This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft File: KcIQP9JBfIhpFFYX3pT8yROwhe8.mft (raw, json) Hash identifier: XgrKYms60/i+dH5Quv4RZQQrcTD45ZoknaKiuNCxmVk= Subject key identifier: 09:DE:22:D0:A3:C2:ED:1B:80:DC:81:7C:E0:25:C2:C0:B9:5E:BF:FB Authority key identifier: 29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF Certificate issuer: /CN=29c2103fd2417c8869145617de94fcc913b085ef Certificate serial: 019AF2097AC9290320DA5C58426F5E3C7FE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft Manifest number: 14E6 Signing time: Sat 06 Dec 2025 05:01:38 +0000 Manifest this update: Sat 06 Dec 2025 05:01:38 +0000 Manifest next update: Sun 07 Dec 2025 05:01:38 +0000 Files and hashes: 1: HFzLX8JfB09bMiykDXTNNVwsa28.roa (hash: RkC66kEQrpDYwov3VUFFbJbKcNeYjT04dJ6fhWE8V94=) 2: KcIQP9JBfIhpFFYX3pT8yROwhe8.crl (hash: yz25Jiuoq87cTh1+NauHze/cDBATLENQdmc8a2hv5DU=) 3: _C12IjEOj75oE5QypNCeEnRnlyI.roa (hash: EBWCxN3qkCMZlfAoAwH4ZzgBiUuNGMo8jh7xQFNJR1g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:7a:c9:29:03:20:da:5c:58:42:6f:5e:3c:7f:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29c2103fd2417c8869145617de94fcc913b085ef Validity Not Before: Dec 6 05:01:38 2025 GMT Not After : Dec 7 05:01:38 2025 GMT Subject: CN=09de22d0a3c2ed1b80dc817ce025c2c0b95ebffb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c6:23:dc:b8:90:a6:68:87:9a:7d:e6:fc:98: 49:1f:44:3d:02:98:5e:21:71:e1:c8:f7:63:5e:44: e3:cb:93:b0:f4:99:e1:8a:c5:d7:b8:2f:8c:b1:12: 3f:55:0f:f3:86:d7:4f:86:87:c7:ad:e3:88:ce:bf: d3:f2:d7:df:fc:f0:be:e1:a5:79:74:24:32:72:67: d2:e4:6c:12:1b:22:a2:11:66:8f:33:2d:f6:e6:f8: 1a:2c:61:01:36:d3:aa:78:21:fd:e5:4c:08:e3:ac: dc:ec:b3:f7:87:a3:1f:e7:39:23:cd:10:c9:d0:73: 68:35:41:5a:ea:07:19:f4:84:d8:c7:48:5f:e4:38: c3:59:70:58:f3:b2:bc:18:99:e4:43:ed:20:bc:ff: b5:0d:a6:d4:2e:eb:65:b5:fc:63:0c:72:14:8e:8f: ca:92:b9:7b:03:2f:ed:b1:b6:fb:fd:98:53:9d:50: d5:ee:b1:73:94:2a:e2:df:a7:74:99:ba:81:0f:2f: e8:a0:c8:ce:fb:4c:93:24:aa:97:f1:11:89:f7:7e: b8:af:d8:3f:b7:1e:29:09:23:52:dd:d1:4c:0d:95: da:72:d6:62:58:0f:15:d7:71:fb:19:4e:1a:97:c7: cb:24:0e:a3:1b:8f:92:26:fc:ef:2c:c5:03:5d:12: 9a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:DE:22:D0:A3:C2:ED:1B:80:DC:81:7C:E0:25:C2:C0:B9:5E:BF:FB X509v3 Authority Key Identifier: keyid:29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:bc:c4:44:0b:47:34:66:49:73:de:f6:c3:e9:e7:0d:51:6a: e2:85:fd:6e:75:a9:f2:2c:b3:61:df:9b:af:0c:f7:8b:3b:f2: fb:ee:87:a1:3a:f3:2f:79:e2:dd:65:40:1c:c9:b3:fb:34:99: aa:3f:5e:bf:8c:75:5b:20:6f:d5:e3:13:fa:5c:e7:8d:07:97: f6:6a:12:e9:2c:05:7f:21:4b:5a:23:c2:d7:0b:de:aa:15:68: b7:9d:4b:11:b6:05:ca:06:45:03:cf:1e:a4:59:b3:c0:c5:47: fb:dc:71:f0:1f:d3:13:b8:51:7b:a3:7e:5b:af:90:a8:72:e6: 84:ca:84:46:b5:28:cc:da:7f:1b:b5:2b:e6:b3:d5:27:e1:72: 08:e2:18:9c:d2:07:2a:3a:25:c8:33:4b:76:b3:3c:28:17:34: 4a:9f:9a:0c:52:08:8b:d4:ce:3f:83:79:90:21:8b:a8:0c:c1: 63:86:ca:7c:f2:79:da:45:e6:41:27:c9:43:75:53:50:ba:7b: f8:f5:f7:44:ec:02:76:e3:21:d5:df:ed:b6:7d:ee:1b:c7:80: 0e:17:a8:f5:38:9c:31:76:cb:bf:cc:bc:a4:1f:ea:ba:b8:76: 01:5a:8d:9d:5f:2b:52:49:ef:a3:1e:41:a1:94:49:97:0c:90: 08:07:f8:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCXrJKQMg2lxYQm9ePH/hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YzIxMDNmZDI0MTdjODg2OTE0NTYxN2RlOTRmY2M5MTNi MDg1ZWYwHhcNMjUxMjA2MDUwMTM4WhcNMjUxMjA3MDUwMTM4WjAzMTEwLwYDVQQD EygwOWRlMjJkMGEzYzJlZDFiODBkYzgxN2NlMDI1YzJjMGI5NWViZmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcYj3LiQpmiHmn3m/JhJH0Q9Aphe IXHhyPdjXkTjy5Ow9JnhisXXuC+MsRI/VQ/zhtdPhofHreOIzr/T8tff/PC+4aV5 dCQycmfS5GwSGyKiEWaPMy325vgaLGEBNtOqeCH95UwI46zc7LP3h6Mf5zkjzRDJ 0HNoNUFa6gcZ9ITYx0hf5DjDWXBY87K8GJnkQ+0gvP+1DabULutltfxjDHIUjo/K krl7Ay/tsbb7/ZhTnVDV7rFzlCri36d0mbqBDy/ooMjO+0yTJKqX8RGJ9364r9g/ tx4pCSNS3dFMDZXactZiWA8V13H7GU4al8fLJA6jG4+SJvzvLMUDXRKawwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAneItCjwu0bgNyBfOAlwsC5Xr/7MB8GA1UdIwQY MBaAFCnCED/SQXyIaRRWF96U/MkTsIXvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2NJUVA5SkJmSWhwRkZZWDNwVDh5Uk93aGU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8yYjhkODItMzlmYi00YTU2LTg5YzUt OWQ1NjU3NTEzZTIwLzEvS2NJUVA5SkJmSWhwRkZZWDNwVDh5Uk93aGU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS8yYjhkODItMzlmYi00YTU2LTg5YzUtOWQ1NjU3NTEzZTIw LzEvS2NJUVA5SkJmSWhwRkZZWDNwVDh5Uk93aGU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbrzERAtH NGZJc972w+nnDVFq4oX9bnWp8iyzYd+brwz3izvy++6HoTrzL3ni3WVAHMmz+zSZ qj9ev4x1WyBv1eMT+lznjQeX9moS6SwFfyFLWiPC1wveqhVot51LEbYFygZFA88e pFmzwMVH+9xx8B/TE7hRe6N+W6+QqHLmhMqERrUozNp/G7Ur5rPVJ+FyCOIYnNIH KjolyDNLdrM8KBc0Sp+aDFIIi9TOP4N5kCGLqAzBY4bKfPJ52kXmQSfJQ3VTULp7 +PX3ROwCduMh1d/ttn3uG8eADheo9TicMXbLv8y8pB/qurh2AVqNnV8rUknvox5B oZRJlwyQCAf4Nw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:48 2025 by rpki-client