This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft File: kv6qMsTg4Zca0NWLFyztFyEFaFw.mft (raw, json) Hash identifier: Me3Yj7XOyDUbvLHwHmjGh1dhHe16NoyKiBoJ1OCIMZw= Subject key identifier: 33:74:93:98:F8:5B:EA:CC:72:6A:0F:7D:C0:8B:CC:50:89:8A:55:69 Authority key identifier: 92:FE:AA:32:C4:E0:E1:97:1A:D0:D5:8B:17:2C:ED:17:21:05:68:5C Certificate issuer: /CN=92feaa32c4e0e1971ad0d58b172ced172105685c Certificate serial: 019AF2765EF6CF3048CBF7BE78B03C6C4DA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kv6qMsTg4Zca0NWLFyztFyEFaFw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 07:00:34 +0000 Manifest this update: Sat 06 Dec 2025 07:00:34 +0000 Manifest next update: Sun 07 Dec 2025 07:00:34 +0000 Files and hashes: 1: kv6qMsTg4Zca0NWLFyztFyEFaFw.crl (hash: TA7LL/xJhWYsoqH7L1NYe1fGsO0drb4+8wf/eew0+9E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft rsync://rpki.ripe.net/repository/DEFAULT/kv6qMsTg4Zca0NWLFyztFyEFaFw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:5e:f6:cf:30:48:cb:f7:be:78:b0:3c:6c:4d:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92feaa32c4e0e1971ad0d58b172ced172105685c Validity Not Before: Dec 6 07:00:34 2025 GMT Not After : Dec 7 07:00:34 2025 GMT Subject: CN=33749398f85beacc726a0f7dc08bcc50898a5569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4b:5a:77:e7:4b:24:2e:bb:39:df:11:44:44: 9c:13:5b:14:1e:4d:cc:f5:e3:d1:14:bd:59:94:62: d4:61:bc:f0:ec:68:40:e2:54:5e:00:8c:78:6c:6b: 15:24:20:33:08:4f:1b:1e:d0:7b:48:fc:a4:2b:54: 96:cc:cf:70:30:5d:c7:7a:e0:b5:5b:cd:1d:dd:6c: 5c:6f:6f:bf:f6:c3:2b:8d:7c:3e:21:98:ab:18:a5: 42:84:f7:32:6f:fb:05:7b:d3:82:30:bb:65:da:6e: 71:ab:11:a4:70:bd:33:c0:29:e0:ae:38:b5:32:93: db:2e:07:6f:97:2b:12:d7:75:15:0e:e0:81:e3:2f: 5d:99:1d:0a:70:05:c0:f2:e6:19:f0:ef:ad:2a:97: a9:c5:2d:53:b3:a0:93:d1:f0:51:70:c6:6a:64:18: c5:cd:da:71:57:20:f4:8c:f5:7a:21:82:43:2d:90: 21:e5:7d:df:e4:19:0e:fd:71:63:7d:94:39:4a:e0: e3:f5:6d:f1:51:81:4e:27:eb:cd:9b:06:69:62:93: a9:22:71:e7:bb:1c:66:83:19:43:c1:b1:88:f9:f7: c7:a3:80:7c:5c:08:c3:11:1c:ae:be:9a:27:26:ea: 85:e0:4c:eb:d4:3d:fc:b6:36:3b:92:60:6f:d5:08: 50:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:74:93:98:F8:5B:EA:CC:72:6A:0F:7D:C0:8B:CC:50:89:8A:55:69 X509v3 Authority Key Identifier: keyid:92:FE:AA:32:C4:E0:E1:97:1A:D0:D5:8B:17:2C:ED:17:21:05:68:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kv6qMsTg4Zca0NWLFyztFyEFaFw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:ef:0f:fe:ef:cb:41:f9:03:cf:15:e9:4f:56:1a:26:bf:80: cd:b3:7e:32:c9:d5:c5:e7:a5:bd:f1:7f:3b:34:63:e5:35:cb: 8d:41:8d:7a:90:95:ee:d3:e1:32:35:71:d3:27:38:bb:d9:a6: 57:3b:b3:dc:a4:6c:83:ae:ef:31:6e:c7:a5:25:46:0d:08:91: 81:40:0b:9d:8f:c2:b6:25:0b:22:94:48:67:7c:8c:a1:c9:40: df:6d:73:fc:bc:81:29:34:27:3d:fb:7f:e3:af:34:db:ca:37: 46:a0:59:43:61:7e:9c:d9:a2:ed:5c:8c:42:05:a7:bc:19:6c: 1f:73:d1:55:a5:09:d3:23:ae:27:67:b7:4b:32:23:71:fd:7a: 45:6b:7f:f4:f7:93:47:56:ce:61:2e:bf:41:bf:ee:73:5a:52: b9:f6:8a:7d:4c:9f:4e:e4:3a:d9:87:c7:ef:26:db:0c:c5:0a: 20:70:91:a4:5b:33:1a:df:aa:f4:77:74:e9:80:ee:b0:87:63: 6a:1d:3b:70:21:72:9a:65:c9:1d:f4:01:d4:3a:cb:67:ff:93: ac:66:79:53:54:5c:d5:90:78:52:fb:94:d9:02:86:f6:4f:2b: 45:f4:29:2e:a5:2c:79:e1:a2:ad:1a:09:7e:b5:c9:a2:47:e3: 94:1b:d3:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydl72zzBIy/e+eLA8bE2kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZmVhYTMyYzRlMGUxOTcxYWQwZDU4YjE3MmNlZDE3MjEw NTY4NWMwHhcNMjUxMjA2MDcwMDM0WhcNMjUxMjA3MDcwMDM0WjAzMTEwLwYDVQQD EygzMzc0OTM5OGY4NWJlYWNjNzI2YTBmN2RjMDhiY2M1MDg5OGE1NTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvktad+dLJC67Od8RREScE1sUHk3M 9ePRFL1ZlGLUYbzw7GhA4lReAIx4bGsVJCAzCE8bHtB7SPykK1SWzM9wMF3HeuC1 W80d3Wxcb2+/9sMrjXw+IZirGKVChPcyb/sFe9OCMLtl2m5xqxGkcL0zwCngrji1 MpPbLgdvlysS13UVDuCB4y9dmR0KcAXA8uYZ8O+tKpepxS1Ts6CT0fBRcMZqZBjF zdpxVyD0jPV6IYJDLZAh5X3f5BkO/XFjfZQ5SuDj9W3xUYFOJ+vNmwZpYpOpInHn uxxmgxlDwbGI+ffHo4B8XAjDERyuvponJuqF4Ezr1D38tjY7kmBv1QhQqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDN0k5j4W+rMcmoPfcCLzFCJilVpMB8GA1UdIwQY MBaAFJL+qjLE4OGXGtDVixcs7RchBWhcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3Y2cU1zVGc0WmNhME5XTEZ5enRGeUVGYUZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9kZjc2ZWEtZjc1Zi00ZWYzLTgwNmEt MDVlYTIyZGRkNzIzLzEva3Y2cU1zVGc0WmNhME5XTEZ5enRGeUVGYUZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9kZjc2ZWEtZjc1Zi00ZWYzLTgwNmEtMDVlYTIyZGRkNzIz LzEva3Y2cU1zVGc0WmNhME5XTEZ5enRGeUVGYUZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAae8P/u/L QfkDzxXpT1YaJr+AzbN+MsnVxeelvfF/OzRj5TXLjUGNepCV7tPhMjVx0yc4u9mm Vzuz3KRsg67vMW7HpSVGDQiRgUALnY/CtiULIpRIZ3yMoclA321z/LyBKTQnPft/ 468028o3RqBZQ2F+nNmi7VyMQgWnvBlsH3PRVaUJ0yOuJ2e3SzIjcf16RWt/9PeT R1bOYS6/Qb/uc1pSufaKfUyfTuQ62YfH7ybbDMUKIHCRpFszGt+q9Hd06YDusIdj ah07cCFymmXJHfQB1DrLZ/+TrGZ5U1Rc1ZB4UvuU2QKG9k8rRfQpLqUseeGirRoJ frXJokfjlBvTqA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:33:39 2025 by rpki-client