This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft File: KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft (raw, json) Hash identifier: F2/Y2TiccasfnqhivZi8lQBDPjtyogTqRjPo/Ve+an8= Subject key identifier: 92:6F:23:34:5C:AF:27:A8:68:0E:53:41:31:87:56:AD:D1:81:BB:33 Authority key identifier: 2A:91:00:A1:45:DC:B7:B3:79:53:79:BB:09:38:FE:89:AA:86:19:24 Certificate issuer: /CN=2a9100a145dcb7b3795379bb0938fe89aa861924 Certificate serial: 019B5A1AFBAACDEDB87A48C337F24FF25B43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft Manifest number: 14D4 Signing time: Fri 26 Dec 2025 10:01:16 +0000 Manifest this update: Fri 26 Dec 2025 10:01:16 +0000 Manifest next update: Sat 27 Dec 2025 10:01:16 +0000 Files and hashes: 1: KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl (hash: YnxdSnCWFI55F9VrgVjWqQRr26UqnkqjdmWDKnFZVQA=) 2: jVEebkEC2-oHzNPCTqPYuC9aoqE.roa (hash: J11dJEoO4oOPIGJkgBui1oSiw1WMmsHoIDwoMRNd+jg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:fb:aa:cd:ed:b8:7a:48:c3:37:f2:4f:f2:5b:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a9100a145dcb7b3795379bb0938fe89aa861924 Validity Not Before: Dec 26 10:01:16 2025 GMT Not After : Dec 27 10:01:16 2025 GMT Subject: CN=926f23345caf27a8680e5341318756add181bb33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1c:a8:e6:79:16:c7:30:35:43:2a:87:1d:92: 28:19:3b:24:0e:5a:2a:23:f8:39:6a:07:0d:d8:73: c1:b6:a7:b5:d9:d3:23:a9:8e:fa:d5:54:93:0d:f6: 9e:1b:c6:74:e6:04:b6:78:18:14:07:6a:af:41:08: 82:cc:23:a5:82:39:ad:2d:62:74:01:24:49:48:db: 24:22:e6:d6:77:b7:99:0d:56:05:a6:a9:ec:7b:f5: 16:c1:d6:b2:52:81:7b:82:91:59:55:56:0c:49:21: 9c:5d:38:02:15:53:0b:4d:e1:df:f2:c8:f6:e3:91: 4d:bd:b1:a7:38:c9:b7:16:1e:4b:82:75:3f:d7:1c: 0f:f8:6f:bd:60:79:db:e3:6e:37:d8:e1:8f:dd:9c: cc:44:48:ff:ae:d9:e7:3d:ec:b3:34:cc:9c:54:e2: f4:17:86:89:b9:17:04:60:b8:85:15:f8:ef:4a:35: ae:2c:de:66:d0:29:24:c3:8a:9c:bd:1a:e2:bb:89: c7:22:3b:b6:ff:be:1f:40:9b:ae:19:07:7a:ee:28: e4:c0:b5:66:bc:14:00:cf:6d:f7:a2:28:8a:98:22: 89:35:3f:f9:76:67:56:60:e2:d2:fa:f2:6f:64:03: f5:20:0d:ac:36:dc:d5:79:aa:54:5f:28:f7:a2:29: 64:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:6F:23:34:5C:AF:27:A8:68:0E:53:41:31:87:56:AD:D1:81:BB:33 X509v3 Authority Key Identifier: keyid:2A:91:00:A1:45:DC:B7:B3:79:53:79:BB:09:38:FE:89:AA:86:19:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:f9:c4:1c:e7:3f:a6:61:5c:5d:72:c5:ba:9d:95:ea:06:c6: ff:a3:61:a7:e2:01:a5:4a:16:54:31:cf:8d:03:2f:ba:f2:59: d4:d6:45:0d:f0:83:30:9d:64:4a:fa:e3:68:f5:ab:94:52:ed: 23:e3:21:93:38:c1:a7:4a:f8:7d:c4:b1:9e:5c:92:00:a8:38: 8d:34:ce:e6:d9:1e:88:a4:6f:24:a2:9d:e1:0e:fd:de:26:71: 0e:55:ac:f4:2d:9d:28:9b:71:20:fe:c5:b1:0a:da:3c:90:ff: 93:bf:55:46:11:ee:4f:be:74:85:88:f1:8e:cc:d1:88:3b:9f: a4:49:13:42:6d:1a:19:b5:a8:f0:88:43:62:af:a7:0d:53:53: d6:41:89:d0:55:ff:5a:d7:6e:a7:6f:3a:ca:69:0a:ad:79:d9: 56:8d:82:be:92:e1:ab:ce:c0:98:9b:ca:bc:d1:b3:3f:c9:98: 38:96:81:a8:56:2d:e8:f9:a8:72:34:85:59:4e:6a:65:d2:63: d1:d2:91:03:b7:bd:fb:fa:61:4f:33:38:b4:0c:ea:58:29:f7: e3:8c:90:54:16:92:c9:35:6c:1a:a8:de:c0:de:ae:8e:3d:c1: e9:7e:77:de:11:67:1e:ee:ea:6e:cb:41:cd:e9:e2:5f:c1:4a: f4:81:1c:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGvuqze24ekjDN/JP8ltDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTEwMGExNDVkY2I3YjM3OTUzNzliYjA5MzhmZTg5YWE4 NjE5MjQwHhcNMjUxMjI2MTAwMTE2WhcNMjUxMjI3MTAwMTE2WjAzMTEwLwYDVQQD Eyg5MjZmMjMzNDVjYWYyN2E4NjgwZTUzNDEzMTg3NTZhZGQxODFiYjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ryo5nkWxzA1QyqHHZIoGTskDloq I/g5agcN2HPBtqe12dMjqY761VSTDfaeG8Z05gS2eBgUB2qvQQiCzCOlgjmtLWJ0 ASRJSNskIubWd7eZDVYFpqnse/UWwdayUoF7gpFZVVYMSSGcXTgCFVMLTeHf8sj2 45FNvbGnOMm3Fh5LgnU/1xwP+G+9YHnb42432OGP3ZzMREj/rtnnPeyzNMycVOL0 F4aJuRcEYLiFFfjvSjWuLN5m0Ckkw4qcvRriu4nHIju2/74fQJuuGQd67ijkwLVm vBQAz233oiiKmCKJNT/5dmdWYOLS+vJvZAP1IA2sNtzVeapUXyj3oilkcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJJvIzRcryeoaA5TQTGHVq3RgbszMB8GA1UdIwQY MBaAFCqRAKFF3LezeVN5uwk4/omqhhkkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3BFQW9VWGN0N041VTNtN0NUai1pYXFHR1NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hMzk4ZWItYzQyOS00ODM3LThlNzct NzkyNDZjODk0NTkxLzEvS3BFQW9VWGN0N041VTNtN0NUai1pYXFHR1NRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9hMzk4ZWItYzQyOS00ODM3LThlNzctNzkyNDZjODk0NTkx LzEvS3BFQW9VWGN0N041VTNtN0NUai1pYXFHR1NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVPnEHOc/ pmFcXXLFup2V6gbG/6Nhp+IBpUoWVDHPjQMvuvJZ1NZFDfCDMJ1kSvrjaPWrlFLt I+MhkzjBp0r4fcSxnlySAKg4jTTO5tkeiKRvJKKd4Q793iZxDlWs9C2dKJtxIP7F sQraPJD/k79VRhHuT750hYjxjszRiDufpEkTQm0aGbWo8IhDYq+nDVNT1kGJ0FX/ Wtdup286ymkKrXnZVo2CvpLhq87AmJvKvNGzP8mYOJaBqFYt6PmocjSFWU5qZdJj 0dKRA7e9+/phTzM4tAzqWCn344yQVBaSyTVsGqjewN6ujj3B6X533hFnHu7qbstB zeniX8FK9IEc9Q== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:11 2025 by rpki-client