This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft File: S-kta__jOfozYb97dSNWcWpq2Ao.mft (raw, json) Hash identifier: x9yYfdhdwOzvudnZn0Eg4w568YIyKwv4KD+e6dmJJmw= Subject key identifier: 49:9A:F2:E6:2E:69:73:1D:09:E9:73:90:77:89:D7:06:A1:6F:62:5B Authority key identifier: 4B:E9:2D:6B:FF:E3:39:FA:33:61:BF:7B:75:23:56:71:6A:6A:D8:0A Certificate issuer: /CN=4be92d6bffe339fa3361bf7b752356716a6ad80a Certificate serial: 019B30E89EB0CC6C58E090621B5781B9D04B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-kta__jOfozYb97dSNWcWpq2Ao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft Manifest number: 06F0 Signing time: Thu 18 Dec 2025 10:01:49 +0000 Manifest this update: Thu 18 Dec 2025 10:01:49 +0000 Manifest next update: Fri 19 Dec 2025 10:01:49 +0000 Files and hashes: 1: S-kta__jOfozYb97dSNWcWpq2Ao.crl (hash: g9g7OLjI4ySI6huYRJYTnewhMRfY1dDvCVvYfw0LDGA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft rsync://rpki.ripe.net/repository/DEFAULT/S-kta__jOfozYb97dSNWcWpq2Ao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:9e:b0:cc:6c:58:e0:90:62:1b:57:81:b9:d0:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4be92d6bffe339fa3361bf7b752356716a6ad80a Validity Not Before: Dec 18 10:01:49 2025 GMT Not After : Dec 19 10:01:49 2025 GMT Subject: CN=499af2e62e69731d09e973907789d706a16f625b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f8:16:44:be:6a:a2:35:bf:14:24:5c:92:aa: 58:d6:40:72:a8:a3:e0:2e:8c:54:07:49:f4:4e:5c: cc:fd:86:0e:27:52:15:b0:80:0d:1c:eb:b5:a9:a7: 22:4b:bc:76:c4:ff:7f:89:93:5f:e0:19:c9:cb:a9: b6:1b:86:ff:86:2f:71:ef:f2:0d:f2:5e:e9:ee:13: 70:43:f4:87:2a:98:d9:48:e8:9a:c9:26:09:97:74: 79:18:10:d9:76:d9:ee:0a:fb:70:b2:8c:0b:97:9f: 2e:3f:64:81:b9:40:0b:30:96:f4:35:e3:bc:09:cf: ef:55:5b:48:cd:65:46:29:c1:2f:67:55:b6:0c:dd: 7e:c4:7f:04:f8:40:a9:08:a9:30:b9:cc:28:c1:47: 52:18:1a:06:4d:56:d8:1d:52:81:bd:47:68:74:0c: b5:03:f8:85:74:6d:c8:d0:02:45:d2:69:1c:c4:35: 57:27:59:bd:3c:c7:9d:9b:a0:3c:2d:7c:de:c1:e0: 30:0b:26:91:04:17:04:a8:94:f8:f4:9f:34:8f:77: 43:79:af:7f:42:21:92:ca:b9:79:6b:f8:55:71:59: fe:33:75:16:37:51:47:e7:27:3c:0a:2c:38:58:32: ee:0b:1a:19:17:c3:8c:26:12:7a:7c:1b:9a:fd:28: 87:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:9A:F2:E6:2E:69:73:1D:09:E9:73:90:77:89:D7:06:A1:6F:62:5B X509v3 Authority Key Identifier: keyid:4B:E9:2D:6B:FF:E3:39:FA:33:61:BF:7B:75:23:56:71:6A:6A:D8:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-kta__jOfozYb97dSNWcWpq2Ao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:26:e9:2c:45:9a:42:35:25:9b:81:38:e5:f2:d6:24:9f:80: fd:09:0a:8a:ed:83:ab:ee:d7:87:ea:eb:36:09:65:97:2e:ff: e9:94:c4:77:1b:65:0d:a9:45:42:b8:75:bf:b3:14:a1:4b:5d: ab:9f:7c:3e:14:27:83:d6:00:09:76:00:b9:5b:3e:43:7f:cf: e7:49:67:b7:94:07:2c:40:02:a1:10:85:51:3e:ce:2f:e9:cd: c6:c9:72:a6:a9:e6:6a:f1:d6:d1:94:b3:81:06:8f:b3:16:ee: ef:01:68:b9:53:0a:d4:79:c7:2d:4c:d1:ca:d9:3f:b8:d9:13: a4:d8:35:04:e0:e5:08:f1:f0:bd:3b:ec:41:ca:31:86:ce:88: f6:7e:8f:74:09:93:65:64:43:f3:87:cf:9e:81:8f:ee:ad:f7: dd:11:d5:df:b7:b7:03:ac:ec:9e:34:17:f6:44:bd:64:bd:33: 92:e9:44:bf:37:e5:3e:75:ad:5b:46:b8:03:73:c8:7a:e8:4b: 72:7f:ac:fe:e0:fb:43:d8:5c:89:1d:b7:7d:d6:49:c5:01:81: 21:ef:8a:c5:3a:4b:20:0f:bc:4d:12:e7:4a:3c:49:76:1a:78: 00:22:ec:cf:10:4c:ad:e4:35:6c:06:fe:9d:53:fa:4d:80:fa: da:1f:4d:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6J6wzGxY4JBiG1eBudBLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZTkyZDZiZmZlMzM5ZmEzMzYxYmY3Yjc1MjM1NjcxNmE2 YWQ4MGEwHhcNMjUxMjE4MTAwMTQ5WhcNMjUxMjE5MTAwMTQ5WjAzMTEwLwYDVQQD Eyg0OTlhZjJlNjJlNjk3MzFkMDllOTczOTA3Nzg5ZDcwNmExNmY2MjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPgWRL5qojW/FCRckqpY1kByqKPg LoxUB0n0TlzM/YYOJ1IVsIANHOu1qaciS7x2xP9/iZNf4BnJy6m2G4b/hi9x7/IN 8l7p7hNwQ/SHKpjZSOiaySYJl3R5GBDZdtnuCvtwsowLl58uP2SBuUALMJb0NeO8 Cc/vVVtIzWVGKcEvZ1W2DN1+xH8E+ECpCKkwucwowUdSGBoGTVbYHVKBvUdodAy1 A/iFdG3I0AJF0mkcxDVXJ1m9PMedm6A8LXzeweAwCyaRBBcEqJT49J80j3dDea9/ QiGSyrl5a/hVcVn+M3UWN1FH5yc8Ciw4WDLuCxoZF8OMJhJ6fBua/SiHeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEma8uYuaXMdCelzkHeJ1wahb2JbMB8GA1UdIwQY MBaAFEvpLWv/4zn6M2G/e3UjVnFqatgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUy1rdGFfX2pPZm96WWI5N2RTTldjV3BxMkFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9jYzcwNTgtOTVjNC00OTBiLTlmMTIt NTg3MDA2NGQ4MWI3LzEvUy1rdGFfX2pPZm96WWI5N2RTTldjV3BxMkFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9jYzcwNTgtOTVjNC00OTBiLTlmMTItNTg3MDA2NGQ4MWI3 LzEvUy1rdGFfX2pPZm96WWI5N2RTTldjV3BxMkFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKSbpLEWa QjUlm4E45fLWJJ+A/QkKiu2Dq+7Xh+rrNgllly7/6ZTEdxtlDalFQrh1v7MUoUtd q598PhQng9YACXYAuVs+Q3/P50lnt5QHLEACoRCFUT7OL+nNxslypqnmavHW0ZSz gQaPsxbu7wFouVMK1HnHLUzRytk/uNkTpNg1BODlCPHwvTvsQcoxhs6I9n6PdAmT ZWRD84fPnoGP7q333RHV37e3A6zsnjQX9kS9ZL0zkulEvzflPnWtW0a4A3PIeuhL cn+s/uD7Q9hciR23fdZJxQGBIe+KxTpLIA+8TRLnSjxJdhp4ACLszxBMreQ1bAb+ nVP6TYD62h9NKA== -----END CERTIFICATE-----Generated at Thu Dec 18 12:49:18 2025 by rpki-client