This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/KfUkAji4KPFuYCKeJjNQPwSEZZk.mft File: KfUkAji4KPFuYCKeJjNQPwSEZZk.mft (raw, json) Hash identifier: ah2+IQa/P9WUNo01+I7CLEDzyX712nVsXPTzslg4hUM= Subject key identifier: 75:0F:43:C7:05:1E:35:81:5B:4F:DB:8D:27:35:38:97:75:81:CF:C9 Authority key identifier: 29:F5:24:02:38:B8:28:F1:6E:60:22:9E:26:33:50:3F:04:84:65:99 Certificate issuer: /CN=29f5240238b828f16e60229e2633503f04846599 Certificate serial: 019B35A014DC0322606EB409061DE10A160C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfUkAji4KPFuYCKeJjNQPwSEZZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/KfUkAji4KPFuYCKeJjNQPwSEZZk.mft Manifest number: 0475 Signing time: Fri 19 Dec 2025 08:00:42 +0000 Manifest this update: Fri 19 Dec 2025 08:00:42 +0000 Manifest next update: Sat 20 Dec 2025 08:00:42 +0000 Files and hashes: 1: KfUkAji4KPFuYCKeJjNQPwSEZZk.crl (hash: 5v4dREkSIZosNWPKFTh6rfpLcQTplbPuFEPe2Uocarg=) 2: ffvaic9mo-Ox_7Jsdhd4jhWeyvM.roa (hash: nAU1XWM3o+xHaVb0+VtmU8Q3s90CIRxbMQo+s7S+UMk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/KfUkAji4KPFuYCKeJjNQPwSEZZk.crl rsync://rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/KfUkAji4KPFuYCKeJjNQPwSEZZk.mft rsync://rpki.ripe.net/repository/DEFAULT/KfUkAji4KPFuYCKeJjNQPwSEZZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:14:dc:03:22:60:6e:b4:09:06:1d:e1:0a:16:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29f5240238b828f16e60229e2633503f04846599 Validity Not Before: Dec 19 08:00:42 2025 GMT Not After : Dec 20 08:00:42 2025 GMT Subject: CN=750f43c7051e35815b4fdb8d273538977581cfc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:44:a1:ff:d7:7d:9a:2a:1c:cd:b8:36:80:a8: 11:15:5c:58:d8:d5:62:36:8f:c5:ea:44:be:76:e6: a1:0c:8c:ce:41:fa:d1:88:eb:bb:a1:6b:cb:33:e2: 4c:d8:1d:08:0e:ee:90:d7:41:f4:76:16:b2:e4:18: df:cf:74:96:24:e3:f9:a2:51:fb:46:98:e0:4d:ce: cb:d8:b5:1a:7f:09:2d:f2:2c:2c:fa:17:50:52:58: ca:70:87:aa:25:63:e2:02:2e:3f:fc:f3:9f:98:e3: 6d:01:df:53:0e:49:12:e3:2e:c1:4e:e1:67:fe:6a: ce:3d:6b:b7:21:ef:a1:fb:3e:ea:f4:7a:74:c3:aa: 96:8c:6c:0b:b9:5f:40:22:cf:ca:11:a3:2e:34:8b: ce:c2:e5:91:01:cb:f7:89:a0:81:79:1e:d0:4f:09: 6a:ee:68:e1:b1:2a:af:56:0a:43:d0:37:94:d3:a6: d4:f6:af:6a:ca:c4:61:bf:e9:51:97:3b:a5:b5:43: 3e:ad:8c:ea:41:15:40:5e:7f:17:92:fb:b6:c0:83: 7f:cb:e4:47:ed:a0:a7:3f:ab:8d:5e:d4:c4:3b:88: 7f:42:9a:7c:c9:31:c8:2c:4b:89:b6:da:88:fd:88: 7a:32:60:a1:b1:f9:b1:aa:52:5a:26:aa:32:b5:9c: 82:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:0F:43:C7:05:1E:35:81:5B:4F:DB:8D:27:35:38:97:75:81:CF:C9 X509v3 Authority Key Identifier: keyid:29:F5:24:02:38:B8:28:F1:6E:60:22:9E:26:33:50:3F:04:84:65:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfUkAji4KPFuYCKeJjNQPwSEZZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/KfUkAji4KPFuYCKeJjNQPwSEZZk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/KfUkAji4KPFuYCKeJjNQPwSEZZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:1d:96:95:b4:fb:60:22:09:4f:0e:8c:20:3a:40:37:ca:b8: c6:a9:83:37:ec:20:04:03:ce:8f:0c:da:a5:91:9a:25:0f:9f: 96:7e:98:9b:75:78:ef:12:63:4a:07:02:5b:1b:75:27:41:9b: 69:6c:a9:0d:d2:2e:30:24:15:0a:81:90:12:ea:fb:a0:1a:4b: 7a:76:7b:9e:f1:4d:04:24:25:8b:98:5a:3b:28:f1:b7:b1:93: e5:6f:93:6b:bb:b9:14:ea:b3:57:f3:b7:71:45:6c:94:54:4e: 72:3b:1b:35:68:de:d3:b8:42:c4:75:e9:0b:19:86:29:58:c6: d7:7a:d7:42:2e:f6:a9:a0:3c:a8:12:cc:cd:d7:0d:b4:f8:c8: f3:96:58:eb:a7:bb:ce:05:78:7e:88:9c:f7:b4:e7:f6:5e:6e: 3f:99:3a:c8:ab:6e:58:31:40:c6:b4:67:d0:64:59:78:31:40: ea:f2:4f:b7:10:19:cf:d2:ed:66:4c:6e:d8:c8:69:02:73:56: 84:24:05:ee:29:d6:c2:7f:48:11:c9:34:d8:44:93:78:b3:ce: f6:ad:16:c2:bb:f1:ab:45:e8:a7:04:c4:5a:40:9e:5e:1e:b5: 61:be:2e:81:b4:93:e9:55:81:ea:c8:6a:e3:de:0c:b1:81:70: 65:c9:21:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oBTcAyJgbrQJBh3hChYMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZjUyNDAyMzhiODI4ZjE2ZTYwMjI5ZTI2MzM1MDNmMDQ4 NDY1OTkwHhcNMjUxMjE5MDgwMDQyWhcNMjUxMjIwMDgwMDQyWjAzMTEwLwYDVQQD Eyg3NTBmNDNjNzA1MWUzNTgxNWI0ZmRiOGQyNzM1Mzg5Nzc1ODFjZmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9USh/9d9mioczbg2gKgRFVxY2NVi No/F6kS+duahDIzOQfrRiOu7oWvLM+JM2B0IDu6Q10H0dhay5Bjfz3SWJOP5olH7 RpjgTc7L2LUafwkt8iws+hdQUljKcIeqJWPiAi4//POfmONtAd9TDkkS4y7BTuFn /mrOPWu3Ie+h+z7q9Hp0w6qWjGwLuV9AIs/KEaMuNIvOwuWRAcv3iaCBeR7QTwlq 7mjhsSqvVgpD0DeU06bU9q9qysRhv+lRlzultUM+rYzqQRVAXn8Xkvu2wIN/y+RH 7aCnP6uNXtTEO4h/Qpp8yTHILEuJttqI/Yh6MmChsfmxqlJaJqoytZyCRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHUPQ8cFHjWBW0/bjSc1OJd1gc/JMB8GA1UdIwQY MBaAFCn1JAI4uCjxbmAiniYzUD8EhGWZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2ZVa0FqaTRLUEZ1WUNLZUpqTlFQd1NFWlprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8wNjE0YTYtZDAxYy00ZmYyLWE5OTMt NzI0NjQ1N2ZkMmIzLzEvS2ZVa0FqaTRLUEZ1WUNLZUpqTlFQd1NFWlprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8wNjE0YTYtZDAxYy00ZmYyLWE5OTMtNzI0NjQ1N2ZkMmIz LzEvS2ZVa0FqaTRLUEZ1WUNLZUpqTlFQd1NFWlprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwB2WlbT7 YCIJTw6MIDpAN8q4xqmDN+wgBAPOjwzapZGaJQ+fln6Ym3V47xJjSgcCWxt1J0Gb aWypDdIuMCQVCoGQEur7oBpLenZ7nvFNBCQli5haOyjxt7GT5W+Ta7u5FOqzV/O3 cUVslFROcjsbNWje07hCxHXpCxmGKVjG13rXQi72qaA8qBLMzdcNtPjI85ZY66e7 zgV4foic97Tn9l5uP5k6yKtuWDFAxrRn0GRZeDFA6vJPtxAZz9LtZkxu2MhpAnNW hCQF7inWwn9IEck02ESTeLPO9q0Wwrvxq0XopwTEWkCeXh61Yb4ugbST6VWB6shq 494MsYFwZckhmg== -----END CERTIFICATE-----Generated at Fri Dec 19 14:51:38 2025 by rpki-client