This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft File: KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft (raw, json) Hash identifier: MGj7hm8E4E3mwLVvN4AWf1Pa199yinZXephY8/2Y100= Subject key identifier: 6B:ED:EB:A2:48:52:7B:46:66:C4:41:DF:2D:75:90:50:16:2D:8C:66 Authority key identifier: 28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F Certificate issuer: /CN=282b2cb977153baad1dd99eec14ce0ca46e2219f Certificate serial: 019AF19AE205AFB7CD033CFA20315B4F3498 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft Manifest number: 0937 Signing time: Sat 06 Dec 2025 03:00:50 +0000 Manifest this update: Sat 06 Dec 2025 03:00:50 +0000 Manifest next update: Sun 07 Dec 2025 03:00:50 +0000 Files and hashes: 1: 5v35qWKD8NjR5CYJwsa3ZCJmcaE.roa (hash: 8EnKiqZmxqaxCmZk9qwGpftXBFsMv4XGXaWZ2Oqridk=) 2: KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl (hash: wAg0NsZMr3dPeEbrJRryur8pcfDrw7gudNaGTqbcHoM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:e2:05:af:b7:cd:03:3c:fa:20:31:5b:4f:34:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=282b2cb977153baad1dd99eec14ce0ca46e2219f Validity Not Before: Dec 6 03:00:50 2025 GMT Not After : Dec 7 03:00:50 2025 GMT Subject: CN=6bedeba248527b4666c441df2d759050162d8c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:33:30:ff:a7:24:f4:6b:b2:1c:39:2d:40:cd: fb:61:53:97:b6:ba:41:36:a9:d9:d8:43:9e:7f:53: 6d:d2:a2:0d:89:14:e5:d9:e2:a8:8f:a5:55:f1:ac: 28:92:70:59:33:93:b0:2f:1c:1e:72:c0:16:91:96: 3b:eb:33:f3:0b:dd:95:c1:3c:88:69:3d:aa:b3:fa: a1:92:2d:86:62:0a:58:20:2c:c7:c3:5c:6d:ab:4b: a4:c8:c6:b5:4c:1e:1d:47:27:be:dd:1d:41:2c:e8: 57:7e:dc:cd:0e:7e:e8:f0:0c:9b:ea:ea:bd:b2:bf: f6:07:33:3b:43:64:bd:07:25:59:b3:38:39:83:80: 4e:10:0c:17:85:43:9a:f2:4b:25:6f:02:54:d4:6c: 0f:26:21:5a:64:63:2b:1f:34:50:4b:f9:7b:33:5e: af:ca:b7:9b:f4:fe:d6:24:0a:85:97:f6:94:63:c5: ec:46:dd:43:33:a7:9c:55:b2:2f:ac:f4:b1:8f:cb: 00:77:d8:42:d3:ff:18:b1:34:a0:90:2a:c5:38:08: 92:eb:0e:27:7b:b3:4b:67:b5:92:64:04:3b:c6:76: 30:7a:fd:04:eb:b6:9e:83:43:da:84:23:ac:d9:29: 64:2e:b7:2e:34:29:34:4a:01:ca:b5:bb:df:94:d8: 1c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:ED:EB:A2:48:52:7B:46:66:C4:41:DF:2D:75:90:50:16:2D:8C:66 X509v3 Authority Key Identifier: keyid:28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:f1:1f:c0:39:40:db:a5:65:7a:b2:75:0a:df:1a:bc:1c:85: 2b:95:bd:8f:51:e2:79:58:7a:40:90:46:d2:53:8b:6b:e9:d2: f4:5e:55:86:df:8a:2c:44:5b:2c:e5:94:3a:43:99:87:23:8f: 74:bb:e8:a8:9a:bd:f8:e3:42:eb:71:52:2a:23:24:42:82:8f: 01:56:1c:7a:5d:a3:22:b1:49:ae:2b:1a:49:65:b8:6e:ee:3f: ff:8c:de:44:c1:46:85:92:bc:8f:a8:a0:00:ef:7f:ca:3c:61: 2c:04:b0:0a:1e:e2:a7:5c:92:9e:e4:b5:4c:22:81:57:75:46: b3:56:34:24:a8:52:89:01:1d:a3:01:8d:44:e8:e9:78:59:a1: b9:90:ea:5c:de:68:db:01:1c:7f:95:c6:2c:75:99:92:72:30: 80:b9:01:02:a3:3b:e1:e9:b8:74:8a:3e:71:e5:5c:97:8f:ea: 77:84:01:61:9a:67:7c:dd:90:d2:d7:95:cd:a1:6d:0d:cb:77: ab:fc:e6:43:31:05:5f:34:38:d4:59:e5:b1:f1:87:f3:36:32: 75:e5:2f:e8:38:77:88:16:3c:ca:4e:1d:3f:25:a8:c8:75:30: 9c:32:8a:77:90:46:e9:d5:1f:2f:ef:5d:73:0b:78:34:1f:68: d4:3e:01:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmuIFr7fNAzz6IDFbTzSYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MmIyY2I5NzcxNTNiYWFkMWRkOTllZWMxNGNlMGNhNDZl MjIxOWYwHhcNMjUxMjA2MDMwMDUwWhcNMjUxMjA3MDMwMDUwWjAzMTEwLwYDVQQD Eyg2YmVkZWJhMjQ4NTI3YjQ2NjZjNDQxZGYyZDc1OTA1MDE2MmQ4YzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzMw/6ck9GuyHDktQM37YVOXtrpB NqnZ2EOef1Nt0qINiRTl2eKoj6VV8awoknBZM5OwLxwecsAWkZY76zPzC92VwTyI aT2qs/qhki2GYgpYICzHw1xtq0ukyMa1TB4dRye+3R1BLOhXftzNDn7o8Ayb6uq9 sr/2BzM7Q2S9ByVZszg5g4BOEAwXhUOa8kslbwJU1GwPJiFaZGMrHzRQS/l7M16v yreb9P7WJAqFl/aUY8XsRt1DM6ecVbIvrPSxj8sAd9hC0/8YsTSgkCrFOAiS6w4n e7NLZ7WSZAQ7xnYwev0E67aeg0PahCOs2SlkLrcuNCk0SgHKtbvflNgcpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGvt66JIUntGZsRB3y11kFAWLYxmMB8GA1UdIwQY MBaAFCgrLLl3FTuq0d2Z7sFM4MpG4iGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0Nzc3VYY1ZPNnJSM1pudXdVemd5a2JpSVo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8wYjBiMzMtOThhMS00ODE4LWFkMTgt OTVmMjdkM2U4YWJiLzEvS0Nzc3VYY1ZPNnJSM1pudXdVemd5a2JpSVo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8wYjBiMzMtOThhMS00ODE4LWFkMTgtOTVmMjdkM2U4YWJi LzEvS0Nzc3VYY1ZPNnJSM1pudXdVemd5a2JpSVo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJfEfwDlA 26VlerJ1Ct8avByFK5W9j1HieVh6QJBG0lOLa+nS9F5Vht+KLERbLOWUOkOZhyOP dLvoqJq9+ONC63FSKiMkQoKPAVYcel2jIrFJrisaSWW4bu4//4zeRMFGhZK8j6ig AO9/yjxhLASwCh7ip1ySnuS1TCKBV3VGs1Y0JKhSiQEdowGNROjpeFmhuZDqXN5o 2wEcf5XGLHWZknIwgLkBAqM74em4dIo+ceVcl4/qd4QBYZpnfN2Q0teVzaFtDct3 q/zmQzEFXzQ41FnlsfGH8zYydeUv6Dh3iBY8yk4dPyWoyHUwnDKKd5BG6dUfL+9d cwt4NB9o1D4BZw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:34:19 2025 by rpki-client