This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/971371-eedf-4d66-8b5f-e41706bf1231/1/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.mft File: KBjYk6aZVhqU0FhXTGLu_VFLf5Y.mft (raw, json) Hash identifier: NLDnqbG4T7o/5aOuppcGniW5FOD/fSos6X/1p70m7s0= Subject key identifier: C1:A2:9F:2F:6D:42:B0:B8:C4:30:86:0D:92:9F:00:33:D6:EB:2C:D2 Authority key identifier: 28:18:D8:93:A6:99:56:1A:94:D0:58:57:4C:62:EE:FD:51:4B:7F:96 Certificate issuer: /CN=2818d893a699561a94d058574c62eefd514b7f96 Certificate serial: 019AF1D22240C4CEF7C787E25A100E392DF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/971371-eedf-4d66-8b5f-e41706bf1231/1/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.mft Manifest number: 01DB Signing time: Sat 06 Dec 2025 04:01:11 +0000 Manifest this update: Sat 06 Dec 2025 04:01:11 +0000 Manifest next update: Sun 07 Dec 2025 04:01:11 +0000 Files and hashes: 1: KBjYk6aZVhqU0FhXTGLu_VFLf5Y.crl (hash: 5vAG04CyvjD4DMJO0CGjq2s/hGs8snJkokA+ym4SzBg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/971371-eedf-4d66-8b5f-e41706bf1231/1/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/971371-eedf-4d66-8b5f-e41706bf1231/1/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.mft rsync://rpki.ripe.net/repository/DEFAULT/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:22:40:c4:ce:f7:c7:87:e2:5a:10:0e:39:2d:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2818d893a699561a94d058574c62eefd514b7f96 Validity Not Before: Dec 6 04:01:11 2025 GMT Not After : Dec 7 04:01:11 2025 GMT Subject: CN=c1a29f2f6d42b0b8c430860d929f0033d6eb2cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:10:79:ed:14:0a:40:5d:6d:80:89:67:42:ae: 06:0e:4a:cd:ce:04:8c:31:c6:d8:41:d3:ae:a9:e8: 7b:4d:0e:e0:88:a3:dc:dc:b4:6f:3d:3d:86:87:9e: 00:fc:3a:2e:21:57:90:b2:89:22:a3:11:ef:e7:be: 21:87:6e:73:ef:3e:73:46:56:59:e9:f5:53:1e:f5: 19:92:8c:3a:70:7e:ff:8d:55:61:60:63:0d:65:1b: 7e:d2:73:e0:e6:ce:8b:41:1c:1e:02:c7:d2:e6:a5: 80:83:12:9d:a3:f3:9d:33:0f:6e:db:9c:bb:88:f3: 3d:56:fe:c9:bb:48:c6:15:a1:11:f2:50:26:b1:54: 5e:ca:f5:5f:0f:f1:db:fa:0e:3a:cd:d1:d4:f4:f2: 6a:8b:77:34:8a:f0:6b:fb:7b:59:7b:bd:bc:5a:81: 9b:2e:1e:db:87:25:8b:7c:fa:35:06:06:4b:cf:b2: f9:bd:b7:4a:e0:e5:db:4d:d9:81:8f:11:94:6f:da: 9b:8d:2b:02:08:95:e5:88:1e:32:3c:16:a1:71:a4: 8b:07:b0:6f:dc:34:4c:7a:35:38:a1:1f:b0:9b:8f: cf:44:58:68:18:34:ca:5b:36:2f:83:94:10:b7:1b: 8f:cf:06:91:d2:a4:90:2a:2e:fc:d5:11:a4:a9:65: 6b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A2:9F:2F:6D:42:B0:B8:C4:30:86:0D:92:9F:00:33:D6:EB:2C:D2 X509v3 Authority Key Identifier: keyid:28:18:D8:93:A6:99:56:1A:94:D0:58:57:4C:62:EE:FD:51:4B:7F:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/971371-eedf-4d66-8b5f-e41706bf1231/1/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/971371-eedf-4d66-8b5f-e41706bf1231/1/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:f6:bf:78:ed:cf:a3:b3:82:ee:44:5f:0b:cb:df:f2:65:94: b6:af:15:66:3e:8d:8c:52:ec:91:72:3b:bd:e6:40:5b:4a:00: 6d:c3:00:fd:50:c2:b1:21:08:f4:02:73:96:38:d1:be:d3:04: 4d:17:80:35:67:42:21:e8:bd:11:7f:e5:86:0d:ab:54:93:db: 0b:f9:68:be:fc:2b:23:82:a5:c6:72:c3:b3:87:c7:db:01:63: 68:a3:d8:39:3b:67:26:59:07:e9:e7:b0:e3:d4:24:1c:d2:74: 6c:4b:cd:97:bb:c5:a8:ae:8c:2c:da:e5:04:31:d1:28:47:98: 30:2d:82:b0:c2:13:14:01:47:03:25:56:d7:4a:92:3b:d2:83: aa:d7:d2:6d:78:4a:14:7c:29:48:72:fd:33:2a:0a:4c:28:05: df:40:de:00:88:b5:67:4b:07:77:fd:5c:da:4f:02:24:e5:c7: 0e:fd:18:d2:1e:95:cc:49:29:e6:65:3b:9f:1f:76:e7:6a:af: c9:d7:66:03:d0:32:4f:4c:4c:94:c5:df:a4:f5:43:96:9c:d3: 8f:cd:d8:4e:41:e6:5c:1b:81:c0:f1:9d:6e:11:a9:10:f1:4c: a9:15:6c:2a:d5:94:93:94:19:00:39:16:86:7e:6f:da:a1:f0: 7b:aa:cf:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0iJAxM73x4fiWhAOOS3xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MThkODkzYTY5OTU2MWE5NGQwNTg1NzRjNjJlZWZkNTE0 YjdmOTYwHhcNMjUxMjA2MDQwMTExWhcNMjUxMjA3MDQwMTExWjAzMTEwLwYDVQQD EyhjMWEyOWYyZjZkNDJiMGI4YzQzMDg2MGQ5MjlmMDAzM2Q2ZWIyY2QyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhB57RQKQF1tgIlnQq4GDkrNzgSM McbYQdOuqeh7TQ7giKPc3LRvPT2Gh54A/DouIVeQsokioxHv574hh25z7z5zRlZZ 6fVTHvUZkow6cH7/jVVhYGMNZRt+0nPg5s6LQRweAsfS5qWAgxKdo/OdMw9u25y7 iPM9Vv7Ju0jGFaER8lAmsVReyvVfD/Hb+g46zdHU9PJqi3c0ivBr+3tZe728WoGb Lh7bhyWLfPo1BgZLz7L5vbdK4OXbTdmBjxGUb9qbjSsCCJXliB4yPBahcaSLB7Bv 3DRMejU4oR+wm4/PRFhoGDTKWzYvg5QQtxuPzwaR0qSQKi781RGkqWVrIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMGiny9tQrC4xDCGDZKfADPW6yzSMB8GA1UdIwQY MBaAFCgY2JOmmVYalNBYV0xi7v1RS3+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0JqWWs2YVpWaHFVMEZoWFRHTHVfVkZMZjVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS85NzEzNzEtZWVkZi00ZDY2LThiNWYt ZTQxNzA2YmYxMjMxLzEvS0JqWWs2YVpWaHFVMEZoWFRHTHVfVkZMZjVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS85NzEzNzEtZWVkZi00ZDY2LThiNWYtZTQxNzA2YmYxMjMx LzEvS0JqWWs2YVpWaHFVMEZoWFRHTHVfVkZMZjVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD/a/eO3P o7OC7kRfC8vf8mWUtq8VZj6NjFLskXI7veZAW0oAbcMA/VDCsSEI9AJzljjRvtME TReANWdCIei9EX/lhg2rVJPbC/lovvwrI4KlxnLDs4fH2wFjaKPYOTtnJlkH6eew 49QkHNJ0bEvNl7vFqK6MLNrlBDHRKEeYMC2CsMITFAFHAyVW10qSO9KDqtfSbXhK FHwpSHL9MyoKTCgF30DeAIi1Z0sHd/1c2k8CJOXHDv0Y0h6VzEkp5mU7nx9252qv yddmA9AyT0xMlMXfpPVDlpzTj83YTkHmXBuBwPGdbhGpEPFMqRVsKtWUk5QZADkW hn5v2qHwe6rPDQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:02:44 2025 by rpki-client