This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft File: KMaADXS8QQW0DnfqCFugJtvuw18.mft (raw, json) Hash identifier: f9nZTHZSAvbMUCfxrYaHOeLhKIxQdmh54G3/3sLV+D0= Subject key identifier: 80:64:D8:17:04:9D:73:89:A5:8D:A1:4C:A2:1D:D9:D1:40:4F:23:4E Authority key identifier: 28:C6:80:0D:74:BC:41:05:B4:0E:77:EA:08:5B:A0:26:DB:EE:C3:5F Certificate issuer: /CN=28c6800d74bc4105b40e77ea085ba026dbeec35f Certificate serial: 019AF3F728FF76FFEDE408B1FCFCF912DD54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft Manifest number: 11A2 Signing time: Sat 06 Dec 2025 14:00:52 +0000 Manifest this update: Sat 06 Dec 2025 14:00:52 +0000 Manifest next update: Sun 07 Dec 2025 14:00:52 +0000 Files and hashes: 1: Dgcz4v7oG3I4LhgnaAth0hpJWCQ.roa (hash: WRqxAO4CAbzgtyju3MlE9u4Di50/qwkMlkkbllzkSMw=) 2: KMaADXS8QQW0DnfqCFugJtvuw18.crl (hash: E6DUov5O/Ko6duYtM92BkFauWjKErpWjhPpGMQKejD4=) 3: qTI02kxu-Vgs1RCNkQ_UsobKHQ4.roa (hash: zJEoZpSXrcBeQhSFcejEgTFl7cAANDCqhrcxeEknBk0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:28:ff:76:ff:ed:e4:08:b1:fc:fc:f9:12:dd:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28c6800d74bc4105b40e77ea085ba026dbeec35f Validity Not Before: Dec 6 14:00:52 2025 GMT Not After : Dec 7 14:00:52 2025 GMT Subject: CN=8064d817049d7389a58da14ca21dd9d1404f234e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:79:e2:29:28:6c:5b:35:c7:14:c3:ce:f7:74: c0:5c:eb:3c:d3:ab:1d:43:b8:0a:b6:a4:9e:9c:83: 5a:66:51:47:79:d9:87:9b:44:1c:d1:54:fd:f9:fb: f3:3a:ac:e8:98:85:79:a1:63:77:89:ff:9c:cf:7f: af:6d:18:d8:61:63:8e:dd:e4:97:33:04:49:b3:6a: 4b:29:24:aa:55:32:87:1c:84:d8:78:d0:51:51:53: 17:75:ee:1a:80:33:2b:10:48:6f:6b:d9:44:b8:21: dd:1c:7b:e4:67:31:86:28:4f:15:f6:9c:32:ff:ba: ef:c3:a9:fd:05:c4:8b:ba:c9:a2:73:12:d5:38:6e: 04:9e:f1:9b:ad:2e:d3:7a:d4:aa:aa:8a:8b:14:27: 88:94:61:88:ae:7c:03:9e:1d:78:a1:a1:bd:c3:4d: 31:61:21:1a:f0:ba:ce:66:3a:a8:98:6a:ac:a7:25: b9:83:2d:2c:f8:40:9a:4e:b4:ec:1d:95:94:ad:98: 45:f0:e5:2f:32:d7:ed:5b:7b:d5:70:80:a1:ed:f3: b4:62:69:36:a8:cb:8b:da:b1:c2:0e:a6:59:e8:b3: a1:47:a4:a6:ce:a9:4a:81:7f:c0:99:b5:43:31:a1: 70:d6:3f:c7:95:71:83:24:71:08:00:1f:e6:73:99: b6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:64:D8:17:04:9D:73:89:A5:8D:A1:4C:A2:1D:D9:D1:40:4F:23:4E X509v3 Authority Key Identifier: keyid:28:C6:80:0D:74:BC:41:05:B4:0E:77:EA:08:5B:A0:26:DB:EE:C3:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:40:8d:9e:c7:e3:f4:86:a5:27:08:23:1e:e4:57:89:ba:30: 04:e3:30:c6:3f:6a:e3:a2:8f:3b:f4:9a:c6:2d:41:fe:1f:6d: 6b:41:c9:24:68:98:a9:69:28:e6:fe:c3:55:6e:b3:08:9a:4d: 46:98:84:78:0e:ed:55:48:13:f4:56:cf:11:21:f7:5b:9a:c4: 0a:31:e5:b1:36:1a:fc:6c:49:85:4d:9c:42:50:c7:42:22:86: 72:e6:71:32:d6:95:17:b9:52:56:70:80:56:f1:91:b7:fa:36: 31:28:4f:26:b1:59:59:48:42:5e:06:ac:9b:cb:d3:0d:0f:42: 08:d4:92:c2:75:7c:41:b3:84:b7:36:07:c6:e0:75:6a:5a:21: 3c:d8:61:2a:fc:d8:f2:a0:ca:23:42:09:f2:c3:58:15:31:dd: c8:e2:53:89:cc:f1:c3:83:a9:c4:f5:7b:55:de:77:98:81:0c: f3:2f:0e:8b:8e:fd:37:32:9b:ea:fc:4b:8e:d2:80:c8:e0:c3: a4:af:98:84:8e:23:41:5f:7a:b5:21:d9:bb:5e:7f:34:64:11: 48:4a:a6:1a:d7:d8:6a:44:68:c4:f4:af:43:45:ca:98:56:ad: e1:7c:d3:8c:85:70:3f:c7:ed:ab:a0:f9:44:e0:d8:b8:d9:c4: a2:fe:28:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9yj/dv/t5Aix/Pz5Et1UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4YzY4MDBkNzRiYzQxMDViNDBlNzdlYTA4NWJhMDI2ZGJl ZWMzNWYwHhcNMjUxMjA2MTQwMDUyWhcNMjUxMjA3MTQwMDUyWjAzMTEwLwYDVQQD Eyg4MDY0ZDgxNzA0OWQ3Mzg5YTU4ZGExNGNhMjFkZDlkMTQwNGYyMzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHniKShsWzXHFMPO93TAXOs806sd Q7gKtqSenINaZlFHedmHm0Qc0VT9+fvzOqzomIV5oWN3if+cz3+vbRjYYWOO3eSX MwRJs2pLKSSqVTKHHITYeNBRUVMXde4agDMrEEhva9lEuCHdHHvkZzGGKE8V9pwy /7rvw6n9BcSLusmicxLVOG4EnvGbrS7TetSqqoqLFCeIlGGIrnwDnh14oaG9w00x YSEa8LrOZjqomGqspyW5gy0s+ECaTrTsHZWUrZhF8OUvMtftW3vVcICh7fO0Ymk2 qMuL2rHCDqZZ6LOhR6SmzqlKgX/AmbVDMaFw1j/HlXGDJHEIAB/mc5m2yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIBk2BcEnXOJpY2hTKId2dFATyNOMB8GA1UdIwQY MBaAFCjGgA10vEEFtA536ghboCbb7sNfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS01hQURYUzhRUVcwRG5mcUNGdWdKdHZ1dzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8yNDI5MTEtOTNjMC00NWU3LTkwMTIt NDkzOWJiZmRmYjg2LzEvS01hQURYUzhRUVcwRG5mcUNGdWdKdHZ1dzE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC8yNDI5MTEtOTNjMC00NWU3LTkwMTItNDkzOWJiZmRmYjg2 LzEvS01hQURYUzhRUVcwRG5mcUNGdWdKdHZ1dzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ0CNnsfj 9IalJwgjHuRXibowBOMwxj9q46KPO/Saxi1B/h9ta0HJJGiYqWko5v7DVW6zCJpN RpiEeA7tVUgT9FbPESH3W5rECjHlsTYa/GxJhU2cQlDHQiKGcuZxMtaVF7lSVnCA VvGRt/o2MShPJrFZWUhCXgasm8vTDQ9CCNSSwnV8QbOEtzYHxuB1alohPNhhKvzY 8qDKI0IJ8sNYFTHdyOJTiczxw4OpxPV7Vd53mIEM8y8Oi479NzKb6vxLjtKAyODD pK+YhI4jQV96tSHZu15/NGQRSEqmGtfYakRoxPSvQ0XKmFat4XzTjIVwP8ftq6D5 RODYuNnEov4o+g== -----END CERTIFICATE-----Generated at Sat Dec 6 23:15:45 2025 by rpki-client