This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft File: KtNUu6DgTX5arSd5J4n8Jt3W31E.mft (raw, json) Hash identifier: LS/nXV0+laKIkldyiaDAms6ZNc6mF1Nv/b7rL3cFg9U= Subject key identifier: BF:18:6D:77:B4:9E:EF:4A:05:82:39:2B:28:69:F7:80:B6:A7:68:DF Authority key identifier: 2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51 Certificate issuer: /CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51 Certificate serial: 019AF31B76A17F30CE6AE02AFE5D83164BA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft Manifest number: 1182 Signing time: Sat 06 Dec 2025 10:00:54 +0000 Manifest this update: Sat 06 Dec 2025 10:00:54 +0000 Manifest next update: Sun 07 Dec 2025 10:00:54 +0000 Files and hashes: 1: KtNUu6DgTX5arSd5J4n8Jt3W31E.crl (hash: ewoFt69IKJWHKWijoz2j/Ga09N+q78hfR3yGJaxUHhY=) 2: ybOe8ZqyigG4FWAsCMbOcL0c5L0.roa (hash: eOMsv1LZ5Dq7SSni9aMR0p8V/nr5wD1XrXlWWtuivxY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:76:a1:7f:30:ce:6a:e0:2a:fe:5d:83:16:4b:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51 Validity Not Before: Dec 6 10:00:54 2025 GMT Not After : Dec 7 10:00:54 2025 GMT Subject: CN=bf186d77b49eef4a0582392b2869f780b6a768df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:84:07:94:99:7e:75:6e:a4:db:ca:32:9e:0a: e7:6a:61:75:f1:74:ec:0d:82:f1:d8:1b:27:7e:1d: e3:97:7e:f4:c9:ce:dc:31:7d:d7:a0:1c:e1:c6:84: f6:c0:2a:ac:52:10:5b:7d:08:79:d3:42:94:da:eb: 65:87:41:81:ad:d2:90:17:2e:f1:31:05:8b:cc:ae: 3e:92:53:fd:d8:88:74:4a:65:08:f7:96:c8:34:2a: b0:60:29:10:7a:07:a3:2d:c6:d4:9a:42:03:3a:f3: f7:65:dc:90:c3:d6:c8:bf:47:fd:f1:c2:59:ac:65: 2e:bb:be:a1:bc:a9:1b:eb:63:d6:ee:3b:e1:45:8e: 77:17:49:22:c1:66:fa:58:50:6a:7d:fc:b4:e6:89: 46:61:e9:4b:96:d2:ad:29:86:ce:d1:44:f4:ae:64: d6:a9:41:20:8b:43:c4:44:f2:8b:02:14:2e:0a:c0: e1:6f:3a:ea:8b:6c:46:34:25:7a:0c:c3:d6:bc:08: dc:56:b6:54:32:e7:0e:4c:30:a8:d2:50:d5:d8:c3: 9e:14:01:46:bb:d9:9c:a7:5a:3b:00:5d:bb:bf:f0: b9:c5:37:17:ad:cf:23:a3:84:cf:54:f3:ab:44:93: 0e:e1:d5:5d:d5:2f:f8:91:d7:dc:6c:1b:4f:95:40: c5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:18:6D:77:B4:9E:EF:4A:05:82:39:2B:28:69:F7:80:B6:A7:68:DF X509v3 Authority Key Identifier: keyid:2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:bd:53:eb:c2:72:d4:08:d0:8c:8b:b5:6a:98:ff:ec:b8:13: e9:b7:ac:8c:5c:19:0b:ba:d2:c1:d7:e3:90:5f:4c:4c:9f:51: 6d:2a:e6:a9:78:10:d6:0f:14:c7:0e:bb:e5:4c:66:4f:87:80: 39:40:33:20:51:a0:4d:e4:38:d8:9d:d3:cf:4c:01:0a:2c:df: 1b:81:5d:21:0e:f4:dd:be:59:a1:94:9e:1c:cd:f5:fd:c8:f8: 30:ae:8a:1f:97:14:9b:71:ea:93:8b:7d:7f:f1:ff:97:83:57: 74:2d:ac:fe:53:cb:72:f5:87:65:31:a0:b3:97:14:6a:bd:d5: 87:80:de:30:34:6e:10:45:0c:b3:83:c9:2e:88:90:dc:b1:4f: 53:55:5b:2f:65:7a:e1:4a:05:0a:1d:ee:ef:1b:f7:5e:49:87: 79:e6:cf:3a:2d:29:c3:a2:6a:9b:b7:2b:5c:7c:a9:dc:ab:6c: 50:40:6d:c5:67:34:dd:c9:60:ff:ca:47:a9:77:20:59:92:4d: 51:42:5e:a9:2a:70:ef:f2:df:70:d3:e2:ba:75:cc:cf:24:35: a9:83:34:36:cc:f4:40:cd:64:8f:b3:93:fd:d9:bc:c6:86:9a: e9:13:53:37:7e:e6:99:81:54:f9:e9:b9:60:22:8a:bf:7d:c2: 92:cc:a6:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG3ahfzDOauAq/l2DFkulMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhZDM1NGJiYTBlMDRkN2U1YWFkMjc3OTI3ODlmYzI2ZGRk NmRmNTEwHhcNMjUxMjA2MTAwMDU0WhcNMjUxMjA3MTAwMDU0WjAzMTEwLwYDVQQD EyhiZjE4NmQ3N2I0OWVlZjRhMDU4MjM5MmIyODY5Zjc4MGI2YTc2OGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IQHlJl+dW6k28oyngrnamF18XTs DYLx2Bsnfh3jl370yc7cMX3XoBzhxoT2wCqsUhBbfQh500KU2utlh0GBrdKQFy7x MQWLzK4+klP92Ih0SmUI95bINCqwYCkQegejLcbUmkIDOvP3ZdyQw9bIv0f98cJZ rGUuu76hvKkb62PW7jvhRY53F0kiwWb6WFBqffy05olGYelLltKtKYbO0UT0rmTW qUEgi0PERPKLAhQuCsDhbzrqi2xGNCV6DMPWvAjcVrZUMucOTDCo0lDV2MOeFAFG u9mcp1o7AF27v/C5xTcXrc8jo4TPVPOrRJMO4dVd1S/4kdfcbBtPlUDFKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL8YbXe0nu9KBYI5Kyhp94C2p2jfMB8GA1UdIwQY MBaAFCrTVLug4E1+Wq0neSeJ/Cbd1t9RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3ROVXU2RGdUWDVhclNkNUo0bjhKdDNXMzFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS83OTlmMGQtYTRmMS00YTViLThjYzAt M2E3MDM3ODliMDNiLzEvS3ROVXU2RGdUWDVhclNkNUo0bjhKdDNXMzFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS83OTlmMGQtYTRmMS00YTViLThjYzAtM2E3MDM3ODliMDNi LzEvS3ROVXU2RGdUWDVhclNkNUo0bjhKdDNXMzFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVL1T68Jy 1AjQjIu1apj/7LgT6besjFwZC7rSwdfjkF9MTJ9RbSrmqXgQ1g8Uxw675UxmT4eA OUAzIFGgTeQ42J3Tz0wBCizfG4FdIQ703b5ZoZSeHM31/cj4MK6KH5cUm3Hqk4t9 f/H/l4NXdC2s/lPLcvWHZTGgs5cUar3Vh4DeMDRuEEUMs4PJLoiQ3LFPU1VbL2V6 4UoFCh3u7xv3XkmHeebPOi0pw6Jqm7crXHyp3KtsUEBtxWc03clg/8pHqXcgWZJN UUJeqSpw7/LfcNPiunXMzyQ1qYM0Nsz0QM1kj7OT/dm8xoaa6RNTN37mmYFU+em5 YCKKv33CksymjQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:49:28 2025 by rpki-client