This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft File: ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft (raw, json) Hash identifier: CCQXxCf4N5ihZfV1qCTzd43ick3ARQfXMBEt28jUfU8= Subject key identifier: DA:94:00:98:FC:A3:5D:57:8F:D1:AB:9C:72:4E:8C:C8:20:49:A4:22 Authority key identifier: 92:EF:F6:16:25:02:EA:3B:52:FD:8C:A3:AE:10:8D:13:D6:BF:F6:52 Certificate issuer: /CN=92eff6162502ea3b52fd8ca3ae108d13d6bff652 Certificate serial: 019AF50A104F734475E95CF80B979278F11E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 19:01:08 +0000 Manifest this update: Sat 06 Dec 2025 19:01:08 +0000 Manifest next update: Sun 07 Dec 2025 19:01:08 +0000 Files and hashes: 1: ku_2FiUC6jtS_YyjrhCNE9a_9lI.crl (hash: 7hEv7JMEeNXH2L0cBR5UAJWWMqmMI0G//0kmt1DOos0=) 2: vIUD6qLiZhlDA8IvWgGD4RFZTgQ.roa (hash: 8f4c2O05sapdQ4wcaKqtNByBFKGfiB5rQ1o7fR58j44=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft rsync://rpki.ripe.net/repository/DEFAULT/ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:10:4f:73:44:75:e9:5c:f8:0b:97:92:78:f1:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92eff6162502ea3b52fd8ca3ae108d13d6bff652 Validity Not Before: Dec 6 19:01:08 2025 GMT Not After : Dec 7 19:01:08 2025 GMT Subject: CN=da940098fca35d578fd1ab9c724e8cc82049a422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:de:a7:fd:ed:69:cd:2a:52:a6:4a:b2:32:e4: af:bf:b5:ff:9a:fc:c4:c2:63:f6:d1:88:7f:c9:c5: e9:c5:81:f2:9e:ad:99:b0:48:29:c9:f3:e3:68:a5: e8:f2:8e:56:ec:40:63:27:34:4c:5f:b5:27:fe:72: 6e:a8:27:cc:b0:ba:24:59:96:f9:5d:22:4d:a9:d8: 32:03:a1:6a:8a:07:77:f7:2d:c7:f8:f1:7c:2e:fd: 58:e6:d5:a8:00:29:45:2e:a8:a4:15:20:d6:05:66: d0:95:a5:0c:a8:45:3e:d5:4d:ed:6a:38:a5:8d:b6: 4c:c4:5f:0d:bb:e5:b8:94:ee:16:30:67:81:f2:be: 06:a2:ff:d5:19:22:7b:3d:79:19:4a:0a:59:ba:38: 4b:74:81:50:9e:01:3c:a3:81:43:b1:be:5d:0d:95: df:60:29:46:f5:69:7e:d6:f7:78:2b:2d:e6:d6:85: 4e:a5:92:ab:e6:1e:bf:09:32:94:c5:34:5c:75:2b: 5c:6f:a7:b3:a7:2a:dd:62:a4:c4:b6:08:2d:a9:23: 5c:26:1c:93:44:d5:80:d8:01:2b:96:48:56:68:83: e8:bd:9d:d7:cc:04:e2:25:ec:23:5c:35:e3:f5:39: 8c:50:e2:49:86:d0:66:84:fa:9c:21:3c:80:4c:d9: d6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:94:00:98:FC:A3:5D:57:8F:D1:AB:9C:72:4E:8C:C8:20:49:A4:22 X509v3 Authority Key Identifier: keyid:92:EF:F6:16:25:02:EA:3B:52:FD:8C:A3:AE:10:8D:13:D6:BF:F6:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:73:1a:f8:56:a4:78:b4:17:0e:22:d6:cc:aa:57:07:5f:e3: 1d:bf:93:52:45:e1:3a:d5:56:7e:63:41:45:50:5c:e4:07:4e: a4:fa:d9:ac:92:b3:e8:8e:86:24:80:a5:cc:7b:ae:80:25:e5: 4c:bb:bd:69:39:64:16:70:22:52:79:b4:0a:f5:d6:73:4c:65: ad:6c:25:0f:fa:f6:a2:81:35:95:35:02:c9:df:b3:6d:53:27: 82:c0:71:55:e8:3b:45:60:0e:50:5c:72:03:ea:51:a3:92:44: 15:82:6d:03:da:73:b3:f1:53:13:d4:a9:b0:f9:7c:71:97:cd: 15:f5:8c:59:4b:44:24:2e:d2:48:5a:50:54:8b:2d:16:f2:ca: d0:ae:b3:58:7d:38:b3:56:0f:76:75:f4:ab:8f:40:1a:10:35: 89:e3:0e:1e:29:6d:b9:f3:2a:36:07:e0:b6:d3:79:26:f2:8f: 96:af:14:c7:80:fa:4a:c6:26:c1:8e:ff:29:19:19:ee:09:d3: ee:6a:29:e0:02:06:3b:dd:33:65:b7:8c:b0:de:4e:f9:43:c6: 7c:34:2c:d1:07:6d:d7:b4:5d:c5:ed:cd:0f:a9:cd:ef:26:e6: 1f:53:01:da:f7:1a:ad:fe:c3:d1:03:38:a8:06:79:3c:9a:94: c5:5a:ba:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1ChBPc0R16Vz4C5eSePEeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZWZmNjE2MjUwMmVhM2I1MmZkOGNhM2FlMTA4ZDEzZDZi ZmY2NTIwHhcNMjUxMjA2MTkwMTA4WhcNMjUxMjA3MTkwMTA4WjAzMTEwLwYDVQQD EyhkYTk0MDA5OGZjYTM1ZDU3OGZkMWFiOWM3MjRlOGNjODIwNDlhNDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsN6n/e1pzSpSpkqyMuSvv7X/mvzE wmP20Yh/ycXpxYHynq2ZsEgpyfPjaKXo8o5W7EBjJzRMX7Un/nJuqCfMsLokWZb5 XSJNqdgyA6Fqigd39y3H+PF8Lv1Y5tWoAClFLqikFSDWBWbQlaUMqEU+1U3tajil jbZMxF8Nu+W4lO4WMGeB8r4Gov/VGSJ7PXkZSgpZujhLdIFQngE8o4FDsb5dDZXf YClG9Wl+1vd4Ky3m1oVOpZKr5h6/CTKUxTRcdStcb6ezpyrdYqTEtggtqSNcJhyT RNWA2AErlkhWaIPovZ3XzATiJewjXDXj9TmMUOJJhtBmhPqcITyATNnWDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNqUAJj8o11Xj9GrnHJOjMggSaQiMB8GA1UdIwQY MBaAFJLv9hYlAuo7Uv2Mo64QjRPWv/ZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3VfMkZpVUM2anRTX1l5anJoQ05FOWFfOWxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS83OTQzYTAtY2NhYi00MjYwLWJkNTEt YWZlODlhYWNjNDkyLzEva3VfMkZpVUM2anRTX1l5anJoQ05FOWFfOWxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS83OTQzYTAtY2NhYi00MjYwLWJkNTEtYWZlODlhYWNjNDky LzEva3VfMkZpVUM2anRTX1l5anJoQ05FOWFfOWxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAonMa+Fak eLQXDiLWzKpXB1/jHb+TUkXhOtVWfmNBRVBc5AdOpPrZrJKz6I6GJIClzHuugCXl TLu9aTlkFnAiUnm0CvXWc0xlrWwlD/r2ooE1lTUCyd+zbVMngsBxVeg7RWAOUFxy A+pRo5JEFYJtA9pzs/FTE9SpsPl8cZfNFfWMWUtEJC7SSFpQVIstFvLK0K6zWH04 s1YPdnX0q49AGhA1ieMOHiltufMqNgfgttN5JvKPlq8Ux4D6SsYmwY7/KRkZ7gnT 7mop4AIGO90zZbeMsN5O+UPGfDQs0Qdt17Rdxe3ND6nN7ybmH1MB2vcarf7D0QM4 qAZ5PJqUxVq6Tw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:03:01 2025 by rpki-client