This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft File: KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft (raw, json) Hash identifier: eaoN8wV7RyYtiqKtPcFRby8lelK3ZmP46cJLXDW4fCs= Subject key identifier: 01:AE:F3:13:9C:E7:3D:7F:55:3D:9D:6E:1C:42:3F:49:64:05:C4:26 Authority key identifier: 28:20:3D:EC:D0:8B:D4:7D:8A:91:62:A6:E1:74:2F:3C:53:EA:3C:74 Certificate issuer: /CN=28203decd08bd47d8a9162a6e1742f3c53ea3c74 Certificate serial: 019B5976F8F6D22D89E24E80A03F01229C6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCA97NCL1H2KkWKm4XQvPFPqPHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft Manifest number: 0A14 Signing time: Fri 26 Dec 2025 07:02:07 +0000 Manifest this update: Fri 26 Dec 2025 07:02:07 +0000 Manifest next update: Sat 27 Dec 2025 07:02:07 +0000 Files and hashes: 1: Ep5Q_paEMkoQ8JMNVQev_VtcdmY.roa (hash: Bu1EiGDnBTDp8uoDAPAoyCI9ib5FJjnia2bO4NVERCs=) 2: KCA97NCL1H2KkWKm4XQvPFPqPHQ.crl (hash: Nzr7E+NwevdeHrkiq0HQR82uoyO0wLR+hqR8lopz+xc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KCA97NCL1H2KkWKm4XQvPFPqPHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:f8:f6:d2:2d:89:e2:4e:80:a0:3f:01:22:9c:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28203decd08bd47d8a9162a6e1742f3c53ea3c74 Validity Not Before: Dec 26 07:02:07 2025 GMT Not After : Dec 27 07:02:07 2025 GMT Subject: CN=01aef3139ce73d7f553d9d6e1c423f496405c426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1d:37:f6:97:11:cd:61:d6:f0:29:0e:fb:f5: 7b:51:7c:2d:e5:ca:40:ba:0a:93:f6:de:ca:7d:44: 3f:80:d8:44:4d:d0:e6:1a:a6:24:6e:cf:6c:e1:da: f2:a5:8b:e2:ee:85:6d:fb:5f:08:27:e3:4c:82:c2: f8:d0:13:da:7c:8e:fd:0f:8a:6d:78:53:f1:3e:82: 84:bf:14:f4:49:bf:ac:93:06:92:a5:08:2b:44:fb: 19:d4:44:b1:ab:50:84:74:9c:04:d0:99:57:05:e7: 7e:d2:b8:6d:f6:60:65:3a:8c:b1:dc:a2:e9:2e:6e: d2:73:68:ad:f3:18:21:fb:ef:e1:19:e9:19:fe:7b: 49:50:f8:c3:e2:b2:0e:10:2b:29:b1:39:bd:3a:5d: 78:83:c4:8f:a0:c0:4f:5d:a6:fa:d7:5a:17:69:22: 07:86:4f:c8:aa:c4:e5:3f:25:64:d0:31:4f:42:5a: ef:42:3e:8e:33:d8:5e:f8:d4:b3:fb:2d:59:30:0f: 83:84:7f:49:d0:20:3a:e4:b5:28:23:60:eb:51:6b: 4f:d6:22:ec:ee:df:29:63:2a:cb:7b:b9:4e:81:0a: be:bd:d9:cb:ca:03:47:d4:2c:b3:44:81:89:d9:cc: f5:bc:20:cc:c5:0f:4b:a6:24:5c:da:da:1c:7e:30: 35:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:AE:F3:13:9C:E7:3D:7F:55:3D:9D:6E:1C:42:3F:49:64:05:C4:26 X509v3 Authority Key Identifier: keyid:28:20:3D:EC:D0:8B:D4:7D:8A:91:62:A6:E1:74:2F:3C:53:EA:3C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCA97NCL1H2KkWKm4XQvPFPqPHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:d3:14:63:42:f7:73:ca:07:bd:b2:d9:c9:81:33:ae:24:cd: 61:1a:92:ae:a3:fd:8e:23:bc:03:42:cd:ea:90:29:fe:2a:4b: 5b:be:7c:c9:f8:d7:5a:78:b5:c4:bb:49:1f:0d:dd:a4:5a:72: 63:41:ba:0d:12:18:90:94:10:41:24:08:0b:75:e6:44:04:b6: 37:3d:ab:a8:bb:97:fa:c0:6a:70:13:ec:59:5d:0f:e5:5b:c1: 7d:60:09:c5:02:d8:1c:2c:28:83:17:93:b7:c7:68:ce:52:60: f7:5e:a0:52:e0:6e:c4:d6:a7:af:90:23:86:89:9a:a8:cf:20: ce:18:a7:49:a3:69:5c:70:ac:27:ce:ae:b4:2b:75:90:d1:69: f8:52:b7:d7:fe:7e:91:ca:d8:21:93:71:f4:19:aa:c3:68:8d: 06:b4:bf:28:05:56:5f:1d:6a:8e:c3:e7:26:6c:47:88:9f:d2: 59:d3:f2:8c:cd:10:c0:d6:c7:e7:15:f5:eb:0d:28:93:b7:fa: 89:df:24:88:92:32:b6:30:33:73:f8:30:1f:80:2e:1d:5c:d8: ac:1a:77:b7:cd:f2:0d:fd:04:4d:88:72:32:11:f7:47:e1:c0: 75:40:f8:8c:b6:4b:33:6f:4c:56:24:04:35:1f:ea:b4:b6:63: f9:90:08:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdvj20i2J4k6AoD8BIpxtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MjAzZGVjZDA4YmQ0N2Q4YTkxNjJhNmUxNzQyZjNjNTNl YTNjNzQwHhcNMjUxMjI2MDcwMjA3WhcNMjUxMjI3MDcwMjA3WjAzMTEwLwYDVQQD EygwMWFlZjMxMzljZTczZDdmNTUzZDlkNmUxYzQyM2Y0OTY0MDVjNDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqx039pcRzWHW8CkO+/V7UXwt5cpA ugqT9t7KfUQ/gNhETdDmGqYkbs9s4drypYvi7oVt+18IJ+NMgsL40BPafI79D4pt eFPxPoKEvxT0Sb+skwaSpQgrRPsZ1ESxq1CEdJwE0JlXBed+0rht9mBlOoyx3KLp Lm7Sc2it8xgh++/hGekZ/ntJUPjD4rIOECspsTm9Ol14g8SPoMBPXab611oXaSIH hk/IqsTlPyVk0DFPQlrvQj6OM9he+NSz+y1ZMA+DhH9J0CA65LUoI2DrUWtP1iLs 7t8pYyrLe7lOgQq+vdnLygNH1CyzRIGJ2cz1vCDMxQ9LpiRc2tocfjA1cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAGu8xOc5z1/VT2dbhxCP0lkBcQmMB8GA1UdIwQY MBaAFCggPezQi9R9ipFipuF0LzxT6jx0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0NBOTdOQ0wxSDJLa1dLbTRYUXZQRlBxUEhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jOTBhMzQtMGFmZC00OWI5LWJiZDYt YTI5N2MxNDA4MDg1LzEvS0NBOTdOQ0wxSDJLa1dLbTRYUXZQRlBxUEhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jOTBhMzQtMGFmZC00OWI5LWJiZDYtYTI5N2MxNDA4MDg1 LzEvS0NBOTdOQ0wxSDJLa1dLbTRYUXZQRlBxUEhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABtMUY0L3 c8oHvbLZyYEzriTNYRqSrqP9jiO8A0LN6pAp/ipLW758yfjXWni1xLtJHw3dpFpy Y0G6DRIYkJQQQSQIC3XmRAS2Nz2rqLuX+sBqcBPsWV0P5VvBfWAJxQLYHCwogxeT t8dozlJg916gUuBuxNanr5AjhomaqM8gzhinSaNpXHCsJ86utCt1kNFp+FK31/5+ kcrYIZNx9Bmqw2iNBrS/KAVWXx1qjsPnJmxHiJ/SWdPyjM0QwNbH5xX16w0ok7f6 id8kiJIytjAzc/gwH4AuHVzYrBp3t83yDf0ETYhyMhH3R+HAdUD4jLZLM29MViQE NR/qtLZj+ZAI4Q== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:03 2025 by rpki-client