This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft File: KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft (raw, json) Hash identifier: I4a8FH5fQFU88zmW4OJzSPoPAi3YcN7zm+uIT514daI= Subject key identifier: 90:A6:BA:F6:7E:2D:03:F2:37:3D:5D:2F:D5:D5:5D:E8:97:9A:34:32 Authority key identifier: 29:77:44:67:CC:9F:1E:D9:D9:57:B8:3A:A1:7A:09:0B:1D:F7:69:46 Certificate issuer: /CN=29774467cc9f1ed9d957b83aa17a090b1df76946 Certificate serial: 019AF50A44323B4FBBE5D89FD92712B0832D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft Manifest number: 0FFF Signing time: Sat 06 Dec 2025 19:01:21 +0000 Manifest this update: Sat 06 Dec 2025 19:01:21 +0000 Manifest next update: Sun 07 Dec 2025 19:01:21 +0000 Files and hashes: 1: KXdEZ8yfHtnZV7g6oXoJCx33aUY.crl (hash: SSFetX1btAZiVDphu/kHCZL+uOKdW9e06I3u0joXyW8=) 2: b64Uii9JYXCMSIcDqVfd-guKolk.roa (hash: zu1QMl+md4/UwiMRhp2koQ5VJ3r3EhScu5BVA2+NzSc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:44:32:3b:4f:bb:e5:d8:9f:d9:27:12:b0:83:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29774467cc9f1ed9d957b83aa17a090b1df76946 Validity Not Before: Dec 6 19:01:21 2025 GMT Not After : Dec 7 19:01:21 2025 GMT Subject: CN=90a6baf67e2d03f2373d5d2fd5d55de8979a3432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:48:99:0c:c2:7e:77:a0:b5:07:78:4c:e5:9d: eb:7d:10:9a:8c:30:92:1e:70:96:d9:9c:01:97:cc: 36:d0:ba:f9:62:69:a4:8a:97:71:e5:1b:ce:d3:f3: 4e:0c:55:c8:66:12:8e:5e:09:5a:3e:08:2c:fb:4d: 19:75:51:ae:ce:d5:0b:77:91:a8:8a:8e:62:f9:2d: d4:77:1b:57:52:35:da:25:ab:c4:d3:e5:48:4d:b0: d0:c7:aa:d3:4b:62:46:36:79:a2:0c:00:1d:21:ca: e3:3d:68:6c:ef:3f:85:12:d8:6d:17:09:05:ef:c6: 04:b9:2b:29:d9:c5:0a:f7:00:4f:87:0e:69:33:91: d6:63:15:94:89:80:14:64:29:52:70:4e:5c:65:6e: de:81:45:6e:cf:1e:21:1d:53:78:0e:51:fc:0a:a7: 0a:ee:ac:38:20:77:9d:89:68:fc:14:48:26:dc:f5: bd:dc:80:d0:c3:df:de:4f:e1:75:3a:4f:35:b3:91: ce:0d:9f:72:07:b8:7e:a1:72:ea:51:22:7b:e3:05: 42:76:69:40:a1:8f:b5:b5:f6:8e:4c:1d:08:af:9d: 24:eb:4c:3b:35:f3:d1:e2:38:10:77:92:71:3e:79: 05:e7:4a:87:22:b0:5a:5f:42:e2:d9:c2:a1:25:8b: cd:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A6:BA:F6:7E:2D:03:F2:37:3D:5D:2F:D5:D5:5D:E8:97:9A:34:32 X509v3 Authority Key Identifier: keyid:29:77:44:67:CC:9F:1E:D9:D9:57:B8:3A:A1:7A:09:0B:1D:F7:69:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:18:37:e2:4f:44:f6:65:dc:a9:8f:b2:77:c2:91:f3:18:ee: c9:a2:c8:a9:cc:71:df:b1:7d:8f:99:4a:29:be:1e:58:4b:19: 2c:0b:39:c9:1d:97:72:c9:ff:df:fe:0d:f2:c9:93:92:b9:6e: 22:87:50:2c:cb:66:88:b8:bc:9b:84:d2:e4:48:73:d1:93:ea: f0:4a:a4:07:eb:e1:b9:72:55:fa:84:b4:6c:e5:83:9d:78:13: 63:a5:30:a2:9b:f7:03:5c:f0:ae:55:42:d9:66:be:a6:e5:28: b6:f6:70:01:5c:3c:c6:19:b3:37:41:fa:2e:fc:e3:0b:5f:67: f5:2e:89:4e:68:a0:33:f2:c6:51:4d:7d:96:56:56:13:31:42: 1b:fb:76:ad:2d:ad:7d:1c:23:4b:78:dd:e0:e8:22:30:71:6c: 5f:d9:45:04:19:c6:ba:08:28:cf:f5:d6:78:5c:50:fc:d2:73: d5:b6:a1:7f:42:da:d3:66:62:c4:0c:91:0e:1d:38:66:ad:39: e6:e5:26:28:e6:36:4a:fb:9d:a0:58:26:95:87:f1:da:b8:fc: 0b:4a:24:f3:2c:71:7b:72:90:1e:27:0c:3b:15:2e:76:1d:04: d7:d6:4a:0a:c9:cb:79:09:b5:ff:17:92:64:98:6d:70:63:1f: 6d:ad:4a:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CkQyO0+75dif2ScSsIMtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5Nzc0NDY3Y2M5ZjFlZDlkOTU3YjgzYWExN2EwOTBiMWRm NzY5NDYwHhcNMjUxMjA2MTkwMTIxWhcNMjUxMjA3MTkwMTIxWjAzMTEwLwYDVQQD Eyg5MGE2YmFmNjdlMmQwM2YyMzczZDVkMmZkNWQ1NWRlODk3OWEzNDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60iZDMJ+d6C1B3hM5Z3rfRCajDCS HnCW2ZwBl8w20Lr5Ymmkipdx5RvO0/NODFXIZhKOXglaPggs+00ZdVGuztULd5Go io5i+S3UdxtXUjXaJavE0+VITbDQx6rTS2JGNnmiDAAdIcrjPWhs7z+FEthtFwkF 78YEuSsp2cUK9wBPhw5pM5HWYxWUiYAUZClScE5cZW7egUVuzx4hHVN4DlH8CqcK 7qw4IHediWj8FEgm3PW93IDQw9/eT+F1Ok81s5HODZ9yB7h+oXLqUSJ74wVCdmlA oY+1tfaOTB0Ir50k60w7NfPR4jgQd5JxPnkF50qHIrBaX0Li2cKhJYvNfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJCmuvZ+LQPyNz1dL9XVXeiXmjQyMB8GA1UdIwQY MBaAFCl3RGfMnx7Z2Ve4OqF6CQsd92lGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1hkRVo4eWZIdG5aVjdnNm9Yb0pDeDMzYVVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC85ZGMwOGMtZTFiNi00MjU5LWE1ZGIt ZDU1ZTM4ODY4YTUyLzEvS1hkRVo4eWZIdG5aVjdnNm9Yb0pDeDMzYVVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC85ZGMwOGMtZTFiNi00MjU5LWE1ZGItZDU1ZTM4ODY4YTUy LzEvS1hkRVo4eWZIdG5aVjdnNm9Yb0pDeDMzYVVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkBg34k9E 9mXcqY+yd8KR8xjuyaLIqcxx37F9j5lKKb4eWEsZLAs5yR2Xcsn/3/4N8smTkrlu IodQLMtmiLi8m4TS5Ehz0ZPq8EqkB+vhuXJV+oS0bOWDnXgTY6Uwopv3A1zwrlVC 2Wa+puUotvZwAVw8xhmzN0H6LvzjC19n9S6JTmigM/LGUU19llZWEzFCG/t2rS2t fRwjS3jd4OgiMHFsX9lFBBnGuggoz/XWeFxQ/NJz1bahf0La02ZixAyRDh04Zq05 5uUmKOY2SvudoFgmlYfx2rj8C0ok8yxxe3KQHicMOxUudh0E19ZKCsnLeQm1/xeS ZJhtcGMfba1K9g== -----END CERTIFICATE-----Generated at Sun Dec 7 03:07:51 2025 by rpki-client