This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft File: KJkuu4Pri3Oioh5bAz296x308j0.mft (raw, json) Hash identifier: k/9imCMFlZphXYGQ40O5k+TwhPlhnF2+ANuxbbHqW5E= Subject key identifier: 31:8C:CC:A6:45:88:F0:06:85:6C:BF:B8:38:BD:A2:58:B2:FE:C0:57 Authority key identifier: 28:99:2E:BB:83:EB:8B:73:A2:A2:1E:5B:03:3D:BD:EB:1D:F4:F2:3D Certificate issuer: /CN=28992ebb83eb8b73a2a21e5b033dbdeb1df4f23d Certificate serial: 019AF2766E3E90C9653D9389F92798285CA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft Manifest number: 0B41 Signing time: Sat 06 Dec 2025 07:00:38 +0000 Manifest this update: Sat 06 Dec 2025 07:00:38 +0000 Manifest next update: Sun 07 Dec 2025 07:00:38 +0000 Files and hashes: 1: KJkuu4Pri3Oioh5bAz296x308j0.crl (hash: Dqs9s+F+Qdd7WD8D50y2kVgmwf2q/DsrgPXoxZEUQws=) 2: MdutrPnIA4jtsUw7J4Yelrok5X0.roa (hash: r2kS0LoTxgu8taO5YAtvMzxTwqT6ILx9UD2HUGC3ccI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.crl rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:6e:3e:90:c9:65:3d:93:89:f9:27:98:28:5c:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28992ebb83eb8b73a2a21e5b033dbdeb1df4f23d Validity Not Before: Dec 6 07:00:38 2025 GMT Not After : Dec 7 07:00:38 2025 GMT Subject: CN=318ccca64588f006856cbfb838bda258b2fec057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:54:65:32:ff:b0:c4:1a:08:c9:ec:ee:37:47: 1c:d9:9f:ca:04:fd:3a:c2:18:a6:a7:77:cd:27:8c: 40:fe:b9:34:81:0f:d1:95:d4:09:fe:73:03:bb:6c: ed:1c:87:a5:7c:50:67:78:38:a3:62:1e:0e:96:82: ed:8d:4f:1c:c3:fe:ae:42:d1:d8:f5:86:5b:c9:9f: 2a:86:83:a3:aa:3a:8f:fc:eb:13:4d:55:4d:bb:23: 72:38:90:78:2e:92:f1:e0:c9:e5:91:fc:b6:34:16: 76:d3:5a:28:57:6c:cd:be:1c:6d:ee:db:a7:b0:47: 67:af:9d:aa:80:fc:a0:ff:d3:06:cc:95:1d:b4:ec: 0f:d0:9d:8a:02:8c:ff:b6:ce:5e:64:37:01:dc:41: bd:2b:95:08:0e:3a:3b:9e:f0:c5:35:e4:09:e4:82: 2d:c6:0c:9b:28:8f:b6:77:77:49:d3:4c:35:ee:9f: 0e:50:51:29:27:ed:56:42:0b:79:62:5f:11:48:9d: ee:f6:9d:67:35:0a:4b:66:93:f7:e8:65:14:b0:79: 09:88:6d:bb:35:3a:cf:f2:21:2c:43:ea:50:95:f4: 3e:d9:4f:3b:36:fe:17:82:24:28:4e:71:c6:c4:08: e5:b1:d0:a9:57:3a:8c:a1:31:0a:62:79:f5:94:6f: 83:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:8C:CC:A6:45:88:F0:06:85:6C:BF:B8:38:BD:A2:58:B2:FE:C0:57 X509v3 Authority Key Identifier: keyid:28:99:2E:BB:83:EB:8B:73:A2:A2:1E:5B:03:3D:BD:EB:1D:F4:F2:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:f0:40:be:50:08:14:0d:5b:0e:60:cb:53:2a:a7:e0:c3:e5: f9:44:29:9e:76:f0:11:d7:83:c5:b9:cb:f9:d6:80:1e:a3:33: 32:c7:e0:ce:7d:a0:74:7f:1c:e8:7f:6a:db:66:de:43:06:60: 36:73:76:0f:bb:ec:58:bc:30:18:82:8a:88:b2:b9:47:67:e4: 19:75:64:62:ad:01:fb:65:8b:cb:9c:0b:b0:a7:7d:b0:c8:4f: 8e:c2:ff:f4:f9:a2:f2:a5:3d:ba:bd:c8:76:86:b9:83:f1:68: e2:d4:f5:a2:89:10:2a:d8:ad:b7:bf:47:00:70:25:8f:88:52: 18:f9:c7:67:c4:4b:bb:a7:6b:35:3f:d9:ae:08:67:93:5f:8c: e5:c8:91:ed:22:7a:0d:82:45:57:dd:71:e4:12:6b:10:24:7c: 3b:5e:8d:79:ae:ba:b3:54:c3:33:b3:cd:57:7b:14:ce:3b:03: e2:f0:78:d7:82:88:a0:02:7b:f5:b4:23:7f:67:9c:ff:19:58: 6b:f7:47:df:e5:59:4a:2f:2c:f7:bc:44:fd:5a:20:f4:c3:49: da:98:35:fc:87:d8:1e:c8:04:ab:44:92:87:e9:2c:91:36:bc: 06:e0:aa:40:8a:d2:56:f6:3d:22:e8:3e:37:4d:6f:a8:8f:77: f6:d2:d0:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydm4+kMllPZOJ+SeYKFyhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4OTkyZWJiODNlYjhiNzNhMmEyMWU1YjAzM2RiZGViMWRm NGYyM2QwHhcNMjUxMjA2MDcwMDM4WhcNMjUxMjA3MDcwMDM4WjAzMTEwLwYDVQQD EygzMThjY2NhNjQ1ODhmMDA2ODU2Y2JmYjgzOGJkYTI1OGIyZmVjMDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFRlMv+wxBoIyezuN0cc2Z/KBP06 whimp3fNJ4xA/rk0gQ/RldQJ/nMDu2ztHIelfFBneDijYh4OloLtjU8cw/6uQtHY 9YZbyZ8qhoOjqjqP/OsTTVVNuyNyOJB4LpLx4Mnlkfy2NBZ201ooV2zNvhxt7tun sEdnr52qgPyg/9MGzJUdtOwP0J2KAoz/ts5eZDcB3EG9K5UIDjo7nvDFNeQJ5IIt xgybKI+2d3dJ00w17p8OUFEpJ+1WQgt5Yl8RSJ3u9p1nNQpLZpP36GUUsHkJiG27 NTrP8iEsQ+pQlfQ+2U87Nv4XgiQoTnHGxAjlsdCpVzqMoTEKYnn1lG+DrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDGMzKZFiPAGhWy/uDi9oliy/sBXMB8GA1UdIwQY MBaAFCiZLruD64tzoqIeWwM9vesd9PI9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0prdXU0UHJpM09pb2g1YkF6Mjk2eDMwOGowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9mOThkY2UtOTkyZC00ZjY0LWJjMzgt YjM2YjhlODkyYzZjLzEvS0prdXU0UHJpM09pb2g1YkF6Mjk2eDMwOGowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9mOThkY2UtOTkyZC00ZjY0LWJjMzgtYjM2YjhlODkyYzZj LzEvS0prdXU0UHJpM09pb2g1YkF6Mjk2eDMwOGowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB/BAvlAI FA1bDmDLUyqn4MPl+UQpnnbwEdeDxbnL+daAHqMzMsfgzn2gdH8c6H9q22beQwZg NnN2D7vsWLwwGIKKiLK5R2fkGXVkYq0B+2WLy5wLsKd9sMhPjsL/9Pmi8qU9ur3I doa5g/Fo4tT1ookQKtitt79HAHAlj4hSGPnHZ8RLu6drNT/Zrghnk1+M5ciR7SJ6 DYJFV91x5BJrECR8O16Nea66s1TDM7PNV3sUzjsD4vB414KIoAJ79bQjf2ec/xlY a/dH3+VZSi8s97xE/Vog9MNJ2pg1/IfYHsgEq0SSh+kskTa8BuCqQIrSVvY9Iug+ N01vqI939tLQTw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:05:35 2025 by rpki-client