This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft File: KCyT0maFJ4jkmYLZ96Yg222fWI0.mft (raw, json) Hash identifier: wAPSI3mwXHynOItyLFrLjRkHDTwq8du3Nj7YdlQwA9A= Subject key identifier: EF:44:0E:88:B3:2C:81:54:BB:9B:1E:03:5E:91:5F:8C:5B:32:62:CE Authority key identifier: 28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D Certificate issuer: /CN=282c93d266852788e49982d9f7a620db6d9f588d Certificate serial: 019AAD27DEC44720E745AA4EE2BAD4556763 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft Manifest number: 0C5A Signing time: Sat 22 Nov 2025 20:01:02 +0000 Manifest this update: Sat 22 Nov 2025 20:01:02 +0000 Manifest next update: Sun 23 Nov 2025 20:01:02 +0000 Files and hashes: 1: FCRIl5Vt1LPdQ6IrZpaUR6T2zRk.roa (hash: dI7TXuZLS0+y6udtXa2yol0ikupwyIZAlaHrmt/VDI0=) 2: KCyT0maFJ4jkmYLZ96Yg222fWI0.crl (hash: 4s0r70s0oWGbIBi5n0uisMNqY4vT9ccB48RzD9mhMRY=) 3: z3-dsZKj9j7nCKXS-M2vtq4aJrk.roa (hash: 28apFTsYy4v/YWMNME9MOhYcWfL7kBuIz5Y1C6vARJo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ad:27:de:c4:47:20:e7:45:aa:4e:e2:ba:d4:55:67:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=282c93d266852788e49982d9f7a620db6d9f588d Validity Not Before: Nov 22 20:01:02 2025 GMT Not After : Nov 23 20:01:02 2025 GMT Subject: CN=ef440e88b32c8154bb9b1e035e915f8c5b3262ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f1:7f:d6:bd:10:ee:d3:aa:99:4d:76:69:02: a7:6d:fa:a1:7f:4a:33:0d:4b:b3:b7:51:ec:b1:36: c8:2b:43:ee:43:ca:16:a1:5d:bb:da:fc:7a:5d:f1: d2:29:50:60:f7:a5:9d:f6:d3:e6:2f:fd:69:08:c8: 79:12:e5:6f:64:cb:cd:ed:33:2b:46:37:61:6a:d2: 27:c8:cb:c1:e3:9c:92:0a:1d:9e:d9:4c:24:4f:d9: 6a:00:58:89:ac:c4:06:12:65:c1:12:b0:d2:28:f8: 60:62:f3:83:ef:9c:62:64:81:e4:40:ad:2e:8d:06: 76:87:ff:9a:97:53:75:6d:81:0c:39:6e:46:f5:07: b5:84:f2:4e:33:a6:8d:6a:67:e6:86:30:c1:25:26: b3:75:a9:43:38:9d:36:22:12:f2:d6:34:4a:af:52: bb:7b:13:1d:6f:8f:50:be:40:fe:fe:14:46:9e:94: fb:80:5f:a9:6b:50:d1:21:3c:9a:59:2b:3b:1e:60: d1:3f:91:4d:bb:e6:33:b3:38:e6:2b:37:87:da:b8: 43:62:25:00:7b:9f:72:df:2b:f6:35:2d:d9:ea:2f: e6:2d:e1:f8:0b:d8:f6:a2:ea:31:51:c7:72:1f:a4: 29:f1:35:62:82:4a:b5:6c:98:7c:57:a9:3b:91:b7: 19:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:44:0E:88:B3:2C:81:54:BB:9B:1E:03:5E:91:5F:8C:5B:32:62:CE X509v3 Authority Key Identifier: keyid:28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:69:d2:a4:65:ea:b3:a5:b1:01:a8:34:46:b6:a7:37:45:c6: 34:8e:f0:0d:98:82:4f:9a:da:3e:f9:6e:74:9d:28:22:9e:a5: c6:ba:9f:8c:2b:ac:c8:fb:e9:e7:1b:47:cf:bc:97:6d:b3:04: 36:77:f1:4f:3e:5d:bd:c5:53:42:17:f3:bb:54:83:55:c4:36: 45:eb:b7:dc:0e:f3:b6:4f:d2:68:69:11:2a:5b:3f:8a:a2:8f: 9e:87:5d:75:3d:cb:11:3c:36:b4:07:8d:f9:8b:94:b1:7d:44: 8e:1e:ea:d2:db:d0:55:e3:86:86:46:5e:04:b7:66:4c:71:6d: b9:8e:15:94:ce:36:37:e5:65:29:f9:89:9c:b3:54:e8:5c:77: 28:f1:02:34:64:27:d1:ec:77:08:63:69:77:a4:70:bd:8c:81: 3f:55:f8:67:24:43:96:9b:b0:5d:9d:45:f7:4e:79:4a:c6:fb: 77:0c:94:eb:10:6c:51:58:71:87:d0:31:6a:4e:f5:f3:5c:b8: 5b:a6:93:68:b5:ed:10:50:d3:17:42:85:8a:1e:16:75:88:05: 55:c8:fe:d7:7e:72:5a:9d:65:4c:48:49:c9:a0:c0:c7:43:b2: 9e:6c:66:7b:12:3d:93:39:f1:d0:ff:da:78:0f:8e:1d:c3:7f: 20:b5:28:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqtJ97ERyDnRapO4rrUVWdjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MmM5M2QyNjY4NTI3ODhlNDk5ODJkOWY3YTYyMGRiNmQ5 ZjU4OGQwHhcNMjUxMTIyMjAwMTAyWhcNMjUxMTIzMjAwMTAyWjAzMTEwLwYDVQQD EyhlZjQ0MGU4OGIzMmM4MTU0YmI5YjFlMDM1ZTkxNWY4YzViMzI2MmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfF/1r0Q7tOqmU12aQKnbfqhf0oz DUuzt1HssTbIK0PuQ8oWoV272vx6XfHSKVBg96Wd9tPmL/1pCMh5EuVvZMvN7TMr RjdhatInyMvB45ySCh2e2UwkT9lqAFiJrMQGEmXBErDSKPhgYvOD75xiZIHkQK0u jQZ2h/+al1N1bYEMOW5G9Qe1hPJOM6aNamfmhjDBJSazdalDOJ02IhLy1jRKr1K7 exMdb49QvkD+/hRGnpT7gF+pa1DRITyaWSs7HmDRP5FNu+YzszjmKzeH2rhDYiUA e59y3yv2NS3Z6i/mLeH4C9j2ouoxUcdyH6Qp8TVigkq1bJh8V6k7kbcZPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO9EDoizLIFUu5seA16RX4xbMmLOMB8GA1UdIwQY MBaAFCgsk9JmhSeI5JmC2femINttn1iNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0N5VDBtYUZKNGprbVlMWjk2WWcyMjJmV0kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8zODJmZjQtNGZjMi00MzAyLWFmOTAt OTZhZGZmZTJlODZhLzEvS0N5VDBtYUZKNGprbVlMWjk2WWcyMjJmV0kwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8zODJmZjQtNGZjMi00MzAyLWFmOTAtOTZhZGZmZTJlODZh LzEvS0N5VDBtYUZKNGprbVlMWjk2WWcyMjJmV0kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY2nSpGXq s6WxAag0RranN0XGNI7wDZiCT5raPvludJ0oIp6lxrqfjCusyPvp5xtHz7yXbbME NnfxTz5dvcVTQhfzu1SDVcQ2Reu33A7ztk/SaGkRKls/iqKPnodddT3LETw2tAeN +YuUsX1Ejh7q0tvQVeOGhkZeBLdmTHFtuY4VlM42N+VlKfmJnLNU6Fx3KPECNGQn 0ex3CGNpd6RwvYyBP1X4ZyRDlpuwXZ1F9055Ssb7dwyU6xBsUVhxh9Axak7181y4 W6aTaLXtEFDTF0KFih4WdYgFVcj+135yWp1lTEhJyaDAx0OynmxmexI9kznx0P/a eA+OHcN/ILUo0Q== -----END CERTIFICATE-----Generated at Sat Nov 22 21:45:01 2025 by rpki-client