This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.mft File: KAYV5gBqhh9mz3MH0w_JNQx2994.mft (raw, json) Hash identifier: kkMrP10e/erzqST6xpwQOj+WaDa0Y+rX89+437wPOTQ= Subject key identifier: 38:68:6B:F9:C4:E8:F3:D6:B3:B7:17:68:C5:54:2C:C0:2D:14:81:7A Authority key identifier: 28:06:15:E6:00:6A:86:1F:66:CF:73:07:D3:0F:C9:35:0C:76:F7:DE Certificate issuer: /CN=280615e6006a861f66cf7307d30fc9350c76f7de Certificate serial: 019AF38969D5FDE3396231F356C1AE3829A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAYV5gBqhh9mz3MH0w_JNQx2994.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 12:01:00 +0000 Manifest this update: Sat 06 Dec 2025 12:01:00 +0000 Manifest next update: Sun 07 Dec 2025 12:01:00 +0000 Files and hashes: 1: KAYV5gBqhh9mz3MH0w_JNQx2994.crl (hash: QSKzSOIcpki/bMNYi8VNKH0E/Z699tXQXkr4v/tel9g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.mft rsync://rpki.ripe.net/repository/DEFAULT/KAYV5gBqhh9mz3MH0w_JNQx2994.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:69:d5:fd:e3:39:62:31:f3:56:c1:ae:38:29:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=280615e6006a861f66cf7307d30fc9350c76f7de Validity Not Before: Dec 6 12:01:00 2025 GMT Not After : Dec 7 12:01:00 2025 GMT Subject: CN=38686bf9c4e8f3d6b3b71768c5542cc02d14817a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:51:b1:fc:75:07:de:c6:49:e1:11:c5:8c:f3: 34:ba:b8:a5:25:70:36:35:7b:a7:48:bc:da:a0:5a: 62:89:d6:2a:6e:ca:54:eb:69:af:7d:6e:b4:a2:da: 20:0e:e3:b8:23:a6:3c:a7:f9:3c:42:db:e5:7d:1f: 35:9f:8d:66:b1:59:2b:86:8d:84:1d:36:52:4a:06: 6d:fd:e2:ab:5a:66:53:3d:b2:0a:14:ef:ac:7a:ea: 3b:46:a3:35:e2:86:b5:f9:63:94:6d:00:40:c7:55: f4:55:d0:e7:a8:ed:e7:d2:2d:d5:aa:ab:92:19:0c: 9f:ea:ca:79:5a:a3:8c:b3:2a:fe:5e:be:c9:ec:56: fd:0e:0b:9c:9a:17:14:0f:bc:4b:72:0f:1b:53:26: 40:ee:08:f0:e6:91:87:8c:5b:6f:fc:3d:11:af:ff: ce:3d:aa:a5:a7:86:b2:0d:36:02:a4:c5:5d:21:a4: 56:b4:20:4a:b1:be:6f:51:66:c6:ca:9a:96:32:6e: 4f:03:1f:80:f0:ed:4d:d7:4e:90:84:89:0e:64:da: b1:ce:81:30:70:de:ff:a5:73:e1:69:a6:1a:66:bd: a7:88:30:9f:c6:96:77:68:46:76:12:e0:90:25:ac: e0:ee:5c:7a:1f:a2:3a:76:01:a8:e3:be:7e:aa:81: 74:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:68:6B:F9:C4:E8:F3:D6:B3:B7:17:68:C5:54:2C:C0:2D:14:81:7A X509v3 Authority Key Identifier: keyid:28:06:15:E6:00:6A:86:1F:66:CF:73:07:D3:0F:C9:35:0C:76:F7:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAYV5gBqhh9mz3MH0w_JNQx2994.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:10:96:16:08:3c:63:72:99:27:ed:1d:e0:ae:b5:c0:c4:3c: 43:e7:49:25:93:2c:aa:ee:c7:b0:67:60:5a:9c:08:0e:86:4a: cf:2e:12:de:58:91:c8:ee:20:7c:99:7a:52:a7:de:4d:30:1d: f8:90:59:9f:0c:22:9d:fe:24:4b:08:44:69:2a:e9:09:0f:c9: 61:fd:e7:ca:a0:ed:64:46:43:94:15:74:48:8c:74:fc:db:4f: 83:95:e0:c3:24:e1:a7:6a:5e:1d:b8:e8:6c:8e:07:ac:39:96: e8:b9:4e:60:e3:a4:76:39:cf:1f:e9:6b:07:00:28:97:ce:e1: 48:29:49:a8:1c:55:82:28:a3:67:6b:20:24:2c:31:37:4f:e2: c1:24:03:78:ab:15:0d:af:30:ad:23:b2:bc:e5:a2:43:67:71: e6:21:e3:7f:94:b6:b3:a4:b0:1e:f6:40:ca:11:25:fb:96:ba: 9a:59:42:d8:78:76:70:1b:86:5a:29:9f:33:16:2e:fb:3a:7e: 6c:19:be:7b:1d:0e:b6:ad:7f:da:6c:bb:32:0d:b8:1b:19:4f: 7a:3a:17:65:be:f2:ff:2f:b4:9b:7f:d2:c6:8d:5c:f2:f1:ef: 46:90:d7:f0:11:43:4a:cd:24:88:59:c8:8a:67:bb:b7:e1:09: 6d:10:be:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziWnV/eM5YjHzVsGuOCmgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MDYxNWU2MDA2YTg2MWY2NmNmNzMwN2QzMGZjOTM1MGM3 NmY3ZGUwHhcNMjUxMjA2MTIwMTAwWhcNMjUxMjA3MTIwMTAwWjAzMTEwLwYDVQQD EygzODY4NmJmOWM0ZThmM2Q2YjNiNzE3NjhjNTU0MmNjMDJkMTQ4MTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1Gx/HUH3sZJ4RHFjPM0urilJXA2 NXunSLzaoFpiidYqbspU62mvfW60otogDuO4I6Y8p/k8QtvlfR81n41msVkrho2E HTZSSgZt/eKrWmZTPbIKFO+seuo7RqM14oa1+WOUbQBAx1X0VdDnqO3n0i3VqquS GQyf6sp5WqOMsyr+Xr7J7Fb9DgucmhcUD7xLcg8bUyZA7gjw5pGHjFtv/D0Rr//O Paqlp4ayDTYCpMVdIaRWtCBKsb5vUWbGypqWMm5PAx+A8O1N106QhIkOZNqxzoEw cN7/pXPhaaYaZr2niDCfxpZ3aEZ2EuCQJazg7lx6H6I6dgGo475+qoF0PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDhoa/nE6PPWs7cXaMVULMAtFIF6MB8GA1UdIwQY MBaAFCgGFeYAaoYfZs9zB9MPyTUMdvfeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0FZVjVnQnFoaDltejNNSDB3X0pOUXgyOTk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNzRhYWQtYzk0Ny00MzExLWFmZjEt YWU5MmI2YWUxYmZlLzEvS0FZVjVnQnFoaDltejNNSDB3X0pOUXgyOTk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNzRhYWQtYzk0Ny00MzExLWFmZjEtYWU5MmI2YWUxYmZl LzEvS0FZVjVnQnFoaDltejNNSDB3X0pOUXgyOTk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAERCWFgg8 Y3KZJ+0d4K61wMQ8Q+dJJZMsqu7HsGdgWpwIDoZKzy4S3liRyO4gfJl6UqfeTTAd +JBZnwwinf4kSwhEaSrpCQ/JYf3nyqDtZEZDlBV0SIx0/NtPg5XgwyThp2peHbjo bI4HrDmW6LlOYOOkdjnPH+lrBwAol87hSClJqBxVgiijZ2sgJCwxN0/iwSQDeKsV Da8wrSOyvOWiQ2dx5iHjf5S2s6SwHvZAyhEl+5a6mllC2Hh2cBuGWimfMxYu+zp+ bBm+ex0Otq1/2my7Mg24GxlPejoXZb7y/y+0m3/Sxo1c8vHvRpDX8BFDSs0kiFnI ime7t+EJbRC+yg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:58:41 2025 by rpki-client