This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1d72ce-be4c-4498-a823-3aebc9f817ce/1/KXpCKXFPNOKdPZKyX3tZx0jw38Y.mft File: KXpCKXFPNOKdPZKyX3tZx0jw38Y.mft (raw, json) Hash identifier: UD63hMHadA5WRM8q2qAgm1XJ6yt5Yt+SzvDH8W+pdUQ= Subject key identifier: 34:1F:C5:36:8E:41:68:A9:94:2B:26:AE:D9:98:17:30:45:64:D5:EB Authority key identifier: 29:7A:42:29:71:4F:34:E2:9D:3D:92:B2:5F:7B:59:C7:48:F0:DF:C6 Certificate issuer: /CN=297a4229714f34e29d3d92b25f7b59c748f0dfc6 Certificate serial: 019AF12DAEBFC80BE2D614717EC515954BA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXpCKXFPNOKdPZKyX3tZx0jw38Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1d72ce-be4c-4498-a823-3aebc9f817ce/1/KXpCKXFPNOKdPZKyX3tZx0jw38Y.mft Manifest number: 09EF Signing time: Sat 06 Dec 2025 01:01:34 +0000 Manifest this update: Sat 06 Dec 2025 01:01:34 +0000 Manifest next update: Sun 07 Dec 2025 01:01:34 +0000 Files and hashes: 1: IrS-qV3W0Ik-KE138sR-ycmjsj0.roa (hash: ZrhZqy7V3sNpl24EYUX1sc+YyDytYvN7JDm/U17ihTc=) 2: KXpCKXFPNOKdPZKyX3tZx0jw38Y.crl (hash: 3RcFehWP74IwIauvHTv4iekxMntgG/uZOFTyj1Jelbs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1d72ce-be4c-4498-a823-3aebc9f817ce/1/KXpCKXFPNOKdPZKyX3tZx0jw38Y.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/1d72ce-be4c-4498-a823-3aebc9f817ce/1/KXpCKXFPNOKdPZKyX3tZx0jw38Y.mft rsync://rpki.ripe.net/repository/DEFAULT/KXpCKXFPNOKdPZKyX3tZx0jw38Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:ae:bf:c8:0b:e2:d6:14:71:7e:c5:15:95:4b:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297a4229714f34e29d3d92b25f7b59c748f0dfc6 Validity Not Before: Dec 6 01:01:34 2025 GMT Not After : Dec 7 01:01:34 2025 GMT Subject: CN=341fc5368e4168a9942b26aed99817304564d5eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a9:cf:aa:30:82:35:81:a7:1f:76:f9:01:a6: fd:b5:f6:37:03:55:da:5e:c7:29:dc:33:a8:dc:e0: 8e:13:db:75:d1:07:ba:41:6d:96:22:48:33:6f:60: 98:f9:fc:2f:fb:79:85:53:41:91:13:3d:c4:1c:14: 14:5f:c4:48:01:1d:13:8e:bc:c0:39:13:14:6b:81: a0:c1:b7:1b:21:d7:2e:db:25:47:ea:14:b5:ef:35: cf:6f:f2:df:6e:49:54:fc:a5:96:bc:60:9f:7d:23: 4d:52:26:4e:61:37:9e:46:7c:61:a4:07:a3:6d:bf: 0e:9b:81:71:ba:b6:16:3d:b1:14:20:35:98:ca:bf: 32:6f:ac:11:07:a6:78:1d:41:db:23:81:31:9c:dc: ef:e1:bb:72:d7:1e:5a:70:fd:61:a8:9f:7a:22:4d: 75:7f:c9:2b:ab:14:57:a7:89:35:85:7d:2a:46:51: 1d:9b:a7:da:8e:df:55:46:2e:dc:d8:77:8c:49:de: ea:d9:78:3b:6e:bd:5f:e3:f6:94:72:c9:14:52:ad: 08:34:9c:5b:9a:d7:71:ec:b0:4a:1a:fd:5b:7a:02: 56:5b:2b:89:7b:12:af:f2:58:c5:51:60:eb:dd:9f: 30:03:38:58:cf:f6:4f:62:bc:60:20:49:ab:fc:45: 5e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:1F:C5:36:8E:41:68:A9:94:2B:26:AE:D9:98:17:30:45:64:D5:EB X509v3 Authority Key Identifier: keyid:29:7A:42:29:71:4F:34:E2:9D:3D:92:B2:5F:7B:59:C7:48:F0:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXpCKXFPNOKdPZKyX3tZx0jw38Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1d72ce-be4c-4498-a823-3aebc9f817ce/1/KXpCKXFPNOKdPZKyX3tZx0jw38Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1d72ce-be4c-4498-a823-3aebc9f817ce/1/KXpCKXFPNOKdPZKyX3tZx0jw38Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:79:8c:97:65:db:85:a5:a9:db:d2:8b:c8:73:b5:b6:e0:9a: 28:b7:9e:bf:1a:61:09:04:d7:b8:89:5f:11:68:4d:40:9a:f8: 2d:1b:ed:bc:61:5b:a1:27:dd:ce:4b:f1:9b:3e:69:47:29:4a: f1:55:28:74:08:a1:43:2b:bf:1e:bb:d1:ed:a4:6c:32:fd:8b: 72:34:36:2f:6c:a8:96:37:4f:b0:81:ec:7c:83:a5:9a:66:f1: ee:b9:f1:12:e6:3d:30:47:24:67:e2:a8:51:46:86:88:98:a1: 8a:46:d1:ce:e4:50:d3:0f:9e:08:94:32:fa:18:ee:23:d6:22: 6e:aa:b7:76:6f:de:2b:dd:e1:ba:f8:42:aa:8a:0c:cd:0e:44: 9c:19:88:4b:31:f6:e1:84:d0:70:ee:7d:f0:fe:34:c7:ad:4d: 6a:c3:8d:98:3b:d5:08:dc:ab:24:db:28:48:5b:d7:3a:e7:1a: 04:fc:ef:4b:0f:dc:e1:59:7d:5a:49:15:61:59:31:f4:d1:02: af:91:dc:f4:39:c7:32:90:e9:11:b1:2f:e4:1f:9f:d3:46:d8: 1f:38:88:24:82:64:a5:fb:0a:22:23:26:a4:47:f2:0b:38:63: d6:c4:87:a5:1d:0c:02:ff:c4:cd:34:d0:db:e4:9c:71:1e:fa: 68:25:ef:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLa6/yAvi1hRxfsUVlUupMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2E0MjI5NzE0ZjM0ZTI5ZDNkOTJiMjVmN2I1OWM3NDhm MGRmYzYwHhcNMjUxMjA2MDEwMTM0WhcNMjUxMjA3MDEwMTM0WjAzMTEwLwYDVQQD EygzNDFmYzUzNjhlNDE2OGE5OTQyYjI2YWVkOTk4MTczMDQ1NjRkNWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6nPqjCCNYGnH3b5Aab9tfY3A1Xa Xscp3DOo3OCOE9t10Qe6QW2WIkgzb2CY+fwv+3mFU0GREz3EHBQUX8RIAR0TjrzA ORMUa4GgwbcbIdcu2yVH6hS17zXPb/LfbklU/KWWvGCffSNNUiZOYTeeRnxhpAej bb8Om4FxurYWPbEUIDWYyr8yb6wRB6Z4HUHbI4ExnNzv4bty1x5acP1hqJ96Ik11 f8krqxRXp4k1hX0qRlEdm6fajt9VRi7c2HeMSd7q2Xg7br1f4/aUcskUUq0INJxb mtdx7LBKGv1begJWWyuJexKv8ljFUWDr3Z8wAzhYz/ZPYrxgIEmr/EVexQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQfxTaOQWiplCsmrtmYFzBFZNXrMB8GA1UdIwQY MBaAFCl6QilxTzTinT2Ssl97WcdI8N/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1hwQ0tYRlBOT0tkUFpLeVgzdFp4MGp3MzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8xZDcyY2UtYmU0Yy00NDk4LWE4MjMt M2FlYmM5ZjgxN2NlLzEvS1hwQ0tYRlBOT0tkUFpLeVgzdFp4MGp3MzhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8xZDcyY2UtYmU0Yy00NDk4LWE4MjMtM2FlYmM5ZjgxN2Nl LzEvS1hwQ0tYRlBOT0tkUFpLeVgzdFp4MGp3MzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV3mMl2Xb haWp29KLyHO1tuCaKLeevxphCQTXuIlfEWhNQJr4LRvtvGFboSfdzkvxmz5pRylK 8VUodAihQyu/HrvR7aRsMv2LcjQ2L2yoljdPsIHsfIOlmmbx7rnxEuY9MEckZ+Ko UUaGiJihikbRzuRQ0w+eCJQy+hjuI9Yibqq3dm/eK93huvhCqooMzQ5EnBmISzH2 4YTQcO598P40x61NasONmDvVCNyrJNsoSFvXOucaBPzvSw/c4Vl9WkkVYVkx9NEC r5Hc9DnHMpDpEbEv5B+f00bYHziIJIJkpfsKIiMmpEfyCzhj1sSHpR0MAv/EzTTQ 2+SccR76aCXveg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:34:33 2025 by rpki-client