This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft File: S-kta__jOfozYb97dSNWcWpq2Ao.mft (raw, json) Hash identifier: ELsZFuQ+LBDSM+F8BZNwAL8REuDVjFeu5xrjUegZs64= Subject key identifier: 60:C6:C4:E0:F1:06:24:10:3E:DC:D2:50:52:43:DE:8C:73:95:8A:6F Authority key identifier: 4B:E9:2D:6B:FF:E3:39:FA:33:61:BF:7B:75:23:56:71:6A:6A:D8:0A Certificate issuer: /CN=4be92d6bffe339fa3361bf7b752356716a6ad80a Certificate serial: 019AF31C19FAF79AD86A708A97FE19DD4B93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-kta__jOfozYb97dSNWcWpq2Ao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft Manifest number: 06D0 Signing time: Sat 06 Dec 2025 10:01:36 +0000 Manifest this update: Sat 06 Dec 2025 10:01:36 +0000 Manifest next update: Sun 07 Dec 2025 10:01:36 +0000 Files and hashes: 1: S-kta__jOfozYb97dSNWcWpq2Ao.crl (hash: 86g9SGCz2XBeRivPxWJ4WTigSbLypRUV4VW9nC46V9Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft rsync://rpki.ripe.net/repository/DEFAULT/S-kta__jOfozYb97dSNWcWpq2Ao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:19:fa:f7:9a:d8:6a:70:8a:97:fe:19:dd:4b:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4be92d6bffe339fa3361bf7b752356716a6ad80a Validity Not Before: Dec 6 10:01:36 2025 GMT Not After : Dec 7 10:01:36 2025 GMT Subject: CN=60c6c4e0f10624103edcd2505243de8c73958a6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:27:48:da:6c:5d:50:2b:97:a8:9c:3d:ed:58: 08:45:13:8e:ff:75:bb:c9:05:f4:08:58:f0:72:ff: 54:b4:31:e8:ed:51:1d:ad:44:cf:34:46:a2:fc:c2: c6:6b:61:33:db:c6:e9:10:79:93:bf:e7:04:48:4d: 7f:82:83:3e:b9:1f:90:34:05:49:5e:74:82:6c:5c: 9e:fc:87:d1:c0:5e:0f:31:2e:3d:93:af:17:27:04: 5c:8a:cd:0b:be:eb:6d:87:44:ac:82:61:df:f7:fe: c8:33:79:f5:f6:c8:15:56:bb:d9:09:6a:be:4d:55: 59:c9:2d:eb:ed:2d:3a:63:76:64:70:16:69:bd:ca: 3d:f8:22:3f:90:d5:90:81:e8:f1:67:f9:c0:f5:28: 21:d0:ad:49:68:28:7a:c0:66:03:a1:20:87:1e:9f: 9d:1a:0c:c0:c6:2f:2b:1c:5f:fd:ee:0a:68:21:9e: 3e:28:4c:2d:f5:e9:4d:5a:7d:54:a6:dc:f1:64:0b: f6:cb:5d:56:08:0d:ba:e3:74:79:39:3e:3a:f3:03: 6f:95:c3:4f:ab:89:de:c1:87:a4:fb:6f:b3:4d:2c: 5b:c8:f0:52:e1:ea:d9:98:bf:13:4f:0e:85:fc:c5: 7d:8e:5c:25:ca:99:9e:b3:58:a6:76:82:70:e9:43: ca:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C6:C4:E0:F1:06:24:10:3E:DC:D2:50:52:43:DE:8C:73:95:8A:6F X509v3 Authority Key Identifier: keyid:4B:E9:2D:6B:FF:E3:39:FA:33:61:BF:7B:75:23:56:71:6A:6A:D8:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-kta__jOfozYb97dSNWcWpq2Ao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:e4:19:c9:26:f0:b2:de:38:18:5d:92:c9:b4:85:65:8a:37: c1:4c:9b:47:1c:8a:46:3e:8d:79:7a:09:31:98:72:e5:18:1f: c2:8e:89:a5:32:e2:cb:1d:88:14:b4:37:7d:0e:e1:ea:e4:c2: 11:5c:98:8f:7a:e4:26:aa:bf:77:bd:3b:83:3b:82:4f:e6:73: af:1a:5d:a1:45:7e:4e:e6:17:0d:15:6c:30:21:ef:25:48:ba: a3:05:fa:7a:eb:52:a1:ab:f2:ae:96:57:4a:37:ea:85:78:63: e9:f9:0f:dd:d0:34:9f:4f:c1:2b:ae:21:93:58:b6:5d:9e:cc: 24:18:9a:1b:ec:78:1c:ad:81:27:dc:43:cc:dd:ad:96:7f:bb: 5e:3d:3a:f0:3c:07:ff:2d:59:21:73:c4:8e:e7:34:63:98:79: de:d5:d3:70:41:08:e8:a1:f0:4c:0c:e8:3a:6d:d6:08:fb:a7: 50:68:b6:f2:b6:8e:31:65:13:1d:4c:d6:c0:fc:22:10:af:58: 1f:b1:51:f2:ed:14:a2:8b:7f:45:6c:3e:1d:f2:91:6a:f6:65: 0a:0e:65:8b:92:0b:a8:f8:6f:c8:ec:9f:41:3c:a9:6c:17:06: 70:28:cd:8e:08:4a:15:e6:02:9d:d9:2f:85:f2:ae:b4:6b:1a: 66:2d:17:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHBn695rYanCKl/4Z3UuTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZTkyZDZiZmZlMzM5ZmEzMzYxYmY3Yjc1MjM1NjcxNmE2 YWQ4MGEwHhcNMjUxMjA2MTAwMTM2WhcNMjUxMjA3MTAwMTM2WjAzMTEwLwYDVQQD Eyg2MGM2YzRlMGYxMDYyNDEwM2VkY2QyNTA1MjQzZGU4YzczOTU4YTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1idI2mxdUCuXqJw97VgIRROO/3W7 yQX0CFjwcv9UtDHo7VEdrUTPNEai/MLGa2Ez28bpEHmTv+cESE1/goM+uR+QNAVJ XnSCbFye/IfRwF4PMS49k68XJwRcis0Lvutth0SsgmHf9/7IM3n19sgVVrvZCWq+ TVVZyS3r7S06Y3ZkcBZpvco9+CI/kNWQgejxZ/nA9Sgh0K1JaCh6wGYDoSCHHp+d GgzAxi8rHF/97gpoIZ4+KEwt9elNWn1UptzxZAv2y11WCA2643R5OT468wNvlcNP q4newYek+2+zTSxbyPBS4erZmL8TTw6F/MV9jlwlypmes1imdoJw6UPKKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGDGxODxBiQQPtzSUFJD3oxzlYpvMB8GA1UdIwQY MBaAFEvpLWv/4zn6M2G/e3UjVnFqatgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUy1rdGFfX2pPZm96WWI5N2RTTldjV3BxMkFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9jYzcwNTgtOTVjNC00OTBiLTlmMTIt NTg3MDA2NGQ4MWI3LzEvUy1rdGFfX2pPZm96WWI5N2RTTldjV3BxMkFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9jYzcwNTgtOTVjNC00OTBiLTlmMTItNTg3MDA2NGQ4MWI3 LzEvUy1rdGFfX2pPZm96WWI5N2RTTldjV3BxMkFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANuQZySbw st44GF2SybSFZYo3wUybRxyKRj6NeXoJMZhy5Rgfwo6JpTLiyx2IFLQ3fQ7h6uTC EVyYj3rkJqq/d707gzuCT+ZzrxpdoUV+TuYXDRVsMCHvJUi6owX6eutSoavyrpZX SjfqhXhj6fkP3dA0n0/BK64hk1i2XZ7MJBiaG+x4HK2BJ9xDzN2tln+7Xj068DwH /y1ZIXPEjuc0Y5h53tXTcEEI6KHwTAzoOm3WCPunUGi28raOMWUTHUzWwPwiEK9Y H7FR8u0Uoot/RWw+HfKRavZlCg5li5ILqPhvyOyfQTypbBcGcCjNjghKFeYCndkv hfKutGsaZi0XVQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:58:53 2025 by rpki-client