This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft File: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft (raw, json) Hash identifier: w4Z8WzHVi8zBQfddJiqrF50I94n2ceJUrmvTpdQ0FVE= Subject key identifier: 68:B2:98:63:DA:8D:F0:91:9F:C8:36:C6:B1:ED:F8:AC:9A:10:9E:01 Authority key identifier: 29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0 Certificate issuer: /CN=29390ec0adca5f0743d181145c7899f991fb65e0 Certificate serial: 019AF2768C20B879861AC3589C983BAB15D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 07:00:46 +0000 Manifest this update: Sat 06 Dec 2025 07:00:46 +0000 Manifest next update: Sun 07 Dec 2025 07:00:46 +0000 Files and hashes: 1: 4AoUOv0FI3bJOWNB03o-fqag36g.roa (hash: lE0wM7qhSogQ0qa/Rafsku4glOJqw2l70ocwo2WeE/c=) 2: ArxGq_kltFKX5YUm3DRNAjYGQGc.roa (hash: 5XM5lzW30JX9FmEqPAciFGZ+SNFRk053GOf+9YREVN4=) 3: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl (hash: 4p9sENcKpUehxW28GCkRxITbhrrJdypYuKA4/PyyyHY=) 4: ksEVVLS3M5w1AKi-nF72xAY7y7o.roa (hash: z5VVyVNSP1G0pwH68pGPs7a4UWtVv2Td4kN9zQtymP4=) 5: xnJga-iVwigHTsD-dtkf_nC-qeI.roa (hash: GsXHxv2wkqRmHr0aWFfubv19P/bPTlYuX8bNACGOcog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:8c:20:b8:79:86:1a:c3:58:9c:98:3b:ab:15:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29390ec0adca5f0743d181145c7899f991fb65e0 Validity Not Before: Dec 6 07:00:46 2025 GMT Not After : Dec 7 07:00:46 2025 GMT Subject: CN=68b29863da8df0919fc836c6b1edf8ac9a109e01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1d:5f:b1:68:cb:13:13:a3:f7:fe:30:59:5f: 19:d2:96:57:99:1b:f5:32:d1:7c:c9:a7:fe:f2:38: 47:b6:ab:40:55:99:28:b1:4b:0e:d0:5c:3e:6a:e7: ff:cb:e4:7a:31:ec:f8:06:49:2e:a1:85:20:47:a2: ed:92:b2:be:31:63:2a:9a:2b:15:58:70:e4:1f:3c: 49:2a:43:90:d7:25:09:ee:3f:ab:33:28:7c:98:43: 37:88:6d:44:c3:61:1d:94:a7:51:8d:b9:0d:8d:1c: 7d:17:8f:25:3f:09:b0:c8:eb:6f:33:27:19:be:2b: 20:6b:ad:8b:c0:76:7d:b4:80:c3:90:e7:4e:85:b1: 26:64:27:33:f1:a0:3c:ad:12:c5:99:62:11:00:f0: 44:87:c2:a1:de:24:42:83:5b:57:50:e7:15:5c:6f: ec:34:70:9a:33:0a:23:64:98:db:45:87:2c:12:83: 1b:f6:77:a5:4f:ba:1c:b3:e1:02:e3:7b:35:47:0b: f8:6d:1e:a6:75:42:34:4a:24:a0:30:7c:a1:6f:48: 8d:ff:ad:5a:b3:07:71:0d:26:12:d8:47:bf:1b:cc: ff:1c:db:c7:a4:da:99:b7:28:3c:88:ff:56:bd:2d: bf:3b:f0:85:04:e1:d0:4d:8e:e9:67:c7:9b:ee:18: db:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B2:98:63:DA:8D:F0:91:9F:C8:36:C6:B1:ED:F8:AC:9A:10:9E:01 X509v3 Authority Key Identifier: keyid:29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:98:cf:de:7b:09:df:88:53:42:4f:15:f3:b7:42:bc:7b:d7: ab:89:0f:e4:ab:fa:f1:29:dc:9e:97:7e:80:cd:e6:fe:38:a1: 7e:7c:58:95:cf:fa:f0:f7:10:ae:a4:55:ea:b9:fa:b1:41:e0: 37:e6:34:a9:1a:a0:e2:b4:56:e2:ba:c7:93:81:8f:80:57:dc: 81:aa:28:62:17:72:33:fd:ce:79:2c:47:83:73:55:7d:80:80: ff:e7:bd:ed:ec:c5:43:7e:33:4d:32:a1:3a:16:03:d0:fd:a7: 2c:bd:85:e7:9d:93:38:ee:6d:d1:08:1d:67:c9:53:8f:ee:9b: cc:1f:52:33:e9:2d:0f:e0:03:5a:99:87:0f:62:b3:32:7c:2f: c3:aa:ae:70:5e:87:4b:c5:6f:7c:3b:14:a0:23:a1:3b:fe:c5: 91:74:05:1b:ef:67:13:3d:88:05:7f:b0:1c:c4:52:08:20:70: f9:52:3b:35:8b:3b:c7:02:bc:ed:3c:06:8c:1d:f4:6f:32:e9: 04:3f:3e:6a:c8:63:b5:64:b4:91:1f:dd:f9:81:33:26:fa:38: be:55:41:9e:25:cf:0e:5e:73:42:e8:67:e9:c5:0b:64:af:51: 0e:42:df:b0:11:e1:56:a6:2b:aa:6a:f6:d8:8b:14:18:94:6f: 5a:4c:5f:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydowguHmGGsNYnJg7qxXWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MzkwZWMwYWRjYTVmMDc0M2QxODExNDVjNzg5OWY5OTFm YjY1ZTAwHhcNMjUxMjA2MDcwMDQ2WhcNMjUxMjA3MDcwMDQ2WjAzMTEwLwYDVQQD Eyg2OGIyOTg2M2RhOGRmMDkxOWZjODM2YzZiMWVkZjhhYzlhMTA5ZTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAth1fsWjLExOj9/4wWV8Z0pZXmRv1 MtF8yaf+8jhHtqtAVZkosUsO0Fw+auf/y+R6Mez4BkkuoYUgR6LtkrK+MWMqmisV WHDkHzxJKkOQ1yUJ7j+rMyh8mEM3iG1Ew2EdlKdRjbkNjRx9F48lPwmwyOtvMycZ visga62LwHZ9tIDDkOdOhbEmZCcz8aA8rRLFmWIRAPBEh8Kh3iRCg1tXUOcVXG/s NHCaMwojZJjbRYcsEoMb9nelT7ocs+EC43s1Rwv4bR6mdUI0SiSgMHyhb0iN/61a swdxDSYS2Ee/G8z/HNvHpNqZtyg8iP9WvS2/O/CFBOHQTY7pZ8eb7hjbuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGiymGPajfCRn8g2xrHt+KyaEJ4BMB8GA1UdIwQY MBaAFCk5DsCtyl8HQ9GBFFx4mfmR+2XgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9iMzEzOTItMmQxYy00OTM0LWE1OWUt ZWQ0MzNhYWM3ODI4LzEvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9iMzEzOTItMmQxYy00OTM0LWE1OWUtZWQ0MzNhYWM3ODI4 LzEvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqpjP3nsJ 34hTQk8V87dCvHvXq4kP5Kv68Sncnpd+gM3m/jihfnxYlc/68PcQrqRV6rn6sUHg N+Y0qRqg4rRW4rrHk4GPgFfcgaooYhdyM/3OeSxHg3NVfYCA/+e97ezFQ34zTTKh OhYD0P2nLL2F552TOO5t0QgdZ8lTj+6bzB9SM+ktD+ADWpmHD2KzMnwvw6qucF6H S8VvfDsUoCOhO/7FkXQFG+9nEz2IBX+wHMRSCCBw+VI7NYs7xwK87TwGjB30bzLp BD8+ashjtWS0kR/d+YEzJvo4vlVBniXPDl5zQuhn6cULZK9RDkLfsBHhVqYrqmr2 2IsUGJRvWkxffg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:21:33 2025 by rpki-client