This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/51ecc9-5681-4b02-9db8-2e880a7a82ca/1/Kf5mFpV0HYXP7c9v-890aZlZVp8.mft File: Kf5mFpV0HYXP7c9v-890aZlZVp8.mft (raw, json) Hash identifier: vRqMbZ68W2gtjD+LhEZucRJCN7JDgyqF9XHbZjMTZlE= Subject key identifier: D0:3F:BE:F7:AA:D3:DC:08:9A:53:D0:D0:0C:AA:9D:E9:B3:63:7C:88 Authority key identifier: 29:FE:66:16:95:74:1D:85:CF:ED:CF:6F:FB:CF:74:69:99:59:56:9F Certificate issuer: /CN=29fe661695741d85cfedcf6ffbcf74699959569f Certificate serial: 019AF31CFFA777520CF8E96E4FB6372EB4BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf5mFpV0HYXP7c9v-890aZlZVp8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/51ecc9-5681-4b02-9db8-2e880a7a82ca/1/Kf5mFpV0HYXP7c9v-890aZlZVp8.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 10:02:35 +0000 Manifest this update: Sat 06 Dec 2025 10:02:35 +0000 Manifest next update: Sun 07 Dec 2025 10:02:35 +0000 Files and hashes: 1: Kf5mFpV0HYXP7c9v-890aZlZVp8.crl (hash: hqbybstoUSStqb/aDmUzB5f6Eikjq8NGe8/ZVFSgKwc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/51ecc9-5681-4b02-9db8-2e880a7a82ca/1/Kf5mFpV0HYXP7c9v-890aZlZVp8.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/51ecc9-5681-4b02-9db8-2e880a7a82ca/1/Kf5mFpV0HYXP7c9v-890aZlZVp8.mft rsync://rpki.ripe.net/repository/DEFAULT/Kf5mFpV0HYXP7c9v-890aZlZVp8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:ff:a7:77:52:0c:f8:e9:6e:4f:b6:37:2e:b4:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29fe661695741d85cfedcf6ffbcf74699959569f Validity Not Before: Dec 6 10:02:35 2025 GMT Not After : Dec 7 10:02:35 2025 GMT Subject: CN=d03fbef7aad3dc089a53d0d00caa9de9b3637c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:96:02:38:1b:07:20:32:08:c4:d6:9e:34:58: 84:ea:30:3d:0d:08:1a:c1:81:13:3a:ac:29:ec:b3: 01:ba:9b:ed:a4:b0:15:ab:86:41:c9:9a:12:c8:5a: 0a:a4:fa:30:50:a5:de:70:0c:a5:d0:83:c9:77:c5: af:2a:84:c5:98:b7:c1:03:93:69:cc:b1:2f:4b:a9: d3:88:13:e4:ad:c0:33:73:e0:c7:0c:e4:cd:5c:20: 79:79:23:24:94:70:9b:0f:d1:c2:a5:46:e2:07:47: 76:1e:de:31:8b:52:42:fb:b3:6e:e4:a6:a1:26:46: fe:4c:29:b6:28:f8:02:4a:2f:3c:b8:17:97:7e:14: 09:33:1a:6d:e7:30:03:f7:d3:16:fa:1d:d2:c6:43: fe:98:8b:d3:01:0e:f5:f5:f2:b8:10:85:79:d8:2c: ff:5b:2e:8a:80:22:ff:ad:f8:19:78:19:e6:ff:a3: 28:16:25:94:43:e4:d1:6a:9b:c0:70:a9:28:82:5b: d1:64:bb:9b:21:44:85:65:d6:7e:69:c1:df:95:3a: 0e:9d:f7:6b:99:5d:23:ea:57:dc:07:ff:89:b7:8b: 51:e9:ad:16:d5:0f:06:75:fe:ae:ae:0c:3a:4d:43: 1c:3c:08:5d:20:01:b1:21:e7:83:91:7d:fd:88:eb: 39:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:3F:BE:F7:AA:D3:DC:08:9A:53:D0:D0:0C:AA:9D:E9:B3:63:7C:88 X509v3 Authority Key Identifier: keyid:29:FE:66:16:95:74:1D:85:CF:ED:CF:6F:FB:CF:74:69:99:59:56:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf5mFpV0HYXP7c9v-890aZlZVp8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/51ecc9-5681-4b02-9db8-2e880a7a82ca/1/Kf5mFpV0HYXP7c9v-890aZlZVp8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/51ecc9-5681-4b02-9db8-2e880a7a82ca/1/Kf5mFpV0HYXP7c9v-890aZlZVp8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:dd:d5:6e:e7:d7:85:1f:e2:44:eb:6f:3e:37:1f:c9:d0:96: 75:9c:65:ae:97:a1:3b:b8:63:be:c2:c5:d6:a9:b1:9a:23:bd: f3:89:75:b9:88:65:6f:10:1a:b5:de:56:a3:92:ec:55:45:3e: 2d:f3:06:47:0c:76:d0:03:5a:85:f8:87:c7:cc:91:5a:6c:47: ca:57:64:d5:e8:5c:6c:5e:28:c1:e3:53:20:02:87:83:54:88: 3f:39:c3:6f:a9:61:65:5d:da:9c:4c:bd:9e:97:aa:3d:85:ad: 38:7f:72:c3:9a:5c:da:ce:53:8e:58:63:a3:54:37:37:78:f0: 85:2a:11:56:5a:8a:de:18:73:b9:5b:85:d9:3b:cb:89:d4:59: b6:bb:ce:e1:aa:ec:f2:96:5e:dd:f1:53:7e:6b:fb:fe:25:4f: 1e:d7:22:36:6b:a4:2b:eb:c2:dd:39:7f:6c:8c:21:f7:3c:7d: b9:ce:a7:84:3b:8f:c7:da:86:b0:28:09:1f:58:1e:44:92:9b: 57:e1:6f:23:f0:2f:32:d0:fa:db:58:6e:85:3a:b0:99:82:ad: 9f:a6:4f:2e:eb:8e:b5:d4:31:40:94:5d:09:88:fe:0a:d7:3e: 6f:36:f3:96:db:27:5f:61:db:31:18:47:1e:02:54:cb:b2:fb: 6c:de:c8:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHP+nd1IM+OluT7Y3LrS6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZmU2NjE2OTU3NDFkODVjZmVkY2Y2ZmZiY2Y3NDY5OTk1 OTU2OWYwHhcNMjUxMjA2MTAwMjM1WhcNMjUxMjA3MTAwMjM1WjAzMTEwLwYDVQQD EyhkMDNmYmVmN2FhZDNkYzA4OWE1M2QwZDAwY2FhOWRlOWIzNjM3Yzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpYCOBsHIDIIxNaeNFiE6jA9DQga wYETOqwp7LMBupvtpLAVq4ZByZoSyFoKpPowUKXecAyl0IPJd8WvKoTFmLfBA5Np zLEvS6nTiBPkrcAzc+DHDOTNXCB5eSMklHCbD9HCpUbiB0d2Ht4xi1JC+7Nu5Kah Jkb+TCm2KPgCSi88uBeXfhQJMxpt5zAD99MW+h3SxkP+mIvTAQ719fK4EIV52Cz/ Wy6KgCL/rfgZeBnm/6MoFiWUQ+TRapvAcKkoglvRZLubIUSFZdZ+acHflToOnfdr mV0j6lfcB/+Jt4tR6a0W1Q8Gdf6urgw6TUMcPAhdIAGxIeeDkX39iOs5KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNA/vveq09wImlPQ0AyqnemzY3yIMB8GA1UdIwQY MBaAFCn+ZhaVdB2Fz+3Pb/vPdGmZWVafMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2Y1bUZwVjBIWVhQN2M5di04OTBhWmxaVnA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi81MWVjYzktNTY4MS00YjAyLTlkYjgt MmU4ODBhN2E4MmNhLzEvS2Y1bUZwVjBIWVhQN2M5di04OTBhWmxaVnA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi81MWVjYzktNTY4MS00YjAyLTlkYjgtMmU4ODBhN2E4MmNh LzEvS2Y1bUZwVjBIWVhQN2M5di04OTBhWmxaVnA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAht3VbufX hR/iROtvPjcfydCWdZxlrpehO7hjvsLF1qmxmiO984l1uYhlbxAatd5Wo5LsVUU+ LfMGRwx20ANahfiHx8yRWmxHyldk1ehcbF4oweNTIAKHg1SIPznDb6lhZV3anEy9 npeqPYWtOH9yw5pc2s5Tjlhjo1Q3N3jwhSoRVlqK3hhzuVuF2TvLidRZtrvO4ars 8pZe3fFTfmv7/iVPHtciNmukK+vC3Tl/bIwh9zx9uc6nhDuPx9qGsCgJH1geRJKb V+FvI/AvMtD621huhTqwmYKtn6ZPLuuOtdQxQJRdCYj+Ctc+bzbzltsnX2HbMRhH HgJUy7L7bN7Ifg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:11:25 2025 by rpki-client