This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft File: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft (raw, json) Hash identifier: CAnDl8f6Xrrr1B1n+qHAW6eftOAdtwwrnVQzltTYAuU= Subject key identifier: D7:69:98:12:75:4B:EA:8E:89:5B:F0:6E:57:FE:48:E9:8A:D6:DB:11 Authority key identifier: 29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9 Certificate issuer: /CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9 Certificate serial: 019AF12EA950D9134CA20FEE636BB6DDFEF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft Manifest number: 1357 Signing time: Sat 06 Dec 2025 01:02:38 +0000 Manifest this update: Sat 06 Dec 2025 01:02:38 +0000 Manifest next update: Sun 07 Dec 2025 01:02:38 +0000 Files and hashes: 1: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl (hash: 9kNEe/3zS1/FDmy80jYFBZpssxnAMtQGEz4Wd26cA0U=) 2: wWu_mnG1mF1XhVWaW0DZDLRaMZA.roa (hash: OxlFGiJEt7spgwhfyEKbeiDTLip5JYbp9FNAPkL6rNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:a9:50:d9:13:4c:a2:0f:ee:63:6b:b6:dd:fe:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9 Validity Not Before: Dec 6 01:02:38 2025 GMT Not After : Dec 7 01:02:38 2025 GMT Subject: CN=d7699812754bea8e895bf06e57fe48e98ad6db11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:78:cf:10:f9:44:ff:d7:99:09:d6:6d:d9:61: 67:b7:63:72:91:5b:7a:5b:9e:96:51:7c:b5:85:15: 06:c0:b2:01:2e:6e:a6:3d:4a:b6:bd:5c:30:1b:30: 45:c1:44:f0:4f:5c:dd:53:7b:a7:af:46:1d:52:62: ec:0f:9d:58:eb:f3:e3:a3:2c:e0:b2:78:4c:3f:d8: f5:9c:61:27:b5:d6:27:33:7f:f7:f1:b2:fb:ea:1d: c7:97:a2:97:73:3b:9c:c5:03:0a:c9:01:57:c0:ba: a2:ba:7a:06:67:ae:48:5d:20:89:15:81:07:79:ff: 61:96:22:01:7a:f7:8d:7e:d3:dd:37:12:d8:7b:cf: 4b:b6:30:75:45:5e:76:2b:29:48:5a:58:96:8f:3d: da:54:df:0e:3c:59:a7:85:e5:3a:de:f6:84:5b:e3: bb:15:d9:ce:a3:0f:61:80:1b:88:98:ad:62:57:80: e4:a5:cb:86:0d:c2:80:49:6a:5a:56:f4:69:be:0a: 21:aa:dc:2f:bb:4d:f1:69:f2:13:cd:1f:7e:1c:0b: 41:77:ab:75:3a:5c:f5:d8:ee:ba:ac:d5:f7:a7:54: d4:e7:eb:57:24:b4:bb:2a:80:4e:81:03:74:51:ac: 1e:08:31:05:fd:ae:0d:36:66:8e:b3:2c:e4:60:ba: c4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:69:98:12:75:4B:EA:8E:89:5B:F0:6E:57:FE:48:E9:8A:D6:DB:11 X509v3 Authority Key Identifier: keyid:29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:c6:c2:4c:ce:f8:b4:dc:aa:4c:6a:cf:f8:37:62:17:a0:0a: 31:fa:97:da:53:e9:4a:7b:f8:5a:28:42:32:41:45:9e:fb:d3: 39:c6:13:fb:03:68:b3:35:3d:50:fd:e3:58:07:31:f9:75:cf: ed:79:a2:c4:51:a7:24:8c:b9:e7:1f:b3:80:41:16:05:c1:fe: 97:38:86:7e:1e:b9:85:cd:09:c0:c0:8b:cb:d1:b0:f0:22:a0: 17:f0:1f:4d:51:8d:31:c5:85:4e:d1:51:a5:81:51:ca:69:d9: 82:7e:45:be:2a:3c:db:2f:e7:d8:af:0f:ec:9c:ab:04:99:67: d7:8b:96:97:6a:e8:bf:a1:24:c8:c9:27:87:3f:19:50:36:bc: 6a:64:74:d3:2d:b0:27:17:c6:81:f6:3d:fa:aa:83:bb:7f:a3: 4e:a7:cd:0e:4a:6b:b2:f5:a4:f1:33:e1:5e:ee:02:01:16:7f: 7b:69:ab:ae:ed:9d:09:de:ed:64:ad:52:a8:d9:bd:78:11:6f: 7e:dc:77:9c:bd:f5:fd:f2:b5:9d:c2:20:30:e0:84:56:0c:76: c9:e2:96:73:6b:b8:cd:c7:3f:38:c7:7f:0e:28:cc:a0:27:6b: 15:91:4e:4e:00:c5:82:95:e0:0e:36:2f:4e:f7:99:54:41:1e: 12:91:7d:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLqlQ2RNMog/uY2u23f7yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZmI3ZGEzYjQ0ZTQxYjMyMzY5ZTRhNWM3OTBkMzA4MWZj NjlhYTkwHhcNMjUxMjA2MDEwMjM4WhcNMjUxMjA3MDEwMjM4WjAzMTEwLwYDVQQD EyhkNzY5OTgxMjc1NGJlYThlODk1YmYwNmU1N2ZlNDhlOThhZDZkYjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3jPEPlE/9eZCdZt2WFnt2NykVt6 W56WUXy1hRUGwLIBLm6mPUq2vVwwGzBFwUTwT1zdU3unr0YdUmLsD51Y6/Pjoyzg snhMP9j1nGEntdYnM3/38bL76h3Hl6KXczucxQMKyQFXwLqiunoGZ65IXSCJFYEH ef9hliIBeveNftPdNxLYe89LtjB1RV52KylIWliWjz3aVN8OPFmnheU63vaEW+O7 FdnOow9hgBuImK1iV4DkpcuGDcKASWpaVvRpvgohqtwvu03xafITzR9+HAtBd6t1 Olz12O66rNX3p1TU5+tXJLS7KoBOgQN0UaweCDEF/a4NNmaOsyzkYLrE2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNdpmBJ1S+qOiVvwblf+SOmK1tsRMB8GA1UdIwQY MBaAFCn7faO0TkGzI2nkpceQ0wgfxpqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2Z0OW83Uk9RYk1qYWVTbHg1RFRDQl9HbXFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8xN2EwMTYtMjZjNy00MjRjLTg2MmYt YmNhYzhiNTUyYTlhLzEvS2Z0OW83Uk9RYk1qYWVTbHg1RFRDQl9HbXFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8xN2EwMTYtMjZjNy00MjRjLTg2MmYtYmNhYzhiNTUyYTlh LzEvS2Z0OW83Uk9RYk1qYWVTbHg1RFRDQl9HbXFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU8bCTM74 tNyqTGrP+DdiF6AKMfqX2lPpSnv4WihCMkFFnvvTOcYT+wNoszU9UP3jWAcx+XXP 7XmixFGnJIy55x+zgEEWBcH+lziGfh65hc0JwMCLy9Gw8CKgF/AfTVGNMcWFTtFR pYFRymnZgn5Fvio82y/n2K8P7JyrBJln14uWl2rov6EkyMknhz8ZUDa8amR00y2w JxfGgfY9+qqDu3+jTqfNDkprsvWk8TPhXu4CARZ/e2mrru2dCd7tZK1SqNm9eBFv ftx3nL31/fK1ncIgMOCEVgx2yeKWc2u4zcc/OMd/DijMoCdrFZFOTgDFgpXgDjYv TveZVEEeEpF9KA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:22 2025 by rpki-client