This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft File: KIUcb8brOBbhFsikqFHQ0XjJDzE.mft (raw, json) Hash identifier: KguxazJlFWOW/kGNuzkIK2zq5UCTYzFhcLPPWgO1Jb0= Subject key identifier: 7D:6A:C6:C3:10:A4:1E:EC:E1:03:78:E0:23:A1:12:5E:2A:3D:34:18 Authority key identifier: 28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31 Certificate issuer: /CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31 Certificate serial: 019AF19B204CEDE1E7FC865B34DF0243D7DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft Manifest number: 153F Signing time: Sat 06 Dec 2025 03:01:06 +0000 Manifest this update: Sat 06 Dec 2025 03:01:06 +0000 Manifest next update: Sun 07 Dec 2025 03:01:06 +0000 Files and hashes: 1: KIUcb8brOBbhFsikqFHQ0XjJDzE.crl (hash: mr/7DQ/wdRSzbkYE2xoji4RlISCYVRiDXH0VjPWONDA=) 2: QKIPUY8W9rG1LSw1ZEyZOELoapA.roa (hash: Z80mVuvHDatSxJ6yGfprXykxFLoYcEum7C9B/uFuICg=) 3: ZPcs3ZKKxPUQbEu3DEs7Hfv-wYM.roa (hash: btG37/wBYGxhtViE0Hi1ryp1c5dcgao2x4gq6RXDb18=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.crl rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:20:4c:ed:e1:e7:fc:86:5b:34:df:02:43:d7:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31 Validity Not Before: Dec 6 03:01:06 2025 GMT Not After : Dec 7 03:01:06 2025 GMT Subject: CN=7d6ac6c310a41eece10378e023a1125e2a3d3418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:42:6a:34:ac:c3:ab:3c:31:58:97:d8:e7:f9: ba:7e:2c:5c:d8:2b:8c:38:18:47:dd:1f:12:c8:5d: 83:88:87:1d:3c:fd:69:39:8d:61:f5:05:dc:44:98: e8:3b:97:c5:e8:98:ef:bd:fb:56:20:96:31:04:fa: b6:92:6e:94:e0:c7:d2:4f:8b:ca:40:a8:e7:c1:d0: a1:34:3d:c8:f3:30:09:a1:d9:82:40:6e:ff:d2:18: 26:8b:30:ab:93:4b:3e:16:21:f1:9d:50:3c:33:55: bd:bf:43:e1:44:ba:ef:69:d0:b7:a2:a8:be:45:d1: 21:9e:96:0e:29:ad:af:2e:67:f2:d9:cc:cb:14:4f: 88:0b:e4:25:d9:46:4b:95:c0:ce:dd:b2:63:ca:81: 6e:cf:78:55:d2:d9:19:9a:1c:32:c4:a2:4e:a1:f1: be:66:3b:7b:ee:f7:04:67:ab:6b:da:a9:a7:8f:14: d6:a0:bf:d8:d0:cd:88:92:ad:93:9e:c0:c1:58:1f: c5:c2:ae:19:4b:a9:15:ef:46:44:1c:9b:fa:08:d0: 39:8c:d4:b7:77:e8:b7:1a:62:6c:71:35:80:d6:2e: 6b:fe:6f:b1:62:74:0f:c3:81:ae:f7:dc:c4:b6:48: 75:52:9e:90:36:68:17:6b:35:80:6d:d5:ea:84:d8: be:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:6A:C6:C3:10:A4:1E:EC:E1:03:78:E0:23:A1:12:5E:2A:3D:34:18 X509v3 Authority Key Identifier: keyid:28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:5c:35:c5:d3:18:e9:28:1a:c9:98:a3:b3:9b:b7:73:78:4e: 4c:b1:16:08:69:30:e4:4c:1e:8d:82:fc:c1:c0:5d:b2:e9:a0: f2:5a:de:0e:f5:e4:cb:e4:3f:dc:83:35:86:9d:f8:0e:aa:3f: 7c:6e:79:27:40:19:01:64:ab:ff:ff:30:62:f5:96:35:64:09: 8b:dc:4e:1f:b4:85:1b:1b:e8:89:62:5b:7c:dd:f9:8d:03:d4: cd:21:ee:6b:c8:f3:e5:9c:2a:0b:24:ab:d5:1c:28:07:47:33: 27:f2:ea:21:fa:f1:f5:70:d3:3e:94:d7:ee:5b:38:64:32:f2: f5:93:f7:dc:c5:00:a9:55:12:dc:3b:86:41:a5:1c:68:84:06: 87:75:b1:1e:9f:33:ff:23:d0:aa:23:17:36:9f:82:83:58:b3: ef:08:b3:b9:9f:50:be:bd:0d:c5:6b:1d:d1:75:f1:30:81:96: 71:fa:a5:22:6f:a2:c4:26:07:13:b5:b8:cf:d8:f5:8d:a2:1a: 74:ae:35:4f:1a:ff:df:87:31:07:86:01:57:e4:d3:78:b5:48: 11:03:89:2d:ea:c4:33:02:b2:48:3e:27:e5:c7:d3:7b:bb:1d: a1:b5:b9:3f:0e:cc:74:38:7b:ca:46:35:47:b7:97:52:5a:ef: 6f:0c:86:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmyBM7eHn/IZbNN8CQ9faMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ODUxYzZmYzZlYjM4MTZlMTE2YzhhNGE4NTFkMGQxNzhj OTBmMzEwHhcNMjUxMjA2MDMwMTA2WhcNMjUxMjA3MDMwMTA2WjAzMTEwLwYDVQQD Eyg3ZDZhYzZjMzEwYTQxZWVjZTEwMzc4ZTAyM2ExMTI1ZTJhM2QzNDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0JqNKzDqzwxWJfY5/m6fixc2CuM OBhH3R8SyF2DiIcdPP1pOY1h9QXcRJjoO5fF6JjvvftWIJYxBPq2km6U4MfST4vK QKjnwdChND3I8zAJodmCQG7/0hgmizCrk0s+FiHxnVA8M1W9v0PhRLrvadC3oqi+ RdEhnpYOKa2vLmfy2czLFE+IC+Ql2UZLlcDO3bJjyoFuz3hV0tkZmhwyxKJOofG+ Zjt77vcEZ6tr2qmnjxTWoL/Y0M2Ikq2TnsDBWB/Fwq4ZS6kV70ZEHJv6CNA5jNS3 d+i3GmJscTWA1i5r/m+xYnQPw4Gu99zEtkh1Up6QNmgXazWAbdXqhNi+KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH1qxsMQpB7s4QN44COhEl4qPTQYMB8GA1UdIwQY MBaAFCiFHG/G6zgW4RbIpKhR0NF4yQ8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0lVY2I4YnJPQmJoRnNpa3FGSFEwWGpKRHpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9iOWU2ZGYtZGE4Zi00NDkxLThmZTQt NTI0NWIxMzUyMjFiLzEvS0lVY2I4YnJPQmJoRnNpa3FGSFEwWGpKRHpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9iOWU2ZGYtZGE4Zi00NDkxLThmZTQtNTI0NWIxMzUyMjFi LzEvS0lVY2I4YnJPQmJoRnNpa3FGSFEwWGpKRHpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQFw1xdMY 6SgayZijs5u3c3hOTLEWCGkw5EwejYL8wcBdsumg8lreDvXky+Q/3IM1hp34Dqo/ fG55J0AZAWSr//8wYvWWNWQJi9xOH7SFGxvoiWJbfN35jQPUzSHua8jz5ZwqCySr 1RwoB0czJ/LqIfrx9XDTPpTX7ls4ZDLy9ZP33MUAqVUS3DuGQaUcaIQGh3WxHp8z /yPQqiMXNp+Cg1iz7wizuZ9Qvr0NxWsd0XXxMIGWcfqlIm+ixCYHE7W4z9j1jaIa dK41Txr/34cxB4YBV+TTeLVIEQOJLerEMwKySD4n5cfTe7sdobW5Pw7MdDh7ykY1 R7eXUlrvbwyG3Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:21 2025 by rpki-client