This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft File: KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft (raw, json) Hash identifier: Zsq4q9+qHkNGWZ+GWB1B+j77c7G+HeMWGGLY15+JR1I= Subject key identifier: 48:60:6A:75:2E:E2:59:C0:B7:11:DB:62:A7:0C:80:98:01:D7:F9:76 Authority key identifier: 29:A3:9E:BB:4E:57:FF:34:85:3C:76:B0:F5:87:7A:E8:AB:3C:7C:F6 Certificate issuer: /CN=29a39ebb4e57ff34853c76b0f5877ae8ab3c7cf6 Certificate serial: 019B59769F2922FC9D62E25AB2845D714303 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 07:01:44 +0000 Manifest this update: Fri 26 Dec 2025 07:01:44 +0000 Manifest next update: Sat 27 Dec 2025 07:01:44 +0000 Files and hashes: 1: 023NXf0NRLbsgezphpzZHNxZ3e4.roa (hash: 5Oh3BvS9337aAFlKHkUHIB4jGr7DBQIIdxMScBWVcOU=) 2: KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl (hash: c7RlbaokXCXetv/lWlUdKs0I7qEszpzGLm/oaySqBAE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:9f:29:22:fc:9d:62:e2:5a:b2:84:5d:71:43:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29a39ebb4e57ff34853c76b0f5877ae8ab3c7cf6 Validity Not Before: Dec 26 07:01:44 2025 GMT Not After : Dec 27 07:01:44 2025 GMT Subject: CN=48606a752ee259c0b711db62a70c809801d7f976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:54:1d:37:8e:b5:09:89:5c:0e:c5:ca:86:15: 62:73:fc:ca:5c:a2:c6:77:d6:6b:88:73:3a:95:33: 40:3d:27:42:10:68:aa:b5:38:5e:c2:b2:e0:70:b3: aa:50:10:b6:fb:ae:6a:45:4a:ec:b4:5a:e3:5b:35: d4:9b:40:2b:1d:03:ce:00:17:7a:f6:5f:c0:a8:41: f4:f1:58:3c:6e:03:ad:de:08:21:4b:b7:a5:eb:80: 6a:07:80:94:87:2c:89:37:34:61:ef:3f:54:2e:ba: 29:df:29:10:c0:7b:94:68:89:0d:72:df:7e:5c:e4: 41:6f:b6:46:55:76:05:f3:6a:65:64:6d:89:ad:10: 29:38:1f:83:c0:0f:63:b1:77:51:91:50:7e:22:2f: 03:59:ad:f2:f4:61:7a:ca:da:db:a9:bd:39:e4:fd: 14:ff:80:fc:1e:01:ac:f9:ab:db:33:21:27:45:ba: bb:07:b4:03:62:98:f0:ad:d9:29:88:c4:0d:93:b8: 9a:23:ca:f1:15:11:a3:f9:43:69:83:eb:47:06:23: e4:70:f4:88:b6:48:77:1d:23:84:8a:94:40:ac:b6: f7:3a:df:d3:63:6e:a7:79:ba:4d:08:08:12:dd:ed: b8:d6:dd:8d:a5:eb:80:87:09:4c:1f:e3:5f:24:a6: f2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:60:6A:75:2E:E2:59:C0:B7:11:DB:62:A7:0C:80:98:01:D7:F9:76 X509v3 Authority Key Identifier: keyid:29:A3:9E:BB:4E:57:FF:34:85:3C:76:B0:F5:87:7A:E8:AB:3C:7C:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:0a:db:d3:26:07:33:b8:5d:ef:16:f7:c9:85:b7:89:d2:91: 05:81:14:69:9a:be:e6:16:a5:a0:58:3e:cc:c8:67:79:44:56: 48:46:a7:8d:87:00:8f:75:d5:77:23:9d:77:0d:7c:77:d9:96: 15:94:4a:1b:30:0c:fa:88:dd:b1:db:1d:f2:2b:da:58:49:ce: 78:7f:56:b2:62:ac:68:bc:eb:7e:a0:ac:fc:8e:7f:ce:ee:3f: e6:a9:e7:00:df:65:ce:d8:74:1c:b4:78:81:35:9e:68:44:87: b5:cf:90:b0:a1:f3:bf:6c:2d:9e:c9:59:2a:d5:8b:c1:f2:db: aa:b1:c2:14:c5:c8:f8:c4:16:52:71:21:bb:d8:30:d4:a7:f9: a8:00:30:19:61:4a:0a:73:f5:5a:6b:4e:8d:5d:4c:16:f3:cb: 16:4c:02:46:1d:e0:38:3b:52:6e:21:8b:0b:3f:0e:5e:c5:f7: d9:64:1b:8c:ea:64:35:4f:63:bd:5c:3c:a7:6d:dd:c1:cd:49: 4c:26:d4:b9:e5:49:1e:34:b5:eb:2c:5f:14:01:f5:73:36:23: 71:72:ff:bc:f9:99:79:79:9e:f3:d9:40:af:d5:1b:f6:77:88: 75:b2:ce:48:bf:1f:74:a5:17:c3:87:6a:50:6a:26:7f:bd:2d: 92:49:2e:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdp8pIvydYuJasoRdcUMDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YTM5ZWJiNGU1N2ZmMzQ4NTNjNzZiMGY1ODc3YWU4YWIz YzdjZjYwHhcNMjUxMjI2MDcwMTQ0WhcNMjUxMjI3MDcwMTQ0WjAzMTEwLwYDVQQD Eyg0ODYwNmE3NTJlZTI1OWMwYjcxMWRiNjJhNzBjODA5ODAxZDdmOTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lQdN461CYlcDsXKhhVic/zKXKLG d9ZriHM6lTNAPSdCEGiqtThewrLgcLOqUBC2+65qRUrstFrjWzXUm0ArHQPOABd6 9l/AqEH08Vg8bgOt3gghS7el64BqB4CUhyyJNzRh7z9ULrop3ykQwHuUaIkNct9+ XORBb7ZGVXYF82plZG2JrRApOB+DwA9jsXdRkVB+Ii8DWa3y9GF6ytrbqb055P0U /4D8HgGs+avbMyEnRbq7B7QDYpjwrdkpiMQNk7iaI8rxFRGj+UNpg+tHBiPkcPSI tkh3HSOEipRArLb3Ot/TY26nebpNCAgS3e241t2NpeuAhwlMH+NfJKbykQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEhganUu4lnAtxHbYqcMgJgB1/l2MB8GA1UdIwQY MBaAFCmjnrtOV/80hTx2sPWHeuirPHz2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2FPZXUwNVhfelNGUEhhdzlZZDY2S3M4ZlBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yZjk3ZmMtNWZhMy00MDgzLTk1MTUt Y2Q5ZGEyZDkyZThkLzEvS2FPZXUwNVhfelNGUEhhdzlZZDY2S3M4ZlBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8yZjk3ZmMtNWZhMy00MDgzLTk1MTUtY2Q5ZGEyZDkyZThk LzEvS2FPZXUwNVhfelNGUEhhdzlZZDY2S3M4ZlBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADQrb0yYH M7hd7xb3yYW3idKRBYEUaZq+5haloFg+zMhneURWSEanjYcAj3XVdyOddw18d9mW FZRKGzAM+ojdsdsd8ivaWEnOeH9WsmKsaLzrfqCs/I5/zu4/5qnnAN9lzth0HLR4 gTWeaESHtc+QsKHzv2wtnslZKtWLwfLbqrHCFMXI+MQWUnEhu9gw1Kf5qAAwGWFK CnP1WmtOjV1MFvPLFkwCRh3gODtSbiGLCz8OXsX32WQbjOpkNU9jvVw8p23dwc1J TCbUueVJHjS16yxfFAH1czYjcXL/vPmZeXme89lAr9Ub9neIdbLOSL8fdKUXw4dq UGomf70tkkkuag== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:44 2025 by rpki-client