This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft File: KuK_S6R9cV5T4us9AS0_y80bDsA.mft (raw, json) Hash identifier: 57EK0d+fLZltqRgbnM7M7sfwN0p528L2s/HzYU2JSd8= Subject key identifier: 32:1A:08:BA:DC:05:F4:AE:DE:F8:E3:A7:9B:60:C7:63:68:43:8E:4D Authority key identifier: 2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0 Certificate issuer: /CN=2ae2bf4ba47d715e53e2eb3d012d3fcbcd1b0ec0 Certificate serial: 019AF16445E93FC688EBDEDA50E9342DF3AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft Manifest number: 01A3 Signing time: Sat 06 Dec 2025 02:01:11 +0000 Manifest this update: Sat 06 Dec 2025 02:01:11 +0000 Manifest next update: Sun 07 Dec 2025 02:01:11 +0000 Files and hashes: 1: ImNYtfmA17VPvuzFmVELDdKaFPo.roa (hash: qTcKtkAu4/tozlJ7sg/B8RXSaVxn+Vv1tRQIyPPwO20=) 2: KuK_S6R9cV5T4us9AS0_y80bDsA.crl (hash: I/hQhh/PH1tcu775/YekN8lCkgwmXApfBh79isEZjwg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.crl rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:45:e9:3f:c6:88:eb:de:da:50:e9:34:2d:f3:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ae2bf4ba47d715e53e2eb3d012d3fcbcd1b0ec0 Validity Not Before: Dec 6 02:01:11 2025 GMT Not After : Dec 7 02:01:11 2025 GMT Subject: CN=321a08badc05f4aedef8e3a79b60c76368438e4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:28:c9:41:70:a0:3a:e0:7d:28:5b:76:9b:df: a8:9c:07:a7:38:58:03:06:d2:a3:01:43:0a:42:07: a8:23:85:53:8e:95:ef:7a:98:58:69:64:52:42:55: 01:f2:ef:ad:bf:f9:0d:2c:a1:d6:be:66:25:1d:12: 3a:b5:a3:27:88:f0:80:f9:a2:51:8a:4a:31:09:d9: 2b:d9:43:4f:fa:be:12:46:e4:94:31:bb:1a:78:8f: 23:c7:b6:47:e9:85:f0:3d:12:5c:fa:96:f0:3a:3b: b4:f2:0a:14:62:21:5f:3f:41:47:f0:63:1a:c5:23: 3c:4c:c4:a9:23:a5:4a:0a:cf:dd:3a:70:ea:6d:16: 24:fa:02:99:c0:87:de:f5:3e:08:b7:bc:6c:bd:71: ec:7f:af:fc:c4:a9:bd:7b:af:f9:8c:89:e0:62:5f: 38:84:32:04:a0:ce:85:64:08:af:25:51:ad:cc:5c: 0c:27:e3:5e:76:5e:b6:76:30:31:04:ea:36:c5:30: aa:e8:b1:18:f6:f0:d1:dc:e9:98:fd:af:76:df:b8: d7:ad:ad:33:b1:0c:24:2b:e5:16:d8:4c:21:1e:bb: fd:3c:17:61:17:23:df:77:aa:73:b3:5b:bf:cc:51: 85:42:74:a0:34:ed:00:95:90:cf:2b:0d:0a:c1:a8: 1b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:1A:08:BA:DC:05:F4:AE:DE:F8:E3:A7:9B:60:C7:63:68:43:8E:4D X509v3 Authority Key Identifier: keyid:2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:11:f1:52:89:3a:58:4f:8e:a2:3c:27:47:72:8e:5a:10:db: 25:f0:0d:71:3c:b3:ac:c1:9d:86:d1:72:e4:79:3f:7b:9c:8d: 91:ac:a8:88:79:03:ac:89:79:3b:69:3f:65:95:c4:c9:b1:ef: 44:17:be:6f:cf:69:74:e4:9b:02:f3:0a:6f:ac:70:6e:a4:7e: ff:f9:62:70:7e:da:cc:ff:52:cb:cc:5e:19:18:41:bf:46:79: 31:cf:2b:54:ea:0f:dc:e2:ca:25:73:55:f5:49:64:30:8e:07: d1:d1:22:ea:80:71:14:96:74:a0:cb:42:cd:f0:26:52:bf:3f: 72:6f:d9:01:57:bf:a7:1b:fa:a8:5a:10:ce:21:9c:3a:d1:e2: f7:47:94:34:a6:ec:0d:7d:35:57:b9:3b:9b:16:9d:36:62:e3: 83:7e:0d:2a:24:13:fb:b2:cc:37:6b:c6:4a:33:fb:4c:80:aa: df:d7:11:6d:17:8f:2d:fb:8f:3f:77:a4:f0:1e:77:fd:12:56: b5:1f:0a:ad:55:75:2c:93:56:3a:7f:03:f9:b1:36:04:bf:7a: b7:4b:8b:83:d1:6a:5e:af:b5:e7:9e:2b:fa:ad:19:12:c7:95: 7b:9d:ca:61:7a:59:61:0d:1b:ca:06:a9:ed:2f:10:76:57:5d: ae:1f:cf:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZEXpP8aI697aUOk0LfOvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhZTJiZjRiYTQ3ZDcxNWU1M2UyZWIzZDAxMmQzZmNiY2Qx YjBlYzAwHhcNMjUxMjA2MDIwMTExWhcNMjUxMjA3MDIwMTExWjAzMTEwLwYDVQQD EygzMjFhMDhiYWRjMDVmNGFlZGVmOGUzYTc5YjYwYzc2MzY4NDM4ZTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyjJQXCgOuB9KFt2m9+onAenOFgD BtKjAUMKQgeoI4VTjpXvephYaWRSQlUB8u+tv/kNLKHWvmYlHRI6taMniPCA+aJR ikoxCdkr2UNP+r4SRuSUMbsaeI8jx7ZH6YXwPRJc+pbwOju08goUYiFfP0FH8GMa xSM8TMSpI6VKCs/dOnDqbRYk+gKZwIfe9T4It7xsvXHsf6/8xKm9e6/5jIngYl84 hDIEoM6FZAivJVGtzFwMJ+Nedl62djAxBOo2xTCq6LEY9vDR3OmY/a9237jXra0z sQwkK+UW2EwhHrv9PBdhFyPfd6pzs1u/zFGFQnSgNO0AlZDPKw0KwagbUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDIaCLrcBfSu3vjjp5tgx2NoQ45NMB8GA1UdIwQY MBaAFCriv0ukfXFeU+LrPQEtP8vNGw7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3VLX1M2UjljVjVUNHVzOUFTMF95ODBiRHNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80MGEyNzYtODUxNS00NDJjLTgxNmUt MzhlZWQ2ZGYwNTNiLzEvS3VLX1M2UjljVjVUNHVzOUFTMF95ODBiRHNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy80MGEyNzYtODUxNS00NDJjLTgxNmUtMzhlZWQ2ZGYwNTNi LzEvS3VLX1M2UjljVjVUNHVzOUFTMF95ODBiRHNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASBHxUok6 WE+OojwnR3KOWhDbJfANcTyzrMGdhtFy5Hk/e5yNkayoiHkDrIl5O2k/ZZXEybHv RBe+b89pdOSbAvMKb6xwbqR+//licH7azP9Sy8xeGRhBv0Z5Mc8rVOoP3OLKJXNV 9UlkMI4H0dEi6oBxFJZ0oMtCzfAmUr8/cm/ZAVe/pxv6qFoQziGcOtHi90eUNKbs DX01V7k7mxadNmLjg34NKiQT+7LMN2vGSjP7TICq39cRbRePLfuPP3ek8B53/RJW tR8KrVV1LJNWOn8D+bE2BL96t0uLg9FqXq+1554r+q0ZEseVe53KYXpZYQ0bygap 7S8Qdlddrh/P4g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:36 2025 by rpki-client