This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/KfUkAji4KPFuYCKeJjNQPwSEZZk.mft File: KfUkAji4KPFuYCKeJjNQPwSEZZk.mft (raw, json) Hash identifier: 6tkuPPOCQM2N8BmaZUVyB6n0q2bz+zTVUA8jmmt2vYg= Subject key identifier: C8:81:36:22:15:AB:41:A7:BC:6C:F3:BF:15:BB:20:CA:73:E4:43:8D Authority key identifier: 29:F5:24:02:38:B8:28:F1:6E:60:22:9E:26:33:50:3F:04:84:65:99 Certificate issuer: /CN=29f5240238b828f16e60229e2633503f04846599 Certificate serial: 019AF208DB78CFD513C1C2F7773F425F0F83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfUkAji4KPFuYCKeJjNQPwSEZZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/KfUkAji4KPFuYCKeJjNQPwSEZZk.mft Manifest number: 0452 Signing time: Sat 06 Dec 2025 05:00:58 +0000 Manifest this update: Sat 06 Dec 2025 05:00:58 +0000 Manifest next update: Sun 07 Dec 2025 05:00:58 +0000 Files and hashes: 1: KfUkAji4KPFuYCKeJjNQPwSEZZk.crl (hash: uPIHtj7vUqlvoT+mr1Hqxtg+g/BqHr9EVyudGICbzU0=) 2: ffvaic9mo-Ox_7Jsdhd4jhWeyvM.roa (hash: nAU1XWM3o+xHaVb0+VtmU8Q3s90CIRxbMQo+s7S+UMk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/KfUkAji4KPFuYCKeJjNQPwSEZZk.crl rsync://rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/KfUkAji4KPFuYCKeJjNQPwSEZZk.mft rsync://rpki.ripe.net/repository/DEFAULT/KfUkAji4KPFuYCKeJjNQPwSEZZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:db:78:cf:d5:13:c1:c2:f7:77:3f:42:5f:0f:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29f5240238b828f16e60229e2633503f04846599 Validity Not Before: Dec 6 05:00:58 2025 GMT Not After : Dec 7 05:00:58 2025 GMT Subject: CN=c881362215ab41a7bc6cf3bf15bb20ca73e4438d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d7:6a:e3:60:e3:2a:62:19:f2:4c:fb:ac:f5: 11:39:02:c2:d1:75:86:94:41:b9:5d:5b:2a:87:48: 4f:e4:73:14:6b:19:07:bd:79:51:c9:cf:48:f1:ec: 30:71:3a:f9:f2:a6:b7:96:ae:8c:e6:7d:7e:c5:1b: 49:d7:0b:67:28:5f:93:6b:5a:43:11:fe:18:15:dd: 18:4b:3d:15:58:3f:aa:b2:03:fa:9e:2e:dc:81:ac: 72:75:a2:15:ea:5f:7e:17:3b:63:52:0c:3e:99:fb: 5d:bc:3e:23:fa:cf:d2:37:f1:69:cd:fa:de:fa:fb: bf:99:9f:7b:85:b4:cb:7e:e0:e4:ec:1b:3a:03:65: e1:52:53:ac:00:58:01:33:17:9c:28:76:23:c8:71: 22:63:51:72:9f:b9:ce:ef:a9:fa:97:d9:87:82:d3: e8:95:1f:4e:b0:7c:63:58:e8:02:7e:c6:27:48:22: d8:c4:df:37:73:94:3a:03:2d:91:64:0c:c1:22:32: 6c:53:f2:11:2b:70:6e:bc:ed:12:5d:d8:71:52:77: 22:10:44:27:85:35:d5:ae:37:df:75:8b:df:21:f2: 66:fa:2d:f8:63:e2:c5:0e:77:5f:b6:62:62:c2:b4: fc:32:ef:a1:e9:9c:d2:55:53:83:b7:37:82:7d:ef: ea:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:81:36:22:15:AB:41:A7:BC:6C:F3:BF:15:BB:20:CA:73:E4:43:8D X509v3 Authority Key Identifier: keyid:29:F5:24:02:38:B8:28:F1:6E:60:22:9E:26:33:50:3F:04:84:65:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfUkAji4KPFuYCKeJjNQPwSEZZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/KfUkAji4KPFuYCKeJjNQPwSEZZk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/KfUkAji4KPFuYCKeJjNQPwSEZZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:64:7c:7a:33:20:8b:f0:ca:ba:3a:4c:bc:8e:1e:b8:fe:40: 4b:5b:06:f1:76:2e:f4:9a:e4:28:8b:c9:4b:8f:73:4b:41:83: 8c:f3:12:7e:43:b7:fc:c0:2c:79:f7:38:b0:a5:76:ec:d0:48: b5:93:a0:3e:14:27:a0:0f:75:5c:7f:9d:62:85:aa:9d:2f:2b: 65:13:bd:97:7a:c7:b3:bd:1f:9c:6d:03:d3:1e:a5:32:78:56: c4:bc:39:2a:d7:2b:a9:ba:31:18:97:fc:f7:09:d3:98:25:18: 78:ec:f3:f0:6e:94:9d:25:45:f3:73:f3:50:4b:3a:74:4e:57: b4:52:0c:b1:92:89:bc:27:81:37:fd:3a:38:5f:7e:c6:39:22: 73:77:f1:ac:b4:cb:96:90:de:62:7d:bc:74:7a:df:e5:b6:75: c9:19:46:c1:c1:6b:b6:f4:4d:a4:8e:d6:54:aa:ca:8d:1a:40: 2b:68:cf:56:60:a2:87:8d:e3:f1:49:c9:3f:4e:89:ae:4f:fc: 4f:b8:86:ba:44:86:3f:3e:ad:18:d2:ba:af:2a:f0:b7:ba:b9: 2d:a7:d9:bc:d4:fd:aa:c6:07:0a:f2:0a:55:a9:1c:bb:9f:d9: 71:49:a3:6f:d9:ec:07:e7:77:19:36:26:8e:4c:a0:82:bd:9e: 87:95:3a:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNt4z9UTwcL3dz9CXw+DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZjUyNDAyMzhiODI4ZjE2ZTYwMjI5ZTI2MzM1MDNmMDQ4 NDY1OTkwHhcNMjUxMjA2MDUwMDU4WhcNMjUxMjA3MDUwMDU4WjAzMTEwLwYDVQQD EyhjODgxMzYyMjE1YWI0MWE3YmM2Y2YzYmYxNWJiMjBjYTczZTQ0MzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ndq42DjKmIZ8kz7rPUROQLC0XWG lEG5XVsqh0hP5HMUaxkHvXlRyc9I8ewwcTr58qa3lq6M5n1+xRtJ1wtnKF+Ta1pD Ef4YFd0YSz0VWD+qsgP6ni7cgaxydaIV6l9+FztjUgw+mftdvD4j+s/SN/Fpzfre +vu/mZ97hbTLfuDk7Bs6A2XhUlOsAFgBMxecKHYjyHEiY1Fyn7nO76n6l9mHgtPo lR9OsHxjWOgCfsYnSCLYxN83c5Q6Ay2RZAzBIjJsU/IRK3BuvO0SXdhxUnciEEQn hTXVrjffdYvfIfJm+i34Y+LFDndftmJiwrT8Mu+h6ZzSVVODtzeCfe/q9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMiBNiIVq0GnvGzzvxW7IMpz5EONMB8GA1UdIwQY MBaAFCn1JAI4uCjxbmAiniYzUD8EhGWZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2ZVa0FqaTRLUEZ1WUNLZUpqTlFQd1NFWlprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8wNjE0YTYtZDAxYy00ZmYyLWE5OTMt NzI0NjQ1N2ZkMmIzLzEvS2ZVa0FqaTRLUEZ1WUNLZUpqTlFQd1NFWlprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8wNjE0YTYtZDAxYy00ZmYyLWE5OTMtNzI0NjQ1N2ZkMmIz LzEvS2ZVa0FqaTRLUEZ1WUNLZUpqTlFQd1NFWlprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArGR8ejMg i/DKujpMvI4euP5AS1sG8XYu9JrkKIvJS49zS0GDjPMSfkO3/MAsefc4sKV27NBI tZOgPhQnoA91XH+dYoWqnS8rZRO9l3rHs70fnG0D0x6lMnhWxLw5KtcrqboxGJf8 9wnTmCUYeOzz8G6UnSVF83PzUEs6dE5XtFIMsZKJvCeBN/06OF9+xjkic3fxrLTL lpDeYn28dHrf5bZ1yRlGwcFrtvRNpI7WVKrKjRpAK2jPVmCih43j8UnJP06Jrk/8 T7iGukSGPz6tGNK6ryrwt7q5LafZvNT9qsYHCvIKVakcu5/ZcUmjb9nsB+d3GTYm jkyggr2eh5U6Rg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:19 2025 by rpki-client