This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft File: KslDUX9eO3R-dTAyB4mgNES0ORI.mft (raw, json) Hash identifier: 9MnUYV9ChvH5wHyKiwdZkoslqPbmTmj7D5fbgQ3QWwY= Subject key identifier: 54:60:52:65:72:0F:47:DF:69:94:94:FA:97:A1:5A:86:DE:F8:5C:4A Authority key identifier: 2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12 Certificate issuer: /CN=2ac943517f5e3b747e7530320789a03444b43912 Certificate serial: 019AF540ADC095365CE49EBB699A3467D23F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft Manifest number: 1052 Signing time: Sat 06 Dec 2025 20:00:47 +0000 Manifest this update: Sat 06 Dec 2025 20:00:47 +0000 Manifest next update: Sun 07 Dec 2025 20:00:47 +0000 Files and hashes: 1: KslDUX9eO3R-dTAyB4mgNES0ORI.crl (hash: c9MFQ+VyUNqQcyu8vUi/3DvRT4/MHDjQx1jGL3UAd7s=) 2: hRopNkKlsL4OwqAqAiJ3QXD2oug.roa (hash: NMdRr2OaOIcyhizjr1sKy4ahHmQgfdQZAiHU+pJ6knM=) 3: wXKkmEzVnT6wH-e4RUZ5ISziflM.roa (hash: 0ibg6oISPGaXyJMIkBYpRfjFyr2Dyc5Kyu9O/zaq9rU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:ad:c0:95:36:5c:e4:9e:bb:69:9a:34:67:d2:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac943517f5e3b747e7530320789a03444b43912 Validity Not Before: Dec 6 20:00:47 2025 GMT Not After : Dec 7 20:00:47 2025 GMT Subject: CN=54605265720f47df699494fa97a15a86def85c4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3c:4d:94:8e:1a:6a:51:de:a7:4a:de:02:08: 1c:ed:06:09:4a:1c:f3:59:41:50:cc:45:a2:91:60: 12:00:9f:48:5c:c0:46:a4:9a:f8:55:c5:bd:9d:f5: 5f:15:1f:b0:d0:16:80:c8:93:1c:02:32:55:d3:4c: 0c:b4:83:be:60:b5:3d:1e:90:40:0d:d8:d2:f3:85: 14:bc:23:c1:31:95:46:78:f8:ad:4b:52:66:d5:fe: 94:09:a8:83:76:6f:73:f1:22:05:4c:7c:14:2a:d6: a6:26:41:a7:04:85:af:d1:db:8e:9e:b5:8e:85:4a: a2:23:37:6d:10:fa:3b:89:1b:d8:2c:d9:fd:f2:d8: 8a:32:8c:42:b5:0b:14:97:f8:a3:d4:fc:a8:90:a5: ac:ac:12:dd:79:c8:5c:d4:8d:0c:0b:2c:84:6b:f7: 47:bb:91:67:ac:ba:2e:40:ac:a7:d1:56:55:58:89: 36:43:3c:92:84:93:fc:a8:76:21:12:ab:2a:32:b4: fb:91:27:1d:06:0d:81:d8:c3:d5:8b:4c:1d:a5:7b: 09:bc:e2:3b:89:5f:f7:70:de:ee:fc:71:f3:4c:cf: 71:a9:0f:fd:4a:9e:e6:a5:a3:bb:f6:f7:e4:68:dc: 68:55:29:f5:e2:02:ce:35:c6:6b:7d:f3:63:64:b7: 0c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:60:52:65:72:0F:47:DF:69:94:94:FA:97:A1:5A:86:DE:F8:5C:4A X509v3 Authority Key Identifier: keyid:2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:1e:16:14:21:4e:12:3f:12:01:ad:89:88:c5:f6:79:b7:fd: 53:b7:4e:46:5c:6f:51:0b:07:33:f3:8a:72:f5:a1:e9:d0:b4: 7c:af:c9:ec:b5:62:66:78:8a:8f:c0:1d:79:d4:4a:4f:01:92: a5:29:e0:8c:e1:2c:7c:f2:17:b8:d0:41:0c:fb:4a:ff:8e:5d: d6:05:0a:da:88:17:b6:35:ef:65:15:b6:82:0c:a5:2a:bf:de: 6c:96:5c:0c:aa:77:6a:09:dc:7a:58:5a:db:57:7f:f4:3e:f9: 0b:c8:4a:0c:14:bd:e4:3e:3b:97:16:02:1f:6c:e2:b9:7b:92: 3b:79:c7:54:60:58:94:89:8a:a8:14:41:ac:a2:37:33:56:34: b7:d4:e4:9a:bc:bf:4a:2c:3e:85:34:bf:ed:a9:84:fb:3d:48: 87:9c:c0:38:5d:d7:6c:62:64:99:3d:02:2b:a1:9c:2b:c4:6a: d1:9a:83:af:8d:b5:37:43:ec:0f:05:d1:0f:dc:29:ef:59:2e: a3:dc:5a:fa:32:bf:e7:a9:98:87:a2:36:b3:da:d8:fd:9c:83: bf:e0:0b:8e:1d:0f:f8:50:ab:a9:dc:8b:c7:64:d7:0a:96:47: 09:c6:a1:1b:6e:10:ff:15:be:ab:1a:fc:d1:5a:88:24:39:0c: 1d:86:f8:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QK3AlTZc5J67aZo0Z9I/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzk0MzUxN2Y1ZTNiNzQ3ZTc1MzAzMjA3ODlhMDM0NDRi NDM5MTIwHhcNMjUxMjA2MjAwMDQ3WhcNMjUxMjA3MjAwMDQ3WjAzMTEwLwYDVQQD Eyg1NDYwNTI2NTcyMGY0N2RmNjk5NDk0ZmE5N2ExNWE4NmRlZjg1YzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DxNlI4aalHep0reAggc7QYJShzz WUFQzEWikWASAJ9IXMBGpJr4VcW9nfVfFR+w0BaAyJMcAjJV00wMtIO+YLU9HpBA DdjS84UUvCPBMZVGePitS1Jm1f6UCaiDdm9z8SIFTHwUKtamJkGnBIWv0duOnrWO hUqiIzdtEPo7iRvYLNn98tiKMoxCtQsUl/ij1PyokKWsrBLdechc1I0MCyyEa/dH u5FnrLouQKyn0VZVWIk2QzyShJP8qHYhEqsqMrT7kScdBg2B2MPVi0wdpXsJvOI7 iV/3cN7u/HHzTM9xqQ/9Sp7mpaO79vfkaNxoVSn14gLONcZrffNjZLcMiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFRgUmVyD0ffaZSU+pehWobe+FxKMB8GA1UdIwQY MBaAFCrJQ1F/Xjt0fnUwMgeJoDREtDkSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NsRFVYOWVPM1ItZFRBeUI0bWdORVMwT1JJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8xOTUxMWQtNTM3ZS00MjQxLWEwZDgt MmQ5MWNmZDdhYWY0LzEvS3NsRFVYOWVPM1ItZFRBeUI0bWdORVMwT1JJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8xOTUxMWQtNTM3ZS00MjQxLWEwZDgtMmQ5MWNmZDdhYWY0 LzEvS3NsRFVYOWVPM1ItZFRBeUI0bWdORVMwT1JJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARR4WFCFO Ej8SAa2JiMX2ebf9U7dORlxvUQsHM/OKcvWh6dC0fK/J7LViZniKj8AdedRKTwGS pSngjOEsfPIXuNBBDPtK/45d1gUK2ogXtjXvZRW2ggylKr/ebJZcDKp3agncelha 21d/9D75C8hKDBS95D47lxYCH2ziuXuSO3nHVGBYlImKqBRBrKI3M1Y0t9Tkmry/ Siw+hTS/7amE+z1Ih5zAOF3XbGJkmT0CK6GcK8Rq0ZqDr421N0PsDwXRD9wp71ku o9xa+jK/56mYh6I2s9rY/ZyDv+ALjh0P+FCrqdyLx2TXCpZHCcahG24Q/xW+qxr8 0VqIJDkMHYb4yQ== -----END CERTIFICATE-----Generated at Sun Dec 7 03:36:29 2025 by rpki-client