This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft File: KNyB6jid1qrE77w01S13jrp6f8Q.mft (raw, json) Hash identifier: deT0IjwU9PvjHa34D1EMwbF/htf8eLoXyRA96sR8iGg= Subject key identifier: 2E:AB:69:FC:F3:F5:C8:77:22:AA:3B:D9:67:07:F0:57:18:51:09:E4 Authority key identifier: 28:DC:81:EA:38:9D:D6:AA:C4:EF:BC:34:D5:2D:77:8E:BA:7A:7F:C4 Certificate issuer: /CN=28dc81ea389dd6aac4efbc34d52d778eba7a7fc4 Certificate serial: 019AF5785D854D01547595CCF5BD6BCF1537 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft Manifest number: 16E6 Signing time: Sat 06 Dec 2025 21:01:37 +0000 Manifest this update: Sat 06 Dec 2025 21:01:37 +0000 Manifest next update: Sun 07 Dec 2025 21:01:37 +0000 Files and hashes: 1: KNyB6jid1qrE77w01S13jrp6f8Q.crl (hash: ZnqAQtvRTbospfjnmpbrum8zYZsJmeJ7X9rN5K6rhpU=) 2: jzeNLpSr6ZsmMJ4zfkQyfVqA2rE.roa (hash: DE+RSjvcm7xMKntvmhh9CpWW/88iCje6f36L/NDszxo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:5d:85:4d:01:54:75:95:cc:f5:bd:6b:cf:15:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28dc81ea389dd6aac4efbc34d52d778eba7a7fc4 Validity Not Before: Dec 6 21:01:37 2025 GMT Not After : Dec 7 21:01:37 2025 GMT Subject: CN=2eab69fcf3f5c87722aa3bd96707f057185109e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:13:f1:2c:45:b4:92:5b:08:1f:0e:e1:84:f1: 7e:ba:6b:5d:5e:21:ea:96:74:de:bc:bc:1a:b3:5f: 5b:8e:2f:99:ec:5e:d5:3d:ad:39:08:31:cc:6e:f5: e7:c9:c3:54:e3:46:de:98:cb:47:1c:1a:38:a5:c3: ad:f9:df:ca:3a:38:fc:58:fa:e9:b5:1c:71:bc:1d: a0:86:16:5e:dc:79:a8:58:fd:8a:bf:41:62:08:3a: 67:e0:c4:6a:52:37:81:7d:56:73:bc:d0:31:fd:2d: 72:6c:25:7c:58:fc:1b:d0:ae:4d:2c:04:b4:70:ae: 04:87:d2:4e:60:d4:94:32:31:b2:1c:9e:7b:2f:ab: b3:3a:75:21:d6:0e:ea:47:1d:ba:3e:1d:9a:c0:36: 44:26:61:da:02:48:e2:6a:e5:eb:c1:66:71:9c:94: 90:46:52:82:c2:17:f8:5b:42:31:3b:72:eb:fa:d2: 2e:df:51:43:3d:d7:e4:80:e1:b9:f9:be:49:e5:1d: ea:b6:7a:05:4c:01:b0:ce:ea:db:97:fb:43:d0:12: c8:37:f8:37:af:f8:50:7c:61:28:14:3c:c2:b0:95: a8:b4:68:86:0f:36:ff:59:01:f3:41:53:79:29:1f: b1:19:fe:d3:27:ed:1e:20:89:ab:35:15:8a:2b:9e: 3b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:AB:69:FC:F3:F5:C8:77:22:AA:3B:D9:67:07:F0:57:18:51:09:E4 X509v3 Authority Key Identifier: keyid:28:DC:81:EA:38:9D:D6:AA:C4:EF:BC:34:D5:2D:77:8E:BA:7A:7F:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:ae:f5:53:15:ba:5f:63:bb:8c:30:85:d3:a4:78:45:df:b7: da:68:2a:48:5d:57:03:7e:d4:c4:39:ac:f6:9f:13:6e:f3:62: 0d:ed:2e:89:6e:8c:8d:29:d4:c0:81:47:8b:bb:6f:6b:d2:63: 10:49:90:38:1e:a9:db:fc:7d:b5:26:0f:ee:9e:e1:70:1e:02: 6c:9c:52:ec:40:90:f7:3b:1a:06:2b:2f:b4:a7:21:c5:31:ac: 74:3d:48:ee:d3:2b:c6:2a:d1:0c:fa:91:cd:0f:d5:66:ad:e5: 2f:9b:e8:c8:fe:e5:b2:ad:b0:9b:fc:b8:1d:76:6e:af:52:d8: 6f:32:7b:3c:fe:10:e3:7e:d0:a3:fa:68:41:9d:fe:07:23:48: 33:bb:6e:b2:1c:88:1d:bf:f1:d2:49:27:d0:88:04:cf:0d:cd: 83:4e:02:e2:ce:01:3f:da:6d:5d:91:49:52:10:18:a5:e5:c6: ed:37:f9:87:bd:d1:b5:e9:81:8d:10:53:58:22:7e:09:61:23: f1:68:2e:f7:d4:89:84:ff:cd:5d:b6:14:20:b4:b2:5e:78:5a: d6:6d:38:9c:ae:a4:43:f6:c9:22:b7:47:8a:c0:bb:bb:33:03: 3d:aa:36:74:4d:72:8d:ad:f8:38:74:1c:2b:f3:3f:62:23:11: 32:7b:f5:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eF2FTQFUdZXM9b1rzxU3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ZGM4MWVhMzg5ZGQ2YWFjNGVmYmMzNGQ1MmQ3NzhlYmE3 YTdmYzQwHhcNMjUxMjA2MjEwMTM3WhcNMjUxMjA3MjEwMTM3WjAzMTEwLwYDVQQD EygyZWFiNjlmY2YzZjVjODc3MjJhYTNiZDk2NzA3ZjA1NzE4NTEwOWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhPxLEW0klsIHw7hhPF+umtdXiHq lnTevLwas19bji+Z7F7VPa05CDHMbvXnycNU40bemMtHHBo4pcOt+d/KOjj8WPrp tRxxvB2ghhZe3HmoWP2Kv0FiCDpn4MRqUjeBfVZzvNAx/S1ybCV8WPwb0K5NLAS0 cK4Eh9JOYNSUMjGyHJ57L6uzOnUh1g7qRx26Ph2awDZEJmHaAkjiauXrwWZxnJSQ RlKCwhf4W0IxO3Lr+tIu31FDPdfkgOG5+b5J5R3qtnoFTAGwzurbl/tD0BLIN/g3 r/hQfGEoFDzCsJWotGiGDzb/WQHzQVN5KR+xGf7TJ+0eIImrNRWKK547ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6rafzz9ch3Iqo72WcH8FcYUQnkMB8GA1UdIwQY MBaAFCjcgeo4ndaqxO+8NNUtd466en/EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS055QjZqaWQxcXJFNzd3MDFTMTNqcnA2ZjhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9iNjljNmEtYjc4OC00YTFmLTljNWQt YzA3ZmZmNzQ2OTM4LzEvS055QjZqaWQxcXJFNzd3MDFTMTNqcnA2ZjhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9iNjljNmEtYjc4OC00YTFmLTljNWQtYzA3ZmZmNzQ2OTM4 LzEvS055QjZqaWQxcXJFNzd3MDFTMTNqcnA2ZjhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJa71UxW6 X2O7jDCF06R4Rd+32mgqSF1XA37UxDms9p8TbvNiDe0uiW6MjSnUwIFHi7tva9Jj EEmQOB6p2/x9tSYP7p7hcB4CbJxS7ECQ9zsaBisvtKchxTGsdD1I7tMrxirRDPqR zQ/VZq3lL5voyP7lsq2wm/y4HXZur1LYbzJ7PP4Q437Qo/poQZ3+ByNIM7tushyI Hb/x0kkn0IgEzw3Ng04C4s4BP9ptXZFJUhAYpeXG7Tf5h73RtemBjRBTWCJ+CWEj 8Wgu99SJhP/NXbYUILSyXnha1m04nK6kQ/bJIrdHisC7uzMDPao2dE1yja34OHQc K/M/YiMRMnv1Qg== -----END CERTIFICATE-----Generated at Sun Dec 7 03:42:39 2025 by rpki-client