This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft File: ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft (raw, json) Hash identifier: +W9vIDT0gS3C3EZyZmKi9FuR74YvqBgIrXKleiB/fUs= Subject key identifier: 42:89:B5:94:5F:2E:59:2F:50:62:7D:8D:7A:34:C2:E6:7A:72:16:1E Authority key identifier: 92:EF:F6:16:25:02:EA:3B:52:FD:8C:A3:AE:10:8D:13:D6:BF:F6:52 Certificate issuer: /CN=92eff6162502ea3b52fd8ca3ae108d13d6bff652 Certificate serial: 019B4BF29F548B8A6BAD396408CDC40A9C99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft Manifest number: 1790 Signing time: Tue 23 Dec 2025 16:02:30 +0000 Manifest this update: Tue 23 Dec 2025 16:02:30 +0000 Manifest next update: Wed 24 Dec 2025 16:02:30 +0000 Files and hashes: 1: ku_2FiUC6jtS_YyjrhCNE9a_9lI.crl (hash: ZAqVSTm1asU3ekXpZ8a2KaK1A4mRUyTa4P58u/MK7lQ=) 2: vIUD6qLiZhlDA8IvWgGD4RFZTgQ.roa (hash: 8f4c2O05sapdQ4wcaKqtNByBFKGfiB5rQ1o7fR58j44=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft rsync://rpki.ripe.net/repository/DEFAULT/ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f2:9f:54:8b:8a:6b:ad:39:64:08:cd:c4:0a:9c:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92eff6162502ea3b52fd8ca3ae108d13d6bff652 Validity Not Before: Dec 23 16:02:30 2025 GMT Not After : Dec 24 16:02:30 2025 GMT Subject: CN=4289b5945f2e592f50627d8d7a34c2e67a72161e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b8:3a:e7:1f:fa:be:99:39:62:33:ae:a7:67: 5d:96:b3:b5:5a:ee:75:0b:8c:f9:b1:69:f3:5b:01: 5e:91:e2:b5:6c:49:85:60:18:63:0a:d0:c3:17:75: 15:cd:78:af:3c:71:cb:3d:e6:c8:18:21:70:ee:47: cf:0e:0d:8f:ad:59:5d:91:31:2b:ab:ed:bc:3e:d1: 1b:bb:87:f9:7f:ee:45:fb:c9:f9:1d:6a:d5:9c:ea: ed:ca:ce:62:7c:69:cb:69:49:e0:aa:a7:18:d5:78: 7f:95:bc:9f:43:24:e4:eb:a2:e5:94:5c:af:78:64: 6c:b7:5f:f5:2d:ae:b0:f6:2f:d4:d2:4d:a2:69:2f: a1:f4:e8:8f:02:f6:92:01:03:b1:ef:97:62:e0:59: 1c:00:85:5e:4d:bc:f9:90:88:97:50:69:f8:e9:69: 50:5a:bc:bb:32:44:5d:7b:84:8b:3e:f5:42:b9:7c: 15:4d:18:9e:3d:e1:78:31:af:f6:f9:2f:21:6a:4d: 36:c3:35:38:36:e7:9e:33:a0:c0:66:58:33:93:2b: 76:84:cb:5f:a7:af:62:b3:f2:c5:c2:de:69:68:39: 2a:8d:9a:1c:85:58:03:9d:b5:01:87:2c:cd:0d:ed: b9:41:a6:8d:63:83:05:d7:35:1f:e3:e8:73:3c:18: 24:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:89:B5:94:5F:2E:59:2F:50:62:7D:8D:7A:34:C2:E6:7A:72:16:1E X509v3 Authority Key Identifier: keyid:92:EF:F6:16:25:02:EA:3B:52:FD:8C:A3:AE:10:8D:13:D6:BF:F6:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:18:4a:e1:f1:cd:38:28:59:05:2d:df:fa:28:7d:a2:e0:9f: 5f:f7:79:28:95:26:e7:ef:e6:6b:43:6b:d8:b1:b8:a5:ec:0e: e1:b0:b6:4f:f6:6e:8b:d6:1c:29:83:e3:90:0a:cd:e2:77:38: d9:86:34:27:26:42:72:94:1f:78:5e:1e:61:62:77:f3:4a:84: 8c:9c:07:2d:d8:f0:02:20:9c:8a:da:d9:ee:1c:0a:d0:9a:a1: 2b:bd:c1:4f:6e:88:20:b7:e8:a4:04:73:59:62:a0:a8:2d:b5: 2f:cd:48:12:25:00:e5:8a:46:72:39:cc:60:f7:ea:51:7b:c4: 36:35:ca:25:66:fd:a5:d9:f8:05:11:e6:94:b9:bb:f8:1a:30: af:10:a8:73:95:8e:ff:d3:5c:dd:65:e1:77:41:38:da:38:71: f7:35:5b:bd:99:42:31:7a:58:5e:4c:5e:e2:9a:6d:af:5d:b8: 82:f1:a2:77:d5:ad:07:91:e7:f6:32:56:eb:07:51:2a:f7:9a: d4:fd:66:5b:21:06:eb:9c:ac:7e:24:a7:ac:67:ed:9c:bc:f4: 32:ac:f5:e9:a0:03:bd:b3:e9:f6:1b:32:09:d4:23:a9:0f:38: 23:4f:a7:b9:84:8b:9d:4a:70:c4:91:e0:10:2b:af:70:92:f8: 27:d9:c7:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8p9Ui4prrTlkCM3ECpyZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZWZmNjE2MjUwMmVhM2I1MmZkOGNhM2FlMTA4ZDEzZDZi ZmY2NTIwHhcNMjUxMjIzMTYwMjMwWhcNMjUxMjI0MTYwMjMwWjAzMTEwLwYDVQQD Eyg0Mjg5YjU5NDVmMmU1OTJmNTA2MjdkOGQ3YTM0YzJlNjdhNzIxNjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Lg65x/6vpk5YjOup2ddlrO1Wu51 C4z5sWnzWwFekeK1bEmFYBhjCtDDF3UVzXivPHHLPebIGCFw7kfPDg2PrVldkTEr q+28PtEbu4f5f+5F+8n5HWrVnOrtys5ifGnLaUngqqcY1Xh/lbyfQyTk66LllFyv eGRst1/1La6w9i/U0k2iaS+h9OiPAvaSAQOx75di4FkcAIVeTbz5kIiXUGn46WlQ Wry7MkRde4SLPvVCuXwVTRiePeF4Ma/2+S8hak02wzU4NueeM6DAZlgzkyt2hMtf p69is/LFwt5paDkqjZochVgDnbUBhyzNDe25QaaNY4MF1zUf4+hzPBgkwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEKJtZRfLlkvUGJ9jXo0wuZ6chYeMB8GA1UdIwQY MBaAFJLv9hYlAuo7Uv2Mo64QjRPWv/ZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3VfMkZpVUM2anRTX1l5anJoQ05FOWFfOWxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS83OTQzYTAtY2NhYi00MjYwLWJkNTEt YWZlODlhYWNjNDkyLzEva3VfMkZpVUM2anRTX1l5anJoQ05FOWFfOWxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS83OTQzYTAtY2NhYi00MjYwLWJkNTEtYWZlODlhYWNjNDky LzEva3VfMkZpVUM2anRTX1l5anJoQ05FOWFfOWxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABRhK4fHN OChZBS3f+ih9ouCfX/d5KJUm5+/ma0Nr2LG4pewO4bC2T/Zui9YcKYPjkArN4nc4 2YY0JyZCcpQfeF4eYWJ380qEjJwHLdjwAiCcitrZ7hwK0JqhK73BT26IILfopARz WWKgqC21L81IEiUA5YpGcjnMYPfqUXvENjXKJWb9pdn4BRHmlLm7+BowrxCoc5WO /9Nc3WXhd0E42jhx9zVbvZlCMXpYXkxe4pptr124gvGid9WtB5Hn9jJW6wdRKvea 1P1mWyEG65ysfiSnrGftnLz0Mqz16aADvbPp9hsyCdQjqQ84I0+nuYSLnUpwxJHg ECuvcJL4J9nHiA== -----END CERTIFICATE-----Generated at Tue Dec 23 18:13:52 2025 by rpki-client