This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft File: kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft (raw, json) Hash identifier: wmuBDz7eQixlOOqHeL5slU4XT/4ow0RhhYL9OcUngD4= Subject key identifier: AA:C4:02:BF:D7:C8:2E:80:E3:2F:53:84:D6:6E:88:77:EC:2E:3F:4E Authority key identifier: 90:87:83:3E:02:5B:23:20:F9:05:3A:10:3B:A6:1D:E5:2E:AB:2A:FB Certificate issuer: /CN=9087833e025b2320f9053a103ba61de52eab2afb Certificate serial: 019B59E37E1A07E98A90F916CCCA882C2BC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIeDPgJbIyD5BToQO6Yd5S6rKvs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft Manifest number: 0742 Signing time: Fri 26 Dec 2025 09:00:39 +0000 Manifest this update: Fri 26 Dec 2025 09:00:39 +0000 Manifest next update: Sat 27 Dec 2025 09:00:39 +0000 Files and hashes: 1: Sl6Vo_wPwtgiIFIYMqrbSQblXKc.roa (hash: l8tp4Qke8V/squeIomyLOU/9sV5KVMqfblcX8Rj/Ujc=) 2: kIeDPgJbIyD5BToQO6Yd5S6rKvs.crl (hash: cOZws3dppznaP45jvtcDXuIqzQY0rrX2aVRv4FeTSrw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.crl rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft rsync://rpki.ripe.net/repository/DEFAULT/kIeDPgJbIyD5BToQO6Yd5S6rKvs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:7e:1a:07:e9:8a:90:f9:16:cc:ca:88:2c:2b:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9087833e025b2320f9053a103ba61de52eab2afb Validity Not Before: Dec 26 09:00:39 2025 GMT Not After : Dec 27 09:00:39 2025 GMT Subject: CN=aac402bfd7c82e80e32f5384d66e8877ec2e3f4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:41:e8:96:d2:d4:dc:e8:2c:4b:80:70:5d:63: ca:b7:4c:52:fe:76:0d:a6:5b:8f:d8:22:32:fb:41: 89:c5:2d:dd:5c:ab:f8:d1:38:dc:48:15:a8:c2:cd: 7b:44:58:8e:14:15:d7:27:2e:a6:f3:2e:7c:95:3a: 99:6d:40:db:7c:a8:8b:b5:c8:fe:3c:b1:60:1e:15: 25:d5:12:80:d0:db:2d:7c:c4:4c:a1:3d:f3:12:b1: 5c:e5:f1:95:46:78:48:2f:60:1b:3b:9e:dd:47:67: a1:94:40:15:11:4a:05:85:b9:e4:91:08:8d:6c:c3: b8:b9:3d:03:53:a0:9f:d2:87:4b:e9:f2:d8:3c:16: b0:f0:91:18:91:d1:f0:1d:09:24:5c:36:c3:7b:dc: c7:7d:2b:95:df:d2:7d:37:94:b2:31:c5:5f:62:58: 55:6b:4f:04:c4:8c:03:6c:3e:c8:f0:a0:c2:e4:c0: 22:9d:1b:53:39:26:e2:4f:84:62:8d:38:f3:4c:71: 46:ae:04:d1:42:25:6d:20:3c:49:c8:95:dd:ee:58: 56:71:f3:cd:74:a7:ad:7d:e2:32:ab:ec:2d:24:b6: a3:71:e5:a6:5f:f9:00:15:fa:11:73:56:d7:cc:14: af:48:8c:b4:56:5e:c1:62:46:de:b0:02:c2:5e:05: bf:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:C4:02:BF:D7:C8:2E:80:E3:2F:53:84:D6:6E:88:77:EC:2E:3F:4E X509v3 Authority Key Identifier: keyid:90:87:83:3E:02:5B:23:20:F9:05:3A:10:3B:A6:1D:E5:2E:AB:2A:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIeDPgJbIyD5BToQO6Yd5S6rKvs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:bc:7c:46:56:8b:6b:21:86:f0:ac:0e:bf:0e:2d:28:20:0c: 8b:0d:46:4e:3e:cd:8a:79:8b:92:70:b2:67:6b:93:16:ac:88: 48:47:87:e7:08:31:9e:28:ae:f7:f5:01:a6:4b:a6:3b:bd:d5: b2:f3:9d:48:96:07:3c:cb:46:25:b5:ef:a1:34:bb:e0:26:83: 46:92:04:2a:e3:a6:5a:33:28:fe:6f:74:46:fd:ba:12:92:90: cf:63:5a:a7:29:3e:cd:09:7f:d5:dd:e0:ad:ba:57:c8:ce:ee: b5:b9:2b:28:05:1e:ae:76:38:0a:4f:0a:e1:1a:62:9a:d2:87: 41:48:c8:22:6e:d6:2f:80:64:c6:dc:0e:58:15:cf:a7:75:29: df:04:af:e7:ec:7b:93:28:66:81:44:a3:b4:dd:91:0c:5f:64: 2f:56:c7:7c:28:78:40:cc:0e:06:17:63:bf:f8:d0:50:ff:d5: 4e:d1:5c:5b:c4:99:3a:80:61:87:12:e7:c2:94:7b:69:5b:f2: 39:94:54:c8:2c:83:28:e9:96:96:b4:84:59:81:35:7b:f5:57: 76:cc:2d:5d:58:8b:5e:bc:69:a2:3f:90:30:59:41:32:4a:08: 57:e7:11:7f:78:b0:6f:d5:a6:b7:c3:9b:97:8e:1f:d5:68:b2: a9:56:ba:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ434aB+mKkPkWzMqILCvEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwODc4MzNlMDI1YjIzMjBmOTA1M2ExMDNiYTYxZGU1MmVh YjJhZmIwHhcNMjUxMjI2MDkwMDM5WhcNMjUxMjI3MDkwMDM5WjAzMTEwLwYDVQQD EyhhYWM0MDJiZmQ3YzgyZTgwZTMyZjUzODRkNjZlODg3N2VjMmUzZjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEHoltLU3OgsS4BwXWPKt0xS/nYN pluP2CIy+0GJxS3dXKv40TjcSBWows17RFiOFBXXJy6m8y58lTqZbUDbfKiLtcj+ PLFgHhUl1RKA0NstfMRMoT3zErFc5fGVRnhIL2AbO57dR2ehlEAVEUoFhbnkkQiN bMO4uT0DU6Cf0odL6fLYPBaw8JEYkdHwHQkkXDbDe9zHfSuV39J9N5SyMcVfYlhV a08ExIwDbD7I8KDC5MAinRtTOSbiT4RijTjzTHFGrgTRQiVtIDxJyJXd7lhWcfPN dKetfeIyq+wtJLajceWmX/kAFfoRc1bXzBSvSIy0Vl7BYkbesALCXgW/DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKrEAr/XyC6A4y9ThNZuiHfsLj9OMB8GA1UdIwQY MBaAFJCHgz4CWyMg+QU6EDumHeUuqyr7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0llRFBnSmJJeUQ1QlRvUU82WWQ1UzZyS3ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8zNzAxZjctMjBlZi00OTY2LWEyY2Qt MTE5ZGNkMmVhOWRiLzEva0llRFBnSmJJeUQ1QlRvUU82WWQ1UzZyS3ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS8zNzAxZjctMjBlZi00OTY2LWEyY2QtMTE5ZGNkMmVhOWRi LzEva0llRFBnSmJJeUQ1QlRvUU82WWQ1UzZyS3ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiLx8RlaL ayGG8KwOvw4tKCAMiw1GTj7NinmLknCyZ2uTFqyISEeH5wgxniiu9/UBpkumO73V svOdSJYHPMtGJbXvoTS74CaDRpIEKuOmWjMo/m90Rv26EpKQz2Napyk+zQl/1d3g rbpXyM7utbkrKAUernY4Ck8K4RpimtKHQUjIIm7WL4BkxtwOWBXPp3Up3wSv5+x7 kyhmgUSjtN2RDF9kL1bHfCh4QMwOBhdjv/jQUP/VTtFcW8SZOoBhhxLnwpR7aVvy OZRUyCyDKOmWlrSEWYE1e/VXdswtXViLXrxpoj+QMFlBMkoIV+cRf3iwb9Wmt8Ob l44f1WiyqVa6Kg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:05:54 2025 by rpki-client