This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.mft File: KuLRf9W7nXYRETxYakEIAseF7fI.mft (raw, json) Hash identifier: oSOd//O13t3mkgg76+7f7Jcpm3vtnddzkDF3RqTsdiQ= Subject key identifier: 25:B5:FC:2A:A8:CD:BB:6E:45:7D:C8:D9:E0:62:C6:9D:4A:CC:8A:53 Authority key identifier: 2A:E2:D1:7F:D5:BB:9D:76:11:11:3C:58:6A:41:08:02:C7:85:ED:F2 Certificate issuer: /CN=2ae2d17fd5bb9d7611113c586a410802c785edf2 Certificate serial: 019B2F67EFE7EF49020493F1A41585085E13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KuLRf9W7nXYRETxYakEIAseF7fI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.mft Manifest number: 0D1D Signing time: Thu 18 Dec 2025 03:01:39 +0000 Manifest this update: Thu 18 Dec 2025 03:01:39 +0000 Manifest next update: Fri 19 Dec 2025 03:01:39 +0000 Files and hashes: 1: KuLRf9W7nXYRETxYakEIAseF7fI.crl (hash: yoc3OrGHK2M5Gy6cgFPhb8APYl0/RqW3I6QvU6VmdXw=) 2: YH99c0q_olNEfAaRzhJ9pz57sG4.roa (hash: OOfjz24iJ1ROiHG1nf6s+ocWKHslkCgE1Kj76TfUgiM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.crl rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.mft rsync://rpki.ripe.net/repository/DEFAULT/KuLRf9W7nXYRETxYakEIAseF7fI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:ef:e7:ef:49:02:04:93:f1:a4:15:85:08:5e:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ae2d17fd5bb9d7611113c586a410802c785edf2 Validity Not Before: Dec 18 03:01:39 2025 GMT Not After : Dec 19 03:01:39 2025 GMT Subject: CN=25b5fc2aa8cdbb6e457dc8d9e062c69d4acc8a53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f9:b2:d2:f3:2e:e4:bf:5d:a9:f1:4e:de:10: 10:ce:45:1c:1d:10:5b:d0:6b:97:3a:eb:31:6f:10: 8f:ce:af:fe:70:d8:fa:5e:db:dd:15:9b:e3:6a:5d: fb:5f:b3:57:07:69:de:fd:84:d9:bd:f4:34:10:73: 30:96:17:ab:32:2d:93:15:c3:0b:36:37:a6:a1:25: 9b:93:b2:10:ee:2d:8b:08:80:ea:bf:9d:6a:9c:04: 87:8f:d6:38:40:bd:d9:cf:18:60:ad:2d:47:15:24: dd:09:08:30:00:e4:03:76:ec:00:a5:71:3d:fd:59: 68:1d:53:5f:52:5e:e8:f8:3e:da:c1:af:d3:1f:94: f9:c2:c1:49:6e:ca:26:2b:4f:f5:b6:57:9b:0a:c2: 0b:ff:c7:e4:c0:dc:f5:18:d9:80:52:f4:50:7f:d9: 17:18:9b:83:3d:50:25:44:d3:30:7c:70:6c:c9:9f: fe:47:5f:1e:c0:3b:03:01:80:e9:fe:52:1b:4a:28: fd:b8:1c:17:22:3f:bb:74:41:42:7f:c2:a0:3e:d5: b5:d8:24:4a:98:36:bf:f5:49:b8:1e:e1:77:4f:ec: c3:5d:ba:d6:49:94:f8:90:2b:8a:7d:eb:e6:9f:d7: 56:06:0d:68:a9:c4:ec:6f:71:39:07:a5:3c:02:03: f6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:B5:FC:2A:A8:CD:BB:6E:45:7D:C8:D9:E0:62:C6:9D:4A:CC:8A:53 X509v3 Authority Key Identifier: keyid:2A:E2:D1:7F:D5:BB:9D:76:11:11:3C:58:6A:41:08:02:C7:85:ED:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuLRf9W7nXYRETxYakEIAseF7fI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:7b:ba:51:2b:c4:01:45:6b:fb:8a:af:7b:ce:40:40:80:a3: 85:1f:88:6f:6a:1e:a4:2b:dd:a7:17:e3:14:f6:50:1f:2d:88: dc:01:01:59:4a:4d:c8:1a:17:10:02:73:82:a5:5e:b6:eb:a4: 11:18:ff:0b:fd:94:16:f6:dd:b4:99:0e:98:21:5b:77:d4:66: f7:5f:30:02:f1:8d:27:f5:99:b6:c5:b7:c2:39:1f:d7:f1:d8: 7e:1d:a0:ba:63:bf:12:74:3e:7b:19:64:cb:9f:c5:7f:52:86: f0:03:9e:c3:f4:b8:76:bd:f3:c8:ea:e0:40:ae:c5:68:43:8d: 77:6e:c3:67:b0:b0:3d:ff:6e:66:84:ae:3d:7a:1f:98:f5:37: 7e:cd:e0:25:62:87:ed:d6:34:98:ea:f7:0c:64:b7:ce:93:06: a3:e9:c3:f5:3d:a8:c2:e5:05:65:4d:c0:1e:5d:fa:97:0f:6c: 33:46:38:50:4d:fb:87:50:97:2a:a5:61:af:e8:86:2b:b0:42: 4d:48:52:11:0c:32:63:ac:58:64:af:2d:97:a6:8c:35:79:37: 9a:48:fb:ee:ed:ff:12:6f:10:ad:b7:4d:2a:cc:53:d9:04:89: 3c:78:46:ef:bd:ff:32:07:62:17:ac:d4:07:d8:15:4b:56:ef: e3:e6:65:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ+/n70kCBJPxpBWFCF4TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhZTJkMTdmZDViYjlkNzYxMTExM2M1ODZhNDEwODAyYzc4 NWVkZjIwHhcNMjUxMjE4MDMwMTM5WhcNMjUxMjE5MDMwMTM5WjAzMTEwLwYDVQQD EygyNWI1ZmMyYWE4Y2RiYjZlNDU3ZGM4ZDllMDYyYzY5ZDRhY2M4YTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfmy0vMu5L9dqfFO3hAQzkUcHRBb 0GuXOusxbxCPzq/+cNj6XtvdFZvjal37X7NXB2ne/YTZvfQ0EHMwlherMi2TFcML NjemoSWbk7IQ7i2LCIDqv51qnASHj9Y4QL3ZzxhgrS1HFSTdCQgwAOQDduwApXE9 /VloHVNfUl7o+D7awa/TH5T5wsFJbsomK0/1tlebCsIL/8fkwNz1GNmAUvRQf9kX GJuDPVAlRNMwfHBsyZ/+R18ewDsDAYDp/lIbSij9uBwXIj+7dEFCf8KgPtW12CRK mDa/9Um4HuF3T+zDXbrWSZT4kCuKfevmn9dWBg1oqcTsb3E5B6U8AgP2LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCW1/CqozbtuRX3I2eBixp1KzIpTMB8GA1UdIwQY MBaAFCri0X/Vu512ERE8WGpBCALHhe3yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3VMUmY5VzduWFlSRVR4WWFrRUlBc2VGN2ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9iYTdmZDYtYjNhOC00OTMxLWFjMDUt YWI0ODg3YzYzZWE1LzEvS3VMUmY5VzduWFlSRVR4WWFrRUlBc2VGN2ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9iYTdmZDYtYjNhOC00OTMxLWFjMDUtYWI0ODg3YzYzZWE1 LzEvS3VMUmY5VzduWFlSRVR4WWFrRUlBc2VGN2ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYnu6USvE AUVr+4qve85AQICjhR+Ib2oepCvdpxfjFPZQHy2I3AEBWUpNyBoXEAJzgqVetuuk ERj/C/2UFvbdtJkOmCFbd9Rm918wAvGNJ/WZtsW3wjkf1/HYfh2gumO/EnQ+exlk y5/Ff1KG8AOew/S4dr3zyOrgQK7FaEONd27DZ7CwPf9uZoSuPXofmPU3fs3gJWKH 7dY0mOr3DGS3zpMGo+nD9T2owuUFZU3AHl36lw9sM0Y4UE37h1CXKqVhr+iGK7BC TUhSEQwyY6xYZK8tl6aMNXk3mkj77u3/Em8QrbdNKsxT2QSJPHhG773/MgdiF6zU B9gVS1bv4+Zl8A== -----END CERTIFICATE-----Generated at Thu Dec 18 05:45:39 2025 by rpki-client