This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft File: KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft (raw, json) Hash identifier: 07x8DQMlGWdwBiLrNJu0Fzu1s4wkvCAdzfI6hdEO0HY= Subject key identifier: D2:7A:FD:11:D6:E2:AF:95:E2:18:B7:CA:19:66:3E:57:3B:2B:81:81 Authority key identifier: 28:95:FB:CB:CF:88:D1:AD:9B:19:FC:42:C7:AA:11:AD:3D:2A:7E:A0 Certificate issuer: /CN=2895fbcbcf88d1ad9b19fc42c7aa11ad3d2a7ea0 Certificate serial: 019AF23FA0A570120DC308AEB9ECEDCF576C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft Manifest number: 165F Signing time: Sat 06 Dec 2025 06:00:47 +0000 Manifest this update: Sat 06 Dec 2025 06:00:47 +0000 Manifest next update: Sun 07 Dec 2025 06:00:47 +0000 Files and hashes: 1: KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl (hash: hjeg8YKh/Vo66JD5Tomsb1qjWAG3HEyV/tBI+LLG8Dw=) 2: zzN2Fg2txvi4HpK8ys6lkpN5ODw.roa (hash: xRdPuuQI3JcVUeXoif3h7qYjCY0yxLycmnxRLYfe7Xk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:a0:a5:70:12:0d:c3:08:ae:b9:ec:ed:cf:57:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2895fbcbcf88d1ad9b19fc42c7aa11ad3d2a7ea0 Validity Not Before: Dec 6 06:00:47 2025 GMT Not After : Dec 7 06:00:47 2025 GMT Subject: CN=d27afd11d6e2af95e218b7ca19663e573b2b8181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:67:91:b2:2f:c2:75:08:c0:cd:f4:42:df:6c: 52:7f:15:82:dc:cc:00:54:41:09:32:fa:6f:7e:92: d3:52:d6:e6:c3:d4:9c:bb:cd:c0:51:89:de:d8:aa: 1d:94:95:39:62:d7:0b:50:2f:28:df:f6:cd:7b:cd: ad:3a:1b:8f:5b:00:96:75:08:ef:95:93:af:15:36: 4e:67:89:e8:d1:e9:39:0b:22:1f:df:9a:9e:cb:4f: 2a:0d:63:08:86:8f:2c:b3:c2:b5:be:84:4e:c5:ed: 4a:d1:64:bf:c2:32:2e:fd:08:82:3e:48:af:7a:21: ea:13:29:1f:2b:a6:e6:20:46:f4:fd:fd:6c:0e:2d: 0f:f3:a2:91:46:81:63:db:89:e1:f5:f1:64:24:6e: 0a:9f:63:74:4b:0e:95:87:dc:f2:ad:b4:31:09:e1: de:63:8c:20:9e:8d:17:35:12:d2:98:71:15:b5:69: fb:3f:c0:2c:9a:f5:7b:4a:de:db:79:ca:10:9b:4d: 2c:12:ae:e0:6d:1f:16:d7:e4:ae:38:7d:8f:0d:ef: 33:33:a9:d3:81:8d:4f:dd:8c:29:6a:bb:00:3f:df: 01:5b:d7:18:c7:02:f0:49:f0:69:79:b8:29:2c:00: 69:0f:8c:0a:96:50:87:8e:84:27:c7:1d:ab:ea:97: 11:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:7A:FD:11:D6:E2:AF:95:E2:18:B7:CA:19:66:3E:57:3B:2B:81:81 X509v3 Authority Key Identifier: keyid:28:95:FB:CB:CF:88:D1:AD:9B:19:FC:42:C7:AA:11:AD:3D:2A:7E:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:f6:0a:e1:e2:6b:20:9e:7d:77:36:67:f4:12:52:b0:3a:58: 70:b3:04:1d:32:3e:7b:74:0f:fa:9d:5d:ee:08:1c:78:27:eb: 98:b2:a7:c1:b1:68:5c:9f:fd:55:85:ca:6f:be:00:6d:25:7c: c7:16:8d:9a:3c:4a:aa:50:62:b1:ab:81:7a:17:4b:4b:5f:32: f3:15:9b:68:92:a8:6d:74:3f:ce:c9:16:18:6f:06:f5:cd:dc: 72:f0:13:63:6e:df:2e:8c:5b:5b:ed:5b:40:33:9b:54:72:0d: bc:ae:62:d3:a6:73:b5:7f:4a:68:f0:83:cf:ff:1c:dc:0d:9d: 06:a6:d5:1c:b0:e5:ac:f2:60:b6:d8:d5:b8:3b:be:60:2e:b6: 3c:0d:ec:9b:6f:0f:59:d3:59:50:f2:5b:b8:29:c2:66:1b:f5: a2:ea:21:0d:9b:c8:2e:b4:94:e4:e0:56:2c:9f:ce:f8:f8:20: 07:0c:93:88:bc:89:25:c8:17:79:72:f7:07:ac:14:88:32:6a: 4a:c8:9e:ea:d0:b3:d8:bf:b0:90:08:4d:ae:cd:c6:70:7f:78: 88:2e:8d:4f:ad:d9:c1:a8:f7:b2:fb:7e:cd:4e:17:35:f8:07: da:eb:fa:4d:d0:6e:74:85:ae:33:97:01:26:b9:fe:d0:bf:5e: 03:f0:7c:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP6ClcBINwwiuueztz1dsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4OTVmYmNiY2Y4OGQxYWQ5YjE5ZmM0MmM3YWExMWFkM2Qy YTdlYTAwHhcNMjUxMjA2MDYwMDQ3WhcNMjUxMjA3MDYwMDQ3WjAzMTEwLwYDVQQD EyhkMjdhZmQxMWQ2ZTJhZjk1ZTIxOGI3Y2ExOTY2M2U1NzNiMmI4MTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWeRsi/CdQjAzfRC32xSfxWC3MwA VEEJMvpvfpLTUtbmw9Scu83AUYne2KodlJU5YtcLUC8o3/bNe82tOhuPWwCWdQjv lZOvFTZOZ4no0ek5CyIf35qey08qDWMIho8ss8K1voROxe1K0WS/wjIu/QiCPkiv eiHqEykfK6bmIEb0/f1sDi0P86KRRoFj24nh9fFkJG4Kn2N0Sw6Vh9zyrbQxCeHe Y4wgno0XNRLSmHEVtWn7P8AsmvV7St7becoQm00sEq7gbR8W1+SuOH2PDe8zM6nT gY1P3YwparsAP98BW9cYxwLwSfBpebgpLABpD4wKllCHjoQnxx2r6pcR1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNJ6/RHW4q+V4hi3yhlmPlc7K4GBMB8GA1UdIwQY MBaAFCiV+8vPiNGtmxn8QseqEa09Kn6gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0pYN3k4LUkwYTJiR2Z4Q3g2b1JyVDBxZnFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9lNWI1YWItNmFmNS00M2Q1LWI0ZTIt NDk2NmIzY2ZjODdkLzEvS0pYN3k4LUkwYTJiR2Z4Q3g2b1JyVDBxZnFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9lNWI1YWItNmFmNS00M2Q1LWI0ZTItNDk2NmIzY2ZjODdk LzEvS0pYN3k4LUkwYTJiR2Z4Q3g2b1JyVDBxZnFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgPYK4eJr IJ59dzZn9BJSsDpYcLMEHTI+e3QP+p1d7ggceCfrmLKnwbFoXJ/9VYXKb74AbSV8 xxaNmjxKqlBisauBehdLS18y8xWbaJKobXQ/zskWGG8G9c3ccvATY27fLoxbW+1b QDObVHINvK5i06ZztX9KaPCDz/8c3A2dBqbVHLDlrPJgttjVuDu+YC62PA3sm28P WdNZUPJbuCnCZhv1ouohDZvILrSU5OBWLJ/O+PggBwyTiLyJJcgXeXL3B6wUiDJq Ssie6tCz2L+wkAhNrs3GcH94iC6NT63Zwaj3svt+zU4XNfgH2uv6TdBudIWuM5cB Jrn+0L9eA/B80g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:00 2025 by rpki-client