This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft File: kaBxUIM4JgVRpV8B_QcI_fXggoc.mft (raw, json) Hash identifier: Ea3OlXz+nTnR+0tYPp+1DotkmwJaKG2uGJq+8HvQNvM= Subject key identifier: 96:89:C1:EE:7C:47:BF:C2:41:B2:29:B2:CD:F4:C4:89:64:D3:32:DF Authority key identifier: 91:A0:71:50:83:38:26:05:51:A5:5F:01:FD:07:08:FD:F5:E0:82:87 Certificate issuer: /CN=91a071508338260551a55f01fd0708fdf5e08287 Certificate serial: 019B37FC5B174FB99B676CC9F250F5EAB046 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 19:00:43 +0000 Manifest this update: Fri 19 Dec 2025 19:00:43 +0000 Manifest next update: Sat 20 Dec 2025 19:00:43 +0000 Files and hashes: 1: Cgt_gy7EMOYMV19k2tz2rtLd7TU.roa (hash: j2CPj0aVUdndtIwS2SsvRubF8DiJi7ArwXEuxy5F6uI=) 2: LtAL3K8AdfyisGKqq9Vjp_7EH0w.roa (hash: ExkUCXkAhlWeYSrTyMjTF0LGwM8Q8/UHTNY3ZJzGHYE=) 3: kaBxUIM4JgVRpV8B_QcI_fXggoc.crl (hash: j5RG2AAVZvXkIxJqEfow6J4kAiNA4tcQuIVfeI0SRZk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:5b:17:4f:b9:9b:67:6c:c9:f2:50:f5:ea:b0:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91a071508338260551a55f01fd0708fdf5e08287 Validity Not Before: Dec 19 19:00:43 2025 GMT Not After : Dec 20 19:00:43 2025 GMT Subject: CN=9689c1ee7c47bfc241b229b2cdf4c48964d332df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:8a:2d:d6:38:d1:e8:19:d9:91:54:d9:4d:53: ec:e3:d2:fd:f6:cd:77:da:30:32:14:60:28:19:29: 61:1e:c4:58:4a:34:60:86:f0:30:89:84:0a:0f:ac: 90:4f:e2:c8:91:0d:fa:10:fe:78:b7:d2:91:40:2f: 70:6b:5b:29:33:0f:ac:df:cd:21:11:97:03:72:7f: ec:d9:7d:77:70:78:89:6e:38:8c:d3:ca:42:d1:d1: a2:f4:cb:c3:9e:23:61:d1:9d:a9:af:27:37:7c:ac: 6f:af:7e:44:22:93:ac:43:21:8f:18:38:35:0e:ec: 77:ed:f6:35:5a:06:15:7d:e9:74:c6:4b:6e:c2:10: 5d:c8:ae:cc:80:d4:60:97:c6:81:5e:d9:5c:8f:3a: 6c:2b:81:84:d3:f8:20:59:bb:a8:c9:d6:2a:b7:9b: 9b:09:0f:5f:7e:73:9d:f8:f4:6f:65:e9:bf:92:00: f7:fa:2a:c0:23:ea:6e:af:34:54:40:aa:f9:80:1d: 86:04:98:97:6c:9b:3e:43:d6:d0:80:f7:9d:06:98: e6:75:f1:ae:f9:92:2b:2f:55:de:96:54:86:05:e4: ec:7d:2d:96:95:89:db:21:a4:18:c8:81:f3:b9:9e: 93:b6:f8:4a:a9:08:01:e6:9c:35:03:54:07:f6:8e: ff:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:89:C1:EE:7C:47:BF:C2:41:B2:29:B2:CD:F4:C4:89:64:D3:32:DF X509v3 Authority Key Identifier: keyid:91:A0:71:50:83:38:26:05:51:A5:5F:01:FD:07:08:FD:F5:E0:82:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:26:b6:5e:96:2d:2d:05:b2:e8:ac:4a:9c:ed:2a:b1:3a:48: a1:ef:f2:7a:7c:50:ab:7a:fa:dc:fc:33:a0:ec:fc:08:64:e5: c2:1f:6c:c3:99:1e:58:98:29:0f:9c:96:09:56:cd:20:55:62: e5:e2:69:da:a5:3d:02:61:f9:45:3b:50:df:16:4a:b1:f8:aa: e5:c0:2c:ba:4a:18:ff:77:f7:e9:df:31:80:4c:b1:f2:a8:16: 38:c3:0d:ce:bb:c5:4d:9f:5f:3b:18:c3:5d:34:19:06:51:f4: 59:09:1f:4d:30:4d:d8:1b:0e:89:92:47:cb:58:ac:de:85:56: fc:17:b2:45:1f:2a:a3:15:b7:fa:78:0e:9b:50:26:2e:84:93: fd:b7:cd:9e:eb:a3:77:3a:85:25:57:3c:0c:67:a8:1e:46:a1: 24:a6:67:07:47:83:34:34:18:dd:49:c4:46:26:6e:4e:7b:b8: 24:06:70:17:58:8a:16:04:85:58:b2:a8:3a:73:c1:b7:43:ac: d6:78:b7:82:5e:0a:e2:ab:1c:45:64:65:ab:65:c0:25:6a:6d: 03:33:45:3f:df:3c:ef:36:ca:4b:82:f2:e5:6a:18:a6:69:3b: 4c:c3:75:e4:aa:ae:4a:15:86:07:55:47:6a:2a:3d:1e:97:9c: e3:e2:a1:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/FsXT7mbZ2zJ8lD16rBGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxYTA3MTUwODMzODI2MDU1MWE1NWYwMWZkMDcwOGZkZjVl MDgyODcwHhcNMjUxMjE5MTkwMDQzWhcNMjUxMjIwMTkwMDQzWjAzMTEwLwYDVQQD Eyg5Njg5YzFlZTdjNDdiZmMyNDFiMjI5YjJjZGY0YzQ4OTY0ZDMzMmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Iot1jjR6BnZkVTZTVPs49L99s13 2jAyFGAoGSlhHsRYSjRghvAwiYQKD6yQT+LIkQ36EP54t9KRQC9wa1spMw+s380h EZcDcn/s2X13cHiJbjiM08pC0dGi9MvDniNh0Z2pryc3fKxvr35EIpOsQyGPGDg1 Dux37fY1WgYVfel0xktuwhBdyK7MgNRgl8aBXtlcjzpsK4GE0/ggWbuoydYqt5ub CQ9ffnOd+PRvZem/kgD3+irAI+purzRUQKr5gB2GBJiXbJs+Q9bQgPedBpjmdfGu +ZIrL1XellSGBeTsfS2WlYnbIaQYyIHzuZ6TtvhKqQgB5pw1A1QH9o7/2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJaJwe58R7/CQbIpss30xIlk0zLfMB8GA1UdIwQY MBaAFJGgcVCDOCYFUaVfAf0HCP314IKHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2FCeFVJTTRKZ1ZScFY4Ql9RY0lfZlhnZ29jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8xNWNjNTItNTFlZS00NjBlLTlhZWIt ZWU1NTU5YjM2NThiLzEva2FCeFVJTTRKZ1ZScFY4Ql9RY0lfZlhnZ29jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8xNWNjNTItNTFlZS00NjBlLTlhZWItZWU1NTU5YjM2NThi LzEva2FCeFVJTTRKZ1ZScFY4Ql9RY0lfZlhnZ29jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbia2XpYt LQWy6KxKnO0qsTpIoe/yenxQq3r63PwzoOz8CGTlwh9sw5keWJgpD5yWCVbNIFVi 5eJp2qU9AmH5RTtQ3xZKsfiq5cAsukoY/3f36d8xgEyx8qgWOMMNzrvFTZ9fOxjD XTQZBlH0WQkfTTBN2BsOiZJHy1is3oVW/BeyRR8qoxW3+ngOm1AmLoST/bfNnuuj dzqFJVc8DGeoHkahJKZnB0eDNDQY3UnERiZuTnu4JAZwF1iKFgSFWLKoOnPBt0Os 1ni3gl4K4qscRWRlq2XAJWptAzNFP9887zbKS4Ly5WoYpmk7TMN15KquShWGB1VH aio9Hpec4+KhOQ== -----END CERTIFICATE-----Generated at Sat Dec 20 00:19:57 2025 by rpki-client