This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft File: KcIQP9JBfIhpFFYX3pT8yROwhe8.mft (raw, json) Hash identifier: LVv4/EwpI3/clpMIp6s7qFLa++mpgEdBT08QUmTugh8= Subject key identifier: 7D:13:AE:04:6F:27:3F:EB:CC:5E:21:38:7B:9E:DB:3F:0F:95:72:22 Authority key identifier: 29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF Certificate issuer: /CN=29c2103fd2417c8869145617de94fcc913b085ef Certificate serial: 019B262DD3CD31DCDB12E82E9D9698A95E94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft Manifest number: 1501 Signing time: Tue 16 Dec 2025 08:01:36 +0000 Manifest this update: Tue 16 Dec 2025 08:01:36 +0000 Manifest next update: Wed 17 Dec 2025 08:01:36 +0000 Files and hashes: 1: HFzLX8JfB09bMiykDXTNNVwsa28.roa (hash: RkC66kEQrpDYwov3VUFFbJbKcNeYjT04dJ6fhWE8V94=) 2: KcIQP9JBfIhpFFYX3pT8yROwhe8.crl (hash: JADjRo4QOaT48Elcfyp2DKEjfvSc4TiMzG136Zy/75c=) 3: _C12IjEOj75oE5QypNCeEnRnlyI.roa (hash: EBWCxN3qkCMZlfAoAwH4ZzgBiUuNGMo8jh7xQFNJR1g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 08:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:2d:d3:cd:31:dc:db:12:e8:2e:9d:96:98:a9:5e:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29c2103fd2417c8869145617de94fcc913b085ef Validity Not Before: Dec 16 08:01:36 2025 GMT Not After : Dec 17 08:01:36 2025 GMT Subject: CN=7d13ae046f273febcc5e21387b9edb3f0f957222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:10:a6:2a:67:98:8c:3f:e7:17:d9:b4:cd:b0: ee:fe:6a:dd:2c:b6:b0:c8:3a:f2:9e:de:e1:39:37: 9d:66:21:cf:c4:0d:87:ca:9b:7e:73:8f:b0:e3:50: 6a:fa:5e:d3:6c:f4:53:50:79:cf:50:88:23:28:55: 90:fb:c4:73:86:b8:ca:29:51:66:1a:76:5a:e5:a3: 80:d3:41:c2:93:aa:fd:64:4e:8e:42:a5:64:21:fe: 1e:c8:36:3a:d2:65:e4:65:13:8b:05:2e:f4:bd:cc: 34:6a:82:2b:33:a5:a0:9c:79:44:b6:27:cd:31:30: b6:9d:ec:b4:49:2b:03:bd:ef:3c:7b:6c:f6:b8:9b: f0:c0:e3:64:e5:8a:73:49:16:53:a8:d1:64:46:56: 37:92:7a:a1:b7:a0:6b:d3:49:39:c8:50:52:74:1d: 48:3d:79:0d:31:a9:cf:96:cf:6f:3e:1d:06:36:54: 49:58:f8:03:08:98:92:2b:d7:17:70:4e:f8:23:e6: 62:49:e8:54:09:29:ab:d6:22:73:3f:c6:f9:04:9f: e9:80:03:5a:46:09:b8:ce:ee:fa:d9:63:e6:e9:51: b9:eb:59:8d:37:01:c4:62:87:93:b4:24:33:2b:c4: d2:57:39:e7:4c:2c:c3:63:20:19:05:02:b6:55:f0: d4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:13:AE:04:6F:27:3F:EB:CC:5E:21:38:7B:9E:DB:3F:0F:95:72:22 X509v3 Authority Key Identifier: keyid:29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c4:82:bd:69:1c:77:35:b0:d9:6f:d3:a7:9c:09:95:1a:eb: c4:9b:4d:bc:53:5e:b3:e7:11:4d:b3:18:8c:dd:d3:86:c8:14: 6a:91:b9:93:7a:11:d9:f5:76:79:7d:68:77:24:2c:21:d7:1d: 40:ec:c4:04:45:0d:89:7c:5b:5e:a8:3b:4c:29:c0:00:a1:6a: 59:de:5d:68:eb:36:19:94:04:8f:07:29:aa:47:15:c6:e5:0d: 8b:34:3e:54:af:37:27:cb:36:a8:cb:6b:24:76:90:c6:0f:e2: 69:c8:26:96:a6:56:4e:10:2d:9a:55:97:fd:5b:a0:69:77:ac: 20:ff:35:74:ea:52:b2:ff:45:af:c4:c5:92:18:cc:33:e6:47: d1:86:e2:50:7f:9e:83:d9:06:9c:0a:f1:d3:65:b9:84:1f:e6: 3b:29:8c:33:28:f1:1c:a5:84:9f:cb:81:6f:0f:08:36:3a:c5: 89:f7:a1:89:a9:75:34:12:c0:cd:e8:4c:56:53:1b:94:9a:50: 9a:3d:50:37:52:19:74:c6:2e:5b:2f:16:c3:ce:92:1f:50:e4: 24:93:5a:af:fe:5b:a6:35:9d:b2:f9:fa:1a:f4:1b:15:c0:47: 0d:32:5b:65:6c:53:be:78:6c:60:f5:ea:c2:e1:86:a5:09:64: b3:6c:11:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmLdPNMdzbEugunZaYqV6UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YzIxMDNmZDI0MTdjODg2OTE0NTYxN2RlOTRmY2M5MTNi MDg1ZWYwHhcNMjUxMjE2MDgwMTM2WhcNMjUxMjE3MDgwMTM2WjAzMTEwLwYDVQQD Eyg3ZDEzYWUwNDZmMjczZmViY2M1ZTIxMzg3YjllZGIzZjBmOTU3MjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hCmKmeYjD/nF9m0zbDu/mrdLLaw yDrynt7hOTedZiHPxA2Hypt+c4+w41Bq+l7TbPRTUHnPUIgjKFWQ+8RzhrjKKVFm GnZa5aOA00HCk6r9ZE6OQqVkIf4eyDY60mXkZROLBS70vcw0aoIrM6WgnHlEtifN MTC2ney0SSsDve88e2z2uJvwwONk5YpzSRZTqNFkRlY3knqht6Br00k5yFBSdB1I PXkNManPls9vPh0GNlRJWPgDCJiSK9cXcE74I+ZiSehUCSmr1iJzP8b5BJ/pgANa Rgm4zu762WPm6VG561mNNwHEYoeTtCQzK8TSVznnTCzDYyAZBQK2VfDUvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0TrgRvJz/rzF4hOHue2z8PlXIiMB8GA1UdIwQY MBaAFCnCED/SQXyIaRRWF96U/MkTsIXvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2NJUVA5SkJmSWhwRkZZWDNwVDh5Uk93aGU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8yYjhkODItMzlmYi00YTU2LTg5YzUt OWQ1NjU3NTEzZTIwLzEvS2NJUVA5SkJmSWhwRkZZWDNwVDh5Uk93aGU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS8yYjhkODItMzlmYi00YTU2LTg5YzUtOWQ1NjU3NTEzZTIw LzEvS2NJUVA5SkJmSWhwRkZZWDNwVDh5Uk93aGU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjcSCvWkc dzWw2W/Tp5wJlRrrxJtNvFNes+cRTbMYjN3ThsgUapG5k3oR2fV2eX1odyQsIdcd QOzEBEUNiXxbXqg7TCnAAKFqWd5daOs2GZQEjwcpqkcVxuUNizQ+VK83J8s2qMtr JHaQxg/iacgmlqZWThAtmlWX/VugaXesIP81dOpSsv9Fr8TFkhjMM+ZH0YbiUH+e g9kGnArx02W5hB/mOymMMyjxHKWEn8uBbw8INjrFifehial1NBLAzehMVlMblJpQ mj1QN1IZdMYuWy8Ww86SH1DkJJNar/5bpjWdsvn6GvQbFcBHDTJbZWxTvnhsYPXq wuGGpQlks2wRxQ== -----END CERTIFICATE-----Generated at Tue Dec 16 17:59:29 2025 by rpki-client