This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft File: KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft (raw, json) Hash identifier: HUVkLuC63uB5mc9nujr1DmnY6txTDiXrVz34ZgDQ62A= Subject key identifier: C8:3E:69:C5:20:94:1C:F2:E5:FF:C4:BB:3E:FB:BD:11:7B:2E:94:B1 Authority key identifier: 29:27:53:27:A5:E8:5F:3C:8C:14:C9:84:03:6F:49:3F:EB:59:B0:16 Certificate issuer: /CN=29275327a5e85f3c8c14c984036f493feb59b016 Certificate serial: 019AF31D2E494E33713E7F78866672AC7A74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 10:02:47 +0000 Manifest this update: Sat 06 Dec 2025 10:02:47 +0000 Manifest next update: Sun 07 Dec 2025 10:02:47 +0000 Files and hashes: 1: KSdTJ6XoXzyMFMmEA29JP-tZsBY.crl (hash: XJatqliNUf0p2NSR6mvWkrEIX9qMhN7+N2FpzGiMtp0=) 2: rdvag5pHs9es_gyoqlFPFe0V7WI.roa (hash: ckptdnrG1RV/ZZ5MTTowIZnIHeIBz++eWuv3IdAEj3A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:2e:49:4e:33:71:3e:7f:78:86:66:72:ac:7a:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29275327a5e85f3c8c14c984036f493feb59b016 Validity Not Before: Dec 6 10:02:47 2025 GMT Not After : Dec 7 10:02:47 2025 GMT Subject: CN=c83e69c520941cf2e5ffc4bb3efbbd117b2e94b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e8:af:45:b2:ea:fa:df:b6:cb:79:89:2b:7e: 19:5e:a3:cc:4f:27:bf:d8:59:6e:2b:96:2c:90:d7: c1:c8:11:13:73:63:21:36:66:c5:ec:ba:93:79:47: 09:30:9e:da:98:00:72:8c:12:41:78:e1:57:80:21: 3d:17:7f:88:3d:99:d0:c2:07:19:da:c2:ee:54:16: 27:fc:00:24:c5:3e:35:3a:14:96:02:c5:7e:b4:71: 41:06:a1:63:f3:ec:94:e5:bd:37:3a:ab:4b:e2:4b: 6b:79:62:1d:57:d2:b2:ef:0a:1f:3d:1f:37:90:30: 81:f6:20:a1:84:03:0c:af:97:fd:e1:f2:a0:ff:89: 0d:21:62:ec:98:06:ad:a0:c9:da:14:47:17:70:7b: 21:41:c8:31:13:86:71:6a:03:c5:7f:8c:74:a6:3b: cc:3b:6d:26:56:92:85:ae:f8:30:00:0a:f4:87:ca: 78:f6:d5:f0:e0:e2:3a:df:f3:75:4c:38:13:c5:a7: 83:01:10:fb:e9:4c:ab:f2:14:d8:d9:c2:0c:f0:e4: f7:0c:40:19:99:1c:5c:8a:e8:93:8e:c1:67:4d:09: 20:ac:b8:0b:f6:5b:97:c3:3c:bb:c0:e8:78:23:8d: f2:b9:fe:80:54:34:25:1c:68:7d:2b:58:d4:a8:7f: 35:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:3E:69:C5:20:94:1C:F2:E5:FF:C4:BB:3E:FB:BD:11:7B:2E:94:B1 X509v3 Authority Key Identifier: keyid:29:27:53:27:A5:E8:5F:3C:8C:14:C9:84:03:6F:49:3F:EB:59:B0:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:72:74:ae:5a:7a:39:d6:2c:db:4a:71:4e:a3:7c:33:dd:fd: 09:7f:03:94:32:20:a6:a4:6d:8d:c5:db:17:c9:8c:0e:ac:6e: 60:f8:bb:f9:62:5c:24:78:f6:94:f0:88:2e:f3:de:d2:a4:77: 60:aa:c0:eb:cd:69:9e:18:fd:a7:ca:87:ac:05:18:4a:6c:32: 4b:b0:f0:9c:58:c8:2f:04:19:e5:cc:63:57:79:e2:37:10:73: 50:da:f1:f8:68:25:bc:70:ef:78:a6:2a:d3:a7:cf:c8:91:2e: 97:32:7c:1a:13:40:86:6b:1a:3b:0e:8d:a4:9f:8d:c0:cd:e5: c0:82:97:3b:80:a3:32:c4:28:67:58:16:38:3b:cf:e8:5a:f8: f3:34:93:fc:3a:45:be:fb:fd:c4:19:a1:3d:a4:a2:13:02:6c: 57:48:44:45:06:96:fb:21:76:37:55:7b:77:62:8a:46:dd:aa: 7f:98:03:9c:04:95:78:5e:ae:16:98:92:b3:37:7b:06:98:08: be:a2:23:9c:c1:9b:47:a1:04:4c:3e:8f:4e:40:43:76:d9:51: c9:59:cf:b9:31:a4:fc:ab:1a:f4:97:a5:ec:9f:84:ee:9e:76: 0f:52:2e:86:72:37:aa:b0:b1:d0:6f:50:7d:37:1f:aa:b9:22: 9a:10:35:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHS5JTjNxPn94hmZyrHp0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5Mjc1MzI3YTVlODVmM2M4YzE0Yzk4NDAzNmY0OTNmZWI1 OWIwMTYwHhcNMjUxMjA2MTAwMjQ3WhcNMjUxMjA3MTAwMjQ3WjAzMTEwLwYDVQQD EyhjODNlNjljNTIwOTQxY2YyZTVmZmM0YmIzZWZiYmQxMTdiMmU5NGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruivRbLq+t+2y3mJK34ZXqPMTye/ 2FluK5YskNfByBETc2MhNmbF7LqTeUcJMJ7amAByjBJBeOFXgCE9F3+IPZnQwgcZ 2sLuVBYn/AAkxT41OhSWAsV+tHFBBqFj8+yU5b03OqtL4ktreWIdV9Ky7wofPR83 kDCB9iChhAMMr5f94fKg/4kNIWLsmAatoMnaFEcXcHshQcgxE4ZxagPFf4x0pjvM O20mVpKFrvgwAAr0h8p49tXw4OI63/N1TDgTxaeDARD76Uyr8hTY2cIM8OT3DEAZ mRxciuiTjsFnTQkgrLgL9luXwzy7wOh4I43yuf6AVDQlHGh9K1jUqH81OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMg+acUglBzy5f/Euz77vRF7LpSxMB8GA1UdIwQY MBaAFCknUyel6F88jBTJhANvST/rWbAWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1NkVEo2WG9YenlNRk1tRUEyOUpQLXRac0JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9hMWRlNDQtODZhOS00ZDI5LWI4ZTUt MTY2ZmRkMGIxODIyLzEvS1NkVEo2WG9YenlNRk1tRUEyOUpQLXRac0JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9hMWRlNDQtODZhOS00ZDI5LWI4ZTUtMTY2ZmRkMGIxODIy LzEvS1NkVEo2WG9YenlNRk1tRUEyOUpQLXRac0JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhXJ0rlp6 OdYs20pxTqN8M939CX8DlDIgpqRtjcXbF8mMDqxuYPi7+WJcJHj2lPCILvPe0qR3 YKrA681pnhj9p8qHrAUYSmwyS7DwnFjILwQZ5cxjV3niNxBzUNrx+GglvHDveKYq 06fPyJEulzJ8GhNAhmsaOw6NpJ+NwM3lwIKXO4CjMsQoZ1gWODvP6Fr48zST/DpF vvv9xBmhPaSiEwJsV0hERQaW+yF2N1V7d2KKRt2qf5gDnASVeF6uFpiSszd7BpgI vqIjnMGbR6EETD6PTkBDdtlRyVnPuTGk/Ksa9Jel7J+E7p52D1IuhnI3qrCx0G9Q fTcfqrkimhA1zQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:11:45 2025 by rpki-client