This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft File: KC6tuNjCny5wNVBD4meGIpc08LI.mft (raw, json) Hash identifier: 88Nv84wZD88bSbEhHbvAT1LMPfJtlno5T3HJsgt1fdY= Subject key identifier: E3:CC:6F:94:2F:33:52:46:9E:09:32:93:40:80:A0:D1:8C:78:4A:10 Authority key identifier: 28:2E:AD:B8:D8:C2:9F:2E:70:35:50:43:E2:67:86:22:97:34:F0:B2 Certificate issuer: /CN=282eadb8d8c29f2e70355043e26786229734f0b2 Certificate serial: 019AF389A9BC0FB8AD6DA56BCBF8EB890FEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KC6tuNjCny5wNVBD4meGIpc08LI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 12:01:16 +0000 Manifest this update: Sat 06 Dec 2025 12:01:16 +0000 Manifest next update: Sun 07 Dec 2025 12:01:16 +0000 Files and hashes: 1: EdTyc-f6MbzKNflZEVb0lTRcFng.roa (hash: LosjQRA+dA0QESjdH00I3Sd8eYNzb4MjK8b7Xcsie8w=) 2: KC6tuNjCny5wNVBD4meGIpc08LI.crl (hash: FYI15mIRu/KfhfMEz5yPWsmjlOFmItaVfuT9YhTCiSw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.crl rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft rsync://rpki.ripe.net/repository/DEFAULT/KC6tuNjCny5wNVBD4meGIpc08LI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:a9:bc:0f:b8:ad:6d:a5:6b:cb:f8:eb:89:0f:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=282eadb8d8c29f2e70355043e26786229734f0b2 Validity Not Before: Dec 6 12:01:16 2025 GMT Not After : Dec 7 12:01:16 2025 GMT Subject: CN=e3cc6f942f3352469e0932934080a0d18c784a10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bc:87:2e:16:fc:d2:41:22:c4:f9:eb:1d:50: b2:6e:34:49:6f:72:f8:53:19:5a:22:20:9a:34:1f: 44:f9:92:6c:d3:ed:25:43:40:24:a8:17:b2:89:5a: e8:9d:91:d1:87:c9:c7:ff:86:7b:81:f1:ca:d1:e1: 7d:b2:5f:cb:1e:4e:53:57:f5:92:cc:9d:59:f0:7e: 67:68:1c:de:94:ef:75:a0:15:42:d3:ed:7d:43:82: 37:3a:a5:9c:5f:d6:d3:b7:64:33:10:60:88:9b:f4: ff:0b:cb:e7:fe:c6:ec:ec:77:1e:b0:e3:fc:0d:27: e4:8d:ec:c5:5f:71:51:3d:33:79:28:36:c6:31:a3: 98:3d:8f:e1:cd:09:7b:bf:32:f8:83:8b:f1:1b:a0: 7f:f7:64:7b:36:fa:e8:1c:d7:3b:0d:37:12:26:a1: 8b:3e:8a:eb:3c:66:e8:80:c8:a3:5c:78:3f:87:a1: 5a:69:20:92:ac:4a:b9:a7:ea:d5:9a:ec:2b:d6:ad: 1b:2b:0b:69:87:14:8c:32:d9:91:ba:3a:6c:4f:ef: 5c:cd:7f:51:88:69:50:4a:ae:81:69:61:27:2a:c5: e3:0e:25:92:f3:42:90:f5:5c:d0:7d:d0:73:8b:27: b7:78:c9:96:df:0d:51:1e:b4:ad:2a:67:3e:9f:cc: a3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:CC:6F:94:2F:33:52:46:9E:09:32:93:40:80:A0:D1:8C:78:4A:10 X509v3 Authority Key Identifier: keyid:28:2E:AD:B8:D8:C2:9F:2E:70:35:50:43:E2:67:86:22:97:34:F0:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KC6tuNjCny5wNVBD4meGIpc08LI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:a1:d2:22:d1:6d:75:7c:8b:87:02:5b:1b:58:dd:68:e4:ca: ad:fa:a3:fc:c7:d0:f9:24:47:0e:59:50:1f:52:c8:93:26:23: 19:57:70:ae:74:cd:8c:7e:42:95:e6:f5:0a:38:60:70:2b:63: 64:57:7d:37:14:f9:31:5f:d7:e9:de:03:2b:a6:c9:7d:e3:52: ba:5e:44:ee:08:b4:b4:1b:04:04:3b:87:e4:f7:fc:3b:b2:96: a4:91:f4:0d:57:89:52:7b:5a:5e:d4:d2:39:3b:2e:d4:df:d6: 68:1e:7c:a6:48:eb:08:e0:f5:15:09:34:88:e0:f2:3c:1d:2b: fc:e6:35:84:47:a3:41:86:1e:d3:d6:fd:2c:dc:65:07:07:91: e1:39:bb:93:19:e9:4b:6c:97:cc:b5:ed:53:35:9a:bb:e5:6f: d8:71:86:5f:e5:33:5a:09:30:3c:d0:20:0d:54:5a:38:09:8d: 12:ca:53:ea:6d:d6:a1:27:62:a4:5a:47:35:20:50:4a:d9:76: 55:74:c9:d6:44:cb:61:f2:40:83:ca:ce:56:59:b2:42:1d:3c: 50:23:73:81:70:74:4a:28:a9:18:0d:8f:af:6c:e1:bb:bb:d0: 8b:eb:a1:da:22:fc:7e:33:bf:ac:39:73:0a:89:fc:ae:ad:4d: bb:cb:2d:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziam8D7itbaVry/jriQ/qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MmVhZGI4ZDhjMjlmMmU3MDM1NTA0M2UyNjc4NjIyOTcz NGYwYjIwHhcNMjUxMjA2MTIwMTE2WhcNMjUxMjA3MTIwMTE2WjAzMTEwLwYDVQQD EyhlM2NjNmY5NDJmMzM1MjQ2OWUwOTMyOTM0MDgwYTBkMThjNzg0YTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLyHLhb80kEixPnrHVCybjRJb3L4 UxlaIiCaNB9E+ZJs0+0lQ0AkqBeyiVronZHRh8nH/4Z7gfHK0eF9sl/LHk5TV/WS zJ1Z8H5naBzelO91oBVC0+19Q4I3OqWcX9bTt2QzEGCIm/T/C8vn/sbs7HcesOP8 DSfkjezFX3FRPTN5KDbGMaOYPY/hzQl7vzL4g4vxG6B/92R7NvroHNc7DTcSJqGL PorrPGbogMijXHg/h6FaaSCSrEq5p+rVmuwr1q0bKwtphxSMMtmRujpsT+9czX9R iGlQSq6BaWEnKsXjDiWS80KQ9VzQfdBziye3eMmW3w1RHrStKmc+n8yjTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOPMb5QvM1JGngkyk0CAoNGMeEoQMB8GA1UdIwQY MBaAFCgurbjYwp8ucDVQQ+JnhiKXNPCyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0M2dHVOakNueTV3TlZCRDRtZUdJcGMwOExJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wZmFmNzAtNGMzOC00MDZmLThjY2Qt YjY3ZjQwYjRlYzE0LzEvS0M2dHVOakNueTV3TlZCRDRtZUdJcGMwOExJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8wZmFmNzAtNGMzOC00MDZmLThjY2QtYjY3ZjQwYjRlYzE0 LzEvS0M2dHVOakNueTV3TlZCRDRtZUdJcGMwOExJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaaHSItFt dXyLhwJbG1jdaOTKrfqj/MfQ+SRHDllQH1LIkyYjGVdwrnTNjH5Cleb1CjhgcCtj ZFd9NxT5MV/X6d4DK6bJfeNSul5E7gi0tBsEBDuH5Pf8O7KWpJH0DVeJUntaXtTS OTsu1N/WaB58pkjrCOD1FQk0iODyPB0r/OY1hEejQYYe09b9LNxlBweR4Tm7kxnp S2yXzLXtUzWau+Vv2HGGX+UzWgkwPNAgDVRaOAmNEspT6m3WoSdipFpHNSBQStl2 VXTJ1kTLYfJAg8rOVlmyQh08UCNzgXB0SiipGA2Pr2zhu7vQi+uh2iL8fjO/rDlz Con8rq1Nu8stAQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:57:45 2025 by rpki-client