This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft
File: kpt6l07Tg6w46Pwkh5IjLuracio.mft (raw, json)
Hash identifier: x8YU4fL63OMN5096cGdMApIiLx9ycXRT62zPlqLM/Jw=
Subject key identifier: 87:AA:E3:82:91:2D:CA:DC:1B:8D:0F:93:9C:88:D7:9B:E7:92:4E:73
Authority key identifier: 92:9B:7A:97:4E:D3:83:AC:38:E8:FC:24:87:92:23:2E:EA:DA:72:2A
Certificate issuer: /CN=929b7a974ed383ac38e8fc248792232eeada722a
Certificate serial: 019AF1D20977C2B8DAB18C095FA6D778A1BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpt6l07Tg6w46Pwkh5IjLuracio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft
Manifest number: 175C
Signing time: Sat 06 Dec 2025 04:01:05 +0000
Manifest this update: Sat 06 Dec 2025 04:01:05 +0000
Manifest next update: Sun 07 Dec 2025 04:01:05 +0000
Files and hashes: 1: kpt6l07Tg6w46Pwkh5IjLuracio.crl (hash: 8WrufHk+UHR0FToOEHdyxB3rlkcZfgQ1b9UsrAQ8R2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpt6l07Tg6w46Pwkh5IjLuracio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:d2:09:77:c2:b8:da:b1:8c:09:5f:a6:d7:78:a1:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929b7a974ed383ac38e8fc248792232eeada722a
Validity
Not Before: Dec 6 04:01:05 2025 GMT
Not After : Dec 7 04:01:05 2025 GMT
Subject: CN=87aae382912dcadc1b8d0f939c88d79be7924e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ce:c6:fc:30:9a:09:7e:b4:99:e2:30:f6:7a:
ab:9b:6a:2e:32:b6:6b:76:b7:49:b5:9b:cc:10:68:
9e:42:5b:9a:11:b1:60:2d:ec:0e:69:98:b7:80:71:
39:31:25:6c:51:61:53:56:7c:99:50:5f:4c:e7:2e:
33:80:bb:47:85:fd:d9:a0:0d:f6:43:81:4f:71:3f:
f1:06:9f:4f:10:4b:bc:51:c2:fe:1b:43:d2:9c:1b:
b0:69:33:9f:0d:1d:14:37:21:9e:3b:b7:e7:cf:7a:
20:69:86:df:7f:de:3e:2d:4c:01:17:3d:08:01:e8:
73:e0:2f:83:95:ad:a9:1a:5c:99:04:5e:a2:ae:54:
8f:50:2d:e4:98:f7:7f:ab:81:62:5f:9e:2e:50:7a:
92:cf:50:5d:85:9e:91:c5:72:57:cf:a0:89:3d:65:
90:ce:61:56:f4:ba:ce:83:65:cf:4e:ee:3b:b8:78:
9c:81:37:77:85:9e:a8:47:e9:32:8f:e5:88:e8:cb:
16:82:c2:ab:f4:42:42:30:70:7d:58:9c:44:97:4c:
c7:72:06:35:eb:fc:b8:b5:c9:fb:d8:4d:a9:b9:78:
1d:65:cb:0f:3c:74:85:54:06:5b:84:4f:e7:ad:9a:
61:30:6f:34:29:26:60:92:11:42:e1:2d:90:0a:56:
83:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:AA:E3:82:91:2D:CA:DC:1B:8D:0F:93:9C:88:D7:9B:E7:92:4E:73
X509v3 Authority Key Identifier:
keyid:92:9B:7A:97:4E:D3:83:AC:38:E8:FC:24:87:92:23:2E:EA:DA:72:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpt6l07Tg6w46Pwkh5IjLuracio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:6a:ed:7f:34:0a:a5:91:9c:f4:6c:87:b7:de:8d:dd:84:db:
c7:26:d3:2b:e5:f3:2d:5f:1f:6e:e0:65:2d:d0:79:cd:19:ef:
cb:75:67:e5:50:df:66:be:47:fd:d3:a4:4c:bb:88:8a:4a:5f:
c0:e4:f9:6e:a7:76:20:f3:d1:12:8e:2c:7e:32:8c:c8:5f:a6:
d9:b8:41:98:97:66:1d:2e:51:6f:96:e4:24:4c:8f:65:9b:61:
e2:b7:f5:28:52:03:a2:01:37:72:93:54:61:81:f5:ed:2f:d7:
e7:81:8c:08:cb:bd:b1:0f:b6:f2:7a:71:45:56:ef:7b:b7:bf:
4d:08:ef:58:5e:a2:71:85:c5:a8:c6:c6:53:d0:15:74:70:60:
3e:60:59:0b:ef:69:76:2a:77:73:ae:c6:93:5f:93:f0:02:86:
ad:1c:b5:d1:f6:e7:27:ba:c9:86:11:7a:a0:36:be:9f:c2:4d:
ea:e0:23:19:18:da:bd:4a:13:4b:61:dc:52:a8:2c:0b:da:68:
c5:bc:79:09:5a:bd:20:82:8b:90:40:43:ac:16:0c:38:a0:8f:
12:50:b1:bc:1c:80:48:31:fe:26:3b:89:b4:0d:3c:14:88:8c:
0a:18:f5:26:f8:2c:85:27:c1:51:d1:f9:1b:1b:c1:58:e6:45:
9b:b4:c9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:31:19 2025 by rpki-client