This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft File: KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft (raw, json) Hash identifier: 2ACM8MesfPwQ4r40QdkBaaMHP1AQBk/GGT7gVO4qubk= Subject key identifier: 54:50:A0:F0:2D:5B:C5:F7:2C:C4:1D:71:E2:8B:BF:DD:95:71:A9:B1 Authority key identifier: 2A:D2:FE:64:66:D0:70:94:A4:25:6D:A2:CC:84:70:83:C5:00:6B:1A Certificate issuer: /CN=2ad2fe6466d07094a4256da2cc847083c5006b1a Certificate serial: 019AF464FB7AC6B680FB5AA8C3C829B91305 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft Manifest number: 146C Signing time: Sat 06 Dec 2025 16:00:49 +0000 Manifest this update: Sat 06 Dec 2025 16:00:49 +0000 Manifest next update: Sun 07 Dec 2025 16:00:49 +0000 Files and hashes: 1: KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl (hash: E237tLGcMlOX+nGzYIQ43Z+hSgU3gHrbrVY3O82g6ws=) 2: uSrOots_DMPy38Ek0_9yV10Tzw8.roa (hash: Ypv5LfASDsUldkz8kd27ybD8JIawSksjG/puUQcmBe4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:fb:7a:c6:b6:80:fb:5a:a8:c3:c8:29:b9:13:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ad2fe6466d07094a4256da2cc847083c5006b1a Validity Not Before: Dec 6 16:00:49 2025 GMT Not After : Dec 7 16:00:49 2025 GMT Subject: CN=5450a0f02d5bc5f72cc41d71e28bbfdd9571a9b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ba:a9:e1:19:a5:1d:9f:17:57:7c:a7:fd:3d: 16:66:47:c9:cd:18:d6:82:23:32:67:0e:07:6a:31: ca:0c:cd:96:1d:3d:6a:66:7c:cf:4d:ce:76:14:f0: 9c:33:63:5e:8b:4f:de:aa:09:a3:59:9f:9e:8d:4e: 40:b8:0a:54:0b:3f:61:e2:cd:44:d2:5b:ca:06:38: 74:22:6d:03:4c:62:22:fd:c3:a1:5c:00:33:27:9c: e0:4b:b3:da:f2:91:0b:fc:a6:3a:20:a0:ca:ea:09: 79:cd:49:1a:a3:fb:70:fb:62:0c:5d:fe:5a:0b:c2: 79:d1:54:d8:91:97:22:fc:f3:9d:d7:ea:a7:24:05: ac:a9:0c:39:b6:8c:b8:16:58:3b:e3:39:6b:fb:b5: 79:d4:7f:4a:af:ff:08:d8:b2:a1:6c:a8:b9:df:d1: 1d:0d:c3:9a:2a:c0:17:c1:cb:85:e8:24:03:fc:90: 11:ec:2a:18:52:1c:6b:44:3f:97:c6:93:be:4c:bd: 62:df:d1:f3:a9:de:d7:ad:50:17:cf:a3:ea:0b:a2: d0:de:d4:ef:a1:d1:15:24:61:49:ae:8d:d2:ff:70: a2:7f:4a:77:d0:4e:7e:c9:a6:cc:58:d2:84:46:e2: d4:d1:46:7a:8b:a2:f3:14:d9:80:e1:16:e9:7b:d9: d4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:50:A0:F0:2D:5B:C5:F7:2C:C4:1D:71:E2:8B:BF:DD:95:71:A9:B1 X509v3 Authority Key Identifier: keyid:2A:D2:FE:64:66:D0:70:94:A4:25:6D:A2:CC:84:70:83:C5:00:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:8e:86:8c:fa:2d:30:fd:c0:27:f7:da:37:84:c1:9d:bf:5d: 73:f7:96:ff:19:47:02:ce:99:3d:94:c6:e9:82:13:d4:c8:f5: f1:57:d7:28:55:2b:25:b0:59:e2:86:19:5e:0b:b1:ce:c6:09: 11:c9:8e:8f:97:30:10:1a:89:7d:b2:70:b8:62:0e:c6:01:d8: 6e:58:d6:88:f5:18:62:15:c5:11:e2:66:0f:b1:bf:a2:83:a0: 70:58:3a:e4:6a:d9:53:71:a5:02:0e:3a:32:8d:e4:e1:8e:ba: 02:10:6c:14:55:95:ab:05:ea:9f:bf:37:64:e6:51:b8:00:4a: 91:3c:40:3a:3f:80:0f:10:cb:c6:fb:0c:9a:a8:dc:89:d4:6f: 5b:1f:b8:d3:b5:c0:cd:96:15:2d:91:d7:bc:32:f4:9b:0f:3a: 82:4d:ad:7e:16:0e:ea:cc:f8:2e:c6:bd:a7:02:fe:08:8d:85: 5e:8b:66:f7:03:68:06:5c:6d:55:75:cf:bf:22:c5:45:be:dd: a1:9e:ac:f6:50:22:e2:23:c7:56:43:6b:c7:80:cf:98:d3:64: b2:cc:b6:ec:6e:82:d8:3e:7c:b6:71:8c:6d:1c:44:45:bf:5b: 5f:a2:10:15:be:df:89:e1:66:49:f5:da:2b:56:e0:df:c3:1c: 5a:be:b0:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZPt6xraA+1qow8gpuRMFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhZDJmZTY0NjZkMDcwOTRhNDI1NmRhMmNjODQ3MDgzYzUw MDZiMWEwHhcNMjUxMjA2MTYwMDQ5WhcNMjUxMjA3MTYwMDQ5WjAzMTEwLwYDVQQD Eyg1NDUwYTBmMDJkNWJjNWY3MmNjNDFkNzFlMjhiYmZkZDk1NzFhOWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rqp4RmlHZ8XV3yn/T0WZkfJzRjW giMyZw4HajHKDM2WHT1qZnzPTc52FPCcM2Nei0/eqgmjWZ+ejU5AuApUCz9h4s1E 0lvKBjh0Im0DTGIi/cOhXAAzJ5zgS7Pa8pEL/KY6IKDK6gl5zUkao/tw+2IMXf5a C8J50VTYkZci/POd1+qnJAWsqQw5toy4Flg74zlr+7V51H9Kr/8I2LKhbKi539Ed DcOaKsAXwcuF6CQD/JAR7CoYUhxrRD+XxpO+TL1i39Hzqd7XrVAXz6PqC6LQ3tTv odEVJGFJro3S/3Cif0p30E5+yabMWNKERuLU0UZ6i6LzFNmA4Rbpe9nUTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFRQoPAtW8X3LMQdceKLv92VcamxMB8GA1UdIwQY MBaAFCrS/mRm0HCUpCVtosyEcIPFAGsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3RMLVpHYlFjSlNrSlcyaXpJUndnOFVBYXhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84YTMxZjMtN2FjZi00N2I0LWI5N2It ZmEzMWUyZGM2YWJiLzEvS3RMLVpHYlFjSlNrSlcyaXpJUndnOFVBYXhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC84YTMxZjMtN2FjZi00N2I0LWI5N2ItZmEzMWUyZGM2YWJi LzEvS3RMLVpHYlFjSlNrSlcyaXpJUndnOFVBYXhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq46GjPot MP3AJ/faN4TBnb9dc/eW/xlHAs6ZPZTG6YIT1Mj18VfXKFUrJbBZ4oYZXguxzsYJ EcmOj5cwEBqJfbJwuGIOxgHYbljWiPUYYhXFEeJmD7G/ooOgcFg65GrZU3GlAg46 Mo3k4Y66AhBsFFWVqwXqn783ZOZRuABKkTxAOj+ADxDLxvsMmqjcidRvWx+407XA zZYVLZHXvDL0mw86gk2tfhYO6sz4Lsa9pwL+CI2FXotm9wNoBlxtVXXPvyLFRb7d oZ6s9lAi4iPHVkNrx4DPmNNkssy27G6C2D58tnGMbRxERb9bX6IQFb7fieFmSfXa K1bg38McWr6wsQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:01:19 2025 by rpki-client