This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft File: KLD_eZjKiFTOfEdaly7R1SpcYM0.mft (raw, json) Hash identifier: PgCm1ZhFDglPG6865bz0aXAVDrP2wyGfp5swb83Nhro= Subject key identifier: EA:08:37:C7:6E:A6:A9:66:E8:3E:58:F6:28:02:50:DD:8E:32:D2:4D Authority key identifier: 28:B0:FF:79:98:CA:88:54:CE:7C:47:5A:97:2E:D1:D5:2A:5C:60:CD Certificate issuer: /CN=28b0ff7998ca8854ce7c475a972ed1d52a5c60cd Certificate serial: 019AF208DCA8B106FF105C6A4FE14E0DB799 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft Manifest number: 146C Signing time: Sat 06 Dec 2025 05:00:58 +0000 Manifest this update: Sat 06 Dec 2025 05:00:58 +0000 Manifest next update: Sun 07 Dec 2025 05:00:58 +0000 Files and hashes: 1: FTGHUrnOnM0CZqV9qHNon3zzeQk.roa (hash: qfEgLxXIZ1yGqxOy4Va2BU39hv93XgdmfKbFLCHxqtY=) 2: KLD_eZjKiFTOfEdaly7R1SpcYM0.crl (hash: EL3j4oMIFPbfiqbseIxo9RuACSQEZaSz1D11AUmMwOQ=) 3: ze5Hj6zKQG-Tt5n-ha7sVFbj4mw.roa (hash: AN3Ve5w1vCNtVQ51w0ixgbhIRYxGbXsS7Tmo5KWlvMo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:dc:a8:b1:06:ff:10:5c:6a:4f:e1:4e:0d:b7:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28b0ff7998ca8854ce7c475a972ed1d52a5c60cd Validity Not Before: Dec 6 05:00:58 2025 GMT Not After : Dec 7 05:00:58 2025 GMT Subject: CN=ea0837c76ea6a966e83e58f6280250dd8e32d24d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:57:a2:80:29:92:c9:51:88:3e:51:43:6c:23: f0:c4:96:66:ff:77:c5:c9:7e:96:b2:57:a9:1c:8e: 2c:a0:3f:be:ed:40:75:0f:a8:77:67:1a:6f:05:77: b7:0a:dd:5d:3f:cf:58:d1:a5:78:2a:d0:7c:4f:6c: fc:b0:fe:0f:ed:10:66:21:b7:b0:6d:be:8a:8a:25: 17:ab:c0:55:d2:2b:00:09:3b:1f:26:e2:5f:5a:c8: 18:ad:9e:f1:4a:7f:61:76:6f:4b:e2:70:fe:81:f9: 6c:ad:c6:e9:21:4e:1b:96:c3:f7:4d:1b:12:16:2f: 1b:c4:ff:ab:50:ac:50:ec:6f:e8:b7:0d:b9:90:fe: bd:6b:a2:7e:44:ed:30:47:8e:3f:c8:7f:41:23:19: 3d:f3:25:7a:bf:ab:2c:58:c1:79:8f:61:40:6e:29: 2e:c5:27:63:d1:29:8f:fb:ef:dd:1a:4e:be:d3:98: 06:30:45:4d:96:84:6c:54:79:b5:1e:db:81:98:7e: 94:5f:35:f8:8a:51:c4:ea:cd:dc:75:26:ed:2c:09: c1:18:45:ad:9c:5c:08:1b:b5:1b:57:a6:ab:29:47: 42:9b:a8:09:26:d4:ad:78:d2:ed:ac:ff:92:09:f9: 30:3c:b8:97:bf:0a:62:40:d7:29:38:5f:cd:c6:ca: 9c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:08:37:C7:6E:A6:A9:66:E8:3E:58:F6:28:02:50:DD:8E:32:D2:4D X509v3 Authority Key Identifier: keyid:28:B0:FF:79:98:CA:88:54:CE:7C:47:5A:97:2E:D1:D5:2A:5C:60:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:20:61:c5:3f:3d:40:05:12:7b:86:d9:2b:25:e7:74:f0:5b: f5:69:d5:6d:32:dc:d5:3a:b4:9c:da:6b:96:22:76:6d:a4:a3: 4d:3b:19:dc:2e:49:1c:cc:e9:40:a7:24:f4:36:11:b4:04:3d: 47:92:6c:4a:3a:74:42:ad:12:4b:bb:13:00:e8:e4:3c:a1:a0: 71:75:6c:0c:c9:05:85:3d:b7:71:fa:6f:4e:c4:eb:50:2b:88: c6:a0:ec:ce:e3:3c:84:d9:d7:33:79:cb:2f:28:2f:89:97:21: 02:ac:53:5f:59:be:db:17:a0:54:0e:ef:cf:f0:cb:cf:a8:58: 01:b0:65:34:09:1b:03:7a:c4:09:fd:63:88:b7:5c:0f:dc:4c: 51:bc:78:d9:96:dc:4e:ab:88:e7:38:2d:1e:92:ef:bb:e9:3b: 3e:96:8b:2f:75:c8:93:13:a6:49:7b:39:9a:d8:b1:33:09:7d: 8e:aa:6b:2e:24:a1:e8:1e:4b:41:df:4d:30:da:62:59:dc:44: 73:6d:3f:89:1e:ce:ac:a9:04:46:99:f6:ad:b8:92:52:68:27: 84:28:13:3c:26:c4:1b:40:19:07:02:3a:d5:b9:d7:90:d5:85: 46:78:65:48:a9:18:31:e5:79:47:0d:68:d2:ce:7b:d7:94:fb: b3:be:30:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNyosQb/EFxqT+FODbeZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4YjBmZjc5OThjYTg4NTRjZTdjNDc1YTk3MmVkMWQ1MmE1 YzYwY2QwHhcNMjUxMjA2MDUwMDU4WhcNMjUxMjA3MDUwMDU4WjAzMTEwLwYDVQQD EyhlYTA4MzdjNzZlYTZhOTY2ZTgzZTU4ZjYyODAyNTBkZDhlMzJkMjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFeigCmSyVGIPlFDbCPwxJZm/3fF yX6WslepHI4soD++7UB1D6h3ZxpvBXe3Ct1dP89Y0aV4KtB8T2z8sP4P7RBmIbew bb6KiiUXq8BV0isACTsfJuJfWsgYrZ7xSn9hdm9L4nD+gflsrcbpIU4blsP3TRsS Fi8bxP+rUKxQ7G/otw25kP69a6J+RO0wR44/yH9BIxk98yV6v6ssWMF5j2FAbiku xSdj0SmP++/dGk6+05gGMEVNloRsVHm1HtuBmH6UXzX4ilHE6s3cdSbtLAnBGEWt nFwIG7UbV6arKUdCm6gJJtSteNLtrP+SCfkwPLiXvwpiQNcpOF/NxsqceQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOoIN8dupqlm6D5Y9igCUN2OMtJNMB8GA1UdIwQY MBaAFCiw/3mYyohUznxHWpcu0dUqXGDNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0xEX2VaaktpRlRPZkVkYWx5N1IxU3BjWU0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9hMGQ2NzQtODdiNi00MzE4LWJlZDIt MjY3NTQ3ZWExZTM1LzEvS0xEX2VaaktpRlRPZkVkYWx5N1IxU3BjWU0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9hMGQ2NzQtODdiNi00MzE4LWJlZDItMjY3NTQ3ZWExZTM1 LzEvS0xEX2VaaktpRlRPZkVkYWx5N1IxU3BjWU0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArSBhxT89 QAUSe4bZKyXndPBb9WnVbTLc1Tq0nNprliJ2baSjTTsZ3C5JHMzpQKck9DYRtAQ9 R5JsSjp0Qq0SS7sTAOjkPKGgcXVsDMkFhT23cfpvTsTrUCuIxqDszuM8hNnXM3nL LygviZchAqxTX1m+2xegVA7vz/DLz6hYAbBlNAkbA3rECf1jiLdcD9xMUbx42Zbc TquI5zgtHpLvu+k7PpaLL3XIkxOmSXs5mtixMwl9jqprLiSh6B5LQd9NMNpiWdxE c20/iR7OrKkERpn2rbiSUmgnhCgTPCbEG0AZBwI61bnXkNWFRnhlSKkYMeV5Rw1o 0s5715T7s74wdw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:15:17 2025 by rpki-client