This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/35049e-223d-4908-9754-38bac139c844/1/KipfTZdgeKzXSVfxcoF-zRnQJQI.mft File: KipfTZdgeKzXSVfxcoF-zRnQJQI.mft (raw, json) Hash identifier: oXPOj/Yr0MRDIN+OCLuZboNVVhoip5cI0Kpd3Sq15yA= Subject key identifier: DC:A9:07:25:59:F0:0F:55:BC:7D:56:95:70:A5:78:EB:76:9F:CC:61 Authority key identifier: 2A:2A:5F:4D:97:60:78:AC:D7:49:57:F1:72:81:7E:CD:19:D0:25:02 Certificate issuer: /CN=2a2a5f4d976078acd74957f172817ecd19d02502 Certificate serial: 019AF2091D73D46EFF518327471EE563EB46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KipfTZdgeKzXSVfxcoF-zRnQJQI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/35049e-223d-4908-9754-38bac139c844/1/KipfTZdgeKzXSVfxcoF-zRnQJQI.mft Manifest number: F9 Signing time: Sat 06 Dec 2025 05:01:14 +0000 Manifest this update: Sat 06 Dec 2025 05:01:14 +0000 Manifest next update: Sun 07 Dec 2025 05:01:14 +0000 Files and hashes: 1: KipfTZdgeKzXSVfxcoF-zRnQJQI.crl (hash: FfLJGTCemdydOnAN8dxDxXSROIgIczf4RuPsp8CVzjM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/35049e-223d-4908-9754-38bac139c844/1/KipfTZdgeKzXSVfxcoF-zRnQJQI.crl rsync://rpki.ripe.net/repository/DEFAULT/65/35049e-223d-4908-9754-38bac139c844/1/KipfTZdgeKzXSVfxcoF-zRnQJQI.mft rsync://rpki.ripe.net/repository/DEFAULT/KipfTZdgeKzXSVfxcoF-zRnQJQI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:1d:73:d4:6e:ff:51:83:27:47:1e:e5:63:eb:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a2a5f4d976078acd74957f172817ecd19d02502 Validity Not Before: Dec 6 05:01:14 2025 GMT Not After : Dec 7 05:01:14 2025 GMT Subject: CN=dca9072559f00f55bc7d569570a578eb769fcc61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bf:e6:53:79:41:70:62:f6:7d:84:5f:f5:c2: 50:1a:f7:cb:a9:55:cc:1b:3d:14:1f:da:26:67:0e: d2:5e:2a:40:6b:d1:8c:e7:4c:39:db:7b:28:a5:e7: c3:2b:da:33:35:d5:fe:60:af:29:ce:7e:ec:49:39: 61:a5:a6:d0:5f:7a:89:8b:45:0e:23:b1:d6:23:43: a9:66:c8:f2:e5:78:42:39:78:45:de:78:e9:cb:11: a3:b1:7f:1b:c6:2e:38:03:50:d9:a7:2a:1e:29:eb: b2:73:fb:f7:89:95:2f:06:c8:fd:15:60:5c:e5:2d: 07:15:33:c7:60:a9:d1:5c:ac:c4:99:45:b0:5e:55: 2c:26:e3:0b:55:a8:3d:86:48:cd:08:d7:db:4c:67: d1:a8:64:58:d7:0d:60:99:de:52:60:fd:ef:b7:01: ee:92:6a:af:17:ba:e5:94:2f:dd:3f:30:ed:14:da: 34:3e:4f:49:ad:3d:6c:2c:93:75:42:93:3b:33:ae: c0:22:5f:78:0d:77:82:fb:1b:d0:1d:7f:10:5f:38: c7:10:80:e0:3f:03:b7:01:10:36:5c:4f:ba:a4:64: 48:87:d0:60:30:ea:91:86:69:4b:93:6d:c9:2d:81: b1:ac:0a:c5:86:12:a7:79:4e:6c:58:b2:49:c3:1a: 82:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A9:07:25:59:F0:0F:55:BC:7D:56:95:70:A5:78:EB:76:9F:CC:61 X509v3 Authority Key Identifier: keyid:2A:2A:5F:4D:97:60:78:AC:D7:49:57:F1:72:81:7E:CD:19:D0:25:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KipfTZdgeKzXSVfxcoF-zRnQJQI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/35049e-223d-4908-9754-38bac139c844/1/KipfTZdgeKzXSVfxcoF-zRnQJQI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/35049e-223d-4908-9754-38bac139c844/1/KipfTZdgeKzXSVfxcoF-zRnQJQI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:7b:0d:e7:f8:55:c0:c6:1a:ff:25:55:b6:4e:2a:3f:09:72: e8:ce:71:12:59:27:ca:8e:14:67:c9:5e:87:b2:18:3e:12:f7: c6:a9:72:8a:4a:47:53:7c:c0:27:d7:0a:23:58:cd:5c:62:5b: 7f:fd:c0:f8:95:81:b5:62:9e:1c:f3:8c:96:4c:ff:65:b2:50: 3c:f3:7d:09:12:c0:e0:f0:b2:01:b9:db:16:56:2c:98:9a:bd: 35:92:c0:cc:32:71:76:3c:bb:25:e9:d6:42:68:7f:a0:8f:1b: 0e:1f:ee:b0:97:b3:97:77:7d:c1:f8:f7:12:aa:a6:20:43:9f: 35:9d:a2:80:26:35:c1:0b:50:6f:26:10:0d:d9:76:1e:cd:1b: cf:98:03:0f:78:62:26:de:34:df:68:7c:7a:15:0d:2a:1c:89: d0:57:ea:69:e5:e5:55:3d:62:22:89:da:c7:c0:2f:75:db:f6: 9a:d8:68:26:25:e5:dc:4f:2c:3f:e5:bb:75:d5:32:bb:ac:61: ab:7f:03:4e:a2:d3:87:df:5a:63:89:de:7c:d6:a0:45:16:22: 10:97:28:ac:14:8c:80:4a:da:2e:e0:f5:17:d1:fe:cc:65:90: 15:e8:3c:1a:45:39:1b:c5:83:7f:3c:d7:23:7d:ec:17:d9:10: e0:55:22:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCR1z1G7/UYMnRx7lY+tGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhMmE1ZjRkOTc2MDc4YWNkNzQ5NTdmMTcyODE3ZWNkMTlk MDI1MDIwHhcNMjUxMjA2MDUwMTE0WhcNMjUxMjA3MDUwMTE0WjAzMTEwLwYDVQQD EyhkY2E5MDcyNTU5ZjAwZjU1YmM3ZDU2OTU3MGE1NzhlYjc2OWZjYzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb/mU3lBcGL2fYRf9cJQGvfLqVXM Gz0UH9omZw7SXipAa9GM50w523sopefDK9ozNdX+YK8pzn7sSTlhpabQX3qJi0UO I7HWI0OpZsjy5XhCOXhF3njpyxGjsX8bxi44A1DZpyoeKeuyc/v3iZUvBsj9FWBc 5S0HFTPHYKnRXKzEmUWwXlUsJuMLVag9hkjNCNfbTGfRqGRY1w1gmd5SYP3vtwHu kmqvF7rllC/dPzDtFNo0Pk9JrT1sLJN1QpM7M67AIl94DXeC+xvQHX8QXzjHEIDg PwO3ARA2XE+6pGRIh9BgMOqRhmlLk23JLYGxrArFhhKneU5sWLJJwxqCGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNypByVZ8A9VvH1WlXCleOt2n8xhMB8GA1UdIwQY MBaAFCoqX02XYHis10lX8XKBfs0Z0CUCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2lwZlRaZGdlS3pYU1ZmeGNvRi16Um5RSlFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zNTA0OWUtMjIzZC00OTA4LTk3NTQt MzhiYWMxMzljODQ0LzEvS2lwZlRaZGdlS3pYU1ZmeGNvRi16Um5RSlFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zNTA0OWUtMjIzZC00OTA4LTk3NTQtMzhiYWMxMzljODQ0 LzEvS2lwZlRaZGdlS3pYU1ZmeGNvRi16Um5RSlFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACHsN5/hV wMYa/yVVtk4qPwly6M5xElknyo4UZ8leh7IYPhL3xqlyikpHU3zAJ9cKI1jNXGJb f/3A+JWBtWKeHPOMlkz/ZbJQPPN9CRLA4PCyAbnbFlYsmJq9NZLAzDJxdjy7JenW Qmh/oI8bDh/usJezl3d9wfj3EqqmIEOfNZ2igCY1wQtQbyYQDdl2Hs0bz5gDD3hi Jt4032h8ehUNKhyJ0FfqaeXlVT1iIonax8Avddv2mthoJiXl3E8sP+W7ddUyu6xh q38DTqLTh99aY4nefNagRRYiEJcorBSMgEraLuD1F9H+zGWQFeg8GkU5G8WDfzzX I33sF9kQ4FUiYA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:20:42 2025 by rpki-client