This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft File: KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft (raw, json) Hash identifier: 8znxS4TKGVoncNjvpkYj/odU9zDC9lLM2gcL8PQejqE= Subject key identifier: 16:2E:7D:EB:D5:05:CC:D5:3B:04:2F:CD:A7:4A:32:BA:4A:85:1C:A8 Authority key identifier: 28:F9:81:C2:0A:A6:52:AA:85:E0:08:BD:26:2F:7B:C1:F8:56:C3:58 Certificate issuer: /CN=28f981c20aa652aa85e008bd262f7bc1f856c358 Certificate serial: 019AF208C5CD51BE5D54E06BE936A8371CB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft Manifest number: 11AB Signing time: Sat 06 Dec 2025 05:00:52 +0000 Manifest this update: Sat 06 Dec 2025 05:00:52 +0000 Manifest next update: Sun 07 Dec 2025 05:00:52 +0000 Files and hashes: 1: KPmBwgqmUqqF4Ai9Ji97wfhWw1g.crl (hash: 3FMeln5RIi9fz/eyS9Yr2DZpVV0wIPs+OogA74glS6o=) 2: rYNJq30hG9TfQKEAUAnbb-JlarU.roa (hash: bobhiWtsSX2sPVTtreNAJF6ae9i50YxHtcGAHPsK84U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.crl rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft rsync://rpki.ripe.net/repository/DEFAULT/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:c5:cd:51:be:5d:54:e0:6b:e9:36:a8:37:1c:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28f981c20aa652aa85e008bd262f7bc1f856c358 Validity Not Before: Dec 6 05:00:52 2025 GMT Not After : Dec 7 05:00:52 2025 GMT Subject: CN=162e7debd505ccd53b042fcda74a32ba4a851ca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:05:37:e1:d6:ed:26:ed:25:a4:ac:ce:0f:21: f8:3b:46:bf:eb:22:a5:f5:9e:85:6e:33:af:9a:57: a8:05:0c:dc:1a:34:c2:2f:ed:a5:59:7d:55:e2:8f: c9:8a:bd:4c:2a:56:b1:d7:97:44:ae:b6:7a:0e:c0: 15:a7:d1:9e:42:40:a7:f5:12:e1:0e:d2:96:7d:49: 6b:b9:1a:fd:42:ab:e2:67:f7:3d:22:3b:af:93:54: c7:3a:83:a5:c3:06:3b:ad:13:19:8e:80:a6:79:34: d7:3c:5d:53:1a:16:96:cf:0e:ca:7e:1a:c4:97:b7: 14:30:69:99:72:a1:bf:73:9c:54:32:03:e3:ff:05: a5:a5:cc:cb:df:12:1f:a8:34:60:2b:72:46:d0:74: 45:93:ca:fc:60:2e:23:5d:5b:5e:cc:7c:9c:a9:33: 6f:56:3b:25:ae:e3:bb:2e:1d:f9:98:58:b5:3f:d3: 8e:cc:19:ed:1b:58:47:e1:1a:de:9c:07:06:fe:07: b9:9f:56:2d:aa:3c:4d:51:e6:48:ff:a3:57:15:35: f1:3f:ef:72:51:81:30:16:32:db:e2:c2:0d:94:b6: 5b:65:b9:4e:8c:1a:f9:06:e2:6c:8e:da:d9:46:87: 55:6c:b0:f9:d8:34:6b:62:46:4b:b3:e5:f2:ce:bb: 68:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:2E:7D:EB:D5:05:CC:D5:3B:04:2F:CD:A7:4A:32:BA:4A:85:1C:A8 X509v3 Authority Key Identifier: keyid:28:F9:81:C2:0A:A6:52:AA:85:E0:08:BD:26:2F:7B:C1:F8:56:C3:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:a6:e2:6d:38:2c:ba:51:8a:4e:c6:ee:60:01:e5:f7:7e:e7: cc:67:f3:ef:6d:7e:45:f2:6b:6e:7c:e6:1b:3e:07:8b:6b:94: af:43:e9:3e:d7:f3:ef:5c:ef:20:69:c8:5a:14:b1:bf:0a:6d: d4:41:ea:87:37:27:14:a0:1b:15:03:07:bf:0f:50:3d:65:d8: 22:af:f3:0d:56:04:ea:3c:ef:cb:87:81:38:99:18:ad:f2:f6: 2d:8d:26:2b:35:98:37:0e:4a:6f:da:7c:50:34:5f:88:94:a5: fc:9f:5b:00:55:ed:00:93:2b:83:f8:f9:bf:3d:e2:96:3b:c4: dc:af:92:92:f5:1c:c4:b1:ec:2b:9c:ce:87:b1:f4:2b:4a:52: 7a:bb:6d:8c:c1:09:70:47:ba:28:36:13:00:e3:5d:df:d5:4c: 56:74:eb:e5:e0:15:16:5c:6a:bb:78:33:45:4f:8d:1d:e1:d1: 87:b4:52:41:1d:cf:aa:39:d1:12:ef:6c:22:cc:54:9c:18:db: be:8f:11:54:8d:7b:cd:d6:65:66:ea:43:e9:82:65:43:b5:17: b9:60:a0:21:f6:a5:69:cf:c4:19:2a:f2:a5:4b:a2:25:d5:96: f9:c6:a9:a6:b6:84:c2:b0:89:a2:8c:ae:db:95:f3:5d:56:79: 5f:11:75:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCMXNUb5dVOBr6TaoNxyzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4Zjk4MWMyMGFhNjUyYWE4NWUwMDhiZDI2MmY3YmMxZjg1 NmMzNTgwHhcNMjUxMjA2MDUwMDUyWhcNMjUxMjA3MDUwMDUyWjAzMTEwLwYDVQQD EygxNjJlN2RlYmQ1MDVjY2Q1M2IwNDJmY2RhNzRhMzJiYTRhODUxY2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAU34dbtJu0lpKzODyH4O0a/6yKl 9Z6FbjOvmleoBQzcGjTCL+2lWX1V4o/Jir1MKlax15dErrZ6DsAVp9GeQkCn9RLh DtKWfUlruRr9QqviZ/c9Ijuvk1THOoOlwwY7rRMZjoCmeTTXPF1TGhaWzw7KfhrE l7cUMGmZcqG/c5xUMgPj/wWlpczL3xIfqDRgK3JG0HRFk8r8YC4jXVtezHycqTNv VjslruO7Lh35mFi1P9OOzBntG1hH4RrenAcG/ge5n1YtqjxNUeZI/6NXFTXxP+9y UYEwFjLb4sINlLZbZblOjBr5BuJsjtrZRodVbLD52DRrYkZLs+XyzrtoiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBYufevVBczVOwQvzadKMrpKhRyoMB8GA1UdIwQY MBaAFCj5gcIKplKqheAIvSYve8H4VsNYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1BtQndncW1VcXFGNEFpOUppOTd3ZmhXdzFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zNTJmOWEtNGZkZS00ODRhLWI5MjMt Yzg3ZmJiZDAzZTg2LzEvS1BtQndncW1VcXFGNEFpOUppOTd3ZmhXdzFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8zNTJmOWEtNGZkZS00ODRhLWI5MjMtYzg3ZmJiZDAzZTg2 LzEvS1BtQndncW1VcXFGNEFpOUppOTd3ZmhXdzFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR6bibTgs ulGKTsbuYAHl937nzGfz721+RfJrbnzmGz4Hi2uUr0PpPtfz71zvIGnIWhSxvwpt 1EHqhzcnFKAbFQMHvw9QPWXYIq/zDVYE6jzvy4eBOJkYrfL2LY0mKzWYNw5Kb9p8 UDRfiJSl/J9bAFXtAJMrg/j5vz3iljvE3K+SkvUcxLHsK5zOh7H0K0pSerttjMEJ cEe6KDYTAONd39VMVnTr5eAVFlxqu3gzRU+NHeHRh7RSQR3PqjnREu9sIsxUnBjb vo8RVI17zdZlZupD6YJlQ7UXuWCgIfalac/EGSrypUuiJdWW+cappraEwrCJooyu 25XzXVZ5XxF1aA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:57:26 2025 by rpki-client