This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft File: KNyB6jid1qrE77w01S13jrp6f8Q.mft (raw, json) Hash identifier: OPj+ozRX1aQpMAYNdCrsyzvFxB/R/8+z1eYE93g9YYQ= Subject key identifier: CD:E1:88:70:C0:1D:93:49:44:CC:43:E2:EE:46:C4:1C:FC:B8:0F:00 Authority key identifier: 28:DC:81:EA:38:9D:D6:AA:C4:EF:BC:34:D5:2D:77:8E:BA:7A:7F:C4 Certificate issuer: /CN=28dc81ea389dd6aac4efbc34d52d778eba7a7fc4 Certificate serial: 019B48834A141B52F96FB0655C2AA423FA00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft Manifest number: 1711 Signing time: Tue 23 Dec 2025 00:02:02 +0000 Manifest this update: Tue 23 Dec 2025 00:02:02 +0000 Manifest next update: Wed 24 Dec 2025 00:02:02 +0000 Files and hashes: 1: KNyB6jid1qrE77w01S13jrp6f8Q.crl (hash: YHtkLVCnLpMAKrWrnFVRUyB7ZRycoapuxgiB3B6f4hQ=) 2: jzeNLpSr6ZsmMJ4zfkQyfVqA2rE.roa (hash: DE+RSjvcm7xMKntvmhh9CpWW/88iCje6f36L/NDszxo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:83:4a:14:1b:52:f9:6f:b0:65:5c:2a:a4:23:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28dc81ea389dd6aac4efbc34d52d778eba7a7fc4 Validity Not Before: Dec 23 00:02:02 2025 GMT Not After : Dec 24 00:02:02 2025 GMT Subject: CN=cde18870c01d934944cc43e2ee46c41cfcb80f00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:71:47:bc:85:6f:56:c8:f6:8a:34:e4:ef:93: 02:da:71:d7:91:95:7f:4c:8d:70:5c:bc:5e:96:e7: b0:7a:70:17:8e:ab:f6:cf:5e:b6:6c:0b:8f:a2:c4: eb:b9:57:ea:5c:ce:0d:d3:22:d2:14:81:98:04:73: 8c:9d:b2:bd:5b:87:2f:8c:08:2b:b1:22:ac:06:23: 31:c9:82:2f:86:8f:58:74:03:ad:81:de:6d:31:6d: 80:0d:e1:2f:7e:64:cf:20:a2:72:ee:04:6b:c7:3e: cf:46:37:11:f7:db:8e:e4:bb:4a:84:cc:37:9b:54: 54:7b:2f:05:c1:1e:e2:75:ac:56:70:4c:fa:a9:d5: 11:90:7c:5e:07:9b:63:a6:d5:18:0e:57:7f:83:82: 64:c9:6e:e9:cc:c2:ba:44:d7:48:f5:92:48:a9:70: c3:2a:a2:49:00:fd:b3:3c:10:70:90:a3:a7:e3:4a: d6:9b:11:01:45:0c:b7:fe:2f:5d:70:7e:64:65:4f: b5:2c:0d:36:b6:77:05:60:1e:68:ba:cc:34:42:24: 76:ed:5c:59:4d:dd:51:43:98:08:18:8f:16:fe:07: e7:c4:18:8d:8b:bf:32:ff:ef:2b:4f:c8:27:dc:45: f5:49:c1:bb:2f:76:87:42:b5:a1:f9:b7:1b:1f:01: fd:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E1:88:70:C0:1D:93:49:44:CC:43:E2:EE:46:C4:1C:FC:B8:0F:00 X509v3 Authority Key Identifier: keyid:28:DC:81:EA:38:9D:D6:AA:C4:EF:BC:34:D5:2D:77:8E:BA:7A:7F:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:8c:ef:a5:74:11:3c:59:7b:42:36:fa:bc:cd:26:f6:ca:2a: 17:17:44:d4:56:32:1b:a1:d7:95:f9:f2:88:63:5a:95:a7:76: 79:7d:8f:24:ae:d7:75:bc:89:40:b7:fa:18:09:34:fa:75:ef: 54:e9:6a:46:a4:a7:0e:df:b9:17:fe:bb:7e:b8:a3:b5:3b:a9: 67:64:98:dc:8e:b3:fc:68:0a:78:b6:35:53:b6:b1:7f:c8:13: d8:67:5d:0f:46:85:4b:76:0f:08:08:7c:63:17:39:de:99:fa: 60:1a:6a:f9:13:dd:ce:30:c2:b2:89:8b:bd:23:d3:55:c8:77: 5c:0a:17:93:f5:0e:10:aa:47:f1:be:4d:f0:a1:25:45:b9:09: 62:e2:81:99:c3:0b:4c:5c:41:0a:0c:ee:12:30:e7:84:12:44: 31:54:30:8e:4c:42:e9:eb:14:95:ac:a7:d8:0d:fc:90:0b:1b: b9:10:fd:63:e4:d4:32:01:32:46:f4:90:f7:8a:76:08:20:d1: 49:d1:8b:2c:c4:d9:57:84:9e:f4:ef:cd:a6:ff:33:7a:8c:04: 8a:03:64:9d:87:19:22:59:49:9d:54:fb:79:b1:a8:76:90:1e: ac:bf:b6:18:c2:91:3e:df:fd:e0:1b:da:89:03:cd:0f:73:9c: 34:0c:3a:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIg0oUG1L5b7BlXCqkI/oAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ZGM4MWVhMzg5ZGQ2YWFjNGVmYmMzNGQ1MmQ3NzhlYmE3 YTdmYzQwHhcNMjUxMjIzMDAwMjAyWhcNMjUxMjI0MDAwMjAyWjAzMTEwLwYDVQQD EyhjZGUxODg3MGMwMWQ5MzQ5NDRjYzQzZTJlZTQ2YzQxY2ZjYjgwZjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnFHvIVvVsj2ijTk75MC2nHXkZV/ TI1wXLxeluewenAXjqv2z162bAuPosTruVfqXM4N0yLSFIGYBHOMnbK9W4cvjAgr sSKsBiMxyYIvho9YdAOtgd5tMW2ADeEvfmTPIKJy7gRrxz7PRjcR99uO5LtKhMw3 m1RUey8FwR7idaxWcEz6qdURkHxeB5tjptUYDld/g4JkyW7pzMK6RNdI9ZJIqXDD KqJJAP2zPBBwkKOn40rWmxEBRQy3/i9dcH5kZU+1LA02tncFYB5ousw0QiR27VxZ Td1RQ5gIGI8W/gfnxBiNi78y/+8rT8gn3EX1ScG7L3aHQrWh+bcbHwH9IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM3hiHDAHZNJRMxD4u5GxBz8uA8AMB8GA1UdIwQY MBaAFCjcgeo4ndaqxO+8NNUtd466en/EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS055QjZqaWQxcXJFNzd3MDFTMTNqcnA2ZjhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9iNjljNmEtYjc4OC00YTFmLTljNWQt YzA3ZmZmNzQ2OTM4LzEvS055QjZqaWQxcXJFNzd3MDFTMTNqcnA2ZjhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9iNjljNmEtYjc4OC00YTFmLTljNWQtYzA3ZmZmNzQ2OTM4 LzEvS055QjZqaWQxcXJFNzd3MDFTMTNqcnA2ZjhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQozvpXQR PFl7Qjb6vM0m9soqFxdE1FYyG6HXlfnyiGNalad2eX2PJK7XdbyJQLf6GAk0+nXv VOlqRqSnDt+5F/67frijtTupZ2SY3I6z/GgKeLY1U7axf8gT2GddD0aFS3YPCAh8 Yxc53pn6YBpq+RPdzjDCsomLvSPTVch3XAoXk/UOEKpH8b5N8KElRbkJYuKBmcML TFxBCgzuEjDnhBJEMVQwjkxC6esUlayn2A38kAsbuRD9Y+TUMgEyRvSQ94p2CCDR SdGLLMTZV4Se9O/Npv8zeowEigNknYcZIllJnVT7ebGodpAerL+2GMKRPt/94Bva iQPND3OcNAw69Q== -----END CERTIFICATE-----Generated at Tue Dec 23 06:57:49 2025 by rpki-client