This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.mft File: kmQM5yWUCOpddlb_wCE_IGiNr9w.mft (raw, json) Hash identifier: wtQ9AWKvGR4KptmOkL0KzcosbaBTs5f+NUzDu4vvby0= Subject key identifier: D1:09:3F:FC:6C:C1:B9:89:10:C2:B8:A0:E8:91:6B:12:B9:17:30:E1 Authority key identifier: 92:64:0C:E7:25:94:08:EA:5D:76:56:FF:C0:21:3F:20:68:8D:AF:DC Certificate issuer: /CN=92640ce7259408ea5d7656ffc0213f20688dafdc Certificate serial: 019B21AB9C156DA2706BB1FA9577AAFBAED0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmQM5yWUCOpddlb_wCE_IGiNr9w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.mft Manifest number: 04FA Signing time: Mon 15 Dec 2025 11:00:53 +0000 Manifest this update: Mon 15 Dec 2025 11:00:53 +0000 Manifest next update: Tue 16 Dec 2025 11:00:53 +0000 Files and hashes: 1: kmQM5yWUCOpddlb_wCE_IGiNr9w.crl (hash: n/VYCyRQ4TepOM2zOp6XyXCIub8k3P/TF/2k+mi0ews=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.mft rsync://rpki.ripe.net/repository/DEFAULT/kmQM5yWUCOpddlb_wCE_IGiNr9w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 11:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:ab:9c:15:6d:a2:70:6b:b1:fa:95:77:aa:fb:ae:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92640ce7259408ea5d7656ffc0213f20688dafdc Validity Not Before: Dec 15 11:00:53 2025 GMT Not After : Dec 16 11:00:53 2025 GMT Subject: CN=d1093ffc6cc1b98910c2b8a0e8916b12b91730e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a8:a4:24:9a:fa:2a:ef:a9:a3:48:f0:94:53: ee:00:a9:e4:2e:f0:ed:1a:b1:72:d6:27:9d:74:98: b3:65:03:a8:86:ce:a6:3e:37:d2:02:76:59:88:f7: 3c:1d:e1:aa:ae:6e:88:88:0d:44:46:88:64:64:f0: 4f:01:6c:4a:b4:d9:7d:34:dc:1c:0d:f6:5b:70:27: 72:72:f2:07:d3:2c:dd:de:67:7f:69:e2:fb:3f:0a: a2:77:cf:ac:25:ab:ca:13:42:74:e8:e2:0f:9b:c8: 79:0c:9f:7e:ee:c5:0e:e6:62:c4:70:bb:8e:76:3f: 11:e1:2b:03:e7:21:31:40:d1:fe:94:01:3b:c1:ad: eb:a9:8e:1c:1b:3e:2f:b0:20:a0:cf:37:9b:c8:e0: e6:6a:26:a0:33:1c:56:a4:67:41:1f:25:1c:99:31: fb:45:af:aa:ab:e8:95:e6:31:48:b8:11:2e:d1:71: d9:72:28:8e:65:ad:87:53:46:f2:c8:a1:78:3e:85: 98:95:e7:59:e8:21:b1:cf:59:0d:8d:6b:58:17:be: 32:d0:8d:a6:c0:b5:fe:62:07:c7:2e:53:ef:2d:64: b9:70:3d:9e:56:5e:98:fe:fa:ea:08:a2:cb:95:ad: 28:ce:de:da:fd:53:1f:69:7c:ee:66:8b:38:00:83: f5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:09:3F:FC:6C:C1:B9:89:10:C2:B8:A0:E8:91:6B:12:B9:17:30:E1 X509v3 Authority Key Identifier: keyid:92:64:0C:E7:25:94:08:EA:5D:76:56:FF:C0:21:3F:20:68:8D:AF:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmQM5yWUCOpddlb_wCE_IGiNr9w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:01:c3:b6:f6:79:4d:72:43:04:a3:05:a7:b0:c5:0d:20:72: dc:96:c9:e7:37:32:1b:35:7e:b7:7e:6c:4e:dd:45:ed:28:a0: 0a:8b:63:fd:0b:bb:c6:4d:82:84:9f:59:e5:b8:52:44:b0:9f: a2:fc:d9:f4:a7:bd:8f:44:f7:ee:98:ce:f9:22:9a:b0:c0:64: 2a:92:fe:c2:f8:d8:7a:3b:c7:e7:88:9a:a0:cd:8f:24:df:48: 88:9a:be:8c:94:f6:de:2f:4d:5a:c3:6e:e7:55:a5:05:40:b8: a2:64:92:a9:fb:88:da:3b:82:ea:9f:ba:c1:b9:ae:42:85:aa: fd:3b:a6:23:3e:36:bd:56:6d:bc:32:3f:2e:a5:51:ab:30:84: ec:24:55:b1:e0:2b:ed:c5:73:d4:8b:d6:4a:1b:95:37:58:ec: b5:28:09:ce:59:3f:99:4c:22:58:4f:04:6f:5a:17:57:62:6a: 2a:2d:48:f1:91:6a:15:77:ad:b4:f3:91:f7:74:fb:dd:fa:22: e7:a8:fe:30:ed:50:0e:b8:ed:79:1e:29:ab:c8:c8:e1:ab:5e: c4:41:75:01:27:64:ad:5b:98:a3:2f:27:8b:5d:46:67:12:30: f6:bb:07:80:ff:aa:56:de:5d:f0:fb:f2:7e:8b:e9:7f:aa:f9: f9:75:44:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshq5wVbaJwa7H6lXeq+67QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNjQwY2U3MjU5NDA4ZWE1ZDc2NTZmZmMwMjEzZjIwNjg4 ZGFmZGMwHhcNMjUxMjE1MTEwMDUzWhcNMjUxMjE2MTEwMDUzWjAzMTEwLwYDVQQD EyhkMTA5M2ZmYzZjYzFiOTg5MTBjMmI4YTBlODkxNmIxMmI5MTczMGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaikJJr6Ku+po0jwlFPuAKnkLvDt GrFy1ieddJizZQOohs6mPjfSAnZZiPc8HeGqrm6IiA1ERohkZPBPAWxKtNl9NNwc DfZbcCdycvIH0yzd3md/aeL7Pwqid8+sJavKE0J06OIPm8h5DJ9+7sUO5mLEcLuO dj8R4SsD5yExQNH+lAE7wa3rqY4cGz4vsCCgzzebyODmaiagMxxWpGdBHyUcmTH7 Ra+qq+iV5jFIuBEu0XHZciiOZa2HU0byyKF4PoWYledZ6CGxz1kNjWtYF74y0I2m wLX+YgfHLlPvLWS5cD2eVl6Y/vrqCKLLla0ozt7a/VMfaXzuZos4AIP1AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNEJP/xswbmJEMK4oOiRaxK5FzDhMB8GA1UdIwQY MBaAFJJkDOcllAjqXXZW/8AhPyBoja/cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva21RTTV5V1VDT3BkZGxiX3dDRV9JR2lOcjl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9hYzQ5NmMtYzkxYi00OGIzLWFmNTct NzlmNTE1ZGMyZjk3LzEva21RTTV5V1VDT3BkZGxiX3dDRV9JR2lOcjl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9hYzQ5NmMtYzkxYi00OGIzLWFmNTctNzlmNTE1ZGMyZjk3 LzEva21RTTV5V1VDT3BkZGxiX3dDRV9JR2lOcjl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARwHDtvZ5 TXJDBKMFp7DFDSBy3JbJ5zcyGzV+t35sTt1F7SigCotj/Qu7xk2ChJ9Z5bhSRLCf ovzZ9Ke9j0T37pjO+SKasMBkKpL+wvjYejvH54iaoM2PJN9IiJq+jJT23i9NWsNu 51WlBUC4omSSqfuI2juC6p+6wbmuQoWq/TumIz42vVZtvDI/LqVRqzCE7CRVseAr 7cVz1IvWShuVN1jstSgJzlk/mUwiWE8Eb1oXV2JqKi1I8ZFqFXettPOR93T73foi 56j+MO1QDrjteR4pq8jI4atexEF1ASdkrVuYoy8ni11GZxIw9rsHgP+qVt5d8Pvy fovpf6r5+XVE7g== -----END CERTIFICATE-----Generated at Mon Dec 15 16:47:10 2025 by rpki-client