This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft File: KcFw2YteNdfVFTdnHGBApRUYhLw.mft (raw, json) Hash identifier: 0JAo/VC7jTdkzC4g3KEyyeKFKbEsQWJmA/QDDhRx6V4= Subject key identifier: 73:CE:5B:FF:AB:20:5C:F8:A6:A5:22:9D:B9:24:ED:96:EF:2B:39:34 Authority key identifier: 29:C1:70:D9:8B:5E:35:D7:D5:15:37:67:1C:60:40:A5:15:18:84:BC Certificate issuer: /CN=29c170d98b5e35d7d51537671c6040a5151884bc Certificate serial: 019AF19B5E9A24AAA62A2D97C4C5B974EBBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 03:01:22 +0000 Manifest this update: Sat 06 Dec 2025 03:01:22 +0000 Manifest next update: Sun 07 Dec 2025 03:01:22 +0000 Files and hashes: 1: 3ZJjipNvCnffHlBZEGLPYL1cd6o.roa (hash: 59Oe/VE87ztmqQyIvIAIji5wjLpRLRfwhyLcTm5yzDc=) 2: KcFw2YteNdfVFTdnHGBApRUYhLw.crl (hash: dMFHjVKV5qrefU1N11BfXjFRCEiBeYirI3cMCZaaXHc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:5e:9a:24:aa:a6:2a:2d:97:c4:c5:b9:74:eb:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29c170d98b5e35d7d51537671c6040a5151884bc Validity Not Before: Dec 6 03:01:22 2025 GMT Not After : Dec 7 03:01:22 2025 GMT Subject: CN=73ce5bffab205cf8a6a5229db924ed96ef2b3934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6f:a3:81:ce:54:b6:78:a3:41:04:a1:58:fa: fa:5f:ca:d5:58:0b:fa:d0:7e:e2:e7:f3:47:33:5c: 21:eb:49:b2:1d:15:37:25:da:28:49:6e:c7:62:35: 93:3d:3f:6d:7a:83:5e:c2:2a:ac:23:4a:cb:ec:27: a1:f6:33:64:84:14:c6:0d:f1:2e:4f:f2:7a:83:55: 8a:63:ad:f1:bd:05:95:8c:23:05:f5:6a:bc:36:d1: ff:2f:c5:3f:75:b3:d0:81:28:b1:d7:ce:0d:aa:b4: 6d:87:76:8a:f3:b2:10:2c:76:56:a3:18:7d:77:77: 5e:04:4a:d9:94:21:41:31:dc:be:b2:64:90:16:a1: 9f:13:54:72:22:33:48:bc:a4:2d:36:5f:14:49:c7: 85:82:d1:4f:b0:62:e0:fe:53:73:7a:4e:1b:15:c7: 5b:63:5f:d8:9e:fd:95:12:3c:61:e8:6b:48:c9:8e: 00:e1:3e:66:c6:37:80:b7:9e:2f:1d:5b:29:22:f5: 33:91:3c:be:dd:1e:d2:27:06:66:5b:fc:5d:60:7d: 56:89:5c:21:a5:c7:e1:88:14:48:32:4e:fa:09:dc: 61:2b:24:06:c2:e7:15:81:57:00:fc:1d:3c:fe:d4: 5c:47:9e:92:95:49:13:ff:e4:c0:5e:21:58:c0:eb: 56:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:CE:5B:FF:AB:20:5C:F8:A6:A5:22:9D:B9:24:ED:96:EF:2B:39:34 X509v3 Authority Key Identifier: keyid:29:C1:70:D9:8B:5E:35:D7:D5:15:37:67:1C:60:40:A5:15:18:84:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:da:52:3d:14:fc:12:63:aa:8c:64:9b:8e:55:20:c0:04:a8: e7:a0:4e:09:f0:6c:95:03:de:44:41:be:ee:7e:c5:c6:0e:64: f4:27:6f:8a:b7:bc:da:43:a4:c6:cb:19:ad:3c:f9:df:f9:28: c2:f7:3e:fd:92:35:b6:44:0c:cd:0f:ab:e8:fd:e8:ee:07:68: 9c:bb:4e:56:3e:0d:3c:ed:4a:fb:71:49:6e:86:0b:69:fe:1c: ca:81:ed:6f:bf:a4:20:18:80:6a:19:10:56:3b:9d:84:ab:1b: 10:d3:75:b1:3d:d4:3b:65:af:c0:19:10:5e:29:c9:27:1c:db: d4:34:e5:a3:92:8c:01:9f:eb:94:0b:25:23:99:26:87:92:1d: 4a:5c:01:03:e9:dd:c6:aa:64:d8:df:09:15:0e:dd:17:82:e9: 30:40:e0:d9:93:aa:9e:80:a8:64:ce:5b:28:d5:fc:ce:d3:56: 59:c7:a2:7d:53:2b:06:e5:ed:3c:62:86:fd:67:0b:9d:82:26: ba:7f:68:dc:7f:80:e4:ec:5b:00:ec:b5:90:31:18:aa:9c:31: 80:ef:83:04:84:9b:4e:ae:28:7e:f8:b8:d9:41:6e:9c:22:6b: 69:71:fa:c7:16:a9:4c:d4:4c:02:a0:33:3d:ce:b0:86:89:5b: e6:dc:59:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm16aJKqmKi2XxMW5dOu9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YzE3MGQ5OGI1ZTM1ZDdkNTE1Mzc2NzFjNjA0MGE1MTUx ODg0YmMwHhcNMjUxMjA2MDMwMTIyWhcNMjUxMjA3MDMwMTIyWjAzMTEwLwYDVQQD Eyg3M2NlNWJmZmFiMjA1Y2Y4YTZhNTIyOWRiOTI0ZWQ5NmVmMmIzOTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvG+jgc5UtnijQQShWPr6X8rVWAv6 0H7i5/NHM1wh60myHRU3JdooSW7HYjWTPT9teoNewiqsI0rL7Ceh9jNkhBTGDfEu T/J6g1WKY63xvQWVjCMF9Wq8NtH/L8U/dbPQgSix184NqrRth3aK87IQLHZWoxh9 d3deBErZlCFBMdy+smSQFqGfE1RyIjNIvKQtNl8USceFgtFPsGLg/lNzek4bFcdb Y1/Ynv2VEjxh6GtIyY4A4T5mxjeAt54vHVspIvUzkTy+3R7SJwZmW/xdYH1WiVwh pcfhiBRIMk76CdxhKyQGwucVgVcA/B08/tRcR56SlUkT/+TAXiFYwOtWFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHPOW/+rIFz4pqUinbkk7ZbvKzk0MB8GA1UdIwQY MBaAFCnBcNmLXjXX1RU3ZxxgQKUVGIS8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2NGdzJZdGVOZGZWRlRkbkhHQkFwUlVZaEx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9lMjVhM2MtZGVmNi00MjI4LWExMGIt YzQ1ZTk0OWU5Y2Q2LzEvS2NGdzJZdGVOZGZWRlRkbkhHQkFwUlVZaEx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9lMjVhM2MtZGVmNi00MjI4LWExMGItYzQ1ZTk0OWU5Y2Q2 LzEvS2NGdzJZdGVOZGZWRlRkbkhHQkFwUlVZaEx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP9pSPRT8 EmOqjGSbjlUgwASo56BOCfBslQPeREG+7n7Fxg5k9Cdvire82kOkxssZrTz53/ko wvc+/ZI1tkQMzQ+r6P3o7gdonLtOVj4NPO1K+3FJboYLaf4cyoHtb7+kIBiAahkQ VjudhKsbENN1sT3UO2WvwBkQXinJJxzb1DTlo5KMAZ/rlAslI5kmh5IdSlwBA+nd xqpk2N8JFQ7dF4LpMEDg2ZOqnoCoZM5bKNX8ztNWWceifVMrBuXtPGKG/WcLnYIm un9o3H+A5OxbAOy1kDEYqpwxgO+DBISbTq4ofvi42UFunCJraXH6xxapTNRMAqAz Pc6wholb5txZeA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:44:56 2025 by rpki-client