This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft File: KcIQP9JBfIhpFFYX3pT8yROwhe8.mft (raw, json) Hash identifier: tLmUi/17D8gD5eqg2oQQuewJHUU4ha+Eh+sYJHROC4k= Subject key identifier: 44:04:CB:B2:55:16:8B:33:1E:85:02:73:4B:13:A2:DC:E6:46:61:F2 Authority key identifier: 29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF Certificate issuer: /CN=29c2103fd2417c8869145617de94fcc913b085ef Certificate serial: 019B281C329C903EA6410CF106BB0D042A66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft Manifest number: 1502 Signing time: Tue 16 Dec 2025 17:01:35 +0000 Manifest this update: Tue 16 Dec 2025 17:01:35 +0000 Manifest next update: Wed 17 Dec 2025 17:01:35 +0000 Files and hashes: 1: HFzLX8JfB09bMiykDXTNNVwsa28.roa (hash: RkC66kEQrpDYwov3VUFFbJbKcNeYjT04dJ6fhWE8V94=) 2: KcIQP9JBfIhpFFYX3pT8yROwhe8.crl (hash: 8lgEfPZIDKOkWVGDt9TmN7zYJWPLXVmVcQnhR07/4JY=) 3: _C12IjEOj75oE5QypNCeEnRnlyI.roa (hash: EBWCxN3qkCMZlfAoAwH4ZzgBiUuNGMo8jh7xQFNJR1g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1c:32:9c:90:3e:a6:41:0c:f1:06:bb:0d:04:2a:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29c2103fd2417c8869145617de94fcc913b085ef Validity Not Before: Dec 16 17:01:35 2025 GMT Not After : Dec 17 17:01:35 2025 GMT Subject: CN=4404cbb255168b331e8502734b13a2dce64661f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:db:fe:3d:53:d5:f0:30:9f:56:9b:2c:a9:38: 20:95:59:74:b8:ca:6b:17:f6:2c:cb:5a:92:30:be: f6:fd:b6:36:c2:40:97:46:6e:c9:8d:91:60:a3:6f: d2:c4:07:2f:d4:f2:3c:3b:60:d4:7e:2f:7c:aa:d2: dd:04:ea:f8:71:3a:4e:d1:33:b9:c3:57:cc:a6:9c: 3a:0f:fd:42:df:f2:c9:77:4e:8c:02:fd:9b:e9:6d: 73:85:0f:e3:aa:bb:d3:20:c9:47:59:df:93:dd:0e: d2:c1:17:52:ce:80:e9:ff:be:29:2d:d5:93:af:00: 8c:91:46:95:46:96:b3:53:76:98:aa:12:fd:3a:f5: fb:ff:23:62:71:4f:93:c3:d4:53:20:fd:1b:b8:77: 1b:a7:d8:6f:6c:c6:20:55:fc:7e:17:ec:27:1d:35: 67:d5:b1:22:8d:b2:75:28:8b:4f:0e:11:ba:ad:e3: 76:14:05:2d:b0:23:17:32:f8:6a:26:fd:70:77:6e: 08:24:72:db:b1:d2:4c:3d:24:f0:e7:fe:93:4e:21: 5c:02:5c:b2:47:21:be:fa:37:ff:fa:3d:bf:69:bb: fb:80:56:20:f0:c4:1f:04:cf:cc:2b:64:f6:53:f1: 72:7c:9f:38:7d:7e:4b:98:bf:14:fc:3b:43:54:f8: d4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:04:CB:B2:55:16:8B:33:1E:85:02:73:4B:13:A2:DC:E6:46:61:F2 X509v3 Authority Key Identifier: keyid:29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:90:b8:31:4e:63:1b:a1:33:00:2a:52:96:6b:a8:38:ec:c1: fe:73:92:28:86:df:5c:b6:98:0e:87:15:96:9b:f1:a4:89:05: d4:39:4e:93:25:ee:8d:80:97:b5:18:dd:9d:69:0a:be:8f:c8: fd:34:b7:50:95:09:b4:aa:10:c5:06:35:41:90:54:2e:87:90: 2b:9b:ed:fb:d1:51:30:7e:21:89:8c:63:5b:93:64:de:77:08: a9:81:80:f0:d6:38:57:f8:f8:81:71:e4:c9:ae:1a:c4:25:de: 75:57:90:04:0a:6a:15:c3:a1:e2:3d:25:f9:29:3e:eb:47:3d: bb:b6:d1:8a:95:38:cf:1d:4c:2a:35:ea:5d:51:33:37:03:69: 3c:e0:d9:d1:7c:5b:0e:5f:95:4c:9d:f0:81:86:1d:9d:8f:b4: ef:6f:2c:77:10:ed:75:ce:08:b3:ae:ed:a5:2b:4a:2d:17:69: 19:57:8b:92:c2:cf:31:f8:57:7e:f8:1f:40:1d:d5:8e:9a:7f: c2:7a:74:fb:1c:df:cc:fe:53:0b:89:ae:3d:9b:f3:77:49:d6: 77:ac:b9:3e:81:dd:1d:2c:49:b7:f8:1b:c4:a9:66:0a:5c:80: a5:c6:a9:4f:f7:92:c1:54:cc:12:c0:25:4f:71:09:64:bd:26: 07:8a:5d:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoHDKckD6mQQzxBrsNBCpmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YzIxMDNmZDI0MTdjODg2OTE0NTYxN2RlOTRmY2M5MTNi MDg1ZWYwHhcNMjUxMjE2MTcwMTM1WhcNMjUxMjE3MTcwMTM1WjAzMTEwLwYDVQQD Eyg0NDA0Y2JiMjU1MTY4YjMzMWU4NTAyNzM0YjEzYTJkY2U2NDY2MWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9v+PVPV8DCfVpssqTgglVl0uMpr F/Ysy1qSML72/bY2wkCXRm7JjZFgo2/SxAcv1PI8O2DUfi98qtLdBOr4cTpO0TO5 w1fMppw6D/1C3/LJd06MAv2b6W1zhQ/jqrvTIMlHWd+T3Q7SwRdSzoDp/74pLdWT rwCMkUaVRpazU3aYqhL9OvX7/yNicU+Tw9RTIP0buHcbp9hvbMYgVfx+F+wnHTVn 1bEijbJ1KItPDhG6reN2FAUtsCMXMvhqJv1wd24IJHLbsdJMPSTw5/6TTiFcAlyy RyG++jf/+j2/abv7gFYg8MQfBM/MK2T2U/FyfJ84fX5LmL8U/DtDVPjUwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEQEy7JVFoszHoUCc0sTotzmRmHyMB8GA1UdIwQY MBaAFCnCED/SQXyIaRRWF96U/MkTsIXvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2NJUVA5SkJmSWhwRkZZWDNwVDh5Uk93aGU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8yYjhkODItMzlmYi00YTU2LTg5YzUt OWQ1NjU3NTEzZTIwLzEvS2NJUVA5SkJmSWhwRkZZWDNwVDh5Uk93aGU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS8yYjhkODItMzlmYi00YTU2LTg5YzUtOWQ1NjU3NTEzZTIw LzEvS2NJUVA5SkJmSWhwRkZZWDNwVDh5Uk93aGU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZpC4MU5j G6EzACpSlmuoOOzB/nOSKIbfXLaYDocVlpvxpIkF1DlOkyXujYCXtRjdnWkKvo/I /TS3UJUJtKoQxQY1QZBULoeQK5vt+9FRMH4hiYxjW5Nk3ncIqYGA8NY4V/j4gXHk ya4axCXedVeQBApqFcOh4j0l+Sk+60c9u7bRipU4zx1MKjXqXVEzNwNpPODZ0Xxb Dl+VTJ3wgYYdnY+0728sdxDtdc4Is67tpStKLRdpGVeLksLPMfhXfvgfQB3Vjpp/ wnp0+xzfzP5TC4muPZvzd0nWd6y5PoHdHSxJt/gbxKlmClyApcapT/eSwVTMEsAl T3EJZL0mB4pdsw== -----END CERTIFICATE-----Generated at Tue Dec 16 19:12:57 2025 by rpki-client