This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft File: KfNCRmRyXVgguqeCcTFDozB2kfM.mft (raw, json) Hash identifier: O6/xyu+CEr73LLJXeUsSjyORw75eDaeFGHTsLhrBgO0= Subject key identifier: A7:FA:F5:33:ED:CE:B4:03:26:A2:DC:CD:78:A6:7A:6D:F4:9C:C1:2B Authority key identifier: 29:F3:42:46:64:72:5D:58:20:BA:A7:82:71:31:43:A3:30:76:91:F3 Certificate issuer: /CN=29f3424664725d5820baa782713143a3307691f3 Certificate serial: 019AF42E6860CF74508BE3DE3A5BDF5E1939 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft Manifest number: 01BD Signing time: Sat 06 Dec 2025 15:01:13 +0000 Manifest this update: Sat 06 Dec 2025 15:01:13 +0000 Manifest next update: Sun 07 Dec 2025 15:01:13 +0000 Files and hashes: 1: KfNCRmRyXVgguqeCcTFDozB2kfM.crl (hash: Hk9hbe63+SCC4iiOtrUTMHsuBktcjP+9t4iLsdw/xPE=) 2: lvisyME0LlQajyGS5pMcYDKFR08.roa (hash: 31DzKjH8PvmlicGQvfn7fIzRcBCmYUXLsghB5MjrccU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 15:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:68:60:cf:74:50:8b:e3:de:3a:5b:df:5e:19:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29f3424664725d5820baa782713143a3307691f3 Validity Not Before: Dec 6 15:01:13 2025 GMT Not After : Dec 7 15:01:13 2025 GMT Subject: CN=a7faf533edceb40326a2dccd78a67a6df49cc12b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:21:c2:e5:97:e2:de:17:49:18:18:05:a6:90: c1:a1:62:13:4d:71:32:7b:a9:c8:db:39:07:c2:96: cd:96:11:ab:78:69:0e:87:07:0f:ca:47:2a:3f:02: ea:64:98:38:78:48:89:f7:16:3b:24:67:2b:3a:d7: a6:a6:a1:69:b1:f7:61:5f:c8:fc:2b:8e:eb:1e:b5: c7:e4:2a:27:cb:96:b6:36:0a:0f:c6:13:a6:f7:56: 5f:fd:fe:c4:e2:0d:d1:92:e0:b6:80:c4:c8:0e:e2: 01:5d:d9:da:fa:09:24:7a:fd:ae:f7:31:f7:f5:6c: 8a:89:b7:88:24:00:d2:85:bc:60:9f:ac:b3:ce:b3: 33:bf:09:c3:f8:43:28:eb:0f:25:1a:e3:89:1b:45: 5b:80:17:bb:cd:ca:e0:66:aa:60:e4:9d:79:ae:1d: 78:70:1c:32:3e:0f:1c:50:6a:47:8e:82:ea:bf:e7: 68:09:29:41:d1:e5:e7:ac:3a:b1:96:f7:e1:93:d6: 73:e4:cc:e0:ed:7e:15:59:03:15:b7:56:32:ad:f7: 6a:ee:50:59:4a:ca:72:bb:ff:21:21:d0:d4:9b:29: ce:e3:ef:63:58:94:0c:bc:02:5f:2d:4f:86:e3:3c: ef:42:6b:50:02:54:3b:a8:52:c3:8c:7c:56:ca:8c: e5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FA:F5:33:ED:CE:B4:03:26:A2:DC:CD:78:A6:7A:6D:F4:9C:C1:2B X509v3 Authority Key Identifier: keyid:29:F3:42:46:64:72:5D:58:20:BA:A7:82:71:31:43:A3:30:76:91:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:58:71:01:22:d0:04:4e:7a:cd:d2:0b:03:57:18:57:b0:cd: 5f:36:d2:87:91:3a:d9:c8:c8:1f:ac:94:b0:75:78:56:97:14: e4:2b:1c:20:9e:8f:b3:ef:29:62:31:0b:1a:30:1a:c0:e6:93: cc:73:bf:cc:2d:65:84:24:41:58:ae:e2:82:90:ac:bc:48:b0: 22:15:8b:b4:26:3c:34:59:6f:e6:79:7b:a1:14:03:7c:03:ed: 4a:19:3a:0a:66:a1:cc:29:a0:18:21:11:ed:30:a3:07:4f:82: 4d:4b:dc:cc:34:7d:71:36:04:0a:a0:ad:8a:04:48:e8:4e:e9: 76:9c:00:1f:37:34:e2:e7:38:3a:c9:04:96:dc:c9:c5:12:84: 2f:8f:64:24:0a:69:ae:99:f7:0c:c2:56:a1:dc:d5:2e:96:e5: f3:18:a2:77:b8:0c:6a:8a:37:75:0b:3f:bb:73:00:b2:ee:5f: a8:2a:aa:8b:23:f6:d1:6f:b6:88:60:ec:9b:f6:7e:7b:67:94: 90:08:93:98:8e:f2:e9:25:9e:39:69:51:97:f9:6f:0a:ae:ce: b8:a0:49:24:fb:84:fa:a9:46:5a:4f:99:26:5f:42:d2:10:c0: 76:b5:c3:bb:5d:85:40:cb:c7:1f:68:85:3c:dc:63:79:cb:2a: e9:09:22:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lmhgz3RQi+PeOlvfXhk5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZjM0MjQ2NjQ3MjVkNTgyMGJhYTc4MjcxMzE0M2EzMzA3 NjkxZjMwHhcNMjUxMjA2MTUwMTEzWhcNMjUxMjA3MTUwMTEzWjAzMTEwLwYDVQQD EyhhN2ZhZjUzM2VkY2ViNDAzMjZhMmRjY2Q3OGE2N2E2ZGY0OWNjMTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyHC5Zfi3hdJGBgFppDBoWITTXEy e6nI2zkHwpbNlhGreGkOhwcPykcqPwLqZJg4eEiJ9xY7JGcrOtempqFpsfdhX8j8 K47rHrXH5Cony5a2NgoPxhOm91Zf/f7E4g3RkuC2gMTIDuIBXdna+gkkev2u9zH3 9WyKibeIJADShbxgn6yzzrMzvwnD+EMo6w8lGuOJG0VbgBe7zcrgZqpg5J15rh14 cBwyPg8cUGpHjoLqv+doCSlB0eXnrDqxlvfhk9Zz5Mzg7X4VWQMVt1Yyrfdq7lBZ Sspyu/8hIdDUmynO4+9jWJQMvAJfLU+G4zzvQmtQAlQ7qFLDjHxWyozluQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKf69TPtzrQDJqLczXimem30nMErMB8GA1UdIwQY MBaAFCnzQkZkcl1YILqngnExQ6MwdpHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2ZOQ1JtUnlYVmdndXFlQ2NURkRvekIya2ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8xMjk4ZTEtYTFlNC00YWJjLWFiMWYt NjQ5ZDI1YTk1OTA3LzEvS2ZOQ1JtUnlYVmdndXFlQ2NURkRvekIya2ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8xMjk4ZTEtYTFlNC00YWJjLWFiMWYtNjQ5ZDI1YTk1OTA3 LzEvS2ZOQ1JtUnlYVmdndXFlQ2NURkRvekIya2ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcFhxASLQ BE56zdILA1cYV7DNXzbSh5E62cjIH6yUsHV4VpcU5CscIJ6Ps+8pYjELGjAawOaT zHO/zC1lhCRBWK7igpCsvEiwIhWLtCY8NFlv5nl7oRQDfAPtShk6CmahzCmgGCER 7TCjB0+CTUvczDR9cTYECqCtigRI6E7pdpwAHzc04uc4OskEltzJxRKEL49kJApp rpn3DMJWodzVLpbl8xiid7gMaoo3dQs/u3MAsu5fqCqqiyP20W+2iGDsm/Z+e2eU kAiTmI7y6SWeOWlRl/lvCq7OuKBJJPuE+qlGWk+ZJl9C0hDAdrXDu12FQMvHH2iF PNxjecsq6QkiGQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:14:21 2025 by rpki-client