This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft File: KflnDuKjDqyMCjncR_96jNJHOwA.mft (raw, json) Hash identifier: iDLOiQpwFSIFDXsXMi5yZFmiSSjpKQCdNWFlXe4ZtYM= Subject key identifier: 47:DC:72:23:FA:F9:07:FD:34:83:A0:AF:BB:81:35:71:D5:E3:23:C1 Authority key identifier: 29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00 Certificate issuer: /CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00 Certificate serial: 019AF50B11A66A9519416E91932EEE25AFFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft Manifest number: 0F30 Signing time: Sat 06 Dec 2025 19:02:14 +0000 Manifest this update: Sat 06 Dec 2025 19:02:14 +0000 Manifest next update: Sun 07 Dec 2025 19:02:14 +0000 Files and hashes: 1: KflnDuKjDqyMCjncR_96jNJHOwA.crl (hash: 4m++sLer1UU3CyHUcnIHs6EIklyotFUvCe+eFd1FaWQ=) 2: mL9iMZ16_8ZjCy4qonDTON3ib5Q.roa (hash: ZVZsKyrcHGv4PPqTEb+ceebYDVLTESRPFX1GG8GQzE8=) 3: y2LXjfv6XAO363F71AjmXKGlqgQ.roa (hash: 4mLPhNeJT0HKJvx3+B0TdXW/+X53H3DeeKwHTkudT30=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:11:a6:6a:95:19:41:6e:91:93:2e:ee:25:af:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00 Validity Not Before: Dec 6 19:02:14 2025 GMT Not After : Dec 7 19:02:14 2025 GMT Subject: CN=47dc7223faf907fd3483a0afbb813571d5e323c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e8:da:d2:bf:18:4a:08:94:86:f0:a4:5a:b1: e8:fd:39:d7:95:7b:2d:24:ac:2f:48:b3:38:82:c9: f5:db:50:de:e7:34:a4:8c:6e:27:a0:66:7b:49:5b: 2f:e6:de:13:15:a8:68:9f:8c:14:c1:0c:83:6f:2c: 22:51:0f:ef:79:e6:94:52:a6:37:b2:2b:48:eb:f5: 19:d0:24:84:22:4a:4d:bd:32:6a:e7:8a:46:44:9e: 2d:3b:dc:8b:15:11:a9:b0:eb:1c:b6:d8:fc:7e:a1: f2:53:71:ac:9c:e8:ee:94:30:2e:f7:68:a0:a9:6c: ec:59:79:c9:8b:82:e3:98:56:cb:5c:a2:9c:02:35: fa:25:b4:ee:2b:9a:ee:3b:61:3e:f6:df:8d:e4:42: 85:9a:7a:13:73:26:b0:4a:5e:d7:36:37:e3:44:ff: 2d:63:83:78:df:1c:02:3b:3c:4c:b7:6e:c6:05:4a: 8a:95:9f:97:b8:e0:87:71:07:49:00:ed:fa:a6:cd: fd:44:fc:87:98:fa:29:7f:7c:6f:e5:8d:8d:72:67: 0d:74:77:29:7b:cf:b7:91:6e:d2:61:3f:df:2e:af: 2c:b2:57:4e:c4:fb:6a:1c:ac:06:1d:40:55:8f:3a: 3d:9e:46:ff:9e:ad:3b:66:62:2a:f8:5d:7f:92:38: 6c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:DC:72:23:FA:F9:07:FD:34:83:A0:AF:BB:81:35:71:D5:E3:23:C1 X509v3 Authority Key Identifier: keyid:29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:9d:73:fc:20:e1:57:7b:39:59:a6:dd:8a:83:fe:b3:1b:48: 33:c7:75:71:3a:11:1c:db:d0:e4:54:15:50:9d:62:52:5e:66: 3c:2e:a1:f1:16:ee:c7:ea:ab:f8:b1:ae:e0:94:31:ea:53:61: 8b:2a:38:1e:56:95:4f:cf:42:95:17:8f:e3:bb:77:ca:e7:c5: df:d2:31:33:07:a7:f6:af:9a:f7:fe:7d:20:0d:a8:18:f2:0b: af:69:04:96:51:14:64:0b:26:85:2a:c5:96:f2:c3:24:bd:a6: e2:2a:27:f7:2d:db:30:85:4a:f6:3e:4d:0a:69:30:40:1c:7e: 01:0a:3e:7a:ba:05:76:5a:63:eb:55:16:b5:81:a3:6c:24:18: 67:0a:b8:04:fd:d7:83:c0:45:1a:0e:ca:da:6e:4b:50:af:64: a3:bc:75:15:26:11:a1:ef:db:d0:4c:fe:fe:24:f7:ec:00:a1: 22:a2:52:a8:72:9d:7e:7e:ba:41:f0:1a:c7:24:51:34:a2:63: 78:71:6b:8f:11:21:1e:22:dc:fe:2c:5c:ff:45:f7:67:85:e4: 42:1a:81:b7:11:34:58:a6:b7:6b:28:55:2f:13:15:d0:f3:41: 88:4c:ff:da:61:40:a4:0d:81:a6:41:46:07:3b:8d:89:64:fa: 6a:ed:43:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CxGmapUZQW6Rky7uJa/7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5Zjk2NzBlZTJhMzBlYWM4YzBhMzlkYzQ3ZmY3YThjZDI0 NzNiMDAwHhcNMjUxMjA2MTkwMjE0WhcNMjUxMjA3MTkwMjE0WjAzMTEwLwYDVQQD Eyg0N2RjNzIyM2ZhZjkwN2ZkMzQ4M2EwYWZiYjgxMzU3MWQ1ZTMyM2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOja0r8YSgiUhvCkWrHo/TnXlXst JKwvSLM4gsn121De5zSkjG4noGZ7SVsv5t4TFahon4wUwQyDbywiUQ/veeaUUqY3 sitI6/UZ0CSEIkpNvTJq54pGRJ4tO9yLFRGpsOscttj8fqHyU3GsnOjulDAu92ig qWzsWXnJi4LjmFbLXKKcAjX6JbTuK5ruO2E+9t+N5EKFmnoTcyawSl7XNjfjRP8t Y4N43xwCOzxMt27GBUqKlZ+XuOCHcQdJAO36ps39RPyHmPopf3xv5Y2NcmcNdHcp e8+3kW7SYT/fLq8ssldOxPtqHKwGHUBVjzo9nkb/nq07ZmIq+F1/kjhsxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEfcciP6+Qf9NIOgr7uBNXHV4yPBMB8GA1UdIwQY MBaAFCn5Zw7iow6sjAo53Ef/eozSRzsAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2ZsbkR1S2pEcXlNQ2puY1JfOTZqTkpIT3dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8yZmY3NmQtZjExNi00NDMwLTg0MDct NmUyOWVmZGZkNGUzLzEvS2ZsbkR1S2pEcXlNQ2puY1JfOTZqTkpIT3dBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8yZmY3NmQtZjExNi00NDMwLTg0MDctNmUyOWVmZGZkNGUz LzEvS2ZsbkR1S2pEcXlNQ2puY1JfOTZqTkpIT3dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF51z/CDh V3s5WabdioP+sxtIM8d1cToRHNvQ5FQVUJ1iUl5mPC6h8Rbux+qr+LGu4JQx6lNh iyo4HlaVT89ClReP47t3yufF39IxMwen9q+a9/59IA2oGPILr2kEllEUZAsmhSrF lvLDJL2m4ion9y3bMIVK9j5NCmkwQBx+AQo+eroFdlpj61UWtYGjbCQYZwq4BP3X g8BFGg7K2m5LUK9ko7x1FSYRoe/b0Ez+/iT37AChIqJSqHKdfn66QfAaxyRRNKJj eHFrjxEhHiLc/ixc/0X3Z4XkQhqBtxE0WKa3ayhVLxMV0PNBiEz/2mFApA2BpkFG BzuNiWT6au1DOQ== -----END CERTIFICATE-----Generated at Sun Dec 7 03:07:44 2025 by rpki-client