This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft File: kaBxUIM4JgVRpV8B_QcI_fXggoc.mft (raw, json) Hash identifier: rHj4pMeYjCxq6KHu+hyOR586iIgTswQNiNShGEgytOE= Subject key identifier: 40:86:04:8D:01:FA:F3:28:46:65:61:AD:BB:4E:FD:E2:28:2D:16:DD Authority key identifier: 91:A0:71:50:83:38:26:05:51:A5:5F:01:FD:07:08:FD:F5:E0:82:87 Certificate issuer: /CN=91a071508338260551a55f01fd0708fdf5e08287 Certificate serial: 019B4392D8F0FB91F14C962E00A37BD4DA28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 01:00:55 +0000 Manifest this update: Mon 22 Dec 2025 01:00:55 +0000 Manifest next update: Tue 23 Dec 2025 01:00:55 +0000 Files and hashes: 1: Cgt_gy7EMOYMV19k2tz2rtLd7TU.roa (hash: j2CPj0aVUdndtIwS2SsvRubF8DiJi7ArwXEuxy5F6uI=) 2: LtAL3K8AdfyisGKqq9Vjp_7EH0w.roa (hash: ExkUCXkAhlWeYSrTyMjTF0LGwM8Q8/UHTNY3ZJzGHYE=) 3: kaBxUIM4JgVRpV8B_QcI_fXggoc.crl (hash: I4mTx7QDz/CfoERaTXW4VA2OBAWOw8k0pNmqTyFy6L8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:92:d8:f0:fb:91:f1:4c:96:2e:00:a3:7b:d4:da:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91a071508338260551a55f01fd0708fdf5e08287 Validity Not Before: Dec 22 01:00:55 2025 GMT Not After : Dec 23 01:00:55 2025 GMT Subject: CN=4086048d01faf328466561adbb4efde2282d16dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d7:7c:26:7c:90:4d:a8:1a:b9:38:76:bb:d1: 81:6d:81:cb:a7:f4:c8:24:33:44:7e:9e:ad:02:10: 48:b6:b2:3a:6b:ef:3c:47:d9:19:b8:64:cd:11:cb: 98:dd:24:7d:bf:6f:49:72:d3:8a:c5:e0:26:82:5d: 94:e0:a2:3e:ec:64:c8:e9:a5:a8:92:47:73:ff:d5: e1:b6:89:83:ac:ac:57:e6:81:47:37:bc:4d:e9:60: c8:88:3a:12:44:e3:5d:94:20:56:86:34:55:60:2a: 93:ca:3e:ec:68:98:db:ca:62:44:fa:e3:7d:f0:f9: 7d:68:db:ce:97:bc:a1:dd:a7:b8:57:60:89:ac:82: b1:8e:fb:81:67:a4:a7:0f:6a:b7:16:a4:89:e7:60: 5e:06:a6:f0:92:4c:79:a4:02:08:d0:93:42:b8:d0: 81:bf:d3:2b:d9:a1:b7:98:bf:10:03:1e:ac:54:5a: 49:c8:73:6d:8d:48:c7:7e:9f:3c:9d:56:b3:6e:4a: f0:45:6a:f7:81:33:6f:71:54:a4:25:98:22:73:41: 41:33:9d:56:f4:81:55:bb:c0:ce:5d:c6:b5:86:e4: 9b:32:e2:8d:f6:94:ef:6d:2f:6e:63:b7:ee:09:87: 56:c6:c8:51:ec:eb:b4:0e:95:cb:6b:11:52:f7:60: ed:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:86:04:8D:01:FA:F3:28:46:65:61:AD:BB:4E:FD:E2:28:2D:16:DD X509v3 Authority Key Identifier: keyid:91:A0:71:50:83:38:26:05:51:A5:5F:01:FD:07:08:FD:F5:E0:82:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:86:4f:8e:c1:45:b5:ef:26:6d:6d:67:41:07:72:09:b4:f1: 39:e9:f6:91:9f:97:44:44:86:ce:03:15:e7:a9:77:ce:8e:83: 61:40:ca:7d:77:bb:4f:c1:e0:51:21:a2:ae:3b:12:2f:fc:42: 27:91:3b:b5:07:6c:4d:78:08:53:2f:f5:76:b9:8e:b2:72:ad: 39:72:9c:87:24:12:44:63:b0:37:f1:14:36:e6:84:a8:18:5e: 58:48:39:c7:a6:17:2e:48:c4:2b:29:7c:4a:dc:c1:93:53:41: d6:13:fa:4f:4b:aa:de:ee:00:11:17:69:cc:04:35:43:25:e7: da:2a:c7:db:be:d1:9b:4e:0b:a1:a4:69:46:6a:d5:f3:c6:52: cc:5d:1e:ef:a7:18:8f:dd:7c:c9:44:31:ae:65:87:fa:1a:65: fe:4e:ca:20:49:cf:3f:d0:50:c3:1f:12:0c:5c:2b:99:df:a8: 48:a6:18:ee:d9:ea:ca:11:61:01:89:5a:69:57:d2:97:fa:6a: 86:d5:d0:7f:f5:2c:d2:33:3d:de:75:4b:d5:2c:20:f6:bb:8b: b3:d5:87:5a:41:42:11:dc:d9:52:4b:c9:1b:85:ec:b6:93:38: c7:24:17:6f:92:75:e0:08:99:fb:77:f1:e9:73:b8:e7:a1:b9: a0:7c:18:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDktjw+5HxTJYuAKN71NooMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxYTA3MTUwODMzODI2MDU1MWE1NWYwMWZkMDcwOGZkZjVl MDgyODcwHhcNMjUxMjIyMDEwMDU1WhcNMjUxMjIzMDEwMDU1WjAzMTEwLwYDVQQD Eyg0MDg2MDQ4ZDAxZmFmMzI4NDY2NTYxYWRiYjRlZmRlMjI4MmQxNmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttd8JnyQTagauTh2u9GBbYHLp/TI JDNEfp6tAhBItrI6a+88R9kZuGTNEcuY3SR9v29JctOKxeAmgl2U4KI+7GTI6aWo kkdz/9XhtomDrKxX5oFHN7xN6WDIiDoSRONdlCBWhjRVYCqTyj7saJjbymJE+uN9 8Pl9aNvOl7yh3ae4V2CJrIKxjvuBZ6SnD2q3FqSJ52BeBqbwkkx5pAII0JNCuNCB v9Mr2aG3mL8QAx6sVFpJyHNtjUjHfp88nVazbkrwRWr3gTNvcVSkJZgic0FBM51W 9IFVu8DOXca1huSbMuKN9pTvbS9uY7fuCYdWxshR7Ou0DpXLaxFS92DtHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFECGBI0B+vMoRmVhrbtO/eIoLRbdMB8GA1UdIwQY MBaAFJGgcVCDOCYFUaVfAf0HCP314IKHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2FCeFVJTTRKZ1ZScFY4Ql9RY0lfZlhnZ29jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8xNWNjNTItNTFlZS00NjBlLTlhZWIt ZWU1NTU5YjM2NThiLzEva2FCeFVJTTRKZ1ZScFY4Ql9RY0lfZlhnZ29jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8xNWNjNTItNTFlZS00NjBlLTlhZWItZWU1NTU5YjM2NThi LzEva2FCeFVJTTRKZ1ZScFY4Ql9RY0lfZlhnZ29jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQoZPjsFF te8mbW1nQQdyCbTxOen2kZ+XRESGzgMV56l3zo6DYUDKfXe7T8HgUSGirjsSL/xC J5E7tQdsTXgIUy/1drmOsnKtOXKchyQSRGOwN/EUNuaEqBheWEg5x6YXLkjEKyl8 StzBk1NB1hP6T0uq3u4AERdpzAQ1QyXn2irH277Rm04LoaRpRmrV88ZSzF0e76cY j918yUQxrmWH+hpl/k7KIEnPP9BQwx8SDFwrmd+oSKYY7tnqyhFhAYlaaVfSl/pq htXQf/Us0jM93nVL1Swg9ruLs9WHWkFCEdzZUkvJG4XstpM4xyQXb5J14AiZ+3fx 6XO456G5oHwY2w== -----END CERTIFICATE-----Generated at Mon Dec 22 05:33:46 2025 by rpki-client