This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft File: KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft (raw, json) Hash identifier: lAtbQTa+AROcGY+BwGGxXeBXZ1f/NVfhYS9LWIo3tWI= Subject key identifier: 11:7A:30:1A:32:4E:F7:1D:63:5B:1B:02:4B:9A:A7:19:90:87:23:9C Authority key identifier: 28:FA:45:6D:1C:23:67:86:21:95:4F:FB:F4:93:A3:23:DE:2C:44:84 Certificate issuer: /CN=28fa456d1c23678621954ffbf493a323de2c4484 Certificate serial: 019B3E6D425F272E51C2321E8CEFB44FF563 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPpFbRwjZ4YhlU_79JOjI94sRIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft Manifest number: 0CC4 Signing time: Sun 21 Dec 2025 01:01:46 +0000 Manifest this update: Sun 21 Dec 2025 01:01:46 +0000 Manifest next update: Mon 22 Dec 2025 01:01:46 +0000 Files and hashes: 1: KPpFbRwjZ4YhlU_79JOjI94sRIQ.crl (hash: 8vi7Q5+FV5MBj2eTmTaKtAnH5+o9hiWkx+33BDMH7Ws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KPpFbRwjZ4YhlU_79JOjI94sRIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:42:5f:27:2e:51:c2:32:1e:8c:ef:b4:4f:f5:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28fa456d1c23678621954ffbf493a323de2c4484 Validity Not Before: Dec 21 01:01:46 2025 GMT Not After : Dec 22 01:01:46 2025 GMT Subject: CN=117a301a324ef71d635b1b024b9aa7199087239c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:71:ab:d6:e9:0d:c2:16:49:d2:ce:a4:87:84: 5a:43:c6:9a:04:35:94:d9:e1:bc:95:fc:1a:ff:57: 71:14:ae:4f:98:16:cc:fb:c8:71:19:9d:06:4a:9a: ef:b7:4d:95:22:92:d4:d3:c2:f0:4f:4a:35:d7:5f: 62:0f:f1:da:ba:a6:83:c0:fd:f3:bf:24:99:7f:77: 5b:cd:19:8d:2c:10:4d:17:3f:16:15:df:4d:1c:57: 7e:85:0c:9f:7e:f7:45:95:65:fc:72:b8:fd:98:f2: 20:f5:c8:77:df:e2:48:7c:12:50:15:fa:43:53:34: 32:c4:a5:91:20:5c:3e:7a:d8:68:dd:1a:ff:6d:60: 63:dc:62:c9:3f:1e:1e:7a:26:78:1a:dd:4e:15:97: 03:e9:34:5f:61:a0:fc:e0:27:9e:28:29:ab:3c:3e: 64:3d:12:5b:aa:5c:d9:0a:6a:2d:16:81:55:33:c4: 95:46:8b:d4:1a:7d:bc:9f:b8:bd:5b:61:89:e7:c7: d3:06:72:c1:6b:72:5d:ad:5e:45:7c:95:22:80:b7: 3c:3a:02:ca:2f:d9:41:27:4f:c0:84:dd:47:19:e3: d1:da:3c:4b:f0:89:d3:d5:f4:53:38:08:15:57:ba: 26:91:78:8e:92:9f:99:4b:68:de:4b:01:c5:c5:28: a7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:7A:30:1A:32:4E:F7:1D:63:5B:1B:02:4B:9A:A7:19:90:87:23:9C X509v3 Authority Key Identifier: keyid:28:FA:45:6D:1C:23:67:86:21:95:4F:FB:F4:93:A3:23:DE:2C:44:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPpFbRwjZ4YhlU_79JOjI94sRIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:a1:5f:a1:76:31:b9:9d:be:ac:8a:74:d9:de:a9:d7:30:c7: ac:b7:8a:1d:c6:86:51:9a:7b:19:11:27:e5:39:28:6b:98:a7: b9:5f:a1:47:ea:f3:70:1c:88:c6:4f:a2:a8:e0:40:2c:b7:30: af:53:ad:b9:60:c0:8f:53:15:84:b3:d0:cd:26:e9:e4:52:7b: b0:f5:3e:60:94:a4:f1:75:a8:b4:9c:35:c1:f5:b1:ba:82:44: d9:46:a1:94:a2:ee:d7:da:bb:3e:1d:e0:22:c4:82:25:4c:37: 99:47:2a:ea:49:74:91:69:b2:18:49:94:b3:50:2f:3a:9d:88: 49:9c:19:3d:d9:f6:fe:8b:68:83:b1:68:71:55:55:be:a3:37: c8:de:8e:72:39:9e:c3:b9:b8:b8:7a:a8:30:39:a3:91:cc:19: 2e:2d:44:a3:d0:c2:49:d6:8a:1d:ba:f7:3f:a3:53:77:ca:c0: 14:56:32:1c:f5:04:83:0c:59:8e:b5:f9:fc:e2:d9:f4:86:98: 56:f4:35:c6:e2:3e:c2:74:98:c8:d6:76:0b:26:d1:63:16:3e: e0:c9:c9:8f:4d:0b:47:6a:e5:32:25:84:bf:52:bb:2e:03:19: 3b:dc:a0:7d:c5:0a:2c:c4:55:e8:89:f3:15:8a:b5:57:0e:d0: 02:7b:4f:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bUJfJy5RwjIejO+0T/VjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ZmE0NTZkMWMyMzY3ODYyMTk1NGZmYmY0OTNhMzIzZGUy YzQ0ODQwHhcNMjUxMjIxMDEwMTQ2WhcNMjUxMjIyMDEwMTQ2WjAzMTEwLwYDVQQD EygxMTdhMzAxYTMyNGVmNzFkNjM1YjFiMDI0YjlhYTcxOTkwODcyMzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nGr1ukNwhZJ0s6kh4RaQ8aaBDWU 2eG8lfwa/1dxFK5PmBbM+8hxGZ0GSprvt02VIpLU08LwT0o1119iD/HauqaDwP3z vySZf3dbzRmNLBBNFz8WFd9NHFd+hQyffvdFlWX8crj9mPIg9ch33+JIfBJQFfpD UzQyxKWRIFw+etho3Rr/bWBj3GLJPx4eeiZ4Gt1OFZcD6TRfYaD84CeeKCmrPD5k PRJbqlzZCmotFoFVM8SVRovUGn28n7i9W2GJ58fTBnLBa3JdrV5FfJUigLc8OgLK L9lBJ0/AhN1HGePR2jxL8InT1fRTOAgVV7omkXiOkp+ZS2jeSwHFxSinMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBF6MBoyTvcdY1sbAkuapxmQhyOcMB8GA1UdIwQY MBaAFCj6RW0cI2eGIZVP+/SToyPeLESEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1BwRmJSd2paNFlobFVfNzlKT2pJOTRzUklRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iMWFjYWItOWE4Yi00MjNlLWIwYmMt ZjQ1YTJhNjM0NzA0LzEvS1BwRmJSd2paNFlobFVfNzlKT2pJOTRzUklRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9iMWFjYWItOWE4Yi00MjNlLWIwYmMtZjQ1YTJhNjM0NzA0 LzEvS1BwRmJSd2paNFlobFVfNzlKT2pJOTRzUklRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJaFfoXYx uZ2+rIp02d6p1zDHrLeKHcaGUZp7GREn5Tkoa5inuV+hR+rzcByIxk+iqOBALLcw r1OtuWDAj1MVhLPQzSbp5FJ7sPU+YJSk8XWotJw1wfWxuoJE2UahlKLu19q7Ph3g IsSCJUw3mUcq6kl0kWmyGEmUs1AvOp2ISZwZPdn2/otog7FocVVVvqM3yN6Ocjme w7m4uHqoMDmjkcwZLi1Eo9DCSdaKHbr3P6NTd8rAFFYyHPUEgwxZjrX5/OLZ9IaY VvQ1xuI+wnSYyNZ2CybRYxY+4MnJj00LR2rlMiWEv1K7LgMZO9ygfcUKLMRV6Inz FYq1Vw7QAntPwg== -----END CERTIFICATE-----Generated at Sun Dec 21 10:16:42 2025 by rpki-client