This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft File: KUk3Me_Mx0rVwnOHS5Ng96polGU.mft (raw, json) Hash identifier: bSXSDy2cj4SCbjy1XeIOlP8UhX+WI+2C/ofwLli1ZgA= Subject key identifier: C9:88:0F:8A:E5:1E:54:9B:9E:5D:98:BF:77:F2:F9:BA:3B:56:16:A2 Authority key identifier: 29:49:37:31:EF:CC:C7:4A:D5:C2:73:87:4B:93:60:F7:AA:68:94:65 Certificate issuer: /CN=29493731efccc74ad5c273874b9360f7aa689465 Certificate serial: 019AF3895CFA2119E215DFB967625E81C979 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 12:00:56 +0000 Manifest this update: Sat 06 Dec 2025 12:00:56 +0000 Manifest next update: Sun 07 Dec 2025 12:00:56 +0000 Files and hashes: 1: KUk3Me_Mx0rVwnOHS5Ng96polGU.crl (hash: sQuK0zAaIdFJ9WqgKWDSzgWbi55N7WZuWWs1WRUnQoA=) 2: Xiq-7Jev0boBEtsil-XGVvUzgqg.roa (hash: Xk6kyPCoONS0HAtum1UvzVR1hPVGojYHRenom/WPJ28=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:5c:fa:21:19:e2:15:df:b9:67:62:5e:81:c9:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29493731efccc74ad5c273874b9360f7aa689465 Validity Not Before: Dec 6 12:00:56 2025 GMT Not After : Dec 7 12:00:56 2025 GMT Subject: CN=c9880f8ae51e549b9e5d98bf77f2f9ba3b5616a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:32:2c:66:99:42:d5:6b:66:a2:79:2c:8c:36: 1e:c2:ce:06:c9:81:b3:5f:b7:29:ba:52:11:77:c1: 24:27:92:5e:da:52:07:2c:43:1e:8f:be:37:ae:8b: b7:0a:1b:f9:72:d0:05:2c:f5:5b:db:0e:78:51:bd: c0:88:02:e4:e0:64:03:83:42:37:dc:81:13:78:8c: cc:98:d5:04:7d:13:de:82:6a:29:05:78:f9:67:88: 71:96:e5:f6:0c:1a:78:e2:8f:c4:15:32:44:94:89: cc:79:3e:48:69:2b:16:e7:5d:7e:ce:87:63:07:a8: ce:70:97:15:7e:40:7f:4e:42:b1:9c:42:21:93:e9: b3:e9:a4:57:ad:3c:af:ae:af:22:f6:f6:81:3c:03: 6c:ed:c8:ec:ff:4b:79:15:b0:fa:a4:5a:73:a4:fd: 9d:17:6b:2c:0c:df:41:26:a1:50:7f:43:a1:d7:91: cc:27:ec:47:15:42:16:25:b4:70:fc:06:86:7b:67: 11:8e:d8:71:ad:4f:54:c9:dd:f4:2e:16:c9:95:db: 84:71:07:80:1c:5a:4d:c8:9c:86:57:18:57:1a:95: 71:eb:27:b2:7c:bb:89:a0:10:96:fa:08:e5:f1:ee: f6:b2:99:66:39:da:d6:18:50:18:ed:10:0c:6b:16: ef:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:88:0F:8A:E5:1E:54:9B:9E:5D:98:BF:77:F2:F9:BA:3B:56:16:A2 X509v3 Authority Key Identifier: keyid:29:49:37:31:EF:CC:C7:4A:D5:C2:73:87:4B:93:60:F7:AA:68:94:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:34:91:66:1a:c3:64:5b:29:8a:a8:98:9b:fc:89:c4:a0:d8: 53:67:23:e6:0f:76:b2:4a:4e:bd:91:8c:3c:48:e9:2c:30:f8: 0a:be:2c:0a:f8:e8:a3:a7:5b:ff:e8:f5:80:ef:03:ad:3a:92: b9:0e:20:83:dc:8c:c0:55:f9:b1:01:ba:28:47:89:71:f4:5a: b5:91:45:1c:16:d7:c3:1f:13:4c:5d:0c:2e:98:25:88:df:be: a7:d9:9d:67:ba:64:9e:c7:5f:59:80:cb:11:92:27:5c:fd:bd: aa:c1:ad:7c:f5:16:98:5d:d0:3c:7e:00:b7:df:33:00:12:b5: 57:42:81:0e:f0:1f:67:50:ab:fb:26:d9:ca:c6:f2:61:72:a5: 3a:87:ca:f7:bc:2f:9c:0e:b7:9d:06:9a:bb:b3:f4:05:0a:2f: cf:da:68:6a:6b:23:3a:18:6a:5e:58:98:2a:4e:55:80:2e:c5: d1:59:14:40:03:b0:d6:7b:96:fd:d8:f0:36:13:74:cb:eb:f6: 74:ea:3c:ea:1f:c3:61:e5:21:d1:de:cd:7c:20:38:d8:e2:c0: d2:74:3d:d3:7a:39:36:f5:34:37:71:59:df:95:d8:82:06:19: 70:7c:1c:ed:fe:83:b7:08:1b:0d:f7:7f:9c:da:81:fa:fe:e6: 00:e5:bb:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziVz6IRniFd+5Z2Jegcl5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NDkzNzMxZWZjY2M3NGFkNWMyNzM4NzRiOTM2MGY3YWE2 ODk0NjUwHhcNMjUxMjA2MTIwMDU2WhcNMjUxMjA3MTIwMDU2WjAzMTEwLwYDVQQD EyhjOTg4MGY4YWU1MWU1NDliOWU1ZDk4YmY3N2YyZjliYTNiNTYxNmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+DIsZplC1WtmonksjDYews4GyYGz X7cpulIRd8EkJ5Je2lIHLEMej743rou3Chv5ctAFLPVb2w54Ub3AiALk4GQDg0I3 3IETeIzMmNUEfRPegmopBXj5Z4hxluX2DBp44o/EFTJElInMeT5IaSsW511+zodj B6jOcJcVfkB/TkKxnEIhk+mz6aRXrTyvrq8i9vaBPANs7cjs/0t5FbD6pFpzpP2d F2ssDN9BJqFQf0Oh15HMJ+xHFUIWJbRw/AaGe2cRjthxrU9Uyd30LhbJlduEcQeA HFpNyJyGVxhXGpVx6yeyfLuJoBCW+gjl8e72splmOdrWGFAY7RAMaxbvBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMmID4rlHlSbnl2Yv3fy+bo7VhaiMB8GA1UdIwQY MBaAFClJNzHvzMdK1cJzh0uTYPeqaJRlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1VrM01lX014MHJWd25PSFM1Tmc5NnBvbEdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9hZjRjMDktYzhjMi00ODkzLWExMGIt MGNkOGE2OTcyOWI3LzEvS1VrM01lX014MHJWd25PSFM1Tmc5NnBvbEdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9hZjRjMDktYzhjMi00ODkzLWExMGItMGNkOGE2OTcyOWI3 LzEvS1VrM01lX014MHJWd25PSFM1Tmc5NnBvbEdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUzSRZhrD ZFspiqiYm/yJxKDYU2cj5g92skpOvZGMPEjpLDD4Cr4sCvjoo6db/+j1gO8DrTqS uQ4gg9yMwFX5sQG6KEeJcfRatZFFHBbXwx8TTF0MLpgliN++p9mdZ7pknsdfWYDL EZInXP29qsGtfPUWmF3QPH4At98zABK1V0KBDvAfZ1Cr+ybZysbyYXKlOofK97wv nA63nQaau7P0BQovz9poamsjOhhqXliYKk5VgC7F0VkUQAOw1nuW/djwNhN0y+v2 dOo86h/DYeUh0d7NfCA42OLA0nQ903o5NvU0N3FZ35XYggYZcHwc7f6DtwgbDfd/ nNqB+v7mAOW7LA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:42:55 2025 by rpki-client