This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft File: kUJchq_U--IqaeAELgB2I0IxwpM.mft (raw, json) Hash identifier: mCngh9fkDq4+gwoCnl2dIrWjodGGyNybQ2Y5i6+bLWI= Subject key identifier: FE:4B:23:F1:E2:42:C3:1A:31:CD:61:51:C0:31:A7:3B:25:8D:24:E9 Authority key identifier: 91:42:5C:86:AF:D4:FB:E2:2A:69:E0:04:2E:00:76:23:42:31:C2:93 Certificate issuer: /CN=91425c86afd4fbe22a69e0042e0076234231c293 Certificate serial: 019AF163EBFE611F89625F58BB847FABE923 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUJchq_U--IqaeAELgB2I0IxwpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft Manifest number: 85 Signing time: Sat 06 Dec 2025 02:00:48 +0000 Manifest this update: Sat 06 Dec 2025 02:00:48 +0000 Manifest next update: Sun 07 Dec 2025 02:00:48 +0000 Files and hashes: 1: kUJchq_U--IqaeAELgB2I0IxwpM.crl (hash: jl5npErgpuw16VEw9yXUh5GxZOgp/JRN4p6ri9KdBJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.crl rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft rsync://rpki.ripe.net/repository/DEFAULT/kUJchq_U--IqaeAELgB2I0IxwpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:eb:fe:61:1f:89:62:5f:58:bb:84:7f:ab:e9:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91425c86afd4fbe22a69e0042e0076234231c293 Validity Not Before: Dec 6 02:00:48 2025 GMT Not After : Dec 7 02:00:48 2025 GMT Subject: CN=fe4b23f1e242c31a31cd6151c031a73b258d24e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:11:a3:eb:62:02:db:a6:ed:46:41:63:26:ff: a4:cc:87:1f:b8:26:99:f7:5f:31:73:cb:15:f4:aa: a5:0b:37:32:13:7b:78:12:23:50:f5:4d:17:fa:2e: 02:aa:86:aa:17:fd:75:73:e5:e2:73:04:68:a2:94: f7:ba:9f:0e:bc:b9:15:58:80:6b:13:de:db:94:e4: b0:7a:12:5f:2b:b0:48:3d:14:f7:34:f9:c3:f5:fb: 32:12:4c:b8:9e:33:f2:43:fe:84:6d:b6:d6:a8:f4: 42:fa:d7:ff:0c:3c:70:f9:3e:8e:7f:52:98:1c:be: a8:d9:59:b9:99:6d:f1:db:28:c1:80:a2:bc:3b:c8: a7:e0:42:a8:4b:d5:0f:4a:79:f4:e0:41:9b:c8:e5: 14:4b:f9:a6:32:d4:6d:d4:b4:ed:e2:60:62:ec:ef: 79:20:44:83:59:f6:66:c5:75:b8:91:c8:ad:09:d8: b7:5c:d3:e0:c5:1b:df:fd:7f:f1:2e:e4:f4:15:0e: cf:a3:8a:84:28:78:69:1e:6b:98:49:53:8b:7c:f6: 91:93:f0:d0:a2:30:dc:cf:7b:84:4e:54:32:df:23: c6:f3:a7:7a:7f:ad:78:c4:56:b0:6c:d7:27:ce:01: a7:2d:d7:c3:3a:bf:ab:14:07:1c:1c:70:72:fb:40: a6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:4B:23:F1:E2:42:C3:1A:31:CD:61:51:C0:31:A7:3B:25:8D:24:E9 X509v3 Authority Key Identifier: keyid:91:42:5C:86:AF:D4:FB:E2:2A:69:E0:04:2E:00:76:23:42:31:C2:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUJchq_U--IqaeAELgB2I0IxwpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:e4:9f:cb:8a:f5:d4:6a:ac:7b:b8:96:cf:91:1f:1d:20:2a: 8f:fc:06:87:cc:1f:2b:aa:18:43:97:35:f4:f5:8d:45:2b:6d: b0:bf:d7:38:0f:09:4a:27:5a:37:ac:44:43:a3:5c:76:c6:15: b2:8c:78:8a:b7:c4:bd:9e:ac:94:12:90:82:68:32:72:19:45: f9:45:a1:34:bf:78:f7:2e:30:88:ef:84:14:c3:1e:db:28:90: f3:a5:5a:19:89:fd:d8:b9:e8:cf:27:c9:88:be:18:fc:76:83: d1:1f:f3:46:12:a7:fa:73:ea:44:a0:b2:5e:f3:a6:e0:8f:66: 1c:38:d3:6b:85:c3:fc:cc:d9:78:44:3e:4b:60:d2:e2:b4:47: c1:46:98:8c:7e:86:6e:91:71:9b:3a:76:a2:0d:78:71:3d:2e: bd:11:80:cb:09:12:d2:52:da:5b:bb:43:5c:5a:73:1e:e1:0c: 18:c8:0f:a3:10:56:31:d0:50:6f:c5:7b:cc:44:c7:5d:57:97: 70:96:82:73:ef:04:dc:3e:49:df:bc:a3:0b:a3:0d:db:f2:2d: 7d:05:26:e5:71:ef:b8:c6:46:9c:ef:53:a3:1d:66:e9:b6:a1: 2a:4a:9c:93:e0:40:6a:35:9d:96:66:c1:e5:7d:cd:c6:13:87: 87:65:8a:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+v+YR+JYl9Yu4R/q+kjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxNDI1Yzg2YWZkNGZiZTIyYTY5ZTAwNDJlMDA3NjIzNDIz MWMyOTMwHhcNMjUxMjA2MDIwMDQ4WhcNMjUxMjA3MDIwMDQ4WjAzMTEwLwYDVQQD EyhmZTRiMjNmMWUyNDJjMzFhMzFjZDYxNTFjMDMxYTczYjI1OGQyNGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhGj62IC26btRkFjJv+kzIcfuCaZ 918xc8sV9KqlCzcyE3t4EiNQ9U0X+i4CqoaqF/11c+XicwRoopT3up8OvLkVWIBr E97blOSwehJfK7BIPRT3NPnD9fsyEky4njPyQ/6EbbbWqPRC+tf/DDxw+T6Of1KY HL6o2Vm5mW3x2yjBgKK8O8in4EKoS9UPSnn04EGbyOUUS/mmMtRt1LTt4mBi7O95 IESDWfZmxXW4kcitCdi3XNPgxRvf/X/xLuT0FQ7Po4qEKHhpHmuYSVOLfPaRk/DQ ojDcz3uETlQy3yPG86d6f614xFawbNcnzgGnLdfDOr+rFAccHHBy+0Cm2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP5LI/HiQsMaMc1hUcAxpzsljSTpMB8GA1UdIwQY MBaAFJFCXIav1PviKmngBC4AdiNCMcKTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1VKY2hxX1UtLUlxYWVBRUxnQjJJMEl4d3BNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi83NTA4Y2YtNDE5OC00MmNjLTlmMjUt ODIxZGIwMDI2NzM4LzEva1VKY2hxX1UtLUlxYWVBRUxnQjJJMEl4d3BNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi83NTA4Y2YtNDE5OC00MmNjLTlmMjUtODIxZGIwMDI2NzM4 LzEva1VKY2hxX1UtLUlxYWVBRUxnQjJJMEl4d3BNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHOSfy4r1 1Gqse7iWz5EfHSAqj/wGh8wfK6oYQ5c19PWNRSttsL/XOA8JSidaN6xEQ6NcdsYV sox4irfEvZ6slBKQgmgychlF+UWhNL949y4wiO+EFMMe2yiQ86VaGYn92LnozyfJ iL4Y/HaD0R/zRhKn+nPqRKCyXvOm4I9mHDjTa4XD/MzZeEQ+S2DS4rRHwUaYjH6G bpFxmzp2og14cT0uvRGAywkS0lLaW7tDXFpzHuEMGMgPoxBWMdBQb8V7zETHXVeX cJaCc+8E3D5J37yjC6MN2/ItfQUm5XHvuMZGnO9Tox1m6bahKkqck+BAajWdlmbB 5X3NxhOHh2WK3Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:15:57 2025 by rpki-client