This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft File: KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft (raw, json) Hash identifier: HlsJA7Sj//BQqxp3275Z+nK3LoadWurbxF6oiTXLoJU= Subject key identifier: 08:AF:03:C3:90:3D:D8:D8:63:C3:BB:EF:08:B0:BD:B3:64:FF:31:DD Authority key identifier: 2A:52:75:AD:89:C9:97:6B:51:03:0C:5B:D2:56:79:9B:79:26:56:0C Certificate issuer: /CN=2a5275ad89c9976b51030c5bd256799b7926560c Certificate serial: 019AF2E44C3D55DFF603DF3A5BFEA302B96C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft Manifest number: 0B12 Signing time: Sat 06 Dec 2025 09:00:39 +0000 Manifest this update: Sat 06 Dec 2025 09:00:39 +0000 Manifest next update: Sun 07 Dec 2025 09:00:39 +0000 Files and hashes: 1: KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.crl (hash: uNB0z5UMLglIhmCRcgTWLxQLQDqF2WZFob86e/p9Z0Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft rsync://rpki.ripe.net/repository/DEFAULT/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:4c:3d:55:df:f6:03:df:3a:5b:fe:a3:02:b9:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a5275ad89c9976b51030c5bd256799b7926560c Validity Not Before: Dec 6 09:00:39 2025 GMT Not After : Dec 7 09:00:39 2025 GMT Subject: CN=08af03c3903dd8d863c3bbef08b0bdb364ff31dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6c:54:6b:25:d9:e4:a2:a9:13:6e:79:8e:c6: 72:0d:67:7d:0f:63:98:b0:9c:6f:5f:2c:cf:08:6f: 38:7d:53:1d:52:0f:c8:91:87:9a:94:89:9e:c5:d5: 65:26:c4:75:40:51:15:29:94:25:e1:90:5d:1e:3a: e1:f0:1d:42:91:63:8f:1e:26:b0:eb:9a:e6:64:cb: fb:94:df:96:42:ac:2a:06:2a:5f:1d:dc:17:1a:79: e7:eb:5a:4f:d6:1c:ae:7b:b3:06:85:82:24:e1:77: 5a:4e:58:a2:b1:8b:c4:8b:91:f9:e2:89:ce:e6:5b: 7e:b1:81:ed:bb:1c:c2:fa:dc:1f:1c:24:60:8b:bf: 3f:3b:d2:5f:5a:82:47:57:6c:24:88:67:1d:d7:13: 90:50:a1:d6:a4:c5:3d:c5:dd:80:e9:bb:ae:8f:fa: 7d:dd:de:09:fc:c6:0a:63:4d:b7:78:c3:8f:62:da: 69:18:6c:16:f8:31:72:51:fb:f1:ee:fe:a1:3d:a7: c0:20:fd:ce:33:49:53:d8:8f:1c:44:9e:eb:08:8e: 1c:d5:3b:e3:61:dc:df:db:42:61:0d:fe:b0:b1:41: a0:42:5e:19:bd:8f:4a:20:ca:e6:0b:14:91:ab:1a: 22:65:23:18:60:d1:16:78:e0:f6:77:93:2b:76:3c: 52:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:AF:03:C3:90:3D:D8:D8:63:C3:BB:EF:08:B0:BD:B3:64:FF:31:DD X509v3 Authority Key Identifier: keyid:2A:52:75:AD:89:C9:97:6B:51:03:0C:5B:D2:56:79:9B:79:26:56:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:26:32:39:fd:20:14:e9:55:6d:13:9c:60:50:76:a2:35:07: 10:40:5d:88:30:ba:e9:53:06:12:70:ef:b3:58:77:a1:08:ad: 9b:5b:a6:f6:18:10:4c:4e:99:d2:68:d6:03:ec:b1:ea:db:22: 00:fd:e7:24:06:dc:80:db:d1:29:93:08:d5:5c:3c:f1:52:72: f4:e4:7d:cd:f5:4c:ef:2c:50:a8:ab:a4:9f:82:bd:42:df:11: 0b:2c:42:9d:c2:b5:e6:6e:ba:9e:9f:0e:86:f6:a7:7d:d8:04: 79:a3:db:be:18:38:f6:7a:b1:17:63:a2:6e:4a:2b:60:d0:b4: ec:97:39:f6:8a:3a:e0:72:a6:3f:b8:67:8e:36:ce:32:e6:6a: 8f:66:6b:a7:77:d4:82:7b:6f:65:85:96:47:d0:fc:01:b5:28: 26:35:0a:0a:6c:8a:41:5c:ae:8f:fa:ae:6d:f9:c7:5d:67:5c: 1c:dc:a8:ec:7f:d1:6a:f2:fc:77:20:6a:5a:65:39:29:92:11: 1e:39:4d:31:09:a8:ab:a2:81:65:03:74:22:96:e2:72:7c:0e: 44:c5:87:9c:9f:aa:51:09:ed:24:dd:17:3c:8e:e4:fe:2d:83: 2f:e8:71:55:34:2c:63:f2:8f:6b:19:a9:3f:5f:1c:a9:9e:33: b3:58:9f:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5Ew9Vd/2A986W/6jArlsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhNTI3NWFkODljOTk3NmI1MTAzMGM1YmQyNTY3OTliNzky NjU2MGMwHhcNMjUxMjA2MDkwMDM5WhcNMjUxMjA3MDkwMDM5WjAzMTEwLwYDVQQD EygwOGFmMDNjMzkwM2RkOGQ4NjNjM2JiZWYwOGIwYmRiMzY0ZmYzMWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWxUayXZ5KKpE255jsZyDWd9D2OY sJxvXyzPCG84fVMdUg/IkYealImexdVlJsR1QFEVKZQl4ZBdHjrh8B1CkWOPHiaw 65rmZMv7lN+WQqwqBipfHdwXGnnn61pP1hyue7MGhYIk4XdaTliisYvEi5H54onO 5lt+sYHtuxzC+twfHCRgi78/O9JfWoJHV2wkiGcd1xOQUKHWpMU9xd2A6buuj/p9 3d4J/MYKY023eMOPYtppGGwW+DFyUfvx7v6hPafAIP3OM0lT2I8cRJ7rCI4c1Tvj Ydzf20JhDf6wsUGgQl4ZvY9KIMrmCxSRqxoiZSMYYNEWeOD2d5MrdjxSzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAivA8OQPdjYY8O77wiwvbNk/zHdMB8GA1UdIwQY MBaAFCpSda2JyZdrUQMMW9JWeZt5JlYMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2xKMXJZbkpsMnRSQXd4YjBsWjVtM2ttVmd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC85YmMyZDgtOTMyMC00YTMxLWE3ZDQt MTE1NjY5MGE0M2I1LzEvS2xKMXJZbkpsMnRSQXd4YjBsWjVtM2ttVmd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC85YmMyZDgtOTMyMC00YTMxLWE3ZDQtMTE1NjY5MGE0M2I1 LzEvS2xKMXJZbkpsMnRSQXd4YjBsWjVtM2ttVmd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHiYyOf0g FOlVbROcYFB2ojUHEEBdiDC66VMGEnDvs1h3oQitm1um9hgQTE6Z0mjWA+yx6tsi AP3nJAbcgNvRKZMI1Vw88VJy9OR9zfVM7yxQqKukn4K9Qt8RCyxCncK15m66np8O hvanfdgEeaPbvhg49nqxF2OibkorYNC07Jc59oo64HKmP7hnjjbOMuZqj2Zrp3fU gntvZYWWR9D8AbUoJjUKCmyKQVyuj/qubfnHXWdcHNyo7H/RavL8dyBqWmU5KZIR HjlNMQmoq6KBZQN0IpbicnwORMWHnJ+qUQntJN0XPI7k/i2DL+hxVTQsY/KPaxmp P18cqZ4zs1ifCA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:12:36 2025 by rpki-client