This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft File: Ka2L_getXSzLQ7DR26axkstR2-o.mft (raw, json) Hash identifier: Utnty1f91SggUKiSWUX2InLhbUFxoQY/xd4SHoDOifI= Subject key identifier: 6C:64:B2:00:B8:5D:EF:EE:FB:AE:B3:15:44:A0:F0:9D:32:A1:30:BE Authority key identifier: 29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA Certificate issuer: /CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea Certificate serial: 019AF42E6EF51FD2673D5BD23763910D64FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft Manifest number: 1769 Signing time: Sat 06 Dec 2025 15:01:14 +0000 Manifest this update: Sat 06 Dec 2025 15:01:14 +0000 Manifest next update: Sun 07 Dec 2025 15:01:14 +0000 Files and hashes: 1: Ka2L_getXSzLQ7DR26axkstR2-o.crl (hash: qhwFZ3sjMw6qRrONDeW+ki2+nbJSsAQIuTaM6TbXWVQ=) 2: h-R5SrdfAe7rN8zMOqkX0BtsnJ4.roa (hash: 3D3z76pesB4+PkPGfBCrb/veNRexeyxDAf3xN4YJwnQ=) 3: tOD9yELwWOB6I1JsshHxqOqJaWE.roa (hash: E867kd+hZLMJTwwIfg4wQE1B1KmxpcWNXSjEvrvHFrs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:6e:f5:1f:d2:67:3d:5b:d2:37:63:91:0d:64:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea Validity Not Before: Dec 6 15:01:14 2025 GMT Not After : Dec 7 15:01:14 2025 GMT Subject: CN=6c64b200b85defeefbaeb31544a0f09d32a130be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c8:b7:09:46:1f:11:e1:f9:33:f6:e3:e2:0b: 6e:26:d7:67:5f:3d:8b:6d:45:17:09:f8:4e:c1:43: b3:91:6d:87:8d:6d:9c:54:af:31:50:c4:57:17:14: 0b:ab:07:93:47:6c:2f:cc:5e:48:01:d5:b1:b5:06: bf:77:48:2d:d2:c0:f1:b8:8c:a7:83:a0:da:c1:1a: 57:68:d4:40:2e:95:98:e2:12:5a:0c:44:02:11:73: 3e:ef:26:77:06:d8:1e:e6:b5:d7:c4:f1:d1:9f:e6: ee:4b:97:da:7d:f8:52:a9:de:33:10:03:3a:10:ee: d4:b8:10:1f:8b:da:29:51:61:3c:87:46:7d:67:18: fa:7a:95:f0:ae:3e:0d:93:62:54:16:c9:1c:fa:12: b5:84:c7:91:ba:b6:e7:02:d4:e5:61:74:d8:b6:46: d4:48:3a:a4:16:b0:52:64:9d:72:ab:97:33:9b:ac: ae:a7:31:3a:52:46:ce:f9:c5:9e:7a:a5:6e:58:cf: f3:dd:96:85:a5:62:1f:73:60:f8:6e:cd:50:d7:ae: 7f:a3:d5:3c:3e:80:9c:5f:c4:ff:80:45:d5:b8:04: 3e:53:65:42:66:21:4f:99:4a:00:d5:e6:ad:40:60: b7:e2:d4:02:c2:58:fa:76:3a:23:61:82:8d:49:fe: 40:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:64:B2:00:B8:5D:EF:EE:FB:AE:B3:15:44:A0:F0:9D:32:A1:30:BE X509v3 Authority Key Identifier: keyid:29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:c5:1d:50:af:2b:03:44:2f:0d:68:22:70:a0:f2:72:66:32: 88:62:f5:02:f0:00:6a:67:04:d9:6a:bd:75:79:fc:1c:0d:fa: f7:78:64:01:35:d6:ee:71:a1:8e:61:22:b6:ce:da:16:fd:a8: b7:bd:73:f5:1b:38:d9:08:fe:2e:58:20:e6:ae:cc:9f:93:38: 64:90:09:a4:41:82:63:19:ee:ed:70:f8:64:fd:36:9c:5e:84: 72:4e:7e:7d:e7:a4:e2:f0:59:f5:33:90:ae:db:c2:71:64:0c: 12:74:70:d6:45:62:55:e5:16:4b:46:e1:11:70:aa:1c:0d:f0: 79:4a:aa:b3:d6:83:ba:6d:fb:45:28:ae:b1:0c:b7:38:7a:64: be:4c:05:09:31:e3:11:8b:e8:80:7e:1f:3c:9a:fc:85:0f:d6: 9e:d7:16:3b:43:e4:aa:87:35:46:b6:1e:4c:76:3d:27:77:4d: 6a:f9:db:15:a4:68:b5:d9:f2:84:f3:f6:49:87:71:0d:6c:3d: 06:52:4c:82:b7:95:5c:68:0b:96:73:f8:d3:49:56:26:cc:28: 51:14:41:4d:6b:ec:ad:3c:43:0c:00:8e:2b:61:d0:05:d0:9f: dc:d7:34:2a:45:72:a4:99:ea:02:76:66:2d:72:ce:1c:24:ee: a2:2f:02:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lm71H9JnPVvSN2ORDWT+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YWQ4YmZlMDdhZDVkMmNjYjQzYjBkMWRiYTZiMTkyY2I1 MWRiZWEwHhcNMjUxMjA2MTUwMTE0WhcNMjUxMjA3MTUwMTE0WjAzMTEwLwYDVQQD Eyg2YzY0YjIwMGI4NWRlZmVlZmJhZWIzMTU0NGEwZjA5ZDMyYTEzMGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMi3CUYfEeH5M/bj4gtuJtdnXz2L bUUXCfhOwUOzkW2HjW2cVK8xUMRXFxQLqweTR2wvzF5IAdWxtQa/d0gt0sDxuIyn g6DawRpXaNRALpWY4hJaDEQCEXM+7yZ3Btge5rXXxPHRn+buS5faffhSqd4zEAM6 EO7UuBAfi9opUWE8h0Z9Zxj6epXwrj4Nk2JUFskc+hK1hMeRurbnAtTlYXTYtkbU SDqkFrBSZJ1yq5czm6yupzE6UkbO+cWeeqVuWM/z3ZaFpWIfc2D4bs1Q165/o9U8 PoCcX8T/gEXVuAQ+U2VCZiFPmUoA1eatQGC34tQCwlj6djojYYKNSf5AjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGxksgC4Xe/u+66zFUSg8J0yoTC+MB8GA1UdIwQY MBaAFCmti/4HrV0sy0Ow0dumsZLLUdvqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2EyTF9nZXRYU3pMUTdEUjI2YXhrc3RSMi1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8yMzVkMjYtNzA5NC00ZmViLTljYTkt Mzc4NDk5Mzk4ZjE4LzEvS2EyTF9nZXRYU3pMUTdEUjI2YXhrc3RSMi1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My8yMzVkMjYtNzA5NC00ZmViLTljYTktMzc4NDk5Mzk4ZjE4 LzEvS2EyTF9nZXRYU3pMUTdEUjI2YXhrc3RSMi1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOcUdUK8r A0QvDWgicKDycmYyiGL1AvAAamcE2Wq9dXn8HA3693hkATXW7nGhjmEits7aFv2o t71z9Rs42Qj+Llgg5q7Mn5M4ZJAJpEGCYxnu7XD4ZP02nF6Eck5+feek4vBZ9TOQ rtvCcWQMEnRw1kViVeUWS0bhEXCqHA3weUqqs9aDum37RSiusQy3OHpkvkwFCTHj EYvogH4fPJr8hQ/WntcWO0Pkqoc1RrYeTHY9J3dNavnbFaRotdnyhPP2SYdxDWw9 BlJMgreVXGgLlnP400lWJswoURRBTWvsrTxDDACOK2HQBdCf3Nc0KkVypJnqAnZm LXLOHCTuoi8C6g== -----END CERTIFICATE-----Generated at Sat Dec 6 18:10:45 2025 by rpki-client