This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.mft File: kmCoxmq9tuUGgQBwBtV_fR_pyi4.mft (raw, json) Hash identifier: 5EXkLZp8Cp6PHEoeAM/quvAkiTvyzU11WmCRUWCo7S4= Subject key identifier: BD:A2:04:83:D5:81:F4:3E:A2:03:C6:64:08:D6:5F:35:78:2E:3C:E3 Authority key identifier: 92:60:A8:C6:6A:BD:B6:E5:06:81:00:70:06:D5:7F:7D:1F:E9:CA:2E Certificate issuer: /CN=9260a8c66abdb6e50681007006d57f7d1fe9ca2e Certificate serial: 019B0E25DDB6C1300CFFE5F51B2B828221A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmCoxmq9tuUGgQBwBtV_fR_pyi4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.mft Manifest number: 0CF3 Signing time: Thu 11 Dec 2025 16:02:01 +0000 Manifest this update: Thu 11 Dec 2025 16:02:01 +0000 Manifest next update: Fri 12 Dec 2025 16:02:01 +0000 Files and hashes: 1: LZy1osNQUhfVUq7phinZnPKl6sg.roa (hash: reyk0Zvn/J6AzXb7QQ8ewqifkrvY/15JT8YFCCBaMEM=) 2: kmCoxmq9tuUGgQBwBtV_fR_pyi4.crl (hash: ZJSmqHDrcjYE3kuBCpvqZA2X32NbW2Gmc0s1/mtVXww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.crl rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.mft rsync://rpki.ripe.net/repository/DEFAULT/kmCoxmq9tuUGgQBwBtV_fR_pyi4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 16:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:dd:b6:c1:30:0c:ff:e5:f5:1b:2b:82:82:21:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9260a8c66abdb6e50681007006d57f7d1fe9ca2e Validity Not Before: Dec 11 16:02:01 2025 GMT Not After : Dec 12 16:02:01 2025 GMT Subject: CN=bda20483d581f43ea203c66408d65f35782e3ce3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a5:3a:ba:32:47:1c:83:a5:ac:4b:60:f8:5f: 8c:06:f9:de:ab:66:1b:a6:1a:3b:0b:1f:2d:cb:f0: 7e:71:b6:65:da:36:3c:72:3f:cc:76:4a:3e:9a:69: ec:7b:ca:cc:00:f6:8b:8e:d2:74:b3:97:f8:8e:54: cb:ac:8d:60:ac:2b:91:02:b6:15:8d:15:a0:2e:54: ee:0e:c4:ac:bf:69:32:7c:8a:9e:82:2d:91:63:67: e6:2d:6c:2d:43:81:b3:ca:1c:d1:fc:d1:24:6e:9f: 2e:d0:d0:a4:51:74:fd:2c:a4:55:ff:bc:4c:bd:d8: 96:0d:d6:58:3a:4b:5e:15:11:db:34:59:eb:e7:5e: 9c:64:2a:f3:7a:0a:49:ce:52:09:d9:10:84:fd:ca: c0:ae:97:21:37:73:57:ed:5a:4e:1f:3c:5b:d6:94: 61:10:0b:49:34:3a:a3:b9:b8:d4:5a:61:a6:e3:a3: 4a:a6:58:03:f8:49:c5:29:65:cb:1e:28:a8:08:d2: 2b:75:3d:1b:92:55:d4:dc:f0:5d:2f:fb:b3:25:f1: 4a:91:19:4e:63:a0:b3:99:61:ea:2e:77:f7:1c:88: b9:ed:93:3d:ae:15:e1:f7:06:07:cd:ba:0e:61:6b: 3f:66:31:ef:6e:f1:7b:e5:ff:75:30:87:21:e3:4f: a4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A2:04:83:D5:81:F4:3E:A2:03:C6:64:08:D6:5F:35:78:2E:3C:E3 X509v3 Authority Key Identifier: keyid:92:60:A8:C6:6A:BD:B6:E5:06:81:00:70:06:D5:7F:7D:1F:E9:CA:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmCoxmq9tuUGgQBwBtV_fR_pyi4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:94:dd:ea:cd:11:fa:7f:ce:2c:f3:e2:01:94:c0:db:27:79: c9:ea:9f:e7:5a:5c:f7:a5:e0:e3:81:09:86:1b:a2:94:e5:e4: f3:c0:6f:6a:f2:e7:e7:01:8a:c9:34:81:e2:9f:77:31:7d:b0: 63:77:23:5b:93:ad:7e:57:81:1c:ed:72:4e:fc:f9:d7:35:b8: af:74:52:de:83:b0:da:6c:5e:9b:12:5b:a2:d6:31:36:85:b7: 24:ad:c4:7b:7a:62:09:44:07:73:26:5e:e2:93:8f:dc:ac:45: 60:37:63:5f:99:e0:0f:fb:68:0f:68:a9:f7:01:ba:ed:5f:e7: f8:8e:e1:1e:e9:e3:60:58:55:eb:b9:08:0e:6d:71:04:0f:d3: 6b:77:01:f7:6b:fc:19:85:56:c2:ca:d1:70:7c:00:67:42:7e: 43:36:50:16:3e:0f:91:de:75:5d:a0:95:85:50:ff:fa:69:da: 4d:d9:58:be:10:aa:f6:6d:88:96:56:4a:c5:3c:b8:7f:6e:d4: 82:56:cc:a5:e5:9f:e4:e0:f3:c6:9d:4d:9f:5a:cd:97:17:ec: 5b:1a:bd:ab:5a:6e:c7:04:e6:18:b2:9c:0d:03:cb:52:41:84: ce:0d:23:64:73:08:c3:eb:7e:e8:99:d0:03:02:8c:28:a1:59: 97:88:df:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJd22wTAM/+X1GyuCgiGnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNjBhOGM2NmFiZGI2ZTUwNjgxMDA3MDA2ZDU3ZjdkMWZl OWNhMmUwHhcNMjUxMjExMTYwMjAxWhcNMjUxMjEyMTYwMjAxWjAzMTEwLwYDVQQD EyhiZGEyMDQ4M2Q1ODFmNDNlYTIwM2M2NjQwOGQ2NWYzNTc4MmUzY2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKU6ujJHHIOlrEtg+F+MBvneq2Yb pho7Cx8ty/B+cbZl2jY8cj/Mdko+mmnse8rMAPaLjtJ0s5f4jlTLrI1grCuRArYV jRWgLlTuDsSsv2kyfIqegi2RY2fmLWwtQ4GzyhzR/NEkbp8u0NCkUXT9LKRV/7xM vdiWDdZYOkteFRHbNFnr516cZCrzegpJzlIJ2RCE/crArpchN3NX7VpOHzxb1pRh EAtJNDqjubjUWmGm46NKplgD+EnFKWXLHiioCNIrdT0bklXU3PBdL/uzJfFKkRlO Y6CzmWHqLnf3HIi57ZM9rhXh9wYHzboOYWs/ZjHvbvF75f91MIch40+kFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2iBIPVgfQ+ogPGZAjWXzV4LjzjMB8GA1UdIwQY MBaAFJJgqMZqvbblBoEAcAbVf30f6couMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva21Db3htcTl0dVVHZ1FCd0J0Vl9mUl9weWk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS80NDRjY2MtMmI1Ni00YTVmLTlhM2Et ZGQ0YjUxNGZjZDA4LzEva21Db3htcTl0dVVHZ1FCd0J0Vl9mUl9weWk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS80NDRjY2MtMmI1Ni00YTVmLTlhM2EtZGQ0YjUxNGZjZDA4 LzEva21Db3htcTl0dVVHZ1FCd0J0Vl9mUl9weWk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvJTd6s0R +n/OLPPiAZTA2yd5yeqf51pc96Xg44EJhhuilOXk88BvavLn5wGKyTSB4p93MX2w Y3cjW5OtfleBHO1yTvz51zW4r3RS3oOw2mxemxJbotYxNoW3JK3Ee3piCUQHcyZe 4pOP3KxFYDdjX5ngD/toD2ip9wG67V/n+I7hHunjYFhV67kIDm1xBA/Ta3cB92v8 GYVWwsrRcHwAZ0J+QzZQFj4Pkd51XaCVhVD/+mnaTdlYvhCq9m2IllZKxTy4f27U glbMpeWf5ODzxp1Nn1rNlxfsWxq9q1puxwTmGLKcDQPLUkGEzg0jZHMIw+t+6JnQ AwKMKKFZl4jfgw== -----END CERTIFICATE-----Generated at Fri Dec 12 00:17:22 2025 by rpki-client