This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft File: KPev7E0_BvgNaHKm1iRs0B5z1qY.mft (raw, json) Hash identifier: ENgs8xwPcsIo6VqVGyojabztSjnq1au7uiUaMWCFv5E= Subject key identifier: 68:9B:AF:D2:8F:08:A7:20:DB:CE:EB:2E:71:4A:9E:9A:99:F6:51:CE Authority key identifier: 28:F7:AF:EC:4D:3F:06:F8:0D:68:72:A6:D6:24:6C:D0:1E:73:D6:A6 Certificate issuer: /CN=28f7afec4d3f06f80d6872a6d6246cd01e73d6a6 Certificate serial: 019AF12EBECBDC694CAC4212A00A35065C5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPev7E0_BvgNaHKm1iRs0B5z1qY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 01:02:43 +0000 Manifest this update: Sat 06 Dec 2025 01:02:43 +0000 Manifest next update: Sun 07 Dec 2025 01:02:43 +0000 Files and hashes: 1: KPev7E0_BvgNaHKm1iRs0B5z1qY.crl (hash: LXVF5beNSVb7+iO0V0TNFLE3GuVy6eChNKzjloKF42w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft rsync://rpki.ripe.net/repository/DEFAULT/KPev7E0_BvgNaHKm1iRs0B5z1qY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:be:cb:dc:69:4c:ac:42:12:a0:0a:35:06:5c:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28f7afec4d3f06f80d6872a6d6246cd01e73d6a6 Validity Not Before: Dec 6 01:02:43 2025 GMT Not After : Dec 7 01:02:43 2025 GMT Subject: CN=689bafd28f08a720dbceeb2e714a9e9a99f651ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:86:54:5c:34:a1:24:6c:5b:72:83:dd:3c:f3: ee:29:7f:52:af:ce:9b:f6:c6:fd:33:f9:75:cd:91: 53:f1:35:62:23:43:dd:df:79:55:ba:df:38:a2:d9: 2c:00:16:0c:7c:d1:c2:be:d8:0a:70:2f:71:b9:cc: b8:1f:33:d6:9c:3c:8e:82:84:a6:9f:f5:15:16:b8: ac:ac:44:4d:a3:ad:00:3e:bb:9d:e1:22:f6:4b:b3: 86:e8:3a:9d:bc:be:c9:2c:d1:38:b4:8c:70:d3:c0: 4c:b3:0d:11:99:57:67:bd:96:59:a6:5d:44:f1:7d: de:ed:fe:2c:0c:53:59:43:92:ac:fe:8b:fb:1a:6e: 3b:f9:16:ce:85:f8:14:71:fc:8e:9e:0b:b0:62:a9: 78:81:9b:b6:48:d3:20:d1:2d:4f:25:f9:92:22:90: 96:a3:d7:e0:e7:a6:be:e4:25:67:cf:c1:d9:ff:c3: 9d:9c:f5:84:5b:62:15:02:cf:f4:51:04:0d:c4:ef: 59:a6:fc:98:56:bb:43:82:c3:0c:ed:b5:7a:70:ef: 06:a6:2e:df:76:e3:39:66:f7:82:f6:29:66:ac:b6: 76:d3:c5:fc:3c:82:b8:37:34:f5:7b:05:5b:6b:50: 3b:d8:92:5a:ce:18:e0:18:d1:08:61:de:93:9d:1c: 3a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:9B:AF:D2:8F:08:A7:20:DB:CE:EB:2E:71:4A:9E:9A:99:F6:51:CE X509v3 Authority Key Identifier: keyid:28:F7:AF:EC:4D:3F:06:F8:0D:68:72:A6:D6:24:6C:D0:1E:73:D6:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPev7E0_BvgNaHKm1iRs0B5z1qY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:2a:ce:60:14:b6:e6:52:f5:73:7b:c4:41:cb:f7:45:fd:07: da:15:1e:b1:1b:26:68:93:ee:e6:f9:45:f8:52:70:5f:7e:ee: d2:b9:cb:ee:b5:c0:e6:ce:32:23:1c:c9:d7:ac:01:d3:0b:9c: 5c:84:d8:bf:b5:d5:29:1b:42:f9:9f:83:21:82:f2:73:5d:50: 9c:7f:45:9f:6a:44:86:5b:b8:c7:48:9f:fa:b4:82:03:bf:ad: 5f:33:72:43:63:d7:bf:21:42:1a:09:a0:ef:75:42:48:78:71: 8e:6d:9d:7f:c5:9e:74:b1:16:1a:1e:78:b0:1a:69:29:14:19: 1e:dc:d5:b8:bf:76:a6:83:ca:9a:59:64:3e:de:b5:a0:7c:66: 18:10:33:bc:68:cf:1b:65:13:76:27:47:28:5b:5a:8d:5d:9a: a9:f6:50:d3:ec:6f:8d:1c:36:7e:7e:2e:f1:40:d7:ad:98:4c: 50:68:dc:e3:37:dc:87:b6:02:ea:10:a5:ba:95:d6:b2:23:c2: 3a:e2:f7:84:ba:e1:32:06:bd:66:e8:5f:3b:c0:e0:5c:30:64: 95:d7:64:2d:f3:ca:41:32:a0:e8:6c:57:4e:86:3a:df:41:da: 22:1d:1c:20:b2:4b:21:10:47:b2:31:ee:da:54:5f:7f:b8:d0: 15:a3:1c:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLr7L3GlMrEISoAo1BlxaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ZjdhZmVjNGQzZjA2ZjgwZDY4NzJhNmQ2MjQ2Y2QwMWU3 M2Q2YTYwHhcNMjUxMjA2MDEwMjQzWhcNMjUxMjA3MDEwMjQzWjAzMTEwLwYDVQQD Eyg2ODliYWZkMjhmMDhhNzIwZGJjZWViMmU3MTRhOWU5YTk5ZjY1MWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoZUXDShJGxbcoPdPPPuKX9Sr86b 9sb9M/l1zZFT8TViI0Pd33lVut84otksABYMfNHCvtgKcC9xucy4HzPWnDyOgoSm n/UVFrisrERNo60APrud4SL2S7OG6DqdvL7JLNE4tIxw08BMsw0RmVdnvZZZpl1E 8X3e7f4sDFNZQ5Ks/ov7Gm47+RbOhfgUcfyOnguwYql4gZu2SNMg0S1PJfmSIpCW o9fg56a+5CVnz8HZ/8OdnPWEW2IVAs/0UQQNxO9ZpvyYVrtDgsMM7bV6cO8Gpi7f duM5ZveC9ilmrLZ208X8PIK4NzT1ewVba1A72JJazhjgGNEIYd6TnRw6gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGibr9KPCKcg287rLnFKnpqZ9lHOMB8GA1UdIwQY MBaAFCj3r+xNPwb4DWhyptYkbNAec9amMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1BldjdFMF9CdmdOYUhLbTFpUnMwQjV6MXFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8yMTdhMzAtOGVlMS00OTEzLWExMjct NTc2ZDQwM2M5MThmLzEvS1BldjdFMF9CdmdOYUhLbTFpUnMwQjV6MXFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8yMTdhMzAtOGVlMS00OTEzLWExMjctNTc2ZDQwM2M5MThm LzEvS1BldjdFMF9CdmdOYUhLbTFpUnMwQjV6MXFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABSrOYBS2 5lL1c3vEQcv3Rf0H2hUesRsmaJPu5vlF+FJwX37u0rnL7rXA5s4yIxzJ16wB0wuc XITYv7XVKRtC+Z+DIYLyc11QnH9Fn2pEhlu4x0if+rSCA7+tXzNyQ2PXvyFCGgmg 73VCSHhxjm2df8WedLEWGh54sBppKRQZHtzVuL92poPKmllkPt61oHxmGBAzvGjP G2UTdidHKFtajV2aqfZQ0+xvjRw2fn4u8UDXrZhMUGjc4zfch7YC6hClupXWsiPC OuL3hLrhMga9ZuhfO8DgXDBklddkLfPKQTKg6GxXToY630HaIh0cILJLIRBHsjHu 2lRff7jQFaMcPg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:33:28 2025 by rpki-client