This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft File: KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft (raw, json) Hash identifier: gpz/2ZGtjOTPe6SDAxYKPLGIrB16frxJSEl+/I33ZCk= Subject key identifier: 1F:89:6B:00:E1:4F:3F:EE:18:4C:13:BB:47:6A:9D:A7:3E:D3:AF:3A Authority key identifier: 28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2 Certificate issuer: /CN=28f8ede20b78f995993da98f434a966074d562c2 Certificate serial: 019AF50B49DC6F2D9889CC0CDE463F85B25C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft Manifest number: 0EEE Signing time: Sat 06 Dec 2025 19:02:28 +0000 Manifest this update: Sat 06 Dec 2025 19:02:28 +0000 Manifest next update: Sun 07 Dec 2025 19:02:28 +0000 Files and hashes: 1: KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl (hash: FJV7Q92KyOiHDzpYSPT5Wstsv43WmNX9clKzgAtoYWI=) 2: QrZTcjFrQJb3bvPYCzlmoBO_9JQ.roa (hash: WYTR6hwNEJJPOZupDqIytAiSQqBtGgxwk+L0S3fkxlw=) 3: oEDAb_-YZ2g4zh9tclXwopyXjP4.roa (hash: E6+8HcazGwD4GmKYHyq4M2SPeGPxJmXR/m+ObVabJaI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:49:dc:6f:2d:98:89:cc:0c:de:46:3f:85:b2:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28f8ede20b78f995993da98f434a966074d562c2 Validity Not Before: Dec 6 19:02:28 2025 GMT Not After : Dec 7 19:02:28 2025 GMT Subject: CN=1f896b00e14f3fee184c13bb476a9da73ed3af3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6c:9f:f0:59:a3:c5:6c:1a:4c:28:54:f6:3a: 6d:e7:67:76:46:f8:b2:88:9f:4b:f5:10:d0:e0:e2: ad:49:fb:fb:2e:87:62:52:ea:29:36:6e:24:55:5f: 87:5a:c8:e5:3a:e1:4a:ec:22:78:46:33:61:cf:1f: a2:72:96:b6:3d:14:84:c7:c9:68:1b:9b:ef:ef:12: 3e:b9:c9:5d:71:5c:3d:f4:52:cd:6c:2d:46:1e:82: be:37:2d:af:e9:25:8e:35:06:44:99:3c:62:ef:b6: ec:eb:e3:48:50:48:24:a9:08:d4:1c:c7:1a:b7:85: fe:80:9f:f2:82:47:99:12:64:7a:74:fe:15:9e:a3: 8b:5a:64:fa:cc:5b:83:73:20:1c:9b:f1:c9:b5:96: 6d:3f:ea:1e:55:06:97:41:61:e4:7c:77:0c:e1:80: 29:8a:ac:74:e7:09:a6:43:45:12:3d:d6:a4:75:2c: fe:c4:5f:01:c2:db:78:f7:b5:88:e8:5e:f3:64:eb: 46:b2:f8:40:0b:d5:e5:69:79:06:58:27:83:e5:ca: c7:1d:eb:f5:4d:f9:99:f7:64:f8:43:00:74:bc:2b: 67:d6:28:6b:ae:d9:fd:ad:b7:67:a7:26:0d:b2:ef: dd:a2:90:02:3f:2d:bc:36:59:f3:a2:83:2e:49:25: 4d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:89:6B:00:E1:4F:3F:EE:18:4C:13:BB:47:6A:9D:A7:3E:D3:AF:3A X509v3 Authority Key Identifier: keyid:28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:9b:4b:46:db:b1:4a:65:f3:79:ff:a1:16:26:e4:d4:b9:be: 55:a9:c1:3c:6e:a2:43:24:a5:03:04:a9:a7:85:8e:0e:35:d2: 80:5d:9d:52:1d:bc:e2:cd:2d:6d:c9:30:27:56:f8:37:5f:42: e5:f5:1c:ec:25:57:64:78:44:ea:17:e6:82:d4:be:2d:35:2f: c1:66:53:67:92:f2:9e:66:91:5a:5f:3c:72:13:d1:50:61:63: 81:07:cf:ee:1a:a2:19:5e:a7:8c:c6:07:9c:31:e7:b1:67:08: f6:03:fb:9f:8f:b9:48:61:06:3a:84:bf:84:82:3d:a3:88:48: 61:4b:84:67:aa:2e:4b:8d:84:33:18:ec:22:13:c1:53:5e:d5: 9c:3a:9c:e5:92:85:a4:d6:2c:89:09:00:c0:37:17:50:15:cf: 61:fa:39:2b:39:0b:80:2f:c9:54:7d:d5:1c:d2:7d:00:94:68: 61:05:c8:8b:ab:84:50:95:ac:2e:7f:25:fa:0c:98:da:04:9c: c6:8b:62:18:92:2e:ae:f9:3f:15:52:2d:4f:49:82:c3:f2:35: 2b:aa:92:33:b0:c5:ef:4a:80:c0:52:8b:3e:b4:06:d2:5b:9a: 5e:3d:ac:30:e9:99:25:c3:13:1a:c1:e1:fa:d8:34:29:a4:54: ec:6d:23:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C0ncby2YicwM3kY/hbJcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ZjhlZGUyMGI3OGY5OTU5OTNkYTk4ZjQzNGE5NjYwNzRk NTYyYzIwHhcNMjUxMjA2MTkwMjI4WhcNMjUxMjA3MTkwMjI4WjAzMTEwLwYDVQQD EygxZjg5NmIwMGUxNGYzZmVlMTg0YzEzYmI0NzZhOWRhNzNlZDNhZjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumyf8FmjxWwaTChU9jpt52d2Rviy iJ9L9RDQ4OKtSfv7LodiUuopNm4kVV+HWsjlOuFK7CJ4RjNhzx+icpa2PRSEx8lo G5vv7xI+ucldcVw99FLNbC1GHoK+Ny2v6SWONQZEmTxi77bs6+NIUEgkqQjUHMca t4X+gJ/ygkeZEmR6dP4VnqOLWmT6zFuDcyAcm/HJtZZtP+oeVQaXQWHkfHcM4YAp iqx05wmmQ0USPdakdSz+xF8Bwtt497WI6F7zZOtGsvhAC9XlaXkGWCeD5crHHev1 TfmZ92T4QwB0vCtn1ihrrtn9rbdnpyYNsu/dopACPy28NlnzooMuSSVN0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+JawDhTz/uGEwTu0dqnac+0686MB8GA1UdIwQY MBaAFCj47eILePmVmT2pj0NKlmB01WLCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1BqdDRndDQtWldaUGFtUFEwcVdZSFRWWXNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jZmNmZmEtNjAyOS00MmRkLTllZjgt OWQzYTBmMjNjYmU3LzEvS1BqdDRndDQtWldaUGFtUFEwcVdZSFRWWXNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9jZmNmZmEtNjAyOS00MmRkLTllZjgtOWQzYTBmMjNjYmU3 LzEvS1BqdDRndDQtWldaUGFtUFEwcVdZSFRWWXNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlZtLRtux SmXzef+hFibk1Lm+VanBPG6iQySlAwSpp4WODjXSgF2dUh284s0tbckwJ1b4N19C 5fUc7CVXZHhE6hfmgtS+LTUvwWZTZ5LynmaRWl88chPRUGFjgQfP7hqiGV6njMYH nDHnsWcI9gP7n4+5SGEGOoS/hII9o4hIYUuEZ6ouS42EMxjsIhPBU17VnDqc5ZKF pNYsiQkAwDcXUBXPYfo5KzkLgC/JVH3VHNJ9AJRoYQXIi6uEUJWsLn8l+gyY2gSc xotiGJIurvk/FVItT0mCw/I1K6qSM7DF70qAwFKLPrQG0luaXj2sMOmZJcMTGsHh +tg0KaRU7G0j2w== -----END CERTIFICATE-----Generated at Sat Dec 6 21:36:08 2025 by rpki-client