This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft File: KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft (raw, json) Hash identifier: lXmTbH9DBOafwbX8f6kjYEop18Pn/lO/2ooG3vILWTA= Subject key identifier: 2E:8A:EF:46:4E:62:C5:49:28:BB:ED:CC:3D:E8:7B:05:F0:A2:BC:48 Authority key identifier: 29:4B:5B:BB:E1:74:67:47:6E:22:82:88:82:21:88:7D:F5:49:F4:B9 Certificate issuer: /CN=294b5bbbe17467476e2282888221887df549f4b9 Certificate serial: 019B19BAE75D4F5BB2485915AE0A678F778D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft Manifest number: 1707 Signing time: Sat 13 Dec 2025 22:00:37 +0000 Manifest this update: Sat 13 Dec 2025 22:00:37 +0000 Manifest next update: Sun 14 Dec 2025 22:00:37 +0000 Files and hashes: 1: HJiIfDvFo_sDLMJ5OE82mYFpyHQ.roa (hash: P459lfA3vTZFDKOU1GovB2qolTUez89TIhHTMpHxZQo=) 2: KUtbu-F0Z0duIoKIgiGIffVJ9Lk.crl (hash: ZvgRZSgUCin7ReMoryE0VJ7ERlYsaAnshklhki5KgJ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft rsync://rpki.ripe.net/repository/DEFAULT/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 22:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:ba:e7:5d:4f:5b:b2:48:59:15:ae:0a:67:8f:77:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=294b5bbbe17467476e2282888221887df549f4b9 Validity Not Before: Dec 13 22:00:37 2025 GMT Not After : Dec 14 22:00:37 2025 GMT Subject: CN=2e8aef464e62c54928bbedcc3de87b05f0a2bc48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:44:4d:6f:dc:5d:b0:d8:24:71:15:a5:c9:26: b9:3c:48:35:c0:a8:b6:6c:d5:8e:7b:a0:b2:d7:e2: d1:b1:40:30:39:5c:5b:f1:97:f0:67:e2:9d:d3:65: 56:6a:e1:1c:b6:64:d7:73:04:7e:f4:c3:a8:bf:56: 7b:9e:d2:14:93:51:73:47:cd:b9:e7:04:01:57:1a: 05:0a:86:58:68:49:81:d0:79:41:90:70:18:4e:12: 86:bb:f3:fd:2f:e4:bd:5a:e8:26:57:8d:47:f6:40: b7:9e:07:a0:b8:a2:7e:72:85:c5:ca:77:ff:e6:2f: 8a:94:a8:e1:b0:97:4b:03:77:4f:d8:52:d7:e7:75: 2e:9b:71:4b:63:c7:ea:f9:23:eb:b1:a6:e2:c6:2e: e0:49:64:5e:08:fa:66:ae:89:da:c1:6d:11:2a:87: 15:58:62:84:e8:6d:d4:59:ed:d7:c3:99:17:91:38: 9f:d8:df:d3:0c:99:8a:19:89:5d:4c:76:dc:fb:6d: 6b:08:c5:eb:20:e1:58:7f:7c:27:4d:3a:8b:5d:34: 02:7d:13:49:3d:0e:f1:a9:56:c0:2f:bc:de:9b:39: 79:0c:63:b2:47:6e:d5:3c:7e:e7:9b:df:7c:79:ef: 47:40:23:1d:c2:dd:d3:25:5e:0a:7d:fe:d1:24:2f: ff:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:8A:EF:46:4E:62:C5:49:28:BB:ED:CC:3D:E8:7B:05:F0:A2:BC:48 X509v3 Authority Key Identifier: keyid:29:4B:5B:BB:E1:74:67:47:6E:22:82:88:82:21:88:7D:F5:49:F4:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:34:a7:00:1a:5c:39:1f:56:9b:e6:9f:ed:00:f8:bc:49:eb: a2:b0:a7:c2:3e:c2:96:6e:ce:c7:ec:4d:25:5d:d9:99:41:36: b9:a0:b9:53:a0:cf:c7:c3:c3:e1:b4:6b:f9:75:68:8b:53:91: d9:03:b2:8e:9e:9e:7b:83:11:4f:4e:af:58:53:63:df:05:d1: 66:e5:2e:46:4a:d1:48:c2:bb:7f:ef:9a:5d:73:e3:42:72:98: b7:8e:cb:fb:0c:fb:28:6c:ea:f1:a9:97:ac:d9:11:72:79:88: d9:33:a5:6b:dc:3f:62:d0:90:1a:5a:d2:0d:83:87:7d:47:f1: 88:8e:e2:2c:10:f2:ad:f5:df:5a:ab:61:f0:14:a8:17:22:91: 92:1b:8e:78:5b:f0:d1:98:34:3b:79:d3:da:03:0c:a3:7d:66: 1a:72:cc:8d:25:cf:86:5b:e9:56:f2:f4:1d:d0:25:4f:04:56: b1:5f:c7:33:77:20:2a:4d:01:62:43:bb:96:58:d9:14:0a:7b: 51:ae:55:d7:6a:19:bf:1f:11:b0:f1:36:22:38:f6:46:ca:17: db:31:b3:44:29:02:1d:75:90:98:17:32:3c:39:64:78:68:15: b4:1d:29:37:f4:6c:25:b3:0e:41:1c:9e:88:a8:c7:2a:0f:e5: c2:28:8a:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZuuddT1uySFkVrgpnj3eNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NGI1YmJiZTE3NDY3NDc2ZTIyODI4ODgyMjE4ODdkZjU0 OWY0YjkwHhcNMjUxMjEzMjIwMDM3WhcNMjUxMjE0MjIwMDM3WjAzMTEwLwYDVQQD EygyZThhZWY0NjRlNjJjNTQ5MjhiYmVkY2MzZGU4N2IwNWYwYTJiYzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxERNb9xdsNgkcRWlySa5PEg1wKi2 bNWOe6Cy1+LRsUAwOVxb8ZfwZ+Kd02VWauEctmTXcwR+9MOov1Z7ntIUk1FzR825 5wQBVxoFCoZYaEmB0HlBkHAYThKGu/P9L+S9WugmV41H9kC3ngeguKJ+coXFynf/ 5i+KlKjhsJdLA3dP2FLX53Uum3FLY8fq+SPrsabixi7gSWReCPpmronawW0RKocV WGKE6G3UWe3Xw5kXkTif2N/TDJmKGYldTHbc+21rCMXrIOFYf3wnTTqLXTQCfRNJ PQ7xqVbAL7zemzl5DGOyR27VPH7nm998ee9HQCMdwt3TJV4Kff7RJC//AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6K70ZOYsVJKLvtzD3oewXworxIMB8GA1UdIwQY MBaAFClLW7vhdGdHbiKCiIIhiH31SfS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1V0YnUtRjBaMGR1SW9LSWdpR0lmZlZKOUxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kMzY3ODMtNGQ1Yi00MjVlLTk0OWYt YzQxZDg2MDk4ZGY3LzEvS1V0YnUtRjBaMGR1SW9LSWdpR0lmZlZKOUxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9kMzY3ODMtNGQ1Yi00MjVlLTk0OWYtYzQxZDg2MDk4ZGY3 LzEvS1V0YnUtRjBaMGR1SW9LSWdpR0lmZlZKOUxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtDSnABpc OR9Wm+af7QD4vEnrorCnwj7Clm7Ox+xNJV3ZmUE2uaC5U6DPx8PD4bRr+XVoi1OR 2QOyjp6ee4MRT06vWFNj3wXRZuUuRkrRSMK7f++aXXPjQnKYt47L+wz7KGzq8amX rNkRcnmI2TOla9w/YtCQGlrSDYOHfUfxiI7iLBDyrfXfWqth8BSoFyKRkhuOeFvw 0Zg0O3nT2gMMo31mGnLMjSXPhlvpVvL0HdAlTwRWsV/HM3cgKk0BYkO7lljZFAp7 Ua5V12oZvx8RsPE2Ijj2RsoX2zGzRCkCHXWQmBcyPDlkeGgVtB0pN/RsJbMOQRye iKjHKg/lwiiK9Q== -----END CERTIFICATE-----Generated at Sun Dec 14 07:44:33 2025 by rpki-client