This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft File: KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft (raw, json) Hash identifier: 0T1mtpZAz9ptJMx6GMOpYZmewtlJUdbhuA0M/uAE4XM= Subject key identifier: 81:A2:3F:BB:0D:FB:B0:7A:32:4B:70:05:8F:63:55:E1:1B:AC:85:B3 Authority key identifier: 29:85:1F:7A:E6:10:B1:D0:06:15:00:B3:43:A4:86:8F:32:56:06:6E Certificate issuer: /CN=29851f7ae610b1d0061500b343a4868f3256066e Certificate serial: 019AF19B9DD533C03ECE4500149F0801DD04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft Manifest number: 07FC Signing time: Sat 06 Dec 2025 03:01:38 +0000 Manifest this update: Sat 06 Dec 2025 03:01:38 +0000 Manifest next update: Sun 07 Dec 2025 03:01:38 +0000 Files and hashes: 1: JCxOuTIjLujlao5I9hrb5gQegGo.roa (hash: SDv0FBjSKSZUTMpJ38YSkos63s4YQ/vsV3WiI+cz/dg=) 2: KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl (hash: kqoA9ghtSbmK9+RcjdLe9I2cS8V0VszgLWTRrpxJeGE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:9d:d5:33:c0:3e:ce:45:00:14:9f:08:01:dd:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29851f7ae610b1d0061500b343a4868f3256066e Validity Not Before: Dec 6 03:01:38 2025 GMT Not After : Dec 7 03:01:38 2025 GMT Subject: CN=81a23fbb0dfbb07a324b70058f6355e11bac85b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:78:43:e5:3e:47:00:59:e5:73:98:a2:d4:ed: 25:14:86:08:a1:f8:03:44:b8:a7:d3:1c:d0:33:11: fe:a1:6a:4a:d5:4e:74:2e:ee:26:16:56:45:6f:fd: 67:a2:64:38:ed:a8:22:e7:ef:ac:22:6f:8b:7c:98: 70:50:2f:7d:ea:61:13:72:7f:0e:c4:bc:f7:36:45: 9f:86:d0:4a:e0:a3:87:6f:13:4b:b5:af:b7:74:22: 3a:86:14:b5:96:a4:f3:dc:0f:ca:0e:f4:f2:47:5e: 15:b0:15:25:ea:cc:b4:60:dc:1a:94:ba:18:85:32: e6:d1:7b:06:3a:2a:5f:a6:66:4e:3f:e4:92:2b:ac: 0c:0d:39:49:b9:23:f4:21:ec:e7:c5:08:c9:3d:7d: f8:d9:89:64:13:95:82:87:b3:43:7a:b0:1e:94:94: 81:6b:97:eb:5e:30:48:45:f5:f7:59:1e:1b:73:3b: 4c:e5:ae:97:e7:c0:3a:39:af:f2:95:7e:74:8a:98: 9b:5e:ac:86:64:3c:6a:58:0f:4d:0b:7e:6c:87:66: 27:98:43:19:52:2b:50:fc:21:68:1b:a0:05:06:a4: 23:88:aa:1d:5c:46:89:52:0f:9f:81:4a:b4:02:11: 1b:d9:e0:b7:86:b8:2f:04:d7:0a:56:99:84:ed:c6: 40:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A2:3F:BB:0D:FB:B0:7A:32:4B:70:05:8F:63:55:E1:1B:AC:85:B3 X509v3 Authority Key Identifier: keyid:29:85:1F:7A:E6:10:B1:D0:06:15:00:B3:43:A4:86:8F:32:56:06:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:67:df:a6:62:4d:49:5c:79:71:c2:5f:27:e7:96:c9:74:9a: 89:fa:c8:6f:63:c2:6d:0c:b5:3d:af:c5:38:e5:18:0f:b5:b5: 5c:76:fe:d4:52:87:c6:a5:9d:26:52:a5:06:ff:5e:4a:4e:69: 0d:11:03:74:7b:21:16:32:9e:34:b4:3a:e2:74:4e:9c:57:dd: 5f:31:14:3a:3b:15:49:c2:c3:55:58:b9:09:9b:fb:33:71:75: ed:73:8d:9a:f5:87:d1:a0:21:17:7e:48:dc:3b:73:ac:c9:c5: 85:17:67:72:30:f0:4e:25:38:ce:45:a3:74:af:cb:6d:4d:af: 89:92:cb:f6:59:65:90:6d:a7:6d:c1:03:f7:dd:e0:9a:83:c9: 6a:3f:c9:a9:04:f5:a8:d2:1a:5b:0f:bc:4d:e7:89:ea:57:b9: ec:7b:e8:48:06:19:03:dd:c2:cf:5d:17:e6:5c:13:19:da:53: a9:dc:93:cb:f8:c2:7b:49:48:72:b5:58:63:0d:b9:73:32:69: 0a:1e:70:7c:c0:49:33:cd:0e:7f:4a:58:50:c0:d9:22:7b:9f: 8e:6c:28:a0:6a:41:e2:7f:da:ff:1e:35:43:60:ff:8d:07:fe: d0:c3:ac:44:1e:78:f2:85:62:4f:d1:9b:79:6e:35:e5:65:60: f2:70:40:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm53VM8A+zkUAFJ8IAd0EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ODUxZjdhZTYxMGIxZDAwNjE1MDBiMzQzYTQ4NjhmMzI1 NjA2NmUwHhcNMjUxMjA2MDMwMTM4WhcNMjUxMjA3MDMwMTM4WjAzMTEwLwYDVQQD Eyg4MWEyM2ZiYjBkZmJiMDdhMzI0YjcwMDU4ZjYzNTVlMTFiYWM4NWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXhD5T5HAFnlc5ii1O0lFIYIofgD RLin0xzQMxH+oWpK1U50Lu4mFlZFb/1nomQ47agi5++sIm+LfJhwUC996mETcn8O xLz3NkWfhtBK4KOHbxNLta+3dCI6hhS1lqTz3A/KDvTyR14VsBUl6sy0YNwalLoY hTLm0XsGOipfpmZOP+SSK6wMDTlJuSP0IeznxQjJPX342YlkE5WCh7NDerAelJSB a5frXjBIRfX3WR4bcztM5a6X58A6Oa/ylX50ipibXqyGZDxqWA9NC35sh2YnmEMZ UitQ/CFoG6AFBqQjiKodXEaJUg+fgUq0AhEb2eC3hrgvBNcKVpmE7cZAUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIGiP7sN+7B6MktwBY9jVeEbrIWzMB8GA1UdIwQY MBaAFCmFH3rmELHQBhUAs0Okho8yVgZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1lVZmV1WVFzZEFHRlFDelE2U0dqekpXQm00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84MjQ2NTItNTZlNC00YmU1LTliZTMt ZDA0ZGVkN2RlZDAwLzEvS1lVZmV1WVFzZEFHRlFDelE2U0dqekpXQm00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84MjQ2NTItNTZlNC00YmU1LTliZTMtZDA0ZGVkN2RlZDAw LzEvS1lVZmV1WVFzZEFHRlFDelE2U0dqekpXQm00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPGffpmJN SVx5ccJfJ+eWyXSaifrIb2PCbQy1Pa/FOOUYD7W1XHb+1FKHxqWdJlKlBv9eSk5p DREDdHshFjKeNLQ64nROnFfdXzEUOjsVScLDVVi5CZv7M3F17XONmvWH0aAhF35I 3DtzrMnFhRdncjDwTiU4zkWjdK/LbU2viZLL9lllkG2nbcED993gmoPJaj/JqQT1 qNIaWw+8TeeJ6le57HvoSAYZA93Cz10X5lwTGdpTqdyTy/jCe0lIcrVYYw25czJp Ch5wfMBJM80Of0pYUMDZInufjmwooGpB4n/a/x41Q2D/jQf+0MOsRB548oViT9Gb eW415WVg8nBAyA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:32:28 2025 by rpki-client