This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft File: KUoc22jxVM-VQYowjILY2lB3UQk.mft (raw, json) Hash identifier: aK1PCLDEsLwRkCPFuDGZWbCe12naPJi4sOleXrnIuNU= Subject key identifier: D5:E5:59:29:E9:75:4C:D3:85:E1:31:07:09:89:C0:F2:79:E2:04:46 Authority key identifier: 29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09 Certificate issuer: /CN=294a1cdb68f154cf95418a308c82d8da50775109 Certificate serial: 019AF61C6E888FEBC6E0943DAC0681DA198C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft Manifest number: 13F9 Signing time: Sun 07 Dec 2025 00:00:49 +0000 Manifest this update: Sun 07 Dec 2025 00:00:49 +0000 Manifest next update: Mon 08 Dec 2025 00:00:49 +0000 Files and hashes: 1: KUoc22jxVM-VQYowjILY2lB3UQk.crl (hash: SAH4KWj5j0dpF4IE2KA2E9yd3Gce/99Z5Ka2I+4wSu8=) 2: KZGod_BqVRdmwfNvBiSAHniE4gQ.roa (hash: 6XoOJiv494XxgxSZpKNQsumj729QUswWc6xs9n2QuB0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:6e:88:8f:eb:c6:e0:94:3d:ac:06:81:da:19:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=294a1cdb68f154cf95418a308c82d8da50775109 Validity Not Before: Dec 7 00:00:49 2025 GMT Not After : Dec 8 00:00:49 2025 GMT Subject: CN=d5e55929e9754cd385e131070989c0f279e20446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:26:83:99:34:ee:eb:b6:bc:13:8a:58:12:65: 46:bf:fa:74:53:d2:f1:26:d3:fa:e6:d1:25:2f:9b: 89:a8:c6:21:fe:79:c6:f9:15:49:52:6f:42:e4:9c: fb:aa:19:69:27:0d:f5:21:15:b1:61:04:05:6a:54: ae:40:32:0b:44:bc:a9:43:e8:c6:ff:8b:88:06:29: 2f:ac:70:92:e4:dc:57:a1:c3:f4:cf:be:10:2e:49: 85:79:98:c1:70:1d:62:da:c3:e2:da:44:b8:ea:bb: 0d:f5:47:ae:a4:61:42:b2:f3:85:20:66:26:43:56: e3:bc:59:df:78:4a:94:66:46:97:76:55:f5:3d:fa: 47:09:2a:99:40:5d:df:02:8b:f0:8b:f4:2e:6c:ed: cc:ca:10:29:cd:fe:fc:46:c4:33:2e:1c:bc:e7:f6: 04:69:82:6d:6d:ff:93:c7:09:ea:f4:c4:de:19:57: 4d:fe:42:c1:1f:a7:c7:42:b0:47:e5:e4:e3:e7:43: 7c:bf:6c:df:12:e1:d2:46:80:8f:09:ac:d1:a1:1b: 5a:13:76:8a:30:82:15:ef:16:02:35:5a:a8:b5:d4: 08:21:57:dc:2a:83:90:14:82:3a:eb:c0:75:59:e7: 98:9f:b2:42:e4:86:25:5a:ee:28:39:76:82:34:c9: 81:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E5:59:29:E9:75:4C:D3:85:E1:31:07:09:89:C0:F2:79:E2:04:46 X509v3 Authority Key Identifier: keyid:29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:fc:1a:5d:c4:af:72:87:7b:4b:87:85:2e:7b:a9:b8:86:55: 6f:0a:a2:fb:a5:c9:3e:ea:6c:7c:70:fd:1d:a5:df:0b:8f:37: a8:72:a8:dc:0b:c8:da:36:54:78:05:d5:dc:a6:e1:4b:9f:42: d7:b8:78:0e:35:71:07:5e:d1:d2:50:98:0d:ca:86:44:59:34: fd:6e:60:cb:4d:3c:75:d4:4f:cb:f1:2c:63:dc:42:44:34:83: 6d:79:be:0f:52:4b:1d:4d:6a:b4:69:65:1b:e6:03:de:a6:67: db:17:0e:ca:c5:e5:07:2e:bc:db:eb:6c:b3:21:72:4a:22:fb: 8b:54:09:61:7c:71:5d:f0:ed:b8:37:ad:88:a8:6a:7a:f4:8b: b8:c1:0c:fc:20:34:2e:bd:a2:df:e9:a7:70:cc:02:ec:fa:b1: b0:25:44:1b:6b:ba:3b:10:da:04:a7:96:e3:a1:1d:63:39:9c: 88:d9:75:26:53:c0:33:b0:a2:88:35:a7:0b:ef:b7:4f:ce:29: c1:74:d8:d2:1f:9f:6a:c0:cf:a0:05:16:4b:76:6f:93:cf:2e: 29:7c:5c:43:53:a8:63:ea:00:9e:f8:9c:b2:58:8f:c3:e0:3d: e9:5b:4a:09:b8:97:36:e6:c3:c1:07:bd:f1:d1:f5:f8:45:8d: 1f:48:72:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HG6Ij+vG4JQ9rAaB2hmMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NGExY2RiNjhmMTU0Y2Y5NTQxOGEzMDhjODJkOGRhNTA3 NzUxMDkwHhcNMjUxMjA3MDAwMDQ5WhcNMjUxMjA4MDAwMDQ5WjAzMTEwLwYDVQQD EyhkNWU1NTkyOWU5NzU0Y2QzODVlMTMxMDcwOTg5YzBmMjc5ZTIwNDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCaDmTTu67a8E4pYEmVGv/p0U9Lx JtP65tElL5uJqMYh/nnG+RVJUm9C5Jz7qhlpJw31IRWxYQQFalSuQDILRLypQ+jG /4uIBikvrHCS5NxXocP0z74QLkmFeZjBcB1i2sPi2kS46rsN9UeupGFCsvOFIGYm Q1bjvFnfeEqUZkaXdlX1PfpHCSqZQF3fAovwi/QubO3MyhApzf78RsQzLhy85/YE aYJtbf+Txwnq9MTeGVdN/kLBH6fHQrBH5eTj50N8v2zfEuHSRoCPCazRoRtaE3aK MIIV7xYCNVqotdQIIVfcKoOQFII668B1WeeYn7JC5IYlWu4oOXaCNMmBFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNXlWSnpdUzTheExBwmJwPJ54gRGMB8GA1UdIwQY MBaAFClKHNto8VTPlUGKMIyC2NpQd1EJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1VvYzIyanhWTS1WUVlvd2pJTFkybEIzVVFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8wNGY0NzQtZTNiNS00NTk1LWEwNDQt NjU3ZTQxYzYzY2E5LzEvS1VvYzIyanhWTS1WUVlvd2pJTFkybEIzVVFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS8wNGY0NzQtZTNiNS00NTk1LWEwNDQtNjU3ZTQxYzYzY2E5 LzEvS1VvYzIyanhWTS1WUVlvd2pJTFkybEIzVVFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcfwaXcSv cod7S4eFLnupuIZVbwqi+6XJPupsfHD9HaXfC483qHKo3AvI2jZUeAXV3KbhS59C 17h4DjVxB17R0lCYDcqGRFk0/W5gy008ddRPy/EsY9xCRDSDbXm+D1JLHU1qtGll G+YD3qZn2xcOysXlBy682+tssyFySiL7i1QJYXxxXfDtuDetiKhqevSLuMEM/CA0 Lr2i3+mncMwC7PqxsCVEG2u6OxDaBKeW46EdYzmciNl1JlPAM7CiiDWnC++3T84p wXTY0h+fasDPoAUWS3Zvk88uKXxcQ1OoY+oAnvicsliPw+A96VtKCbiXNubDwQe9 8dH1+EWNH0hymQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:42:50 2025 by rpki-client