This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft File: ktf2mgS9nK1SOzn3ei3atEwpEZI.mft (raw, json) Hash identifier: YlOM555Mn+I/CSEkgwwus4XptMhoxM1KL2lPmaO9Ay8= Subject key identifier: E3:7D:AD:73:AB:3D:3D:87:F4:C4:59:D7:62:71:B4:CB:C0:6D:11:5D Authority key identifier: 92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92 Certificate issuer: /CN=92d7f69a04bd9cad523b39f77a2ddab44c291192 Certificate serial: 019B21ABCAE62CE794CA31969936332EF5F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft Manifest number: 170B Signing time: Mon 15 Dec 2025 11:01:05 +0000 Manifest this update: Mon 15 Dec 2025 11:01:05 +0000 Manifest next update: Tue 16 Dec 2025 11:01:05 +0000 Files and hashes: 1: ktf2mgS9nK1SOzn3ei3atEwpEZI.crl (hash: hD+HK9ba+4PZ/WEMvuYVOVK2swmfdwXXTPCL9V1Y7q4=) 2: tX7ugzTELMCfaa10qZ6cRQFzo6s.roa (hash: pM1f1c7cpi8tX6YPlXTmsRIvmuNbzIiqqMIx6Cp/Bqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 11:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:ab:ca:e6:2c:e7:94:ca:31:96:99:36:33:2e:f5:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7f69a04bd9cad523b39f77a2ddab44c291192 Validity Not Before: Dec 15 11:01:05 2025 GMT Not After : Dec 16 11:01:05 2025 GMT Subject: CN=e37dad73ab3d3d87f4c459d76271b4cbc06d115d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3e:f1:f6:52:bd:f9:05:15:49:78:50:11:48: 2a:0c:86:08:b7:77:cb:77:58:2b:75:3e:d9:de:69: 69:7e:d6:e2:22:5f:7c:53:ae:19:47:81:31:1e:94: ef:98:4f:5c:00:4c:a6:a3:cf:42:13:b1:fa:80:64: 3e:cf:79:64:f3:28:d0:72:fd:aa:41:1c:84:e1:98: a4:f3:ca:fb:13:85:77:e2:2f:1d:8d:00:25:8f:34: 23:cf:28:17:28:ec:fd:42:cf:fe:18:64:f8:2c:6f: c3:f6:41:d3:5a:06:31:a3:2d:9f:cd:11:87:39:52: 85:bf:92:9e:6b:7d:1a:00:5c:ad:84:68:81:48:8e: e7:a4:bf:91:b4:3a:e9:3f:48:5a:1b:f1:53:cc:a1: 67:49:c3:b5:b4:2f:4d:92:d2:39:94:bc:75:6a:78: ba:62:1d:2a:ca:07:cd:33:9a:ec:0a:5d:7f:76:0c: 9e:48:33:32:b3:34:2a:e4:93:ff:3c:6b:eb:eb:a5: e3:13:a5:d5:c2:34:b3:34:8a:08:fa:75:ed:57:59: b8:76:0c:d7:cf:d7:4f:df:6a:f3:e1:f8:c0:61:3e: 6a:f5:70:75:60:b9:d5:4f:bc:4a:83:65:79:90:0d: 7b:0e:18:ea:e7:19:00:13:a1:1f:c7:ed:52:67:11: ec:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:7D:AD:73:AB:3D:3D:87:F4:C4:59:D7:62:71:B4:CB:C0:6D:11:5D X509v3 Authority Key Identifier: keyid:92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:cc:5a:f0:84:53:a5:f6:c1:d2:2b:43:19:4d:5e:57:09:e5: b0:be:93:a5:eb:56:c4:14:7f:c8:aa:32:b7:37:6d:45:f4:c8: f2:fa:3e:3a:d5:dc:0f:da:de:b4:40:0a:dc:0d:d5:2f:5a:dd: ca:4f:0f:01:e8:3b:ff:4c:eb:c4:18:4f:85:c4:55:aa:64:a7: 7b:33:de:57:31:69:5d:bf:0a:19:4b:3e:e3:20:46:5f:c0:4e: 9c:97:af:07:3d:70:0e:e8:aa:9b:df:f7:bd:20:af:60:cf:3a: c8:02:19:f7:88:37:c0:78:ce:54:68:3f:00:be:45:be:c9:a9: 21:2c:58:d1:54:75:3f:33:2f:dd:b3:3d:08:59:6c:b5:fb:48: db:e9:6a:8b:c1:b0:38:a0:b7:65:38:db:fc:c5:81:6d:b2:a6: 11:75:2d:1a:fc:38:9d:87:46:1e:cc:fd:c1:2a:86:01:ef:bf: fb:9b:a8:d2:9f:7c:ba:55:d6:72:11:fb:e8:e9:b8:93:50:f5: b9:8c:d0:c9:77:76:a5:00:86:d1:ff:43:f7:9d:83:75:cf:a0: 56:85:12:b7:f0:4b:c8:d0:c1:c4:9e:9a:2b:35:e1:54:4e:92: 39:de:66:3c:9b:3c:e7:f7:ec:25:26:32:ae:97:f4:9c:9f:06: a1:f3:a5:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshq8rmLOeUyjGWmTYzLvX1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdmNjlhMDRiZDljYWQ1MjNiMzlmNzdhMmRkYWI0NGMy OTExOTIwHhcNMjUxMjE1MTEwMTA1WhcNMjUxMjE2MTEwMTA1WjAzMTEwLwYDVQQD EyhlMzdkYWQ3M2FiM2QzZDg3ZjRjNDU5ZDc2MjcxYjRjYmMwNmQxMTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoj7x9lK9+QUVSXhQEUgqDIYIt3fL d1grdT7Z3mlpftbiIl98U64ZR4ExHpTvmE9cAEymo89CE7H6gGQ+z3lk8yjQcv2q QRyE4Zik88r7E4V34i8djQAljzQjzygXKOz9Qs/+GGT4LG/D9kHTWgYxoy2fzRGH OVKFv5Kea30aAFythGiBSI7npL+RtDrpP0haG/FTzKFnScO1tC9NktI5lLx1ani6 Yh0qygfNM5rsCl1/dgyeSDMyszQq5JP/PGvr66XjE6XVwjSzNIoI+nXtV1m4dgzX z9dP32rz4fjAYT5q9XB1YLnVT7xKg2V5kA17Dhjq5xkAE6Efx+1SZxHs8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFON9rXOrPT2H9MRZ12JxtMvAbRFdMB8GA1UdIwQY MBaAFJLX9poEvZytUjs593ot2rRMKRGSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmMm1nUzluSzFTT3puM2VpM2F0RXdwRVpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy81MGQ4NTUtY2Q4MS00ODFhLTk1ZWYt Yjg0NDg3ZjkyMGU0LzEva3RmMm1nUzluSzFTT3puM2VpM2F0RXdwRVpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy81MGQ4NTUtY2Q4MS00ODFhLTk1ZWYtYjg0NDg3ZjkyMGU0 LzEva3RmMm1nUzluSzFTT3puM2VpM2F0RXdwRVpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY8xa8IRT pfbB0itDGU1eVwnlsL6TpetWxBR/yKoytzdtRfTI8vo+OtXcD9retEAK3A3VL1rd yk8PAeg7/0zrxBhPhcRVqmSnezPeVzFpXb8KGUs+4yBGX8BOnJevBz1wDuiqm9/3 vSCvYM86yAIZ94g3wHjOVGg/AL5FvsmpISxY0VR1PzMv3bM9CFlstftI2+lqi8Gw OKC3ZTjb/MWBbbKmEXUtGvw4nYdGHsz9wSqGAe+/+5uo0p98ulXWchH76Om4k1D1 uYzQyXd2pQCG0f9D952Ddc+gVoUSt/BLyNDBxJ6aKzXhVE6SOd5mPJs85/fsJSYy rpf0nJ8GofOlxA== -----END CERTIFICATE-----Generated at Mon Dec 15 20:23:24 2025 by rpki-client