This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft File: KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft (raw, json) Hash identifier: kW8icAarz8Jf3PAqd/wLoaF8BWRsZ4jWTue6Hofrmlg= Subject key identifier: AB:49:62:A8:B7:FC:5D:C0:DA:A7:00:36:94:62:F5:CC:CF:17:0E:73 Authority key identifier: 29:47:98:77:68:64:7E:EB:8A:0F:38:60:C4:41:76:24:7C:E6:FC:59 Certificate issuer: /CN=2947987768647eeb8a0f3860c44176247ce6fc59 Certificate serial: 019AF087F414EA3664C08120273441FDBDAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft Manifest number: 0F78 Signing time: Fri 05 Dec 2025 22:00:32 +0000 Manifest this update: Fri 05 Dec 2025 22:00:32 +0000 Manifest next update: Sat 06 Dec 2025 22:00:32 +0000 Files and hashes: 1: KUeYd2hkfuuKDzhgxEF2JHzm_Fk.crl (hash: bEe1FPnGOY8SvDiZJHoSKpf2sdyTMPrvXXV3RT13n6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft rsync://rpki.ripe.net/repository/DEFAULT/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:87:f4:14:ea:36:64:c0:81:20:27:34:41:fd:bd:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2947987768647eeb8a0f3860c44176247ce6fc59 Validity Not Before: Dec 5 22:00:32 2025 GMT Not After : Dec 6 22:00:32 2025 GMT Subject: CN=ab4962a8b7fc5dc0daa700369462f5cccf170e73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ed:31:f5:7a:b4:39:8d:c1:9a:4b:33:9c:99: 27:6f:88:ae:f0:48:ad:1d:82:25:60:90:04:62:d3: 97:d1:fb:f8:e2:af:dd:fb:6c:0c:68:5a:39:ea:03: d3:b6:22:e5:24:ff:46:95:97:05:b2:29:e3:8d:da: cc:f0:0a:5a:cd:30:d2:ae:5c:b1:d3:31:35:49:9d: af:ba:9b:84:97:3e:1c:56:1b:f1:02:e7:50:60:cc: 09:88:9b:85:3c:2b:81:b7:34:99:f3:76:96:a5:c6: db:45:96:c8:b1:f2:3f:5d:a3:5a:69:65:83:9c:b6: 25:45:37:c0:b5:73:45:66:ed:99:a7:91:9d:62:53: 29:cb:f4:6f:6a:d8:b0:08:4e:94:38:04:6c:54:12: f1:0b:91:35:4c:c9:ea:d1:d7:58:8b:39:f3:db:21: 6c:89:6d:2a:d3:d4:65:96:e1:ee:76:21:58:fb:a6: 1a:0a:e6:af:67:b4:35:b2:f6:22:e3:ea:b7:69:0e: b2:70:a6:19:81:da:3f:a3:bf:00:37:90:f7:dc:ab: 1d:54:00:fa:76:11:39:0e:ed:99:bd:79:44:32:35: e6:bd:13:7e:c0:56:57:f4:f3:0d:b5:71:75:42:b2: c1:79:93:5f:c2:57:b3:ba:2d:5e:4a:ac:f7:45:f7: f2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:49:62:A8:B7:FC:5D:C0:DA:A7:00:36:94:62:F5:CC:CF:17:0E:73 X509v3 Authority Key Identifier: keyid:29:47:98:77:68:64:7E:EB:8A:0F:38:60:C4:41:76:24:7C:E6:FC:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:a3:61:e2:14:07:53:30:e3:c1:e3:c1:e5:71:1f:3a:2f:3e: 9f:b3:bf:05:dd:06:4f:7a:91:d2:0c:f4:54:a2:e0:a3:9d:40: e4:70:89:4d:b8:b7:1d:5b:7d:11:ba:35:b8:11:ea:a3:ae:1a: e7:ed:ab:a0:ed:7b:55:0a:fc:7b:06:48:ba:28:fe:14:5c:9a: df:4d:fc:51:d6:9d:5d:9c:04:53:8f:c1:ac:91:3b:86:81:a5: 36:77:b0:a3:04:50:5a:ba:b2:34:37:88:75:12:9a:08:be:d7: aa:53:36:ab:1b:93:ac:8b:80:30:c1:73:d1:d1:4b:72:0b:57: 4e:2c:a8:03:ca:79:83:74:fd:79:97:bc:e9:42:3c:a3:57:7f: 26:8f:93:a4:c6:da:4a:e9:11:ce:d1:ac:66:2f:bf:22:d2:62: be:58:6f:b7:44:2b:ee:16:3a:4f:e0:59:ac:d7:f4:1f:d8:19: bd:44:9c:96:fa:29:49:f1:22:c9:2d:36:6f:77:4e:74:9a:20: 81:67:82:98:81:d7:83:7a:3f:f1:40:76:c7:7c:bf:8f:d3:4f: 3e:81:9b:fd:1c:32:ad:72:7c:cd:8a:1c:fc:a3:e1:03:fd:6c: 50:db:8d:d3:65:83:0e:40:94:6e:08:a2:fb:11:b6:b4:50:1a: ea:9d:78:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwh/QU6jZkwIEgJzRB/b2qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NDc5ODc3Njg2NDdlZWI4YTBmMzg2MGM0NDE3NjI0N2Nl NmZjNTkwHhcNMjUxMjA1MjIwMDMyWhcNMjUxMjA2MjIwMDMyWjAzMTEwLwYDVQQD EyhhYjQ5NjJhOGI3ZmM1ZGMwZGFhNzAwMzY5NDYyZjVjY2NmMTcwZTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAne0x9Xq0OY3BmksznJknb4iu8Eit HYIlYJAEYtOX0fv44q/d+2wMaFo56gPTtiLlJP9GlZcFsinjjdrM8ApazTDSrlyx 0zE1SZ2vupuElz4cVhvxAudQYMwJiJuFPCuBtzSZ83aWpcbbRZbIsfI/XaNaaWWD nLYlRTfAtXNFZu2Zp5GdYlMpy/RvatiwCE6UOARsVBLxC5E1TMnq0ddYiznz2yFs iW0q09RlluHudiFY+6YaCuavZ7Q1svYi4+q3aQ6ycKYZgdo/o78AN5D33KsdVAD6 dhE5Du2ZvXlEMjXmvRN+wFZX9PMNtXF1QrLBeZNfwlezui1eSqz3RffyswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKtJYqi3/F3A2qcANpRi9czPFw5zMB8GA1UdIwQY MBaAFClHmHdoZH7rig84YMRBdiR85vxZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1VlWWQyaGtmdXVLRHpoZ3hFRjJKSHptX0ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9lZGVmYjMtMTM4ZC00YWU2LTk0ODct NWRhYjFiNGE1YzYxLzEvS1VlWWQyaGtmdXVLRHpoZ3hFRjJKSHptX0ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9lZGVmYjMtMTM4ZC00YWU2LTk0ODctNWRhYjFiNGE1YzYx LzEvS1VlWWQyaGtmdXVLRHpoZ3hFRjJKSHptX0ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMaNh4hQH UzDjwePB5XEfOi8+n7O/Bd0GT3qR0gz0VKLgo51A5HCJTbi3HVt9Ebo1uBHqo64a 5+2roO17VQr8ewZIuij+FFya3038UdadXZwEU4/BrJE7hoGlNnewowRQWrqyNDeI dRKaCL7XqlM2qxuTrIuAMMFz0dFLcgtXTiyoA8p5g3T9eZe86UI8o1d/Jo+TpMba SukRztGsZi+/ItJivlhvt0Qr7hY6T+BZrNf0H9gZvUSclvopSfEiyS02b3dOdJog gWeCmIHXg3o/8UB2x3y/j9NPPoGb/RwyrXJ8zYoc/KPhA/1sUNuN02WDDkCUbgii +xG2tFAa6p14ZQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:58 2025 by rpki-client