This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft File: Kf49-nfrAgHIVtHh6_AyvMixJNg.mft (raw, json) Hash identifier: Gmz7Cu8YGBCtqcDNwtQnxiOxSgURkja5gGDZf08n5wA= Subject key identifier: 63:16:3F:74:CC:A2:C6:46:CE:2C:23:C0:6A:FA:F0:4F:68:93:B3:34 Authority key identifier: 29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8 Certificate issuer: /CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8 Certificate serial: 019AF12D60751EBFAD734CC664681FCBFC92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 01:01:13 +0000 Manifest this update: Sat 06 Dec 2025 01:01:13 +0000 Manifest next update: Sun 07 Dec 2025 01:01:13 +0000 Files and hashes: 1: Kf49-nfrAgHIVtHh6_AyvMixJNg.crl (hash: YSjHJypexXCVXvvWnYGvRfs/qwinOs1qZJJcJ5TcnJA=) 2: m11OWXhefXzJ44FLBlsWKfsOtOo.roa (hash: djUPPyQWxYPvFQMatObPciTtNbLwqpNgMtWLRjYVwc0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:60:75:1e:bf:ad:73:4c:c6:64:68:1f:cb:fc:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8 Validity Not Before: Dec 6 01:01:13 2025 GMT Not After : Dec 7 01:01:13 2025 GMT Subject: CN=63163f74cca2c646ce2c23c06afaf04f6893b334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3b:00:60:31:2e:eb:41:e5:72:3f:bc:f6:60: 54:fc:09:af:2d:5c:9d:20:ed:0f:b7:a6:b3:b0:1b: b1:00:a6:f1:f2:c6:13:ae:1c:9c:71:73:fe:44:48: 79:79:68:98:ff:5e:1c:6c:7f:1f:f6:fc:97:c0:ff: ab:c8:9a:dc:d4:68:c8:ec:75:94:ba:5b:0a:80:38: f8:e2:98:53:db:fe:46:b9:37:5f:0d:92:60:f5:42: 5e:57:67:8e:25:38:d3:b8:14:f0:37:0b:51:c1:ea: 28:91:ca:5f:0a:1d:88:1a:99:d8:1b:e2:2e:10:fc: 90:f9:63:3f:76:35:a4:cb:78:a0:c1:ca:94:16:94: dd:24:34:b6:81:a1:1a:ef:aa:c6:f4:94:0d:54:a7: 6d:cb:b4:4b:8d:40:03:bb:02:63:92:5a:ee:52:15: c4:13:3d:d6:9a:a9:e9:b4:9a:da:9a:db:a7:db:6a: 58:5e:b9:06:e8:77:cd:96:4e:3f:f0:a0:57:42:3b: 1e:a7:1c:2b:24:2b:3e:b9:f6:33:16:6b:8b:64:b1: 8e:ac:70:fc:2e:ec:4a:c1:12:a6:cb:fc:40:a1:5d: db:79:a7:0e:3e:fd:28:25:4a:e2:93:62:32:83:65: 84:84:d9:7d:29:a6:9b:0d:73:11:eb:91:0f:8c:ab: d7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:16:3F:74:CC:A2:C6:46:CE:2C:23:C0:6A:FA:F0:4F:68:93:B3:34 X509v3 Authority Key Identifier: keyid:29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:d4:6a:65:a0:02:5e:92:a6:4f:a3:a6:94:9a:b6:ae:6e:a5: b9:fe:17:e0:51:1d:78:3b:d4:dc:23:0d:45:fb:da:86:b7:f1: ae:69:8a:6e:b8:67:fd:99:83:6f:55:e8:1a:a5:49:ca:3f:c7: 2e:4c:2d:fd:c3:a7:f5:35:b7:fd:e6:26:5c:d1:dc:31:8f:80: 8e:17:85:c0:24:b9:ba:67:93:49:7b:1f:95:62:1b:fb:81:91: 28:d1:56:c8:62:f5:8b:3c:83:6f:5c:a9:d2:3a:8d:2b:45:05: 53:58:2a:f1:bb:10:5f:aa:22:17:73:f2:51:71:4f:3a:84:71: 90:3e:c7:48:bb:87:39:49:e4:e0:d2:1f:7f:88:4a:b1:91:d0: 81:a2:5e:f3:26:d9:a4:80:91:5a:75:ee:fb:18:9a:4c:41:d7: 62:a6:47:15:86:35:be:9f:83:c9:76:a5:75:ed:b7:47:a7:6a: 63:9e:08:16:f5:ca:bb:92:d7:91:79:3b:9d:95:bd:b8:e8:fd: 56:6b:5e:24:42:a5:fa:09:cc:17:2c:a0:4d:a8:bb:46:82:f2: 09:9b:cd:9f:26:d2:e7:b7:6e:4e:fd:3d:4e:9c:be:26:a7:0a: 42:88:1b:3f:5a:8b:58:6d:9b:f6:28:09:b8:96:28:2d:f9:a1: a8:d2:dc:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLWB1Hr+tc0zGZGgfy/ySMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZmUzZGZhNzdlYjAyMDFjODU2ZDFlMWViZjAzMmJjYzhi MTI0ZDgwHhcNMjUxMjA2MDEwMTEzWhcNMjUxMjA3MDEwMTEzWjAzMTEwLwYDVQQD Eyg2MzE2M2Y3NGNjYTJjNjQ2Y2UyYzIzYzA2YWZhZjA0ZjY4OTNiMzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTsAYDEu60Hlcj+89mBU/AmvLVyd IO0Pt6azsBuxAKbx8sYTrhyccXP+REh5eWiY/14cbH8f9vyXwP+ryJrc1GjI7HWU ulsKgDj44phT2/5GuTdfDZJg9UJeV2eOJTjTuBTwNwtRweookcpfCh2IGpnYG+Iu EPyQ+WM/djWky3igwcqUFpTdJDS2gaEa76rG9JQNVKdty7RLjUADuwJjklruUhXE Ez3WmqnptJramtun22pYXrkG6HfNlk4/8KBXQjsepxwrJCs+ufYzFmuLZLGOrHD8 LuxKwRKmy/xAoV3beacOPv0oJUrik2Iyg2WEhNl9KaabDXMR65EPjKvXTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGMWP3TMosZGziwjwGr68E9ok7M0MB8GA1UdIwQY MBaAFCn+Pfp36wIByFbR4evwMrzIsSTYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2Y0OS1uZnJBZ0hJVnRIaDZfQXl2TWl4Sk5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9iZjI0MzAtMzJiMC00OTNjLWFjYmUt YmViZWMyMzM2ZDQ4LzEvS2Y0OS1uZnJBZ0hJVnRIaDZfQXl2TWl4Sk5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9iZjI0MzAtMzJiMC00OTNjLWFjYmUtYmViZWMyMzM2ZDQ4 LzEvS2Y0OS1uZnJBZ0hJVnRIaDZfQXl2TWl4Sk5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZNRqZaAC XpKmT6OmlJq2rm6luf4X4FEdeDvU3CMNRfvahrfxrmmKbrhn/ZmDb1XoGqVJyj/H Lkwt/cOn9TW3/eYmXNHcMY+AjheFwCS5umeTSXsflWIb+4GRKNFWyGL1izyDb1yp 0jqNK0UFU1gq8bsQX6oiF3PyUXFPOoRxkD7HSLuHOUnk4NIff4hKsZHQgaJe8ybZ pICRWnXu+xiaTEHXYqZHFYY1vp+DyXalde23R6dqY54IFvXKu5LXkXk7nZW9uOj9 VmteJEKl+gnMFyygTai7RoLyCZvNnybS57duTv09Tpy+JqcKQogbP1qLWG2b9igJ uJYoLfmhqNLckg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:39:49 2025 by rpki-client