This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft File: KPVnVJmD9DrdmYw26PeL0V9Fosw.mft (raw, json) Hash identifier: ty5PjngwKd1NRgZ8oK1IyQ4+i4Fgi0iDDwxnM+skjdA= Subject key identifier: 79:04:2D:D1:00:55:70:FC:F2:5C:9D:92:9C:8D:B2:CC:07:85:6D:D0 Authority key identifier: 28:F5:67:54:99:83:F4:3A:DD:99:8C:36:E8:F7:8B:D1:5F:45:A2:CC Certificate issuer: /CN=28f567549983f43add998c36e8f78bd15f45a2cc Certificate serial: 019AF3527ACC3804A19161FE26B3C38F4738 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft Manifest number: 0D67 Signing time: Sat 06 Dec 2025 11:01:00 +0000 Manifest this update: Sat 06 Dec 2025 11:01:00 +0000 Manifest next update: Sun 07 Dec 2025 11:01:00 +0000 Files and hashes: 1: JQ4W3G2wBUo6PRPPv0dVzYu4y4w.roa (hash: JHM9O5mRc/9ugG6o1WcR1yYfnaT1Q2KD2tNJG5Hqsco=) 2: KPVnVJmD9DrdmYw26PeL0V9Fosw.crl (hash: G2JzUv5PCdaq/ypcp3IiEiGCFZB3RMfhMiodPhKHKoQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.crl rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:7a:cc:38:04:a1:91:61:fe:26:b3:c3:8f:47:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28f567549983f43add998c36e8f78bd15f45a2cc Validity Not Before: Dec 6 11:01:00 2025 GMT Not After : Dec 7 11:01:00 2025 GMT Subject: CN=79042dd1005570fcf25c9d929c8db2cc07856dd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ac:44:19:bb:ca:e6:21:fb:50:60:ac:86:de: 57:32:1d:43:25:87:ce:94:c5:8d:29:47:c0:2b:6c: eb:4b:5f:30:c0:3d:32:e9:98:fe:ad:04:18:38:98: 4a:f8:64:fb:0f:df:45:c0:6f:3a:a6:03:f3:30:8c: b6:2e:31:15:5c:65:55:84:35:60:3e:61:71:6b:47: c5:05:06:22:cc:68:41:ec:f1:40:06:c0:d8:8b:72: 2e:52:6a:26:84:b3:68:f9:25:eb:8a:d0:49:0a:d4: ef:51:7e:a0:a8:20:8c:e8:48:e7:c4:30:88:8b:27: c3:de:b3:97:ff:c7:b8:a4:c2:bd:ee:78:af:85:6e: 8a:98:a6:bd:fc:0f:c7:0f:1b:3d:0f:01:05:09:63: 0b:77:b6:1f:9c:67:4c:ce:8b:63:2e:2d:aa:5b:8b: e2:9b:c3:e0:19:47:35:85:60:49:91:35:55:a7:04: a4:65:01:7d:89:57:36:86:e5:85:aa:a0:1a:59:b4: f2:42:27:09:bc:2b:be:f1:44:6d:b7:28:38:49:0a: 50:e0:2b:5f:68:18:f6:60:ef:77:f6:8f:9d:08:3f: bd:b7:f9:53:48:dd:8e:12:96:f4:49:81:da:20:e1: 13:ff:f4:dc:6e:90:ec:84:3e:01:62:32:b1:7a:f0: 3c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:04:2D:D1:00:55:70:FC:F2:5C:9D:92:9C:8D:B2:CC:07:85:6D:D0 X509v3 Authority Key Identifier: keyid:28:F5:67:54:99:83:F4:3A:DD:99:8C:36:E8:F7:8B:D1:5F:45:A2:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:a5:22:2a:27:51:a2:52:d8:52:39:ae:61:a4:a8:bf:69:13: 50:c8:52:0f:83:51:68:86:20:a3:76:a2:c7:93:3f:10:8d:dc: 28:e3:27:9d:71:c6:44:79:63:fc:26:6c:b9:ea:e4:39:8a:69: 23:82:e9:b4:25:99:d5:b7:0b:33:ca:44:70:50:15:91:eb:47: d3:d6:12:78:19:e5:90:3d:43:f6:e7:65:a5:79:4d:01:7c:17: 0e:7d:d4:96:b6:4f:39:f9:15:fd:f6:3f:4a:73:b4:01:44:79: c0:86:0a:04:63:ab:ea:54:ba:fc:37:25:8d:24:ab:b9:ce:09: e9:83:3d:ec:eb:6c:3b:7d:5e:db:a3:ac:50:7d:b1:15:8e:32: 60:75:aa:c5:d0:64:87:b2:4e:6e:04:97:fb:f9:51:c4:dc:08: 00:fb:e7:e8:2b:3f:eb:4b:be:7d:6a:19:94:4c:4b:9a:34:16: 7f:05:fd:2a:28:97:5b:3d:db:12:19:0c:85:1b:0d:1f:1e:f5: af:f1:ea:45:fb:22:c3:fc:5a:84:b5:88:7c:43:d9:75:1c:9a: 4f:f4:16:02:9d:f4:b0:1d:93:d2:ac:32:e8:02:88:81:4c:ea: 2f:9e:84:76:c0:fa:bd:b5:78:0c:49:d9:66:ad:e8:de:2f:91: 58:33:2b:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUnrMOAShkWH+JrPDj0c4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ZjU2NzU0OTk4M2Y0M2FkZDk5OGMzNmU4Zjc4YmQxNWY0 NWEyY2MwHhcNMjUxMjA2MTEwMTAwWhcNMjUxMjA3MTEwMTAwWjAzMTEwLwYDVQQD Eyg3OTA0MmRkMTAwNTU3MGZjZjI1YzlkOTI5YzhkYjJjYzA3ODU2ZGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaxEGbvK5iH7UGCsht5XMh1DJYfO lMWNKUfAK2zrS18wwD0y6Zj+rQQYOJhK+GT7D99FwG86pgPzMIy2LjEVXGVVhDVg PmFxa0fFBQYizGhB7PFABsDYi3IuUmomhLNo+SXritBJCtTvUX6gqCCM6EjnxDCI iyfD3rOX/8e4pMK97nivhW6KmKa9/A/HDxs9DwEFCWMLd7YfnGdMzotjLi2qW4vi m8PgGUc1hWBJkTVVpwSkZQF9iVc2huWFqqAaWbTyQicJvCu+8URttyg4SQpQ4Ctf aBj2YO939o+dCD+9t/lTSN2OEpb0SYHaIOET//TcbpDshD4BYjKxevA8XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHkELdEAVXD88lydkpyNsswHhW3QMB8GA1UdIwQY MBaAFCj1Z1SZg/Q63ZmMNuj3i9FfRaLMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1BWblZKbUQ5RHJkbVl3MjZQZUwwVjlGb3N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni85Y2ZkOGUtMjNjZC00NDdhLTlkMmMt ZDBiMTExYmE0MTQ4LzEvS1BWblZKbUQ5RHJkbVl3MjZQZUwwVjlGb3N3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni85Y2ZkOGUtMjNjZC00NDdhLTlkMmMtZDBiMTExYmE0MTQ4 LzEvS1BWblZKbUQ5RHJkbVl3MjZQZUwwVjlGb3N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmaUiKidR olLYUjmuYaSov2kTUMhSD4NRaIYgo3aix5M/EI3cKOMnnXHGRHlj/CZsuerkOYpp I4LptCWZ1bcLM8pEcFAVketH09YSeBnlkD1D9udlpXlNAXwXDn3UlrZPOfkV/fY/ SnO0AUR5wIYKBGOr6lS6/DcljSSruc4J6YM97OtsO31e26OsUH2xFY4yYHWqxdBk h7JObgSX+/lRxNwIAPvn6Cs/60u+fWoZlExLmjQWfwX9KiiXWz3bEhkMhRsNHx71 r/HqRfsiw/xahLWIfEPZdRyaT/QWAp30sB2T0qwy6AKIgUzqL56EdsD6vbV4DEnZ Zq3o3i+RWDMrng== -----END CERTIFICATE-----Generated at Sat Dec 6 14:18:15 2025 by rpki-client