This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft File: KT4M2LPgRO24I672iKr7C3XehnU.mft (raw, json) Hash identifier: UgoW4ynyyFj2VKbEOCrC90BJAm5TXOBBAPYOX6/TdA4= Subject key identifier: 08:C3:24:15:6C:D0:13:C0:79:F4:90:09:3D:44:11:B7:C1:CC:5F:24 Authority key identifier: 29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75 Certificate issuer: /CN=293e0cd8b3e044edb823aef688aafb0b75de8675 Certificate serial: 019AF12ED9D33BC2DCED7A02D251D0FA5960 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft Manifest number: 14C0 Signing time: Sat 06 Dec 2025 01:02:50 +0000 Manifest this update: Sat 06 Dec 2025 01:02:50 +0000 Manifest next update: Sun 07 Dec 2025 01:02:50 +0000 Files and hashes: 1: GGRSsytPMsehyIvT0Ks7HBxoCsU.roa (hash: cnh4oBPVR37nXyxbz0cYq9xtEn4YLbLofR4YLwkw1Ts=) 2: JH04xJWe_z8SXKxh4G8BUvGkgyI.roa (hash: KcYkH5Y5+qxD1S4xEoLuy3XrGXKw19/czmMpLLQb7oM=) 3: KT4M2LPgRO24I672iKr7C3XehnU.crl (hash: 6cTGkOpGESp4My3R+5Qjx8JRA/Mswjgfnmm6TDGJd0I=) 4: ZhmjJZRo8Sbwc315ZOZw1TWufMc.roa (hash: NK5M1wuv8SZ2zP40bZYi2MQNmp6KED1qYY75Icn9mak=) 5: nKQffzVaC8uVNgTXixnx37_DL6s.roa (hash: pYAPWd/N9R42UtkBeCiR8wjtUnidTLisTp0Evm7U4aE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:d9:d3:3b:c2:dc:ed:7a:02:d2:51:d0:fa:59:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=293e0cd8b3e044edb823aef688aafb0b75de8675 Validity Not Before: Dec 6 01:02:50 2025 GMT Not After : Dec 7 01:02:50 2025 GMT Subject: CN=08c324156cd013c079f490093d4411b7c1cc5f24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d3:52:c5:0b:0e:64:34:39:41:85:64:40:94: 09:c6:9b:d5:b4:d1:da:85:4d:02:58:26:79:4a:9e: 96:28:c4:25:9f:36:84:e3:e5:a8:36:bb:31:28:41: ae:68:a1:1c:56:85:c8:7b:af:a2:e2:62:c3:a3:33: 3b:80:f3:b1:3a:83:cb:11:b6:a5:3c:9d:d5:88:c9: dc:40:eb:3d:32:03:aa:10:02:a5:28:f6:66:99:a6: e8:ea:c2:55:7c:70:33:ae:a4:d5:d5:4d:4e:66:2c: ae:e7:70:d5:51:49:43:a8:54:62:52:07:bd:12:d5: 7a:6e:ef:04:cd:29:4a:c9:39:7e:77:e4:a2:ca:98: 27:74:f5:a6:44:9c:5b:27:eb:6c:04:72:33:b8:19: 83:8a:72:29:fb:ee:61:52:3a:12:4c:ef:13:02:42: 6d:d9:f9:a3:9a:17:fb:c2:4b:3e:52:c3:66:bc:f5: 5b:b0:7e:aa:9e:3d:50:61:90:dd:64:47:4d:5d:f7: 81:c8:d4:45:27:e3:04:de:ff:ba:15:45:be:c7:ab: e5:91:89:f6:6a:ae:1d:21:b7:15:ef:61:d0:68:a5: 24:f7:93:20:aa:be:ba:e0:21:06:e8:77:c0:7c:81: d8:b2:6e:0b:f3:ac:58:b4:e9:c3:68:71:75:14:bd: b5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C3:24:15:6C:D0:13:C0:79:F4:90:09:3D:44:11:B7:C1:CC:5F:24 X509v3 Authority Key Identifier: keyid:29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:b7:a2:c5:06:c7:df:98:af:2b:c1:dc:38:fb:24:89:13:db: ee:32:1d:89:e1:d9:9a:c7:c9:3a:bc:40:e9:e3:a7:70:e1:c7: 59:78:f5:4a:70:12:14:24:17:6c:4d:a2:99:c0:10:f7:6b:cf: a2:fb:f9:89:6d:31:62:72:9d:d5:5b:75:d1:57:d4:50:93:07: e5:45:29:9d:4f:a2:d7:72:a7:a7:1d:5e:8f:63:55:9c:fc:f6: e4:a5:a1:33:43:b6:cc:ee:18:b7:f4:e2:44:94:58:7b:50:3f: 0c:cc:ac:24:6e:21:02:ba:c7:2a:8b:15:0d:58:a2:39:50:eb: 64:a7:4c:28:72:b3:1e:14:1e:35:a9:fa:6e:02:2d:7c:8b:e5: 08:9f:39:ec:fb:7f:5b:ab:bd:dc:e9:4d:09:23:1e:d9:05:12: 2f:31:1d:ee:92:72:4c:44:83:49:8b:39:e9:2a:66:7e:4b:a6: 80:ba:90:54:ca:51:87:72:64:b8:3c:19:91:98:5c:de:7d:7f: 7e:4f:32:6c:67:c0:72:0a:df:f1:0b:55:a7:24:10:15:da:0a: 4a:12:3d:de:12:0e:3e:d2:e1:8f:d6:4e:26:59:9b:e0:61:65: 9b:e7:de:3c:e7:b3:c3:a0:14:1d:1d:f3:30:f2:32:ac:af:55: 2a:bc:21:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLtnTO8Lc7XoC0lHQ+llgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5M2UwY2Q4YjNlMDQ0ZWRiODIzYWVmNjg4YWFmYjBiNzVk ZTg2NzUwHhcNMjUxMjA2MDEwMjUwWhcNMjUxMjA3MDEwMjUwWjAzMTEwLwYDVQQD EygwOGMzMjQxNTZjZDAxM2MwNzlmNDkwMDkzZDQ0MTFiN2MxY2M1ZjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9NSxQsOZDQ5QYVkQJQJxpvVtNHa hU0CWCZ5Sp6WKMQlnzaE4+WoNrsxKEGuaKEcVoXIe6+i4mLDozM7gPOxOoPLEbal PJ3ViMncQOs9MgOqEAKlKPZmmabo6sJVfHAzrqTV1U1OZiyu53DVUUlDqFRiUge9 EtV6bu8EzSlKyTl+d+SiypgndPWmRJxbJ+tsBHIzuBmDinIp++5hUjoSTO8TAkJt 2fmjmhf7wks+UsNmvPVbsH6qnj1QYZDdZEdNXfeByNRFJ+ME3v+6FUW+x6vlkYn2 aq4dIbcV72HQaKUk95Mgqr664CEG6HfAfIHYsm4L86xYtOnDaHF1FL21PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjDJBVs0BPAefSQCT1EEbfBzF8kMB8GA1UdIwQY MBaAFCk+DNiz4ETtuCOu9oiq+wt13oZ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1Q0TTJMUGdSTzI0STY3MmlLcjdDM1hlaG5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82ZGExYzItMjUyZC00YmQyLWI1NmMt YmIyMTdjYzNiNzhkLzEvS1Q0TTJMUGdSTzI0STY3MmlLcjdDM1hlaG5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC82ZGExYzItMjUyZC00YmQyLWI1NmMtYmIyMTdjYzNiNzhk LzEvS1Q0TTJMUGdSTzI0STY3MmlLcjdDM1hlaG5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdbeixQbH 35ivK8HcOPskiRPb7jIdieHZmsfJOrxA6eOncOHHWXj1SnASFCQXbE2imcAQ92vP ovv5iW0xYnKd1Vt10VfUUJMH5UUpnU+i13Knpx1ej2NVnPz25KWhM0O2zO4Yt/Ti RJRYe1A/DMysJG4hArrHKosVDViiOVDrZKdMKHKzHhQeNan6bgItfIvlCJ857Pt/ W6u93OlNCSMe2QUSLzEd7pJyTESDSYs56SpmfkumgLqQVMpRh3JkuDwZkZhc3n1/ fk8ybGfAcgrf8QtVpyQQFdoKShI93hIOPtLhj9ZOJlmb4GFlm+fePOezw6AUHR3z MPIyrK9VKrwhrQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:50 2025 by rpki-client