This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.mft File: KuLRf9W7nXYRETxYakEIAseF7fI.mft (raw, json) Hash identifier: TMPYC6zfaGL/KcQZLclBzvGJ0ks3D81RkKLY8DnMNyE= Subject key identifier: C8:2C:8C:E6:AF:6A:10:C6:4B:E0:34:C1:3A:3E:B1:53:27:CD:D7:D4 Authority key identifier: 2A:E2:D1:7F:D5:BB:9D:76:11:11:3C:58:6A:41:08:02:C7:85:ED:F2 Certificate issuer: /CN=2ae2d17fd5bb9d7611113c586a410802c785edf2 Certificate serial: 019AF19B04B44B88533209792B9C25F3421C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KuLRf9W7nXYRETxYakEIAseF7fI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.mft Manifest number: 0CFD Signing time: Sat 06 Dec 2025 03:00:59 +0000 Manifest this update: Sat 06 Dec 2025 03:00:59 +0000 Manifest next update: Sun 07 Dec 2025 03:00:59 +0000 Files and hashes: 1: KuLRf9W7nXYRETxYakEIAseF7fI.crl (hash: iMWpN8c+VsLFvXfS8Qg+HhEuyn497Wh/I/nIEqnrmys=) 2: YH99c0q_olNEfAaRzhJ9pz57sG4.roa (hash: OOfjz24iJ1ROiHG1nf6s+ocWKHslkCgE1Kj76TfUgiM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.crl rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.mft rsync://rpki.ripe.net/repository/DEFAULT/KuLRf9W7nXYRETxYakEIAseF7fI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:04:b4:4b:88:53:32:09:79:2b:9c:25:f3:42:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ae2d17fd5bb9d7611113c586a410802c785edf2 Validity Not Before: Dec 6 03:00:59 2025 GMT Not After : Dec 7 03:00:59 2025 GMT Subject: CN=c82c8ce6af6a10c64be034c13a3eb15327cdd7d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:07:40:29:fb:17:e6:02:51:df:34:eb:49:ae: 73:80:68:d9:76:86:99:c6:8f:f9:97:3d:2f:da:0c: 5d:19:bc:a8:2f:33:33:9e:5f:f8:48:4a:d7:cc:13: d8:1f:13:b0:64:73:6f:c7:e2:36:97:97:b4:61:a8: 5d:a0:08:7e:21:79:fe:62:a3:c4:4f:d0:d9:ca:ef: 88:c0:63:c1:05:d7:64:09:ef:db:70:82:78:ae:3b: 59:2e:6b:5d:ca:be:62:ee:46:74:54:6e:22:a0:1b: 7f:e1:d8:db:e1:4c:08:75:8e:2c:9d:b8:f6:74:e4: 49:d9:5b:89:f8:9e:01:89:a8:20:0c:a4:70:85:76: a6:a6:0a:51:a7:8c:42:b9:fa:10:57:9a:50:b8:74: 8f:54:24:dc:5b:dc:58:ca:32:af:79:f6:3d:6a:b4: 3a:82:37:d3:b6:74:d6:97:d4:af:ec:ca:3a:fd:2d: af:e7:f6:41:f5:6b:bd:96:a8:7f:62:fe:76:32:64: 5a:21:c9:20:96:2b:d3:d7:17:ad:59:02:1e:24:84: ab:c1:6d:1c:d0:4a:18:89:f6:d3:d7:b7:a3:d6:72: 8f:8f:cf:62:c1:cb:3e:1d:95:ee:ac:d4:35:67:3f: dd:ce:26:e1:19:09:ac:84:81:4b:8d:85:16:86:84: 5b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:2C:8C:E6:AF:6A:10:C6:4B:E0:34:C1:3A:3E:B1:53:27:CD:D7:D4 X509v3 Authority Key Identifier: keyid:2A:E2:D1:7F:D5:BB:9D:76:11:11:3C:58:6A:41:08:02:C7:85:ED:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuLRf9W7nXYRETxYakEIAseF7fI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:dd:a0:fa:92:61:b1:fa:e9:c9:4f:34:56:42:db:ae:21:88: 0e:2e:82:a4:15:54:27:08:a0:4e:3c:18:5e:6e:64:fa:d8:a4: fe:e8:31:45:be:40:65:49:24:17:ce:06:5b:70:f0:6c:67:7b: a6:80:ea:61:99:4c:4f:94:fd:1f:4c:d7:c8:3b:f6:25:0d:69: 77:ae:11:1e:da:5b:ce:b2:33:ed:e2:d7:e7:bd:04:dc:48:c4: a6:db:f0:a9:97:33:b3:e9:af:d6:d5:f1:09:bd:33:e8:fc:d7: 18:e8:88:b2:23:fd:ce:f2:c5:87:09:a2:ef:50:90:64:ea:a8: 5e:6f:c5:e5:fa:1e:d2:7f:e9:6f:f5:98:c1:b3:40:2d:80:e8: 46:b7:1b:9e:a5:87:fa:dd:5f:3c:92:31:f4:b3:1b:a0:9a:08: 2e:9a:46:2f:b1:d1:59:fe:97:00:7e:cc:08:eb:1e:1f:91:1f: 14:a6:cb:8f:ac:86:e9:38:f9:01:c1:f7:c3:e9:9f:39:e9:7a: ef:35:7f:b7:cf:b1:3d:83:59:d8:44:1e:ab:67:ea:da:47:b4: a8:04:c0:15:b9:a3:76:a2:dc:89:54:ec:86:c9:df:24:ad:7a: 39:39:46:47:60:2d:44:85:53:02:f9:c8:a8:1e:7a:81:72:a7: c8:95:d9:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmwS0S4hTMgl5K5wl80IcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhZTJkMTdmZDViYjlkNzYxMTExM2M1ODZhNDEwODAyYzc4 NWVkZjIwHhcNMjUxMjA2MDMwMDU5WhcNMjUxMjA3MDMwMDU5WjAzMTEwLwYDVQQD EyhjODJjOGNlNmFmNmExMGM2NGJlMDM0YzEzYTNlYjE1MzI3Y2RkN2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugdAKfsX5gJR3zTrSa5zgGjZdoaZ xo/5lz0v2gxdGbyoLzMznl/4SErXzBPYHxOwZHNvx+I2l5e0YahdoAh+IXn+YqPE T9DZyu+IwGPBBddkCe/bcIJ4rjtZLmtdyr5i7kZ0VG4ioBt/4djb4UwIdY4snbj2 dORJ2VuJ+J4BiaggDKRwhXampgpRp4xCufoQV5pQuHSPVCTcW9xYyjKvefY9arQ6 gjfTtnTWl9Sv7Mo6/S2v5/ZB9Wu9lqh/Yv52MmRaIckglivT1xetWQIeJISrwW0c 0EoYifbT17ej1nKPj89iwcs+HZXurNQ1Zz/dzibhGQmshIFLjYUWhoRbtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMgsjOavahDGS+A0wTo+sVMnzdfUMB8GA1UdIwQY MBaAFCri0X/Vu512ERE8WGpBCALHhe3yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3VMUmY5VzduWFlSRVR4WWFrRUlBc2VGN2ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9iYTdmZDYtYjNhOC00OTMxLWFjMDUt YWI0ODg3YzYzZWE1LzEvS3VMUmY5VzduWFlSRVR4WWFrRUlBc2VGN2ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9iYTdmZDYtYjNhOC00OTMxLWFjMDUtYWI0ODg3YzYzZWE1 LzEvS3VMUmY5VzduWFlSRVR4WWFrRUlBc2VGN2ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFt2g+pJh sfrpyU80VkLbriGIDi6CpBVUJwigTjwYXm5k+tik/ugxRb5AZUkkF84GW3DwbGd7 poDqYZlMT5T9H0zXyDv2JQ1pd64RHtpbzrIz7eLX570E3EjEptvwqZczs+mv1tXx Cb0z6PzXGOiIsiP9zvLFhwmi71CQZOqoXm/F5foe0n/pb/WYwbNALYDoRrcbnqWH +t1fPJIx9LMboJoILppGL7HRWf6XAH7MCOseH5EfFKbLj6yG6Tj5AcH3w+mfOel6 7zV/t8+xPYNZ2EQeq2fq2ke0qATAFbmjdqLciVTshsnfJK16OTlGR2AtRIVTAvnI qB56gXKnyJXZ2Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:15:00 2025 by rpki-client