This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft File: Kt_vhCTbu4eonZOJhODis-2aq4s.mft (raw, json) Hash identifier: g4vx+Ti270Z6a9Gyw+oFWkg0L0oBpH9Vkj5AjnJYeGs= Subject key identifier: A4:09:1A:F4:D8:71:37:D9:F3:51:2A:14:17:3C:2E:8A:15:D2:1C:4A Authority key identifier: 2A:DF:EF:84:24:DB:BB:87:A8:9D:93:89:84:E0:E2:B3:ED:9A:AB:8B Certificate issuer: /CN=2adfef8424dbbb87a89d938984e0e2b3ed9aab8b Certificate serial: 019AF12DDA320B6D7CBC6B3C478FFF59A006 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kt_vhCTbu4eonZOJhODis-2aq4s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft Manifest number: 0745 Signing time: Sat 06 Dec 2025 01:01:45 +0000 Manifest this update: Sat 06 Dec 2025 01:01:45 +0000 Manifest next update: Sun 07 Dec 2025 01:01:45 +0000 Files and hashes: 1: Kt_vhCTbu4eonZOJhODis-2aq4s.crl (hash: Mkwxe6nHnxCFrrhJcfwzQyJH9ViyZfKPkv3kmVj06Qw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft rsync://rpki.ripe.net/repository/DEFAULT/Kt_vhCTbu4eonZOJhODis-2aq4s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:da:32:0b:6d:7c:bc:6b:3c:47:8f:ff:59:a0:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2adfef8424dbbb87a89d938984e0e2b3ed9aab8b Validity Not Before: Dec 6 01:01:45 2025 GMT Not After : Dec 7 01:01:45 2025 GMT Subject: CN=a4091af4d87137d9f3512a14173c2e8a15d21c4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:71:ad:a3:37:5c:24:ed:de:b5:d0:bd:4e:93: 49:23:83:a4:fc:3b:a2:4f:4a:d4:c0:15:cd:3c:61: 40:3d:99:36:8d:b7:0a:2f:0e:87:ee:02:a5:0a:48: d5:64:d8:e4:c3:67:bf:be:4c:b1:90:b1:8b:b4:32: a9:a5:1c:b2:f1:88:3a:05:82:e1:e7:0f:0f:20:87: 7d:75:5f:be:18:dc:f6:1a:26:6e:63:ba:87:ab:64: fe:36:7a:fc:c3:71:c5:80:0d:b0:fe:61:44:87:47: 87:fc:39:ed:09:b6:b1:3e:63:9f:00:7d:f0:73:f6: f8:ac:71:f2:27:b3:4b:cc:2a:fe:39:55:ac:3b:de: 57:f0:af:c0:fa:69:f8:aa:cb:d1:08:97:3d:1f:09: ea:b9:61:2b:06:f6:93:b8:12:0f:90:7d:35:74:d3: 4e:64:54:99:59:6e:b6:76:84:46:1f:5c:ad:ab:c5: 9b:0b:84:6a:d7:10:b0:6f:cb:f3:9d:f4:bf:b2:bd: 15:e9:06:62:b0:46:8c:96:8c:71:45:4d:06:64:63: fe:f2:fd:ad:da:19:40:3f:d1:aa:03:20:86:bd:78: a5:ea:8a:f9:38:ea:17:63:80:fb:2f:6b:70:77:19: e8:ed:78:73:00:ec:22:92:84:da:ea:fb:54:1d:79: 3a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:09:1A:F4:D8:71:37:D9:F3:51:2A:14:17:3C:2E:8A:15:D2:1C:4A X509v3 Authority Key Identifier: keyid:2A:DF:EF:84:24:DB:BB:87:A8:9D:93:89:84:E0:E2:B3:ED:9A:AB:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt_vhCTbu4eonZOJhODis-2aq4s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:76:5e:a3:90:d0:fb:6a:aa:8a:d4:c1:2b:06:4b:f3:69:56: 01:95:d7:86:f6:ca:76:bd:d8:be:1b:f8:0e:17:4c:44:71:c3: 46:2a:32:82:8c:99:fb:b9:c1:dc:5c:7b:6c:4f:93:a2:df:2e: 1a:fb:ec:12:23:c0:44:1e:b5:f1:5e:a2:5a:46:cb:3a:ce:73: 20:2b:78:21:2d:81:39:ea:bd:4b:45:ed:f7:3a:68:15:8f:33: 50:da:82:11:10:89:89:bc:5f:88:cd:96:3e:e0:ec:a0:3f:d1: 03:a9:a7:2c:ab:0d:78:a0:95:78:c0:3d:cc:74:f0:fb:90:b9: bb:81:fe:67:d1:36:8e:d3:0f:2e:0e:47:bd:cb:3a:0d:dd:55: 55:81:59:62:54:46:60:b5:38:30:bf:d6:15:6c:64:d4:bc:22: 0c:26:d8:9e:43:34:f1:5f:57:1c:40:87:4e:5b:49:19:c2:bc: 8d:5e:02:b4:a5:d2:ae:1a:03:7e:c2:26:77:61:9f:a2:04:d4: 33:91:4c:c2:73:92:61:7f:25:1a:9c:11:83:80:d0:ab:7f:2f: 1d:ae:20:e9:a2:4b:81:2d:98:4e:8c:4e:21:e2:71:69:73:8a: dd:c7:aa:3e:02:66:5f:18:8a:17:b2:5a:6a:83:e2:f6:fc:2c: 76:a5:36:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLdoyC218vGs8R4//WaAGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhZGZlZjg0MjRkYmJiODdhODlkOTM4OTg0ZTBlMmIzZWQ5 YWFiOGIwHhcNMjUxMjA2MDEwMTQ1WhcNMjUxMjA3MDEwMTQ1WjAzMTEwLwYDVQQD EyhhNDA5MWFmNGQ4NzEzN2Q5ZjM1MTJhMTQxNzNjMmU4YTE1ZDIxYzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnGtozdcJO3etdC9TpNJI4Ok/Dui T0rUwBXNPGFAPZk2jbcKLw6H7gKlCkjVZNjkw2e/vkyxkLGLtDKppRyy8Yg6BYLh 5w8PIId9dV++GNz2GiZuY7qHq2T+Nnr8w3HFgA2w/mFEh0eH/DntCbaxPmOfAH3w c/b4rHHyJ7NLzCr+OVWsO95X8K/A+mn4qsvRCJc9HwnquWErBvaTuBIPkH01dNNO ZFSZWW62doRGH1ytq8WbC4Rq1xCwb8vznfS/sr0V6QZisEaMloxxRU0GZGP+8v2t 2hlAP9GqAyCGvXil6or5OOoXY4D7L2twdxno7XhzAOwikoTa6vtUHXk6oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQJGvTYcTfZ81EqFBc8LooV0hxKMB8GA1UdIwQY MBaAFCrf74Qk27uHqJ2TiYTg4rPtmquLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3RfdmhDVGJ1NGVvblpPSmhPRGlzLTJhcTRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9mOGQxMTEtN2VjYi00YmE2LWJlZWUt MTFhYTExMTNlOGQ2LzEvS3RfdmhDVGJ1NGVvblpPSmhPRGlzLTJhcTRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9mOGQxMTEtN2VjYi00YmE2LWJlZWUtMTFhYTExMTNlOGQ2 LzEvS3RfdmhDVGJ1NGVvblpPSmhPRGlzLTJhcTRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi3Zeo5DQ +2qqitTBKwZL82lWAZXXhvbKdr3Yvhv4DhdMRHHDRioygoyZ+7nB3Fx7bE+Tot8u GvvsEiPARB618V6iWkbLOs5zICt4IS2BOeq9S0Xt9zpoFY8zUNqCERCJibxfiM2W PuDsoD/RA6mnLKsNeKCVeMA9zHTw+5C5u4H+Z9E2jtMPLg5Hvcs6Dd1VVYFZYlRG YLU4ML/WFWxk1LwiDCbYnkM08V9XHECHTltJGcK8jV4CtKXSrhoDfsImd2GfogTU M5FMwnOSYX8lGpwRg4DQq38vHa4g6aJLgS2YToxOIeJxaXOK3ceqPgJmXxiKF7Ja aoPi9vwsdqU2mQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:23 2025 by rpki-client