This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft File: KsPteUra-5HLgalp64qbKQX-4uw.mft (raw, json) Hash identifier: FYj7iHOKFrKSbleLCJGyC+UqYiUa6GMd4r2UaWxW5Tg= Subject key identifier: 68:09:95:F2:1C:F8:5F:4B:D6:68:61:0F:42:AC:C2:6E:EE:ED:18:5A Authority key identifier: 2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC Certificate issuer: /CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec Certificate serial: 019AF352869A3C023FDCE8923AE7C7DF7A2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 11:01:02 +0000 Manifest this update: Sat 06 Dec 2025 11:01:02 +0000 Manifest next update: Sun 07 Dec 2025 11:01:02 +0000 Files and hashes: 1: KsPteUra-5HLgalp64qbKQX-4uw.crl (hash: mkFdE10RMhxQcbnewlvXYvR9i/d+PELOvSJh8AMVErw=) 2: PKyx0DcFoAagRLDeVRH7IggDBvs.roa (hash: pNDjxNhK4qz1Wc21dlphpRgyPK79NSu66uAh/Cd4/LQ=) 3: zxynKoaXLk9CSCbEuR1SMnhOszM.roa (hash: 0C0maO3P6rLabRCNi4Fq6yr5sjK9+mFynQgMmbGpRUM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:86:9a:3c:02:3f:dc:e8:92:3a:e7:c7:df:7a:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec Validity Not Before: Dec 6 11:01:02 2025 GMT Not After : Dec 7 11:01:02 2025 GMT Subject: CN=680995f21cf85f4bd668610f42acc26eeeed185a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:75:52:14:61:c4:d6:81:dd:d1:ba:bf:f5:c7: 58:20:24:b5:01:1b:28:13:73:78:9d:06:23:dd:1a: 4c:e8:60:57:0b:39:92:d0:bd:f6:e4:2f:b1:37:ff: ef:67:69:c6:11:e2:8f:90:66:27:05:1e:ee:58:e8: 74:c6:02:92:36:55:6b:21:82:25:89:92:5c:80:3d: 69:7c:bf:d6:66:a3:0c:d3:a6:94:13:44:ad:c7:45: db:82:c5:00:5a:0b:58:96:d8:ca:b4:c0:5a:35:fd: f9:6a:66:42:25:2f:64:db:ee:32:85:17:d7:19:de: 45:ab:8e:aa:50:2a:2b:f2:7b:b2:14:78:ea:49:9a: 4e:9b:29:04:5d:21:d9:79:d5:a5:95:3a:33:1c:c0: aa:af:6a:2c:ea:63:e3:95:5b:7a:4a:c9:f9:67:fd: bf:17:5e:86:f4:6c:76:f0:41:0f:f7:c3:25:f5:a6: e1:a7:e2:01:c6:ea:fd:cc:55:fc:8b:f6:33:a1:46: c4:60:45:ae:35:ba:2d:fb:39:a7:51:ab:01:52:4c: fc:54:00:d8:51:74:dd:24:6c:b0:d9:a7:72:c9:83: 44:dd:ae:d8:39:ca:07:90:9c:d9:7a:82:60:3f:27: a7:c4:25:58:d4:99:41:b5:66:29:06:22:4f:07:b2: 6d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:09:95:F2:1C:F8:5F:4B:D6:68:61:0F:42:AC:C2:6E:EE:ED:18:5A X509v3 Authority Key Identifier: keyid:2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:45:07:a5:bc:26:c0:7d:cb:bf:3a:df:12:1c:22:f5:21:b5: 1c:91:55:3b:e5:20:5c:88:5e:38:d9:0c:7b:b5:08:c0:a9:d9: 6a:a6:8b:ac:bd:41:ce:16:6e:05:11:e9:bb:20:f5:c3:e5:8b: 41:81:32:85:45:03:8d:53:f9:60:c1:b8:c2:87:86:be:ec:b1: 23:c9:04:1a:f0:ef:bd:55:1b:59:b2:4f:88:16:fe:50:eb:fb: ee:f2:8a:5a:56:24:f9:83:50:a7:47:a1:d2:6e:6d:59:9c:4a: a0:f0:bf:94:af:c8:b1:11:c6:23:4f:13:84:0e:d4:b3:4f:f6: d9:cf:0d:1b:82:3f:ba:76:3e:7c:85:82:11:20:34:e5:a5:1e: 7c:e1:a4:1b:ad:de:9c:36:85:b9:86:82:ea:65:56:1b:0f:84: 7c:cb:2f:b5:1e:bb:a9:93:4b:d4:60:5f:62:9a:75:16:48:d7: c2:66:32:3b:3f:58:3e:ed:eb:34:e7:d5:49:48:84:5c:f4:3e: df:03:bf:26:36:fd:ff:ff:a8:93:91:7f:66:09:e5:45:a6:09: 68:aa:9b:5f:7e:7f:a5:1f:01:73:19:5b:59:6e:e3:ca:3f:76: 22:a5:5c:1a:a9:3a:ca:32:25:c3:b3:f0:f4:dd:ca:a6:48:7b: 6b:a6:3b:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUoaaPAI/3OiSOufH33orMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzNlZDc5NGFkYWZiOTFjYjgxYTk2OWViOGE5YjI5MDVm ZWUyZWMwHhcNMjUxMjA2MTEwMTAyWhcNMjUxMjA3MTEwMTAyWjAzMTEwLwYDVQQD Eyg2ODA5OTVmMjFjZjg1ZjRiZDY2ODYxMGY0MmFjYzI2ZWVlZWQxODVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonVSFGHE1oHd0bq/9cdYICS1ARso E3N4nQYj3RpM6GBXCzmS0L325C+xN//vZ2nGEeKPkGYnBR7uWOh0xgKSNlVrIYIl iZJcgD1pfL/WZqMM06aUE0Stx0XbgsUAWgtYltjKtMBaNf35amZCJS9k2+4yhRfX Gd5Fq46qUCor8nuyFHjqSZpOmykEXSHZedWllTozHMCqr2os6mPjlVt6Ssn5Z/2/ F16G9Gx28EEP98Ml9abhp+IBxur9zFX8i/YzoUbEYEWuNbot+zmnUasBUkz8VADY UXTdJGyw2adyyYNE3a7YOcoHkJzZeoJgPyenxCVY1JlBtWYpBiJPB7Jt8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGgJlfIc+F9L1mhhD0Kswm7u7RhaMB8GA1UdIwQY MBaAFCrD7XlK2vuRy4GpaeuKmykF/uLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NQdGVVcmEtNUhMZ2FscDY0cWJLUVgtNHV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi83YjEyN2ItNDRjZS00Y2FkLWFkOGYt MDg5YzFjM2Q0MzU3LzEvS3NQdGVVcmEtNUhMZ2FscDY0cWJLUVgtNHV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi83YjEyN2ItNDRjZS00Y2FkLWFkOGYtMDg5YzFjM2Q0MzU3 LzEvS3NQdGVVcmEtNUhMZ2FscDY0cWJLUVgtNHV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbkUHpbwm wH3LvzrfEhwi9SG1HJFVO+UgXIheONkMe7UIwKnZaqaLrL1BzhZuBRHpuyD1w+WL QYEyhUUDjVP5YMG4woeGvuyxI8kEGvDvvVUbWbJPiBb+UOv77vKKWlYk+YNQp0eh 0m5tWZxKoPC/lK/IsRHGI08ThA7Us0/22c8NG4I/unY+fIWCESA05aUefOGkG63e nDaFuYaC6mVWGw+EfMsvtR67qZNL1GBfYpp1FkjXwmYyOz9YPu3rNOfVSUiEXPQ+ 3wO/Jjb9//+ok5F/ZgnlRaYJaKqbX35/pR8BcxlbWW7jyj92IqVcGqk6yjIlw7Pw 9N3Kpkh7a6Y7IA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:04:28 2025 by rpki-client