This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft File: KtWZlPKveVmc-z_y4-mOUY-RT7o.mft (raw, json) Hash identifier: 3/k1r/cX1/HEzQh0v22n9PyWYp/tKrNOSGDriqC3bBI= Subject key identifier: 0B:65:39:04:58:63:28:71:C8:BE:64:EB:B5:63:AE:A7:99:9F:0F:7D Authority key identifier: 2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA Certificate issuer: /CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba Certificate serial: 019AF42DD01BD9C2BE11443323785804A548 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft Manifest number: 0860 Signing time: Sat 06 Dec 2025 15:00:34 +0000 Manifest this update: Sat 06 Dec 2025 15:00:34 +0000 Manifest next update: Sun 07 Dec 2025 15:00:34 +0000 Files and hashes: 1: KtWZlPKveVmc-z_y4-mOUY-RT7o.crl (hash: y9TRZKEDbkcc/FrDe5d0YY5+vSu058ivrQdRm2OSIgs=) 2: cp4lFEUau2mk3J8khN5tWSq6-qA.roa (hash: D4rIJ31bhlRPk+jgypW/dYYRdpcgCFWhZ+etBWhqECE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:d0:1b:d9:c2:be:11:44:33:23:78:58:04:a5:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba Validity Not Before: Dec 6 15:00:34 2025 GMT Not After : Dec 7 15:00:34 2025 GMT Subject: CN=0b65390458632871c8be64ebb563aea7999f0f7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:48:e8:be:46:c0:5c:3b:41:68:6e:72:71:71: 04:0e:07:4e:4b:de:f7:ab:19:6c:4f:31:02:ca:55: ad:20:3b:2b:09:90:98:8b:36:9b:59:fb:c6:dd:ec: e9:ee:a5:bb:83:4e:1d:fa:3e:30:3f:86:04:de:ec: de:59:42:ca:36:18:53:a6:5f:0e:6f:a4:42:77:da: a3:86:3f:0c:80:d9:45:66:9d:26:74:df:4f:bb:7a: 4c:dc:fd:9d:3a:77:9d:d2:1a:39:20:f8:37:99:51: d4:dd:5b:6f:63:ae:1a:5f:57:af:3f:78:22:6a:15: 13:24:31:fb:6d:13:74:bd:ba:56:95:ad:94:f2:81: 94:1d:39:76:f7:46:64:4e:24:72:6f:a9:79:30:75: cd:4e:c2:20:0b:44:bb:ec:6c:a1:49:97:dc:9d:4f: c7:75:43:b9:a6:9a:21:93:c8:63:98:eb:9e:3d:7a: 4d:32:15:09:58:69:66:41:c3:9d:04:7c:59:69:f3: 0e:a1:64:65:a0:e5:ae:12:07:be:38:8a:35:ee:d6: ab:26:8a:92:3b:fe:30:48:9b:b8:50:fd:45:2e:f1: 0b:2d:22:50:36:57:02:4b:e6:07:85:bc:76:41:9d: 3d:a9:19:93:1e:c5:03:3a:6f:e7:dc:cf:e0:44:33: 99:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:65:39:04:58:63:28:71:C8:BE:64:EB:B5:63:AE:A7:99:9F:0F:7D X509v3 Authority Key Identifier: keyid:2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:9a:1b:79:f6:a5:c3:21:ce:d9:08:9d:9c:ed:20:cc:47:20: 87:22:3e:6d:ba:47:e1:f8:91:2c:27:b4:fd:ef:9b:e7:f0:90: aa:7e:e9:05:61:a8:b6:57:62:45:aa:ca:f4:7d:cd:ac:ef:83: 0b:95:1a:c2:ed:24:d7:43:78:5f:ac:88:b3:e0:ce:23:e5:20: e2:31:60:b0:88:fe:52:5b:5a:c7:bd:e8:45:ce:a2:9b:ad:d3: ac:f0:8a:b5:80:40:d2:cd:2d:df:90:bb:14:9d:6a:4d:74:37: 82:05:70:29:9a:43:34:d7:e4:c4:d1:e0:de:f4:38:a5:6a:f3: 37:3d:07:0b:87:8d:a0:b6:6e:7b:82:a6:09:bf:0c:cf:87:1a: 2a:dc:e1:f3:87:50:c7:71:36:29:01:d2:bd:4d:22:19:ff:5d: 08:62:0e:c0:0b:d3:dc:e3:92:cc:cb:68:3b:c6:0a:9e:d8:62: 49:10:4f:c4:f9:e8:0d:9a:14:e3:f9:a0:3c:bd:0b:e1:58:03: 0b:b0:c2:71:22:6c:3a:43:ec:1a:da:aa:d1:4c:de:c8:9b:05: 0e:d7:df:b5:1a:c9:5f:6e:0d:5e:23:78:fb:31:e6:54:e9:bf: a2:1e:8e:1d:d3:e0:3c:a7:ab:41:b6:7c:d7:fa:6d:9f:8a:ce: 62:a8:5a:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LdAb2cK+EUQzI3hYBKVIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhZDU5OTk0ZjJhZjc5NTk5Y2ZiM2ZmMmUzZTk4ZTUxOGY5 MTRmYmEwHhcNMjUxMjA2MTUwMDM0WhcNMjUxMjA3MTUwMDM0WjAzMTEwLwYDVQQD EygwYjY1MzkwNDU4NjMyODcxYzhiZTY0ZWJiNTYzYWVhNzk5OWYwZjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokjovkbAXDtBaG5ycXEEDgdOS973 qxlsTzECylWtIDsrCZCYizabWfvG3ezp7qW7g04d+j4wP4YE3uzeWULKNhhTpl8O b6RCd9qjhj8MgNlFZp0mdN9Pu3pM3P2dOned0ho5IPg3mVHU3VtvY64aX1evP3gi ahUTJDH7bRN0vbpWla2U8oGUHTl290ZkTiRyb6l5MHXNTsIgC0S77GyhSZfcnU/H dUO5ppohk8hjmOuePXpNMhUJWGlmQcOdBHxZafMOoWRloOWuEge+OIo17tarJoqS O/4wSJu4UP1FLvELLSJQNlcCS+YHhbx2QZ09qRmTHsUDOm/n3M/gRDOZdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAtlOQRYYyhxyL5k67VjrqeZnw99MB8GA1UdIwQY MBaAFCrVmZTyr3lZnPs/8uPpjlGPkU+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3RXWmxQS3ZlVm1jLXpfeTQtbU9VWS1SVDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yYmNmMzEtNjI3Ny00ZTg3LWEwMDct YmJlMmM0ZDg4YzJmLzEvS3RXWmxQS3ZlVm1jLXpfeTQtbU9VWS1SVDdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8yYmNmMzEtNjI3Ny00ZTg3LWEwMDctYmJlMmM0ZDg4YzJm LzEvS3RXWmxQS3ZlVm1jLXpfeTQtbU9VWS1SVDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHJobefal wyHO2QidnO0gzEcghyI+bbpH4fiRLCe0/e+b5/CQqn7pBWGotldiRarK9H3NrO+D C5Uawu0k10N4X6yIs+DOI+Ug4jFgsIj+Ultax73oRc6im63TrPCKtYBA0s0t35C7 FJ1qTXQ3ggVwKZpDNNfkxNHg3vQ4pWrzNz0HC4eNoLZue4KmCb8Mz4caKtzh84dQ x3E2KQHSvU0iGf9dCGIOwAvT3OOSzMtoO8YKnthiSRBPxPnoDZoU4/mgPL0L4VgD C7DCcSJsOkPsGtqq0UzeyJsFDtfftRrJX24NXiN4+zHmVOm/oh6OHdPgPKerQbZ8 1/ptn4rOYqhamg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:14:53 2025 by rpki-client