This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft File: KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft (raw, json) Hash identifier: gxOylRrlfLOmehIkqNEDr+jUl+CZBnAZLu39BTaERSQ= Subject key identifier: E0:16:53:C6:F5:D8:BB:A7:70:26:EA:E9:FD:A0:5A:A8:DA:D7:32:AB Authority key identifier: 28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2 Certificate issuer: /CN=28f8ede20b78f995993da98f434a966074d562c2 Certificate serial: 019B292DEA5F5F9458C3B50928676BD43536 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft Manifest number: 0F09 Signing time: Tue 16 Dec 2025 22:00:33 +0000 Manifest this update: Tue 16 Dec 2025 22:00:33 +0000 Manifest next update: Wed 17 Dec 2025 22:00:33 +0000 Files and hashes: 1: KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl (hash: 0vnLklZbTXVjwWm++aG8sXO7AfgBSg8098/OTzHTp7o=) 2: QrZTcjFrQJb3bvPYCzlmoBO_9JQ.roa (hash: WYTR6hwNEJJPOZupDqIytAiSQqBtGgxwk+L0S3fkxlw=) 3: oEDAb_-YZ2g4zh9tclXwopyXjP4.roa (hash: E6+8HcazGwD4GmKYHyq4M2SPeGPxJmXR/m+ObVabJaI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 22:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:2d:ea:5f:5f:94:58:c3:b5:09:28:67:6b:d4:35:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28f8ede20b78f995993da98f434a966074d562c2 Validity Not Before: Dec 16 22:00:33 2025 GMT Not After : Dec 17 22:00:33 2025 GMT Subject: CN=e01653c6f5d8bba77026eae9fda05aa8dad732ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:7d:d1:62:ab:f4:0b:0e:a1:de:e3:2d:b4:97: 14:27:01:79:49:94:dd:36:fb:46:13:30:d1:4a:39: 64:92:5d:c4:d9:c0:75:d1:e9:9b:45:f7:cd:b4:ca: 2a:72:af:08:44:da:a6:ed:08:84:90:dd:1f:75:20: 4a:a8:ee:77:c7:0b:f5:01:0e:3a:41:39:cb:17:0d: b0:cc:f9:c9:f3:a0:2f:9f:60:67:bc:9f:1c:e0:64: 10:a5:ff:9f:78:c1:f4:aa:93:e1:ea:c9:43:08:f1: 4b:fd:2a:7c:01:54:db:81:61:62:5d:06:4d:fd:ce: 06:92:08:9a:4f:71:a9:60:eb:9b:2f:b4:55:f4:34: 27:b0:73:82:df:90:50:68:71:01:6c:e1:39:56:e9: 8a:59:32:62:a0:50:7a:5b:0c:16:5d:d3:3c:ed:c0: 39:f1:12:7d:ef:33:f0:0c:ed:e1:6f:a6:cb:57:83: 6d:2e:e2:a0:28:38:d3:6e:94:e0:1d:ef:58:7c:fe: 65:c2:c7:75:03:f3:56:95:a1:f8:5b:86:0a:2b:97: e6:ad:36:b6:a7:0e:be:0d:8c:33:97:09:b2:21:4e: 91:aa:54:27:31:c9:94:bf:93:5d:c3:62:e7:a3:4e: ca:0e:b4:f2:45:19:84:6d:54:93:d4:15:7c:da:a7: e3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:16:53:C6:F5:D8:BB:A7:70:26:EA:E9:FD:A0:5A:A8:DA:D7:32:AB X509v3 Authority Key Identifier: keyid:28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:27:95:fe:c6:1b:49:9a:5a:e6:04:63:e7:b7:6e:0e:f6:0d: 2e:96:cf:fd:85:a0:aa:2a:43:b8:4b:95:a1:8d:54:c9:f5:81: e3:2a:51:2a:b0:5f:f3:75:2e:03:e5:e8:72:f2:04:84:25:60: bf:97:6b:2c:d5:ca:52:48:2b:6d:8d:b1:5f:9d:8c:4e:17:1e: 2d:40:98:ce:cd:42:f1:61:c5:dd:f1:5d:1c:a9:c7:43:3c:2d: f9:71:4e:14:13:06:9b:76:0b:4d:02:fd:55:1e:e1:02:d2:a0: d2:90:a4:14:93:d5:f3:b4:b5:18:f0:8c:cc:26:52:0b:98:a5: 8d:70:15:ca:95:38:09:a4:51:6b:e3:f6:81:96:a6:95:f9:0b: 83:56:17:3d:56:a8:b6:be:51:5f:6e:f5:48:52:d5:80:16:a1: 7d:b1:97:17:a6:0d:3e:c1:dd:43:16:1b:c0:d9:04:88:20:6a: aa:fa:05:29:c6:c6:14:d5:80:6a:ae:47:1f:0d:c6:0c:9c:9c: 36:70:8f:c3:7b:69:9e:ba:c0:a4:52:90:af:c7:3c:fe:c0:f0: 44:ab:23:6d:e8:57:9b:4a:38:e6:f5:dd:40:bc:65:cf:b8:ae: 82:33:6d:42:75:8b:07:a5:61:e5:18:56:a8:76:b2:11:be:d4: 63:ac:29:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspLepfX5RYw7UJKGdr1DU2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ZjhlZGUyMGI3OGY5OTU5OTNkYTk4ZjQzNGE5NjYwNzRk NTYyYzIwHhcNMjUxMjE2MjIwMDMzWhcNMjUxMjE3MjIwMDMzWjAzMTEwLwYDVQQD EyhlMDE2NTNjNmY1ZDhiYmE3NzAyNmVhZTlmZGEwNWFhOGRhZDczMmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+H3RYqv0Cw6h3uMttJcUJwF5SZTd NvtGEzDRSjlkkl3E2cB10embRffNtMoqcq8IRNqm7QiEkN0fdSBKqO53xwv1AQ46 QTnLFw2wzPnJ86Avn2BnvJ8c4GQQpf+feMH0qpPh6slDCPFL/Sp8AVTbgWFiXQZN /c4GkgiaT3GpYOubL7RV9DQnsHOC35BQaHEBbOE5VumKWTJioFB6WwwWXdM87cA5 8RJ97zPwDO3hb6bLV4NtLuKgKDjTbpTgHe9YfP5lwsd1A/NWlaH4W4YKK5fmrTa2 pw6+DYwzlwmyIU6RqlQnMcmUv5Ndw2Lno07KDrTyRRmEbVST1BV82qfjxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOAWU8b12LuncCbq6f2gWqja1zKrMB8GA1UdIwQY MBaAFCj47eILePmVmT2pj0NKlmB01WLCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1BqdDRndDQtWldaUGFtUFEwcVdZSFRWWXNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jZmNmZmEtNjAyOS00MmRkLTllZjgt OWQzYTBmMjNjYmU3LzEvS1BqdDRndDQtWldaUGFtUFEwcVdZSFRWWXNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9jZmNmZmEtNjAyOS00MmRkLTllZjgtOWQzYTBmMjNjYmU3 LzEvS1BqdDRndDQtWldaUGFtUFEwcVdZSFRWWXNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGieV/sYb SZpa5gRj57duDvYNLpbP/YWgqipDuEuVoY1UyfWB4ypRKrBf83UuA+XocvIEhCVg v5drLNXKUkgrbY2xX52MThceLUCYzs1C8WHF3fFdHKnHQzwt+XFOFBMGm3YLTQL9 VR7hAtKg0pCkFJPV87S1GPCMzCZSC5iljXAVypU4CaRRa+P2gZamlfkLg1YXPVao tr5RX271SFLVgBahfbGXF6YNPsHdQxYbwNkEiCBqqvoFKcbGFNWAaq5HHw3GDJyc NnCPw3tpnrrApFKQr8c8/sDwRKsjbehXm0o45vXdQLxlz7iugjNtQnWLB6Vh5RhW qHayEb7UY6wpKA== -----END CERTIFICATE-----Generated at Wed Dec 17 06:01:35 2025 by rpki-client