This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft File: KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft (raw, json) Hash identifier: uG0IrvoBBGEbQApsHZeoTpW3zO0EDan4RhxAqsgznwU= Subject key identifier: 85:E6:6A:1E:B0:6B:CF:C7:B4:9A:B6:54:1E:7E:83:79:75:89:B1:D6 Authority key identifier: 2A:71:48:C4:61:F5:E7:7E:10:7A:F7:35:66:A2:7E:34:35:61:DC:1D Certificate issuer: /CN=2a7148c461f5e77e107af73566a27e343561dc1d Certificate serial: 019AFC55E76BFFE8AF3552608C4D0EBAB0D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KnFIxGH1534Qevc1ZqJ-NDVh3B0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft Manifest number: 1764 Signing time: Mon 08 Dec 2025 05:01:19 +0000 Manifest this update: Mon 08 Dec 2025 05:01:19 +0000 Manifest next update: Tue 09 Dec 2025 05:01:19 +0000 Files and hashes: 1: FXGg2Fa0emu9dKW-rLUC0KROeXw.roa (hash: vDpMUJR3utlP1Q4YoLNcOM/ustze8pksaMUztNRPk0o=) 2: KnFIxGH1534Qevc1ZqJ-NDVh3B0.crl (hash: 2m3gVD1E6loreajJQhBb/7hAkRW/kYE5ghKGVXj/Ukg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.crl rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft rsync://rpki.ripe.net/repository/DEFAULT/KnFIxGH1534Qevc1ZqJ-NDVh3B0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:55:e7:6b:ff:e8:af:35:52:60:8c:4d:0e:ba:b0:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a7148c461f5e77e107af73566a27e343561dc1d Validity Not Before: Dec 8 05:01:19 2025 GMT Not After : Dec 9 05:01:19 2025 GMT Subject: CN=85e66a1eb06bcfc7b49ab6541e7e83797589b1d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d9:cb:b3:17:af:be:02:5f:d7:be:3f:7a:d5: ff:91:10:7b:e9:e0:29:65:46:e3:db:a9:60:50:47: 90:9e:d2:c3:89:45:9c:2f:68:77:d3:4d:85:88:77: 6f:80:51:a8:db:08:8c:99:c9:4a:c6:7d:9a:20:3b: 01:c1:ba:cb:f8:83:c5:1c:e2:b1:60:42:44:60:0e: 9a:af:f5:9f:1f:c6:6b:90:fb:5f:23:51:80:ca:dc: b6:5d:ad:21:fd:b9:df:e7:a9:4d:9a:4b:a1:87:b6: e7:d5:0d:89:ec:91:e3:13:cd:20:fc:66:dd:f3:67: 69:54:5d:17:c9:8e:e5:b6:ec:f9:fc:03:52:e4:d6: 92:78:55:ee:54:8c:77:0a:8d:71:a8:0e:ce:fd:c3: c7:a2:ad:1f:60:2c:85:65:42:f0:14:3e:75:f8:67: b1:df:6e:44:b6:11:86:e6:f6:be:5d:44:27:ab:89: 1f:63:89:42:12:61:71:e6:10:29:78:06:b5:ff:08: 6e:97:93:b6:6b:75:9f:04:d1:99:1f:8d:e0:d1:85: bc:db:c6:8b:01:15:71:c9:e5:21:ed:09:e0:5f:e1: 52:5b:ad:3c:bf:92:c5:d5:2d:3c:8b:4c:cd:97:68: 82:89:44:81:d6:e7:89:95:4c:d1:a0:7e:c3:57:10: 5d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E6:6A:1E:B0:6B:CF:C7:B4:9A:B6:54:1E:7E:83:79:75:89:B1:D6 X509v3 Authority Key Identifier: keyid:2A:71:48:C4:61:F5:E7:7E:10:7A:F7:35:66:A2:7E:34:35:61:DC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KnFIxGH1534Qevc1ZqJ-NDVh3B0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:98:0a:24:f6:fc:11:04:d9:34:bf:20:3a:6c:ff:aa:85:1d: c1:88:cf:44:34:e5:7b:6b:7c:bb:6b:f6:75:0b:5d:6c:34:36: 6e:ef:28:28:1c:4a:d9:b7:99:0b:6f:7a:a7:fc:ab:d9:24:b8: 8e:3b:ef:c2:ff:04:af:49:24:16:11:b4:e1:88:5b:39:d3:58: f0:29:ed:14:0f:12:cd:a3:f9:ec:8b:c0:72:8d:92:37:7a:83: 18:3e:8e:02:63:45:71:c9:e4:ea:0c:d7:e9:48:3c:07:56:38: c0:fe:c8:44:4a:36:73:11:a5:12:a4:2c:59:88:9c:62:af:4a: 98:cb:48:b4:b7:22:a2:fa:73:23:49:0f:02:8d:9b:9d:51:39: 61:72:9b:9e:98:e4:87:03:7d:b0:81:70:b8:2b:39:95:03:f8: 03:d3:d6:3c:9c:8a:eb:b7:a7:66:eb:ab:7f:80:af:fc:86:4a: 7d:fd:37:54:d0:4b:d0:c8:4f:8b:5f:74:01:0c:97:c2:6a:9b: ae:c6:dd:4e:06:57:8f:42:e9:da:04:21:07:3b:2a:f6:14:75: 52:21:15:48:fc:8c:4b:d9:d0:06:e4:dc:ba:14:0c:ef:dd:b1: 1b:be:19:30:6c:cc:b8:1f:cd:5a:f2:70:bf:f2:99:ae:9a:1f: b3:82:25:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8Vedr/+ivNVJgjE0OurDRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhNzE0OGM0NjFmNWU3N2UxMDdhZjczNTY2YTI3ZTM0MzU2 MWRjMWQwHhcNMjUxMjA4MDUwMTE5WhcNMjUxMjA5MDUwMTE5WjAzMTEwLwYDVQQD Eyg4NWU2NmExZWIwNmJjZmM3YjQ5YWI2NTQxZTdlODM3OTc1ODliMWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNnLsxevvgJf174/etX/kRB76eAp ZUbj26lgUEeQntLDiUWcL2h3002FiHdvgFGo2wiMmclKxn2aIDsBwbrL+IPFHOKx YEJEYA6ar/WfH8ZrkPtfI1GAyty2Xa0h/bnf56lNmkuhh7bn1Q2J7JHjE80g/Gbd 82dpVF0XyY7ltuz5/ANS5NaSeFXuVIx3Co1xqA7O/cPHoq0fYCyFZULwFD51+Gex 325EthGG5va+XUQnq4kfY4lCEmFx5hApeAa1/whul5O2a3WfBNGZH43g0YW828aL ARVxyeUh7QngX+FSW608v5LF1S08i0zNl2iCiUSB1ueJlUzRoH7DVxBdwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIXmah6wa8/HtJq2VB5+g3l1ibHWMB8GA1UdIwQY MBaAFCpxSMRh9ed+EHr3NWaifjQ1YdwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS25GSXhHSDE1MzRRZXZjMVpxSi1ORFZoM0IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS85YWZhZjUtZTY5Ni00ODNlLTgzNjUt MzRlZmQ1YjllOWNkLzEvS25GSXhHSDE1MzRRZXZjMVpxSi1ORFZoM0IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS85YWZhZjUtZTY5Ni00ODNlLTgzNjUtMzRlZmQ1YjllOWNk LzEvS25GSXhHSDE1MzRRZXZjMVpxSi1ORFZoM0IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIJgKJPb8 EQTZNL8gOmz/qoUdwYjPRDTle2t8u2v2dQtdbDQ2bu8oKBxK2beZC296p/yr2SS4 jjvvwv8Er0kkFhG04YhbOdNY8CntFA8SzaP57IvAco2SN3qDGD6OAmNFccnk6gzX 6Ug8B1Y4wP7IREo2cxGlEqQsWYicYq9KmMtItLciovpzI0kPAo2bnVE5YXKbnpjk hwN9sIFwuCs5lQP4A9PWPJyK67enZuurf4Cv/IZKff03VNBL0MhPi190AQyXwmqb rsbdTgZXj0Lp2gQhBzsq9hR1UiEVSPyMS9nQBuTcuhQM792xG74ZMGzMuB/NWvJw v/KZrpofs4IlmA== -----END CERTIFICATE-----Generated at Mon Dec 8 11:20:53 2025 by rpki-client