsT /jVH5KE0yWuCyxWjy9gfEtHHLpsmONh3laAbD4OpsfUdHHykoQZ1XlkmXMS+Mhuk Xa/0njFcwPG1Xid7ligYmbjZWhtKXr+hAUtS3LMUM3hFYvplYNClOen0x7MVvnzX E7Hsgngaz6zoi5okV73r8ynC9ZSLQ0ZjO7RVINzQhH3qJ5m7lNIE0elBOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHkKrDgvcwqLD5rcF/HA7LchEA+kMB8GA1UdIwQY MBaAFJKTPgE2RNucnum5HfcuEzjbjiCXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3BNLUFUWkUyNXllNmJrZDl5NFRPTnVPSUpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy82YmVmMjItZjM0NS00NjAzLWExZTkt NWNjMmVmMDk5YWVlLzEva3BNLUFUWkUyNXllNmJrZDl5NFRPTnVPSUpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy82YmVmMjItZjM0NS00NjAzLWExZTktNWNjMmVmMDk5YWVl LzEva3BNLUFUWkUyNXllNmJrZDl5NFRPTnVPSUpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUQhn/8wp +LZrgZ4LsP3kBglmh46OCr12ViyoOMTyFKAz1zBntbY7wsu2RuasdV7kIxWIbSpN NPl46FKjvWYv6qqmWtqVNnnXqMKWmypJwCG8SwczTin8vJ1g1zN+0u+gxfNDQX9P hWq+oLC/JO2OEWm9Vm1HU0m2Bh0kMPU9Fk88PJLkpaSDURNAK12zoD/E0Ypbltld pJiYQ4C9WUG2KSXdGbIge1o3pbsRAjI2rTubNc18tv6YOHIAw9npRazEmusWFHjr Fv/9lypErmGEYRSkWDkTwVTBuJfFtY2euKePCtrSC7eRdXliQCxTC/wl/RKl/VyZ 1n0gj0nDGRb7Uw== -----END CERTIFICATE-----Generated at Tue Dec 16 12:25:40 2025 by rpki-client