This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft File: KL8ecjI3QqxNgTarbI6F33ujfus.mft (raw, json) Hash identifier: tSpgvQG2FqZcC3svMxLpe7uYk+UkoxvLP2oA9ZjWLqo= Subject key identifier: B0:20:38:3A:A2:BA:F8:93:51:FE:0A:C7:F3:8D:27:12:B3:5F:1D:DD Authority key identifier: 28:BF:1E:72:32:37:42:AC:4D:81:36:AB:6C:8E:85:DF:7B:A3:7E:EB Certificate issuer: /CN=28bf1e72323742ac4d8136ab6c8e85df7ba37eeb Certificate serial: 019B34FB2A89B5A598E33A0D293E4AFF82F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KL8ecjI3QqxNgTarbI6F33ujfus.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 05:00:34 +0000 Manifest this update: Fri 19 Dec 2025 05:00:34 +0000 Manifest next update: Sat 20 Dec 2025 05:00:34 +0000 Files and hashes: 1: KL8ecjI3QqxNgTarbI6F33ujfus.crl (hash: F/PUfJMYTAz9weqjxnk8DA7jxu9/FB5rvxyj2PWEEP0=) 2: tkt4SudQfK9uwQrgGKvvYflAjl8.roa (hash: dFUnqKo0rasEdebFDefgA9DnqivcqZmMoexL2NOUY5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.crl rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft rsync://rpki.ripe.net/repository/DEFAULT/KL8ecjI3QqxNgTarbI6F33ujfus.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:2a:89:b5:a5:98:e3:3a:0d:29:3e:4a:ff:82:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28bf1e72323742ac4d8136ab6c8e85df7ba37eeb Validity Not Before: Dec 19 05:00:34 2025 GMT Not After : Dec 20 05:00:34 2025 GMT Subject: CN=b020383aa2baf89351fe0ac7f38d2712b35f1ddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:93:b9:ee:bf:5b:a6:d4:3b:0c:93:54:d4:46: 82:b8:36:2c:80:84:66:63:f7:89:98:3b:42:c4:1c: 0f:c5:e1:04:3c:4f:80:d0:5c:70:b1:16:a9:72:d3: ae:1e:99:4f:ca:59:e6:70:4d:ee:2b:20:f9:30:d4: 52:43:d5:ca:1e:e7:59:f4:92:05:10:b8:99:1f:35: 71:e4:c5:e8:d3:67:ec:56:af:7a:37:62:57:bd:f6: bd:0c:2d:4d:e0:75:23:57:35:06:36:80:46:1c:5e: c7:60:ba:0c:d3:bf:93:de:4d:2e:b8:f8:75:ac:1f: 14:d5:c4:3f:d2:ee:0c:a1:63:cc:fc:f3:68:90:bd: b4:f1:00:a0:59:4e:43:92:80:35:b5:5e:64:2a:b2: c3:fe:07:31:70:f4:f0:d1:51:25:f3:db:4d:a9:98: 2d:c8:47:b9:77:a0:ed:a4:41:75:47:cb:66:9e:7a: 4e:a5:04:ad:d5:19:c4:28:46:0d:cc:11:68:48:6c: bf:1b:30:41:62:62:4c:bf:a1:ca:cd:fd:0d:20:40: 1a:db:67:3e:5d:82:c7:68:02:05:c4:be:89:26:77: 1d:a9:22:8b:1d:a7:0c:25:02:d3:30:cd:f1:16:74: 1e:c1:87:b1:57:d8:b4:d3:20:43:37:e9:a6:1c:40: d8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:20:38:3A:A2:BA:F8:93:51:FE:0A:C7:F3:8D:27:12:B3:5F:1D:DD X509v3 Authority Key Identifier: keyid:28:BF:1E:72:32:37:42:AC:4D:81:36:AB:6C:8E:85:DF:7B:A3:7E:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KL8ecjI3QqxNgTarbI6F33ujfus.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:86:f1:67:b2:01:36:30:1f:99:e4:f9:d3:19:91:e2:99:6f: 37:b2:40:28:8c:89:57:94:1e:ae:99:c8:57:e3:ac:a2:3b:44: fc:d2:6e:ca:37:0b:83:b8:16:07:32:17:39:3e:35:29:84:90: ce:9c:a3:3c:b7:af:d5:b4:a2:4b:37:1a:69:1f:fa:69:43:9a: 3c:4b:62:2a:20:a8:a7:77:07:1a:9f:19:bf:65:4f:d4:2a:0e: ea:0f:8b:cd:31:4c:5e:b3:cb:60:7d:3d:e3:4a:da:72:82:bd: fc:1f:65:41:f3:20:fa:5c:17:02:b1:5a:d4:92:16:5c:a1:06: 7c:30:50:58:82:6d:55:c6:d4:1d:0a:07:25:c6:f1:54:11:df: 17:17:6a:9a:0f:d0:4a:87:dc:05:1e:64:20:0c:4f:f1:f7:9a: 05:e8:cc:a5:54:8e:6f:d4:6a:8b:2a:45:90:26:92:4e:c4:78: 21:26:1a:91:69:12:de:ce:2b:1b:2c:49:a1:ce:c7:f8:59:17: 2c:bf:0e:4d:5b:bc:30:a0:88:cb:14:85:13:b2:02:7f:f5:ff: 32:30:c2:7d:8f:fa:64:b9:fe:80:b7:12:d7:99:1e:40:0e:90: af:e6:95:b6:98:cf:b6:dc:69:91:07:b9:48:9c:c1:55:20:2e: 3d:c9:70:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+yqJtaWY4zoNKT5K/4L4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4YmYxZTcyMzIzNzQyYWM0ZDgxMzZhYjZjOGU4NWRmN2Jh MzdlZWIwHhcNMjUxMjE5MDUwMDM0WhcNMjUxMjIwMDUwMDM0WjAzMTEwLwYDVQQD EyhiMDIwMzgzYWEyYmFmODkzNTFmZTBhYzdmMzhkMjcxMmIzNWYxZGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5O57r9bptQ7DJNU1EaCuDYsgIRm Y/eJmDtCxBwPxeEEPE+A0FxwsRapctOuHplPylnmcE3uKyD5MNRSQ9XKHudZ9JIF ELiZHzVx5MXo02fsVq96N2JXvfa9DC1N4HUjVzUGNoBGHF7HYLoM07+T3k0uuPh1 rB8U1cQ/0u4MoWPM/PNokL208QCgWU5DkoA1tV5kKrLD/gcxcPTw0VEl89tNqZgt yEe5d6DtpEF1R8tmnnpOpQSt1RnEKEYNzBFoSGy/GzBBYmJMv6HKzf0NIEAa22c+ XYLHaAIFxL6JJncdqSKLHacMJQLTMM3xFnQewYexV9i00yBDN+mmHEDYawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLAgODqiuviTUf4Kx/ONJxKzXx3dMB8GA1UdIwQY MBaAFCi/HnIyN0KsTYE2q2yOhd97o37rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0w4ZWNqSTNRcXhOZ1RhcmJJNkYzM3VqZnVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9iYTZkZjctZjMyNS00MTg0LWE1NGEt MGM0ODFmMGFkMjBlLzEvS0w4ZWNqSTNRcXhOZ1RhcmJJNkYzM3VqZnVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9iYTZkZjctZjMyNS00MTg0LWE1NGEtMGM0ODFmMGFkMjBl LzEvS0w4ZWNqSTNRcXhOZ1RhcmJJNkYzM3VqZnVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB4bxZ7IB NjAfmeT50xmR4plvN7JAKIyJV5QerpnIV+OsojtE/NJuyjcLg7gWBzIXOT41KYSQ zpyjPLev1bSiSzcaaR/6aUOaPEtiKiCop3cHGp8Zv2VP1CoO6g+LzTFMXrPLYH09 40racoK9/B9lQfMg+lwXArFa1JIWXKEGfDBQWIJtVcbUHQoHJcbxVBHfFxdqmg/Q SofcBR5kIAxP8feaBejMpVSOb9RqiypFkCaSTsR4ISYakWkS3s4rGyxJoc7H+FkX LL8OTVu8MKCIyxSFE7ICf/X/MjDCfY/6ZLn+gLcS15keQA6Qr+aVtpjPttxpkQe5 SJzBVSAuPclwNw== -----END CERTIFICATE-----Generated at Fri Dec 19 13:38:04 2025 by rpki-client