This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft File: KT0QRM1I1hcW11ngIN29qoFNXNU.mft (raw, json) Hash identifier: BgjLe4q+6re4thGzCmGBXqcyY+S/vqixnvCosKp3Jn8= Subject key identifier: C4:7E:67:9F:30:44:21:86:19:99:B8:95:E9:8D:9E:5B:88:15:43:32 Authority key identifier: 29:3D:10:44:CD:48:D6:17:16:D7:59:E0:20:DD:BD:AA:81:4D:5C:D5 Certificate issuer: /CN=293d1044cd48d61716d759e020ddbdaa814d5cd5 Certificate serial: 019AF766D7285C7A5540A160D819397C255A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT0QRM1I1hcW11ngIN29qoFNXNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft Manifest number: 0F6B Signing time: Sun 07 Dec 2025 06:01:43 +0000 Manifest this update: Sun 07 Dec 2025 06:01:43 +0000 Manifest next update: Mon 08 Dec 2025 06:01:43 +0000 Files and hashes: 1: KT0QRM1I1hcW11ngIN29qoFNXNU.crl (hash: O8r9RhRoJCp8Owxkgd7j6ZmI/PtJatP4gixoiosXSbQ=) 2: dJ6Z6uHBiaScsgFwBNYwQYgTmkk.roa (hash: A47IWxTys6UPyaxxT7KgUDJag9HKcyHJ4nrmIQJOjaY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft rsync://rpki.ripe.net/repository/DEFAULT/KT0QRM1I1hcW11ngIN29qoFNXNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:66:d7:28:5c:7a:55:40:a1:60:d8:19:39:7c:25:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=293d1044cd48d61716d759e020ddbdaa814d5cd5 Validity Not Before: Dec 7 06:01:43 2025 GMT Not After : Dec 8 06:01:43 2025 GMT Subject: CN=c47e679f304421861999b895e98d9e5b88154332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:68:37:1e:f3:17:c7:c6:25:f7:9f:42:8f:12: d8:3c:8f:f4:d5:9c:00:c5:f6:65:22:9f:4f:d0:17: c8:eb:7c:be:07:b6:a0:0c:85:11:ec:85:9b:61:0b: d3:f0:b9:51:6c:ab:c0:9c:9a:38:5f:71:64:6e:a9: 42:b5:07:70:da:30:f3:fc:90:12:4f:c8:a9:04:93: 7a:23:dd:43:ec:66:75:cb:82:e9:94:f9:4b:46:c5: b7:a1:8e:5f:30:54:09:cc:f3:1a:72:0f:26:10:50: d5:2e:f4:26:e8:d6:75:33:9d:70:98:94:0e:f8:02: a6:05:ec:47:86:c1:33:44:09:fc:6b:17:56:cf:57: 21:47:0d:43:0a:f3:76:dc:b0:7e:a2:ec:dc:e0:ee: c8:af:fc:b5:09:07:af:eb:07:ef:73:23:ba:00:aa: 2e:ab:46:fd:ed:2f:e3:4a:24:22:ee:42:8f:0d:9a: fa:40:c6:9b:6b:5c:ff:90:c3:2a:b7:4d:29:83:87: c9:3d:7d:f1:2d:09:ba:e1:4f:f7:19:11:55:f8:69: a9:71:81:7c:9c:dd:82:d2:9b:0d:73:25:f4:be:da: ee:d0:44:10:95:5d:04:89:69:7e:83:78:78:f3:1e: 41:a7:98:58:79:05:35:db:7b:9f:91:61:1b:94:57: 58:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:7E:67:9F:30:44:21:86:19:99:B8:95:E9:8D:9E:5B:88:15:43:32 X509v3 Authority Key Identifier: keyid:29:3D:10:44:CD:48:D6:17:16:D7:59:E0:20:DD:BD:AA:81:4D:5C:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT0QRM1I1hcW11ngIN29qoFNXNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:36:26:5b:b9:e3:d5:7d:e3:01:7d:36:2b:6a:5f:14:1d:e5: f6:69:d8:e6:3e:74:b1:cd:7f:f0:fe:15:a8:85:4b:22:ec:e8: 43:b6:92:1b:7e:e2:a1:02:2f:24:a9:ac:cd:5c:b1:1f:fd:b3: ee:ec:d2:0a:52:a1:cf:36:87:ee:ca:b4:22:bd:eb:1c:84:0c: 89:68:6d:77:2a:de:fe:cd:f5:50:eb:62:01:36:10:6c:e0:5d: 03:e5:cc:cf:6e:34:6d:75:19:da:85:be:cc:5b:4d:68:a6:bb: 50:6b:09:01:db:31:14:57:55:e4:62:bc:99:f3:7d:85:08:6b: e3:13:f3:0c:10:54:7c:44:cd:e1:33:38:98:8d:d8:ac:53:b9: 1f:0c:bb:99:9c:c1:e2:a1:78:3b:c0:89:aa:d6:b3:d8:4a:57: 9f:29:7c:f4:51:00:6c:8a:5f:c3:b9:30:a3:d8:08:48:31:bd: 16:e3:03:37:dc:97:8d:01:d3:45:65:6c:52:99:57:2d:f2:e5: 91:ed:ee:8c:19:ba:53:e7:a6:c2:5e:0a:0f:c8:55:33:60:94: 1e:4b:78:c8:c3:85:d9:9b:5f:a2:73:a4:8b:f0:dd:e4:82:d1: fd:8f:ff:82:8a:38:b3:68:bb:04:2c:41:4e:1d:4d:65:ac:67: fe:d9:ab:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr3ZtcoXHpVQKFg2Bk5fCVaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5M2QxMDQ0Y2Q0OGQ2MTcxNmQ3NTllMDIwZGRiZGFhODE0 ZDVjZDUwHhcNMjUxMjA3MDYwMTQzWhcNMjUxMjA4MDYwMTQzWjAzMTEwLwYDVQQD EyhjNDdlNjc5ZjMwNDQyMTg2MTk5OWI4OTVlOThkOWU1Yjg4MTU0MzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWg3HvMXx8Yl959CjxLYPI/01ZwA xfZlIp9P0BfI63y+B7agDIUR7IWbYQvT8LlRbKvAnJo4X3FkbqlCtQdw2jDz/JAS T8ipBJN6I91D7GZ1y4LplPlLRsW3oY5fMFQJzPMacg8mEFDVLvQm6NZ1M51wmJQO +AKmBexHhsEzRAn8axdWz1chRw1DCvN23LB+ouzc4O7Ir/y1CQev6wfvcyO6AKou q0b97S/jSiQi7kKPDZr6QMaba1z/kMMqt00pg4fJPX3xLQm64U/3GRFV+GmpcYF8 nN2C0psNcyX0vtru0EQQlV0EiWl+g3h48x5Bp5hYeQU123ufkWEblFdYGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMR+Z58wRCGGGZm4lemNnluIFUMyMB8GA1UdIwQY MBaAFCk9EETNSNYXFtdZ4CDdvaqBTVzVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1QwUVJNMUkxaGNXMTFuZ0lOMjlxb0ZOWE5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9kZWYwOTUtMDU2Yi00ZGQzLWJmMWUt ZTcxYmVkYTFmMjk5LzEvS1QwUVJNMUkxaGNXMTFuZ0lOMjlxb0ZOWE5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9kZWYwOTUtMDU2Yi00ZGQzLWJmMWUtZTcxYmVkYTFmMjk5 LzEvS1QwUVJNMUkxaGNXMTFuZ0lOMjlxb0ZOWE5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABTYmW7nj 1X3jAX02K2pfFB3l9mnY5j50sc1/8P4VqIVLIuzoQ7aSG37ioQIvJKmszVyxH/2z 7uzSClKhzzaH7sq0Ir3rHIQMiWhtdyre/s31UOtiATYQbOBdA+XMz240bXUZ2oW+ zFtNaKa7UGsJAdsxFFdV5GK8mfN9hQhr4xPzDBBUfETN4TM4mI3YrFO5Hwy7mZzB 4qF4O8CJqtaz2EpXnyl89FEAbIpfw7kwo9gISDG9FuMDN9yXjQHTRWVsUplXLfLl ke3ujBm6U+emwl4KD8hVM2CUHkt4yMOF2ZtfonOki/Dd5ILR/Y//goo4s2i7BCxB Th1NZaxn/tmrHw== -----END CERTIFICATE-----Generated at Sun Dec 7 08:12:16 2025 by rpki-client