This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft File: KTdcnACxUp1VHufijGBwq0Oi_nY.mft (raw, json) Hash identifier: 3J8yy9qKF3NthkXGCUowQeOr+DAa5IRoNH+fN+s3hHo= Subject key identifier: 16:F9:55:83:C4:66:C0:BA:12:5E:7A:62:D0:2A:AD:3B:BE:14:65:05 Authority key identifier: 29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76 Certificate issuer: /CN=29375c9c00b1529d551ee7e28c6070ab43a2fe76 Certificate serial: 019AF12E3EEA0B384055EC75635AF073650E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft Manifest number: 0F27 Signing time: Sat 06 Dec 2025 01:02:11 +0000 Manifest this update: Sat 06 Dec 2025 01:02:11 +0000 Manifest next update: Sun 07 Dec 2025 01:02:11 +0000 Files and hashes: 1: 2muVnH1_oI_9ztpeyJIqq88lM1c.roa (hash: UznFOVn685h5ihMi8FItxWdR/wWRBKXy+8YPxE2cn9c=) 2: KTdcnACxUp1VHufijGBwq0Oi_nY.crl (hash: esOdLrIxIbZx2dLMAhKQnW7iFCl0U49nCGwEszVvLUA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:3e:ea:0b:38:40:55:ec:75:63:5a:f0:73:65:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29375c9c00b1529d551ee7e28c6070ab43a2fe76 Validity Not Before: Dec 6 01:02:11 2025 GMT Not After : Dec 7 01:02:11 2025 GMT Subject: CN=16f95583c466c0ba125e7a62d02aad3bbe146505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:40:ff:a8:a4:47:d0:a4:88:33:ae:54:54:c0: 0d:80:4e:64:6d:f4:8b:ec:78:49:32:89:cd:3c:fd: d4:e0:31:31:7c:b6:60:e5:5e:2a:99:99:36:86:26: c4:ab:62:74:6e:8f:b3:99:fb:9a:ad:ce:d2:a0:42: cd:d0:f3:a7:1c:97:67:fe:aa:d8:eb:3a:b7:4a:4e: c5:20:75:ba:af:0c:db:5d:ba:e3:0f:39:69:e5:4c: 80:24:db:27:7e:3f:d8:5b:9b:61:e3:23:8a:48:1c: db:6f:e8:bb:00:f5:85:a5:f2:44:3d:74:f7:1c:7c: 35:a6:7a:fc:86:55:3d:09:29:20:e4:75:87:4d:2f: 8d:d0:c2:0e:bb:19:0c:49:f2:30:1d:95:b3:8d:90: e1:e8:5f:68:da:84:b7:63:a5:ae:2f:64:c3:bc:7c: e2:e7:b4:40:cd:4a:bc:41:e8:fa:5e:52:10:91:bd: 85:36:22:62:1a:fb:1b:d8:7b:bf:ce:ab:3a:50:d0: 5b:0b:69:1e:eb:e0:83:e1:f4:52:cf:fd:9b:5c:af: 80:ee:a1:43:14:ed:d3:20:c3:55:61:43:e4:1f:36: 02:b5:91:77:68:47:fa:9b:c4:14:5a:e2:23:d7:10: 14:ed:50:5d:f8:1a:c0:f5:a7:9f:50:c0:49:79:eb: 76:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F9:55:83:C4:66:C0:BA:12:5E:7A:62:D0:2A:AD:3B:BE:14:65:05 X509v3 Authority Key Identifier: keyid:29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:5e:b9:4d:61:83:90:81:54:ae:67:ff:35:7f:a5:84:fd:2c: 84:01:47:88:85:ef:fd:f7:f9:45:15:b4:2f:0a:dc:f1:a9:28: e9:53:49:05:10:ca:3d:05:72:70:e5:87:09:a9:6a:0b:b9:a4: 1b:80:fd:2b:23:98:cd:0b:01:80:41:25:f6:2a:93:73:0a:25: 37:d2:a8:cb:fe:33:3d:b7:62:f3:e1:67:3f:1e:24:e0:85:2b: c2:53:d1:72:37:27:21:4f:1d:f7:fd:51:88:51:46:40:52:d5: 11:7d:57:5f:1f:0e:a0:b4:0d:f7:3b:b5:32:41:6e:26:b0:a3: 7f:79:95:4f:fc:db:42:58:9a:d2:dd:0b:06:48:26:eb:3f:22: b5:66:bf:82:bb:4f:d0:eb:32:36:99:b6:12:3a:8e:aa:e8:bd: 99:31:85:c2:4e:f2:ea:5b:cd:11:1a:e2:85:af:ab:e2:07:3c: 7e:7f:4e:de:aa:14:58:eb:12:82:2b:fe:93:4d:a1:99:22:10: 8e:82:ec:39:c9:18:83:9d:aa:eb:8b:a7:44:3e:23:38:07:81: 9b:00:e8:30:70:84:95:fe:2d:05:7c:7f:e1:0a:53:ce:86:60: 65:01:5d:ea:bd:a2:51:ba:c5:97:5f:19:c4:eb:93:af:9a:e4: cd:2b:6d:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLj7qCzhAVex1Y1rwc2UOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5Mzc1YzljMDBiMTUyOWQ1NTFlZTdlMjhjNjA3MGFiNDNh MmZlNzYwHhcNMjUxMjA2MDEwMjExWhcNMjUxMjA3MDEwMjExWjAzMTEwLwYDVQQD EygxNmY5NTU4M2M0NjZjMGJhMTI1ZTdhNjJkMDJhYWQzYmJlMTQ2NTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUD/qKRH0KSIM65UVMANgE5kbfSL 7HhJMonNPP3U4DExfLZg5V4qmZk2hibEq2J0bo+zmfuarc7SoELN0POnHJdn/qrY 6zq3Sk7FIHW6rwzbXbrjDzlp5UyAJNsnfj/YW5th4yOKSBzbb+i7APWFpfJEPXT3 HHw1pnr8hlU9CSkg5HWHTS+N0MIOuxkMSfIwHZWzjZDh6F9o2oS3Y6WuL2TDvHzi 57RAzUq8Qej6XlIQkb2FNiJiGvsb2Hu/zqs6UNBbC2ke6+CD4fRSz/2bXK+A7qFD FO3TIMNVYUPkHzYCtZF3aEf6m8QUWuIj1xAU7VBd+BrA9aefUMBJeet28QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBb5VYPEZsC6El56YtAqrTu+FGUFMB8GA1UdIwQY MBaAFCk3XJwAsVKdVR7n4oxgcKtDov52MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1RkY25BQ3hVcDFWSHVmaWpHQndxME9pX25ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy83N2Y5NzctMDE1Yi00Y2FmLTg5M2Yt MDUwNGUxMTFhM2I4LzEvS1RkY25BQ3hVcDFWSHVmaWpHQndxME9pX25ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy83N2Y5NzctMDE1Yi00Y2FmLTg5M2YtMDUwNGUxMTFhM2I4 LzEvS1RkY25BQ3hVcDFWSHVmaWpHQndxME9pX25ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANF65TWGD kIFUrmf/NX+lhP0shAFHiIXv/ff5RRW0Lwrc8ako6VNJBRDKPQVycOWHCalqC7mk G4D9KyOYzQsBgEEl9iqTcwolN9Koy/4zPbdi8+FnPx4k4IUrwlPRcjcnIU8d9/1R iFFGQFLVEX1XXx8OoLQN9zu1MkFuJrCjf3mVT/zbQlia0t0LBkgm6z8itWa/grtP 0OsyNpm2EjqOqui9mTGFwk7y6lvNERriha+r4gc8fn9O3qoUWOsSgiv+k02hmSIQ joLsOckYg52q64unRD4jOAeBmwDoMHCElf4tBXx/4QpTzoZgZQFd6r2iUbrFl18Z xOuTr5rkzSttow== -----END CERTIFICATE-----Generated at Sat Dec 6 09:29:40 2025 by rpki-client