This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.mft File: KLu1TjeCbAOQsEN5J5-OBs_zojQ.mft (raw, json) Hash identifier: MeOv+NjllflImEHbzIECbZCpvyhnL/49sZ/bexAHETI= Subject key identifier: 8E:73:26:49:09:AC:F7:F2:0A:BE:A2:AB:D6:35:00:79:7F:5B:3C:EE Authority key identifier: 28:BB:B5:4E:37:82:6C:03:90:B0:43:79:27:9F:8E:06:CF:F3:A2:34 Certificate issuer: /CN=28bbb54e37826c0390b04379279f8e06cff3a234 Certificate serial: 019AF12DFD67DD547BB966F528F18E737249 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLu1TjeCbAOQsEN5J5-OBs_zojQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.mft Manifest number: 067A Signing time: Sat 06 Dec 2025 01:01:54 +0000 Manifest this update: Sat 06 Dec 2025 01:01:54 +0000 Manifest next update: Sun 07 Dec 2025 01:01:54 +0000 Files and hashes: 1: KLu1TjeCbAOQsEN5J5-OBs_zojQ.crl (hash: CaTPZOmDOxHGaWmmbIoEB0T8mbAjPtNSmoZ9VwCEeTE=) 2: N3FIvLoAi-SrbWKri-QxAJXERl0.roa (hash: oePUnAR/4Fy7x02aEJQp05kRfdkIvxnqMAYzYP5D1B0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KLu1TjeCbAOQsEN5J5-OBs_zojQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:fd:67:dd:54:7b:b9:66:f5:28:f1:8e:73:72:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28bbb54e37826c0390b04379279f8e06cff3a234 Validity Not Before: Dec 6 01:01:54 2025 GMT Not After : Dec 7 01:01:54 2025 GMT Subject: CN=8e73264909acf7f20abea2abd63500797f5b3cee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8b:60:c7:76:d6:a6:00:6a:97:35:6b:7a:28: eb:89:9f:c4:61:73:1c:3a:b8:af:44:55:18:a6:40: ea:61:39:52:63:97:00:28:6e:41:51:be:94:e1:60: b5:16:ac:8c:e3:e8:38:3a:cf:8e:42:55:86:dc:9e: 18:d9:a3:43:af:60:0f:05:29:0a:31:c7:24:1b:f4: f3:48:4f:fd:f1:87:5a:d7:ba:48:c0:47:4a:63:8a: 39:f8:00:de:1f:16:19:0a:83:15:5e:ab:03:34:d2: b2:5e:0e:09:1a:da:d1:e3:a0:74:52:bb:d6:ac:8e: ba:a3:49:92:64:8d:b5:04:4e:2d:9c:ab:36:e4:56: 3e:c8:c6:4a:27:8e:b4:78:6d:2e:a1:c0:0a:98:dc: ea:c8:55:fe:32:d4:b4:09:4f:89:59:79:95:30:21: 10:38:ee:b8:4f:7f:c9:29:08:b1:ae:a4:b8:1e:fe: ab:c6:10:ea:dc:70:d6:a0:a4:16:64:75:9e:2c:fc: ed:1d:ef:77:45:b3:30:b1:c5:b4:75:11:f1:41:48: 89:50:38:d0:23:b5:52:f1:6d:88:61:3f:4e:3f:c1: 5d:cd:e9:54:3d:ad:57:88:13:24:a4:fa:13:b2:b9: 3d:04:97:31:0d:1e:11:f6:53:74:b6:e9:81:3d:9c: 41:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:73:26:49:09:AC:F7:F2:0A:BE:A2:AB:D6:35:00:79:7F:5B:3C:EE X509v3 Authority Key Identifier: keyid:28:BB:B5:4E:37:82:6C:03:90:B0:43:79:27:9F:8E:06:CF:F3:A2:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLu1TjeCbAOQsEN5J5-OBs_zojQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:ca:07:66:54:1f:64:3e:c6:cf:91:7f:3f:55:fe:d7:3c:36: 1c:a1:bd:6a:64:66:38:09:01:c5:ba:15:cf:bd:ff:2b:a9:a9: 85:f3:64:bf:f0:20:e0:8a:bf:fc:a0:cd:d9:15:96:92:3a:c1: be:af:46:1e:07:4e:35:5e:1d:62:66:9d:45:f8:e7:48:ca:f9: dd:14:a5:f1:76:8e:ff:68:0b:09:b8:98:a2:df:29:ed:ed:af: 05:53:d1:1c:c1:0d:8b:87:6c:c7:c6:ab:44:ad:49:17:4c:46: 4e:77:f9:e0:b0:5f:52:c9:f4:f6:e9:35:c7:b6:36:be:a9:3a: 20:2a:9d:34:92:45:47:01:17:e9:0e:e4:f2:ed:2b:a2:b0:39: 97:d0:14:85:15:a9:3d:3a:e6:de:56:e3:22:61:6e:a8:ac:dc: 98:1d:b4:56:79:5a:e6:15:f4:f2:11:14:5f:51:f9:67:6e:9f: f4:fe:4e:eb:8c:5f:4b:03:e8:39:70:89:c2:7b:ac:d5:18:31: f2:a9:b4:d2:f1:c2:ee:f2:8b:10:f1:08:a9:9a:38:0e:d7:4a: ef:b9:a4:9d:88:ed:e1:0a:0c:70:3c:dd:32:89:73:74:41:40: 11:be:93:12:f3:5d:cc:40:4b:1c:52:2c:1e:12:dd:ef:37:13: 13:d4:5c:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLf1n3VR7uWb1KPGOc3JJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4YmJiNTRlMzc4MjZjMDM5MGIwNDM3OTI3OWY4ZTA2Y2Zm M2EyMzQwHhcNMjUxMjA2MDEwMTU0WhcNMjUxMjA3MDEwMTU0WjAzMTEwLwYDVQQD Eyg4ZTczMjY0OTA5YWNmN2YyMGFiZWEyYWJkNjM1MDA3OTdmNWIzY2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYtgx3bWpgBqlzVreijriZ/EYXMc OrivRFUYpkDqYTlSY5cAKG5BUb6U4WC1FqyM4+g4Os+OQlWG3J4Y2aNDr2APBSkK McckG/TzSE/98Yda17pIwEdKY4o5+ADeHxYZCoMVXqsDNNKyXg4JGtrR46B0UrvW rI66o0mSZI21BE4tnKs25FY+yMZKJ460eG0uocAKmNzqyFX+MtS0CU+JWXmVMCEQ OO64T3/JKQixrqS4Hv6rxhDq3HDWoKQWZHWeLPztHe93RbMwscW0dRHxQUiJUDjQ I7VS8W2IYT9OP8FdzelUPa1XiBMkpPoTsrk9BJcxDR4R9lN0tumBPZxBKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI5zJkkJrPfyCr6iq9Y1AHl/WzzuMB8GA1UdIwQY MBaAFCi7tU43gmwDkLBDeSefjgbP86I0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0x1MVRqZUNiQU9Rc0VONUo1LU9Cc196b2pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mZTcyOTYtZWM4Yy00MTYzLWE1NTQt NzhjMDE3NzYyZjlmLzEvS0x1MVRqZUNiQU9Rc0VONUo1LU9Cc196b2pRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9mZTcyOTYtZWM4Yy00MTYzLWE1NTQtNzhjMDE3NzYyZjlm LzEvS0x1MVRqZUNiQU9Rc0VONUo1LU9Cc196b2pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlMoHZlQf ZD7Gz5F/P1X+1zw2HKG9amRmOAkBxboVz73/K6mphfNkv/Ag4Iq//KDN2RWWkjrB vq9GHgdONV4dYmadRfjnSMr53RSl8XaO/2gLCbiYot8p7e2vBVPRHMENi4dsx8ar RK1JF0xGTnf54LBfUsn09uk1x7Y2vqk6ICqdNJJFRwEX6Q7k8u0rorA5l9AUhRWp PTrm3lbjImFuqKzcmB20Vnla5hX08hEUX1H5Z26f9P5O64xfSwPoOXCJwnus1Rgx 8qm00vHC7vKLEPEIqZo4DtdK77mknYjt4QoMcDzdMolzdEFAEb6TEvNdzEBLHFIs HhLd7zcTE9Rc+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:19 2025 by rpki-client