This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft File: kTxeovTqvz88Qt88Mx6cuhDJOgk.mft (raw, json) Hash identifier: lN4E2/eGllFLyQ3Dt/axxbDNCjJac1OSwRZsjSSbBnY= Subject key identifier: 33:75:5C:8F:28:50:BD:27:E4:F3:18:FD:B6:D4:D2:17:04:AA:5D:54 Authority key identifier: 91:3C:5E:A2:F4:EA:BF:3F:3C:42:DF:3C:33:1E:9C:BA:10:C9:3A:09 Certificate issuer: /CN=913c5ea2f4eabf3f3c42df3c331e9cba10c93a09 Certificate serial: 019B300BD5F7013DE847E5797A5B9C95043A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTxeovTqvz88Qt88Mx6cuhDJOgk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 06:00:40 +0000 Manifest this update: Thu 18 Dec 2025 06:00:40 +0000 Manifest next update: Fri 19 Dec 2025 06:00:40 +0000 Files and hashes: 1: kTxeovTqvz88Qt88Mx6cuhDJOgk.crl (hash: K73GBmc7j1JC9ejvH83I1YgYWhoqGfWPcjcG8opkR00=) 2: y0VMz-pFHy2RJvHhIyZB92njV7Y.roa (hash: uVs/qgL9urgJyfwUIJcBcgFvjGj1s6IUF07oWo8sQcg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft rsync://rpki.ripe.net/repository/DEFAULT/kTxeovTqvz88Qt88Mx6cuhDJOgk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:0b:d5:f7:01:3d:e8:47:e5:79:7a:5b:9c:95:04:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=913c5ea2f4eabf3f3c42df3c331e9cba10c93a09 Validity Not Before: Dec 18 06:00:40 2025 GMT Not After : Dec 19 06:00:40 2025 GMT Subject: CN=33755c8f2850bd27e4f318fdb6d4d21704aa5d54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a6:d7:24:c6:40:3b:f8:d2:0d:66:54:c9:7d: 0c:c1:bf:1e:fb:2b:e0:45:05:31:95:66:2e:fd:85: bc:f9:55:94:85:13:17:62:90:97:7b:9b:34:ac:78: cd:7f:2a:27:c9:7f:83:ad:74:ca:cc:4e:f2:bc:e7: 32:c1:46:db:7c:12:ea:58:bf:c6:06:f5:bd:bc:4b: 46:4e:2c:01:4e:e1:02:88:4e:77:b6:80:d3:2f:37: a0:2c:e7:77:d1:ed:ca:f9:44:be:ec:d5:c5:a6:0c: 95:d4:7d:9b:b6:fb:09:0c:1a:11:3b:92:53:86:f8: cc:cc:76:2a:ea:c6:19:d3:33:22:2f:96:6a:7b:2f: 38:64:c0:1b:3b:ca:87:a7:b5:9d:e3:17:8e:69:e5: f3:16:72:73:8e:80:93:1e:77:d1:0c:4e:38:e4:34: 3b:5e:da:03:4f:84:4c:35:a3:84:6c:52:70:2f:e5: f5:a3:1f:b5:41:8b:50:db:86:03:d5:3b:f0:9f:07: 08:bc:b4:e3:cd:84:82:37:84:7b:d7:7e:76:a5:73: 10:65:c5:9a:71:bc:89:d2:a3:b8:1c:e7:26:af:31: 1f:5d:db:46:82:1a:2d:54:68:9b:bf:09:fd:f3:19: ad:f8:40:86:65:74:00:6a:54:19:22:7c:76:12:a0: 45:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:75:5C:8F:28:50:BD:27:E4:F3:18:FD:B6:D4:D2:17:04:AA:5D:54 X509v3 Authority Key Identifier: keyid:91:3C:5E:A2:F4:EA:BF:3F:3C:42:DF:3C:33:1E:9C:BA:10:C9:3A:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTxeovTqvz88Qt88Mx6cuhDJOgk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:fe:db:9b:88:c6:54:26:fc:87:9d:b0:06:55:32:c5:6d:63: 8d:3d:af:f5:88:68:3f:9d:f4:58:f4:c6:60:c5:30:85:4e:73: ee:b7:35:ca:3b:92:f9:bf:77:b2:b0:a2:ff:8d:4e:86:85:08: 5e:4a:3f:2a:02:86:ef:4f:b2:14:e1:6b:35:6b:a0:37:de:c3: 4c:ef:ee:16:b4:3f:dd:f5:d6:52:dc:29:a9:e6:db:31:36:30: d5:27:f5:9d:b4:52:b2:00:d3:bf:e6:1e:74:81:e7:55:40:68: 5b:38:31:19:b6:ab:50:0c:52:12:fa:23:51:41:0a:2f:b0:f7: 55:cd:e0:e6:36:c2:7f:f8:e0:be:d2:2e:87:02:04:56:0a:7a: 54:9a:3d:1b:aa:fa:9b:7f:8e:6e:43:92:33:6d:0f:d2:82:0a: f5:87:b3:9d:91:63:4e:e4:f2:0a:c6:a9:0c:b5:3a:c9:07:ed: 55:47:e4:2d:41:27:ee:6f:45:6f:69:c2:01:1b:85:17:67:b1: 59:4d:92:d9:37:eb:e6:e8:a2:84:40:ab:49:31:57:18:2d:b3: b8:14:04:f2:64:c1:5c:3c:14:64:14:c0:de:49:95:66:d1:3c: 84:74:65:63:4f:76:bf:08:3b:18:cf:bf:d4:6d:3e:82:47:6d: db:95:ef:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswC9X3AT3oR+V5eluclQQ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxM2M1ZWEyZjRlYWJmM2YzYzQyZGYzYzMzMWU5Y2JhMTBj OTNhMDkwHhcNMjUxMjE4MDYwMDQwWhcNMjUxMjE5MDYwMDQwWjAzMTEwLwYDVQQD EygzMzc1NWM4ZjI4NTBiZDI3ZTRmMzE4ZmRiNmQ0ZDIxNzA0YWE1ZDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6bXJMZAO/jSDWZUyX0Mwb8e+yvg RQUxlWYu/YW8+VWUhRMXYpCXe5s0rHjNfyonyX+DrXTKzE7yvOcywUbbfBLqWL/G BvW9vEtGTiwBTuECiE53toDTLzegLOd30e3K+US+7NXFpgyV1H2btvsJDBoRO5JT hvjMzHYq6sYZ0zMiL5Zqey84ZMAbO8qHp7Wd4xeOaeXzFnJzjoCTHnfRDE445DQ7 XtoDT4RMNaOEbFJwL+X1ox+1QYtQ24YD1TvwnwcIvLTjzYSCN4R71352pXMQZcWa cbyJ0qO4HOcmrzEfXdtGghotVGibvwn98xmt+ECGZXQAalQZInx2EqBFZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDN1XI8oUL0n5PMY/bbU0hcEql1UMB8GA1UdIwQY MBaAFJE8XqL06r8/PELfPDMenLoQyToJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1R4ZW92VHF2ejg4UXQ4OE14NmN1aERKT2drLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy80YjQwZDktOTc4ZS00MmEzLTgzMWUt YjEwOGFkOWUyMmM4LzEva1R4ZW92VHF2ejg4UXQ4OE14NmN1aERKT2drLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy80YjQwZDktOTc4ZS00MmEzLTgzMWUtYjEwOGFkOWUyMmM4 LzEva1R4ZW92VHF2ejg4UXQ4OE14NmN1aERKT2drLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlf7bm4jG VCb8h52wBlUyxW1jjT2v9YhoP530WPTGYMUwhU5z7rc1yjuS+b93srCi/41OhoUI Xko/KgKG70+yFOFrNWugN97DTO/uFrQ/3fXWUtwpqebbMTYw1Sf1nbRSsgDTv+Ye dIHnVUBoWzgxGbarUAxSEvojUUEKL7D3Vc3g5jbCf/jgvtIuhwIEVgp6VJo9G6r6 m3+ObkOSM20P0oIK9YeznZFjTuTyCsapDLU6yQftVUfkLUEn7m9Fb2nCARuFF2ex WU2S2Tfr5uiihECrSTFXGC2zuBQE8mTBXDwUZBTA3kmVZtE8hHRlY092vwg7GM+/ 1G0+gkdt25XvgA== -----END CERTIFICATE-----Generated at Thu Dec 18 07:59:01 2025 by rpki-client