This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft File: KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft (raw, json) Hash identifier: IA3SCfDD++yXxRTkjB0yJkUfbVWC6hjN+fKb7gZK1GI= Subject key identifier: 8F:15:C6:CC:45:51:27:04:3F:0A:E3:90:05:41:C8:05:9D:F8:02:34 Authority key identifier: 28:CB:66:1A:64:39:68:F3:F8:1E:7B:11:9E:EB:96:C5:0D:2D:39:C7 Certificate issuer: /CN=28cb661a643968f3f81e7b119eeb96c50d2d39c7 Certificate serial: 019AF0BF29CE6048A78181D987C49C507496 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft Manifest number: 1507 Signing time: Fri 05 Dec 2025 23:00:51 +0000 Manifest this update: Fri 05 Dec 2025 23:00:51 +0000 Manifest next update: Sat 06 Dec 2025 23:00:51 +0000 Files and hashes: 1: 3tngVW8LtfBpGAaHjHlOFUm8OH8.roa (hash: aEmicBF+rkX/VE/VudL8BN7DqijXENPur1ReRDbdgFc=) 2: KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl (hash: Ft3Whenj7+eaOySOHpCVVs479NglR7sbQpjxiF+8hYI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:29:ce:60:48:a7:81:81:d9:87:c4:9c:50:74:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28cb661a643968f3f81e7b119eeb96c50d2d39c7 Validity Not Before: Dec 5 23:00:51 2025 GMT Not After : Dec 6 23:00:51 2025 GMT Subject: CN=8f15c6cc455127043f0ae3900541c8059df80234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ca:46:e5:7c:3e:a3:c8:fa:da:f0:49:4c:dd: 41:b1:04:4e:47:8a:53:69:d2:e9:e0:d5:f7:74:55: 6e:c6:c6:95:84:28:3a:6c:d7:a2:04:e2:82:18:2e: 90:65:c0:f9:52:32:4b:73:66:f3:d0:ad:8e:cd:c0: 69:aa:f2:c5:f2:d1:b3:f4:69:5e:2f:01:bc:d6:58: b1:8c:f5:fd:2d:ca:3b:05:8d:5d:5d:4e:fb:1c:4f: 57:74:bd:25:eb:62:51:f5:64:e0:b4:74:9f:2a:9f: f8:18:ac:b9:be:fe:51:12:c0:cb:b4:b3:3a:20:d0: 0c:82:e3:7b:11:09:65:1c:74:65:a3:e3:75:95:c4: 75:f2:ff:51:92:62:d2:e1:95:21:cb:de:fc:ec:85: 73:f4:fa:19:f8:c7:ab:eb:af:d9:07:80:09:41:14: 16:72:2b:99:f3:fa:f3:d4:3e:61:0b:31:e7:60:98: b6:ce:00:e4:22:2c:74:df:dd:64:fa:46:7a:45:01: b0:74:cf:64:ec:6d:15:a4:18:6b:49:e0:37:ba:9a: cf:bb:21:13:18:bf:c4:16:28:31:bc:6d:a2:5b:ae: 1a:8c:67:b8:1f:75:67:8e:d8:52:ba:9a:11:21:62: 6b:7b:49:42:b1:c6:c9:54:fd:9f:88:58:4b:a6:38: 69:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:15:C6:CC:45:51:27:04:3F:0A:E3:90:05:41:C8:05:9D:F8:02:34 X509v3 Authority Key Identifier: keyid:28:CB:66:1A:64:39:68:F3:F8:1E:7B:11:9E:EB:96:C5:0D:2D:39:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:33:9d:47:b3:90:ff:b2:b3:72:90:bd:28:76:93:d6:36:84: 6b:0d:e9:1c:60:72:06:0a:c2:e6:c8:9c:63:40:26:db:50:fb: c3:af:cd:d4:6e:f6:81:da:90:dd:4a:61:c7:ca:dd:d9:0c:88: 52:fc:b7:c2:b3:6e:15:25:1b:eb:05:99:7b:85:9c:97:2f:71: af:8a:ab:20:21:5e:77:75:bd:ed:d1:26:e5:3e:03:55:f7:30: a8:11:eb:c0:65:dd:e0:25:3f:bf:35:7e:dc:fd:6d:c7:32:83: 7e:83:20:5e:9d:61:b2:b2:ed:be:26:86:9f:84:2f:c6:73:86: b3:cb:d8:e5:88:1e:90:e5:54:20:a6:e8:39:3c:8f:01:e4:1c: cf:0b:7e:61:4f:cb:cc:30:32:5a:27:d9:34:71:74:38:75:d1: 07:97:9a:da:15:92:e0:3f:80:01:8a:52:77:c8:80:2f:c5:d5: 10:20:5c:5b:f5:8d:fc:a3:fb:2c:28:ab:f3:75:e6:27:f8:74: 74:ae:b8:3f:41:38:50:1e:18:55:60:dd:d1:3b:f5:dc:16:13: 77:71:0c:d1:c7:89:e2:96:87:4e:b6:e8:71:ca:ac:45:cf:61: 4c:03:09:43:57:dc:7b:61:96:82:0f:45:94:77:7e:e8:2d:f8: 62:f7:02:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvynOYEingYHZh8ScUHSWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4Y2I2NjFhNjQzOTY4ZjNmODFlN2IxMTllZWI5NmM1MGQy ZDM5YzcwHhcNMjUxMjA1MjMwMDUxWhcNMjUxMjA2MjMwMDUxWjAzMTEwLwYDVQQD Eyg4ZjE1YzZjYzQ1NTEyNzA0M2YwYWUzOTAwNTQxYzgwNTlkZjgwMjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8pG5Xw+o8j62vBJTN1BsQROR4pT adLp4NX3dFVuxsaVhCg6bNeiBOKCGC6QZcD5UjJLc2bz0K2OzcBpqvLF8tGz9Gle LwG81lixjPX9Lco7BY1dXU77HE9XdL0l62JR9WTgtHSfKp/4GKy5vv5REsDLtLM6 INAMguN7EQllHHRlo+N1lcR18v9RkmLS4ZUhy9787IVz9PoZ+Mer66/ZB4AJQRQW ciuZ8/rz1D5hCzHnYJi2zgDkIix0391k+kZ6RQGwdM9k7G0VpBhrSeA3uprPuyET GL/EFigxvG2iW64ajGe4H3VnjthSupoRIWJre0lCscbJVP2fiFhLpjhpJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI8VxsxFUScEPwrjkAVByAWd+AI0MB8GA1UdIwQY MBaAFCjLZhpkOWjz+B57EZ7rlsUNLTnHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS010bUdtUTVhUFA0SG5zUm51dVd4UTB0T2NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yNzZiZjctN2ExNS00YzU2LWFjNTYt N2Q0ZTY4ZGQ0Y2NlLzEvS010bUdtUTVhUFA0SG5zUm51dVd4UTB0T2NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8yNzZiZjctN2ExNS00YzU2LWFjNTYtN2Q0ZTY4ZGQ0Y2Nl LzEvS010bUdtUTVhUFA0SG5zUm51dVd4UTB0T2NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAATOdR7OQ /7KzcpC9KHaT1jaEaw3pHGByBgrC5sicY0Am21D7w6/N1G72gdqQ3Uphx8rd2QyI Uvy3wrNuFSUb6wWZe4Wcly9xr4qrICFed3W97dEm5T4DVfcwqBHrwGXd4CU/vzV+ 3P1txzKDfoMgXp1hsrLtviaGn4QvxnOGs8vY5YgekOVUIKboOTyPAeQczwt+YU/L zDAyWifZNHF0OHXRB5ea2hWS4D+AAYpSd8iAL8XVECBcW/WN/KP7LCir83XmJ/h0 dK64P0E4UB4YVWDd0Tv13BYTd3EM0ceJ4paHTrboccqsRc9hTAMJQ1fce2GWgg9F lHd+6C34YvcC1g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:13:54 2025 by rpki-client