This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft File: _KXnwS9jZpo_aAySaEpD-ohO0Uw.mft (raw, json) Hash identifier: oBtvmpeHFfx3Gupa7ILK4CcMezHe2DbHdEmk+LIbKUk= Subject key identifier: CF:0B:DE:CE:A8:A2:27:F3:16:C2:14:F4:6D:D5:F1:C0:A4:A8:A1:93 Authority key identifier: FC:A5:E7:C1:2F:63:66:9A:3F:68:0C:92:68:4A:43:FA:88:4E:D1:4C Certificate issuer: /CN=fca5e7c12f63669a3f680c92684a43fa884ed14c Certificate serial: 019AF57861A3AE080C90F2D23A524F06D5AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KXnwS9jZpo_aAySaEpD-ohO0Uw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft Manifest number: 1665 Signing time: Sat 06 Dec 2025 21:01:38 +0000 Manifest this update: Sat 06 Dec 2025 21:01:38 +0000 Manifest next update: Sun 07 Dec 2025 21:01:38 +0000 Files and hashes: 1: _KXnwS9jZpo_aAySaEpD-ohO0Uw.crl (hash: mjDsKyONrUIFyGlb/CcWKJI2/AYUmSkZacihZtHJBos=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft rsync://rpki.ripe.net/repository/DEFAULT/_KXnwS9jZpo_aAySaEpD-ohO0Uw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:61:a3:ae:08:0c:90:f2:d2:3a:52:4f:06:d5:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fca5e7c12f63669a3f680c92684a43fa884ed14c Validity Not Before: Dec 6 21:01:38 2025 GMT Not After : Dec 7 21:01:38 2025 GMT Subject: CN=cf0bdecea8a227f316c214f46dd5f1c0a4a8a193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2e:2c:d8:56:0c:2d:58:3c:73:ce:13:19:8d: 7b:2b:c8:26:1f:2d:0b:75:ce:5f:51:47:53:8b:1a: b2:96:a1:94:13:fd:9e:d9:12:d2:5c:03:53:29:17: 53:aa:b2:a4:80:82:13:81:60:67:26:ea:07:61:16: 4f:fc:7a:a5:ef:20:58:50:ec:ed:58:c7:dc:ad:dd: 3f:1a:d1:77:53:b7:c0:05:e5:44:b4:25:71:de:36: 60:9f:49:43:9e:f2:63:57:76:1d:81:8c:bd:42:c4: 64:34:38:95:8f:e1:6f:c4:11:7c:ae:3d:cb:9f:95: bc:ac:85:fb:98:2a:df:49:81:cb:7a:0c:c8:da:92: a1:cf:69:ae:74:32:cd:38:d4:b5:9a:f4:27:db:28: 8b:6c:0b:c6:e1:12:e4:b8:fa:57:b7:e5:af:1b:d3: 57:96:fd:de:51:9e:46:24:00:b3:56:31:75:bd:ea: f6:cf:15:ac:4d:d6:14:36:67:e4:ca:8c:2c:3b:c7: cd:1b:6c:c1:cf:aa:7c:63:46:c2:0c:c5:50:9b:c9: dc:69:b0:e1:ce:47:ce:19:a9:fc:81:ef:33:89:2e: d8:17:61:0e:37:b3:6d:09:92:1c:de:4f:87:6d:b5: 63:63:9a:28:fc:38:66:c0:88:11:a0:20:8a:2c:4a: d5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:0B:DE:CE:A8:A2:27:F3:16:C2:14:F4:6D:D5:F1:C0:A4:A8:A1:93 X509v3 Authority Key Identifier: keyid:FC:A5:E7:C1:2F:63:66:9A:3F:68:0C:92:68:4A:43:FA:88:4E:D1:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KXnwS9jZpo_aAySaEpD-ohO0Uw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:41:ff:5c:67:7e:42:e5:e6:77:56:87:45:8f:73:ae:3a:73: c3:6f:5a:93:2e:e2:3e:a7:a4:54:e4:53:bd:f8:06:6a:35:7e: c4:bb:3d:e3:2b:fb:9f:da:6b:3d:54:97:d3:d1:52:b2:86:b9: fb:50:df:fc:12:df:d8:cc:16:d1:cd:12:de:80:34:22:24:33: 09:18:ef:0c:17:3e:72:41:86:09:ed:99:b6:9c:91:30:c8:e4: be:77:1c:da:57:6a:cc:06:09:f8:bc:78:3b:b2:65:bc:84:e3: df:58:45:f8:69:80:cd:4f:65:b0:49:32:65:8f:68:7e:7e:23: d3:56:fb:f5:1e:10:37:ac:79:d9:83:06:22:17:f3:85:10:25: 5c:4e:95:e2:eb:47:e8:e3:76:c6:6f:f4:15:38:30:95:16:dd: 04:35:27:7b:20:94:39:a0:9f:1a:4d:bc:0f:45:89:1e:59:1d: c5:42:14:bb:10:80:54:e6:92:09:ae:4d:07:78:f4:b5:46:37: b7:57:b3:d3:7e:0f:6e:e9:11:26:25:6a:d0:e7:82:47:ef:ef: 64:9c:5f:3b:1f:4a:08:e4:36:2c:fc:54:d2:3c:9b:7e:14:f0: 05:3c:ba:14:a9:a6:92:8e:40:c6:02:0d:6d:f1:25:04:42:53: e7:07:de:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eGGjrggMkPLSOlJPBtWtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYTVlN2MxMmY2MzY2OWEzZjY4MGM5MjY4NGE0M2ZhODg0 ZWQxNGMwHhcNMjUxMjA2MjEwMTM4WhcNMjUxMjA3MjEwMTM4WjAzMTEwLwYDVQQD EyhjZjBiZGVjZWE4YTIyN2YzMTZjMjE0ZjQ2ZGQ1ZjFjMGE0YThhMTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuy4s2FYMLVg8c84TGY17K8gmHy0L dc5fUUdTixqylqGUE/2e2RLSXANTKRdTqrKkgIITgWBnJuoHYRZP/Hql7yBYUOzt WMfcrd0/GtF3U7fABeVEtCVx3jZgn0lDnvJjV3YdgYy9QsRkNDiVj+FvxBF8rj3L n5W8rIX7mCrfSYHLegzI2pKhz2mudDLNONS1mvQn2yiLbAvG4RLkuPpXt+WvG9NX lv3eUZ5GJACzVjF1ver2zxWsTdYUNmfkyowsO8fNG2zBz6p8Y0bCDMVQm8ncabDh zkfOGan8ge8ziS7YF2EON7NtCZIc3k+HbbVjY5oo/DhmwIgRoCCKLErVVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM8L3s6ooifzFsIU9G3V8cCkqKGTMB8GA1UdIwQY MBaAFPyl58EvY2aaP2gMkmhKQ/qITtFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0tYbndTOWpacG9fYUF5U2FFcEQtb2hPMFV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC82OWRhMTItYmY0Zi00NzU1LTg3YWUt NWU5NGYwNDgyYTFkLzEvX0tYbndTOWpacG9fYUF5U2FFcEQtb2hPMFV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC82OWRhMTItYmY0Zi00NzU1LTg3YWUtNWU5NGYwNDgyYTFk LzEvX0tYbndTOWpacG9fYUF5U2FFcEQtb2hPMFV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF0H/XGd+ QuXmd1aHRY9zrjpzw29aky7iPqekVORTvfgGajV+xLs94yv7n9prPVSX09FSsoa5 +1Df/BLf2MwW0c0S3oA0IiQzCRjvDBc+ckGGCe2ZtpyRMMjkvncc2ldqzAYJ+Lx4 O7JlvITj31hF+GmAzU9lsEkyZY9ofn4j01b79R4QN6x52YMGIhfzhRAlXE6V4utH 6ON2xm/0FTgwlRbdBDUneyCUOaCfGk28D0WJHlkdxUIUuxCAVOaSCa5NB3j0tUY3 t1ez034PbukRJiVq0OeCR+/vZJxfOx9KCOQ2LPxU0jybfhTwBTy6FKmmko5AxgIN bfElBEJT5wfeew== -----END CERTIFICATE-----Generated at Sun Dec 7 01:34:41 2025 by rpki-client