This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft File: KcIQP9JBfIhpFFYX3pT8yROwhe8.mft (raw, json) Hash identifier: z91qeEeg54pV9dSPxTRs2Httc6BGlqAszgddmmgSPW8= Subject key identifier: 62:15:C0:81:36:2F:9D:BE:FC:2A:5D:A3:66:D6:55:F2:80:C1:F1:57 Authority key identifier: 29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF Certificate issuer: /CN=29c2103fd2417c8869145617de94fcc913b085ef Certificate serial: 019B2A0A6B35552886F233A973F7C5FE3189 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft Manifest number: 1503 Signing time: Wed 17 Dec 2025 02:01:24 +0000 Manifest this update: Wed 17 Dec 2025 02:01:24 +0000 Manifest next update: Thu 18 Dec 2025 02:01:24 +0000 Files and hashes: 1: HFzLX8JfB09bMiykDXTNNVwsa28.roa (hash: RkC66kEQrpDYwov3VUFFbJbKcNeYjT04dJ6fhWE8V94=) 2: KcIQP9JBfIhpFFYX3pT8yROwhe8.crl (hash: FjCI+WZl2fzGM1BNJGGvyXfygI30Ehv9c2KOQAK/Zqw=) 3: _C12IjEOj75oE5QypNCeEnRnlyI.roa (hash: EBWCxN3qkCMZlfAoAwH4ZzgBiUuNGMo8jh7xQFNJR1g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:0a:6b:35:55:28:86:f2:33:a9:73:f7:c5:fe:31:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29c2103fd2417c8869145617de94fcc913b085ef Validity Not Before: Dec 17 02:01:24 2025 GMT Not After : Dec 18 02:01:24 2025 GMT Subject: CN=6215c081362f9dbefc2a5da366d655f280c1f157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a8:08:80:d1:13:8c:69:7a:02:11:d6:d8:6e: b3:b9:88:b4:4a:9b:8d:1b:a0:a4:18:35:47:dc:ac: dd:d7:ad:2a:e5:93:da:1e:70:86:f0:86:4e:5b:d6: f6:bf:f0:e1:97:73:3c:07:aa:d9:80:b5:91:a4:23: 54:f1:d4:8f:4c:cb:61:47:a7:06:cc:9d:ad:b1:6a: a7:bf:b3:35:25:9b:a7:a6:5c:2a:68:c4:05:24:82: d7:6b:38:5c:f7:37:7d:c9:41:d2:53:bb:f0:ef:ba: 7e:94:0e:4d:5f:23:79:57:66:12:19:e3:af:3c:12: 29:9e:8f:6f:fc:59:eb:e6:8a:3b:4f:40:1d:20:f7: c4:95:2c:f8:b4:fd:eb:7e:12:4b:99:7c:22:ff:d1: d5:38:9a:8c:dc:a3:b0:25:c4:4a:b4:74:d3:dd:e8: 77:8b:d4:3f:6f:3c:7a:86:98:01:d7:10:ab:68:cc: b5:98:e9:43:ca:fa:48:8d:b2:ee:4d:c1:c2:b1:a9: 64:4d:54:6d:fd:72:de:bf:d0:ad:17:37:9c:db:a4: 65:3c:86:a5:d1:6e:d6:c8:ca:87:1e:9b:b8:46:5e: a9:bc:ec:6e:59:95:d6:b8:fa:4e:34:ba:3d:2d:63: 54:7b:e6:5c:a8:0e:2a:d1:7d:6f:38:1a:a2:eb:9c: 56:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:15:C0:81:36:2F:9D:BE:FC:2A:5D:A3:66:D6:55:F2:80:C1:F1:57 X509v3 Authority Key Identifier: keyid:29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:f0:b1:27:5b:cf:92:48:1b:86:2b:85:5c:fc:46:4f:23:15: 6e:e8:c7:d5:32:07:88:8c:bc:94:f8:fe:ab:6c:bb:37:a5:03: 00:97:75:26:bf:5a:6b:42:ab:c7:df:dd:20:ef:44:0a:4f:70: eb:88:71:4f:60:e5:52:6e:86:67:91:3b:02:e3:24:cc:7f:5c: 31:ec:53:f9:65:e1:97:e0:0d:31:9b:80:1e:67:28:c3:83:60: 02:0c:cd:ef:8e:bb:29:d0:6f:f6:fe:42:a1:00:71:ce:31:59: 44:25:68:1c:a6:38:d5:e4:49:d4:ca:62:77:1f:25:73:96:32: f6:52:7f:45:47:f5:d0:b6:7b:17:a9:6b:2c:f0:45:e7:22:1e: 64:00:20:db:7d:ee:2a:02:a2:8f:d6:cb:17:ee:b0:f0:71:63: ba:b4:fd:71:8a:e3:c9:33:62:78:08:d4:db:f3:e6:f6:96:47: 52:b0:d3:c4:9f:45:2c:c8:56:89:a6:d8:19:81:57:a5:b0:0e: 19:d3:8c:41:7f:6a:38:db:62:0c:3c:61:69:76:51:7c:da:4b: 09:ba:d7:6d:98:9b:31:5d:60:ff:3d:6f:3c:18:11:13:28:07: 35:a2:66:e6:da:6a:6a:d8:01:3f:a2:8e:91:99:63:ca:88:2b: ea:6d:9e:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqCms1VSiG8jOpc/fF/jGJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YzIxMDNmZDI0MTdjODg2OTE0NTYxN2RlOTRmY2M5MTNi MDg1ZWYwHhcNMjUxMjE3MDIwMTI0WhcNMjUxMjE4MDIwMTI0WjAzMTEwLwYDVQQD Eyg2MjE1YzA4MTM2MmY5ZGJlZmMyYTVkYTM2NmQ2NTVmMjgwYzFmMTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKgIgNETjGl6AhHW2G6zuYi0SpuN G6CkGDVH3Kzd160q5ZPaHnCG8IZOW9b2v/Dhl3M8B6rZgLWRpCNU8dSPTMthR6cG zJ2tsWqnv7M1JZunplwqaMQFJILXazhc9zd9yUHSU7vw77p+lA5NXyN5V2YSGeOv PBIpno9v/Fnr5oo7T0AdIPfElSz4tP3rfhJLmXwi/9HVOJqM3KOwJcRKtHTT3eh3 i9Q/bzx6hpgB1xCraMy1mOlDyvpIjbLuTcHCsalkTVRt/XLev9CtFzec26RlPIal 0W7WyMqHHpu4Rl6pvOxuWZXWuPpONLo9LWNUe+ZcqA4q0X1vOBqi65xW1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGIVwIE2L52+/Cpdo2bWVfKAwfFXMB8GA1UdIwQY MBaAFCnCED/SQXyIaRRWF96U/MkTsIXvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2NJUVA5SkJmSWhwRkZZWDNwVDh5Uk93aGU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8yYjhkODItMzlmYi00YTU2LTg5YzUt OWQ1NjU3NTEzZTIwLzEvS2NJUVA5SkJmSWhwRkZZWDNwVDh5Uk93aGU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS8yYjhkODItMzlmYi00YTU2LTg5YzUtOWQ1NjU3NTEzZTIw LzEvS2NJUVA5SkJmSWhwRkZZWDNwVDh5Uk93aGU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACvCxJ1vP kkgbhiuFXPxGTyMVbujH1TIHiIy8lPj+q2y7N6UDAJd1Jr9aa0Krx9/dIO9ECk9w 64hxT2DlUm6GZ5E7AuMkzH9cMexT+WXhl+ANMZuAHmcow4NgAgzN7467KdBv9v5C oQBxzjFZRCVoHKY41eRJ1Mpidx8lc5Yy9lJ/RUf10LZ7F6lrLPBF5yIeZAAg233u KgKij9bLF+6w8HFjurT9cYrjyTNieAjU2/Pm9pZHUrDTxJ9FLMhWiabYGYFXpbAO GdOMQX9qONtiDDxhaXZRfNpLCbrXbZibMV1g/z1vPBgREygHNaJm5tpqatgBP6KO kZljyogr6m2e3w== -----END CERTIFICATE-----Generated at Wed Dec 17 06:12:44 2025 by rpki-client