This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.mft File: KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.mft (raw, json) Hash identifier: tzo4kXbatmD589izIRbBbzBoji2p5zLp86yu6G7JQbE= Subject key identifier: 8F:63:89:1E:B7:A5:AD:42:19:21:BE:56:EA:6E:3E:4A:E7:EC:61:64 Authority key identifier: 28:5F:EE:C8:7D:19:59:34:08:72:F8:F7:98:31:20:2F:24:C8:0C:9E Certificate issuer: /CN=285feec87d1959340872f8f79831202f24c80c9e Certificate serial: 019AF276EE108D884042BF9ED9458EC42B86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 07:01:11 +0000 Manifest this update: Sat 06 Dec 2025 07:01:11 +0000 Manifest next update: Sun 07 Dec 2025 07:01:11 +0000 Files and hashes: 1: KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.crl (hash: /vmRqz8eyWCwa9/gd5dDZdBuTcFFQXsJYp4IPRTga5I=) 2: dufDt0AmSEl5MX84gmoizwQiTsk.roa (hash: aXEbp58hPoSuyC6IS1AxqUQLOo+BHH3jFCGl+xNSnf8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.mft rsync://rpki.ripe.net/repository/DEFAULT/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:ee:10:8d:88:40:42:bf:9e:d9:45:8e:c4:2b:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=285feec87d1959340872f8f79831202f24c80c9e Validity Not Before: Dec 6 07:01:11 2025 GMT Not After : Dec 7 07:01:11 2025 GMT Subject: CN=8f63891eb7a5ad421921be56ea6e3e4ae7ec6164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:7b:f9:75:ad:d9:5b:8d:14:88:08:57:db:9e: ef:0c:01:37:8a:d2:ce:94:c6:a1:a1:a4:00:ef:47: e2:dd:fc:3e:28:9c:fd:bd:90:16:f2:22:51:eb:ba: 6d:f2:73:22:49:77:49:18:07:81:a3:35:eb:9a:d1: 75:37:0c:3b:fc:f0:a5:8a:fb:9a:1d:ce:85:1b:ef: 9f:21:63:25:83:a6:2d:7b:d7:8a:0c:89:f9:a0:5a: 4a:d1:58:6f:d4:c8:8b:f0:bd:ba:aa:b9:98:fb:39: 66:ec:8c:b9:b8:0c:90:3d:a9:8a:89:8b:e7:41:ab: 8a:29:4a:04:91:b3:36:8b:f5:a3:d0:35:37:44:c4: 1d:6b:f6:94:57:fd:43:1b:fe:9d:e4:ff:fa:95:6c: e4:d0:d6:09:25:f3:b4:3e:c8:4c:3f:f5:21:56:9a: ac:05:37:d5:19:64:3f:51:5b:2e:76:1c:54:16:e9: 11:92:b1:ea:8b:b8:a2:4a:6c:53:c1:1d:7c:0f:09: f9:4f:0e:d8:a2:b4:65:1d:97:40:7d:da:f7:19:87: d3:3f:fc:03:3a:31:5c:7f:d2:47:4d:c5:63:92:1e: a5:01:0e:43:3c:87:1b:6e:a0:51:1a:6c:60:9c:ad: 62:a5:2a:6f:21:d5:00:1a:23:7d:61:c8:60:d8:97: a1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:63:89:1E:B7:A5:AD:42:19:21:BE:56:EA:6E:3E:4A:E7:EC:61:64 X509v3 Authority Key Identifier: keyid:28:5F:EE:C8:7D:19:59:34:08:72:F8:F7:98:31:20:2F:24:C8:0C:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:c8:6a:c4:d9:2a:4d:77:ab:25:64:f1:96:24:dc:de:65:19: 2d:c4:69:70:27:fb:bc:11:cb:2f:58:d8:9c:bc:13:44:fb:2a: 2f:f7:86:43:39:a7:07:69:23:15:9c:27:97:0c:02:84:45:81: 97:f0:22:6c:bb:44:dd:d4:69:a2:56:01:43:ad:63:a0:2b:0d: 0c:ec:3f:81:bc:c6:0b:48:a3:18:60:d7:93:c9:c3:84:96:49: 2c:2a:3d:95:9e:12:66:a8:3c:30:66:fc:78:f5:ab:e9:13:99: 80:2a:ba:75:6a:cf:98:02:ec:c6:19:26:c4:53:b7:53:ff:3b: c6:a7:22:86:43:d7:fe:1b:8d:b7:87:3b:e4:34:8a:c4:35:f2: a5:f4:cd:22:4a:37:1d:ca:0a:6d:9f:b3:0d:ef:42:3a:5f:27: 5e:e8:c8:c5:09:be:24:d3:f8:01:b8:e2:99:ef:fd:bf:3c:ba: 2b:64:b9:8a:d5:a7:b2:50:ab:78:24:0e:62:aa:4c:11:93:ab: 5f:8b:b5:35:35:42:66:60:02:8e:60:53:9f:e8:08:1c:85:4d: f2:8d:49:51:b7:2f:a5:1f:a6:2b:8d:dd:1c:1f:95:76:bf:af: 76:16:2f:15:36:0d:3a:50:0c:61:94:5a:53:ec:c1:34:e4:f5: e0:5a:56:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydu4QjYhAQr+e2UWOxCuGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4NWZlZWM4N2QxOTU5MzQwODcyZjhmNzk4MzEyMDJmMjRj ODBjOWUwHhcNMjUxMjA2MDcwMTExWhcNMjUxMjA3MDcwMTExWjAzMTEwLwYDVQQD Eyg4ZjYzODkxZWI3YTVhZDQyMTkyMWJlNTZlYTZlM2U0YWU3ZWM2MTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Xv5da3ZW40UiAhX257vDAE3itLO lMahoaQA70fi3fw+KJz9vZAW8iJR67pt8nMiSXdJGAeBozXrmtF1Nww7/PClivua Hc6FG++fIWMlg6Yte9eKDIn5oFpK0Vhv1MiL8L26qrmY+zlm7Iy5uAyQPamKiYvn QauKKUoEkbM2i/Wj0DU3RMQda/aUV/1DG/6d5P/6lWzk0NYJJfO0PshMP/UhVpqs BTfVGWQ/UVsudhxUFukRkrHqi7iiSmxTwR18Dwn5Tw7YorRlHZdAfdr3GYfTP/wD OjFcf9JHTcVjkh6lAQ5DPIcbbqBRGmxgnK1ipSpvIdUAGiN9Ychg2Jeh+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI9jiR63pa1CGSG+VupuPkrn7GFkMB8GA1UdIwQY MBaAFChf7sh9GVk0CHL495gxIC8kyAyeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0ZfdXlIMFpXVFFJY3ZqM21ERWdMeVRJREo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jNmVmZGItMzE2NS00NTM1LThhYjQt ZmQzY2ZlNjAxMjQ1LzEvS0ZfdXlIMFpXVFFJY3ZqM21ERWdMeVRJREo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9jNmVmZGItMzE2NS00NTM1LThhYjQtZmQzY2ZlNjAxMjQ1 LzEvS0ZfdXlIMFpXVFFJY3ZqM21ERWdMeVRJREo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlshqxNkq TXerJWTxliTc3mUZLcRpcCf7vBHLL1jYnLwTRPsqL/eGQzmnB2kjFZwnlwwChEWB l/AibLtE3dRpolYBQ61joCsNDOw/gbzGC0ijGGDXk8nDhJZJLCo9lZ4SZqg8MGb8 ePWr6ROZgCq6dWrPmALsxhkmxFO3U/87xqcihkPX/huNt4c75DSKxDXypfTNIko3 HcoKbZ+zDe9COl8nXujIxQm+JNP4Abjime/9vzy6K2S5itWnslCreCQOYqpMEZOr X4u1NTVCZmACjmBTn+gIHIVN8o1JUbcvpR+mK43dHB+Vdr+vdhYvFTYNOlAMYZRa U+zBNOT14FpW8A== -----END CERTIFICATE-----Generated at Sat Dec 6 14:56:41 2025 by rpki-client