This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft File: KsPteUra-5HLgalp64qbKQX-4uw.mft (raw, json) Hash identifier: VheoyHjkfBsmCUgpAfygDJ6D4pJrxbBH2hb+XAl1WFk= Subject key identifier: 00:08:A0:FE:AE:F0:5D:2A:8B:41:79:23:11:D3:FF:A1:2A:18:30:A8 Authority key identifier: 2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC Certificate issuer: /CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec Certificate serial: 019B3AC67173671C4E5103177B649A7D6B81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 08:00:42 +0000 Manifest this update: Sat 20 Dec 2025 08:00:42 +0000 Manifest next update: Sun 21 Dec 2025 08:00:42 +0000 Files and hashes: 1: KsPteUra-5HLgalp64qbKQX-4uw.crl (hash: 2fIPmIHFQ2f+5WEaOHFykYtgEdKvJQsxpuEF3I5IB+I=) 2: PKyx0DcFoAagRLDeVRH7IggDBvs.roa (hash: pNDjxNhK4qz1Wc21dlphpRgyPK79NSu66uAh/Cd4/LQ=) 3: zxynKoaXLk9CSCbEuR1SMnhOszM.roa (hash: 0C0maO3P6rLabRCNi4Fq6yr5sjK9+mFynQgMmbGpRUM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:71:73:67:1c:4e:51:03:17:7b:64:9a:7d:6b:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec Validity Not Before: Dec 20 08:00:42 2025 GMT Not After : Dec 21 08:00:42 2025 GMT Subject: CN=0008a0feaef05d2a8b41792311d3ffa12a1830a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:15:0d:0d:a7:15:e0:45:6e:28:bf:44:d4:b1: 95:d9:77:ef:c7:07:0b:66:2e:b2:26:1b:42:45:ea: 8e:b2:23:29:ae:33:04:fb:7b:d0:0f:f7:88:e2:aa: 57:a6:89:f4:c2:18:64:52:b9:64:5e:bf:5d:2b:40: 23:1c:43:15:a1:2a:ab:12:31:cf:d4:8e:16:6b:5e: 9c:49:5f:a2:fa:e2:45:00:3d:13:e8:da:c4:7f:ee: 61:5c:0a:2b:fb:1a:42:fd:50:ed:5c:07:07:13:59: 5c:0a:a6:2b:3c:1b:d8:5f:ec:81:c0:66:b3:fb:76: 09:6b:9a:79:d1:e7:eb:d3:04:ee:1d:97:ae:96:1e: ad:f2:11:98:0d:05:06:67:34:42:8e:5f:1d:e3:65: 16:99:7b:90:08:cc:f1:d2:0d:2b:e5:91:7e:b5:57: 84:b2:01:0f:cd:1f:eb:a5:7f:d9:d9:8b:a9:67:3c: c7:3a:3a:ec:6e:28:6c:e7:00:f7:04:e9:1f:af:aa: 39:37:33:4f:e5:24:af:fd:68:9e:0c:c2:c4:e2:bc: be:80:52:f7:79:64:37:6e:9a:47:ab:f8:4c:16:77: 34:6b:23:b9:de:6a:da:f3:a9:f6:b2:f8:90:d8:b3: cd:6a:fb:ca:0d:c0:83:c2:66:6f:49:13:66:09:9a: e8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:08:A0:FE:AE:F0:5D:2A:8B:41:79:23:11:D3:FF:A1:2A:18:30:A8 X509v3 Authority Key Identifier: keyid:2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:fb:76:54:d4:ff:e2:40:47:66:88:98:ef:f9:c4:a0:4d:8a: 0a:f3:66:92:22:22:27:89:a6:e7:0b:ea:93:68:ba:fe:48:ca: 00:72:76:90:f6:ab:9c:ac:d5:d4:a9:01:97:f0:00:fa:a1:1c: 84:74:25:c0:9c:27:dc:4a:67:c4:bd:cd:3b:46:60:23:7e:c3: e7:fd:1d:19:c9:e0:ec:ed:df:ad:b3:b2:56:7a:4c:12:fb:ec: 54:ba:2c:7d:bb:98:84:36:f1:8d:d0:69:02:b9:61:b4:ac:da: 54:c5:52:94:3c:ac:4f:ed:a3:5e:69:bb:bb:aa:3f:1f:ba:75: fd:93:7f:7f:5d:04:4b:b9:d8:c4:e9:69:19:8e:03:46:23:ed: c3:cd:2b:d3:3a:2b:dc:10:c3:5e:8d:f0:2a:a3:fa:36:d8:bb: 8b:70:c8:27:fb:e4:7e:40:69:df:92:9e:40:2b:23:93:fb:9e: da:c5:6e:73:ad:bd:36:b1:0f:07:b7:55:52:ba:cb:71:e0:47: 8f:4a:30:49:90:55:dd:d9:8d:48:6f:b0:85:f0:d8:34:f3:3e: 27:cf:91:90:75:07:e7:3d:b4:da:2b:d4:8e:7f:79:8b:d2:be: 62:a8:53:5e:54:53:f8:ad:ba:1b:a8:63:c7:a1:b0:a9:65:d6: 38:94:5a:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xnFzZxxOUQMXe2SafWuBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzNlZDc5NGFkYWZiOTFjYjgxYTk2OWViOGE5YjI5MDVm ZWUyZWMwHhcNMjUxMjIwMDgwMDQyWhcNMjUxMjIxMDgwMDQyWjAzMTEwLwYDVQQD EygwMDA4YTBmZWFlZjA1ZDJhOGI0MTc5MjMxMWQzZmZhMTJhMTgzMGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxUNDacV4EVuKL9E1LGV2XfvxwcL Zi6yJhtCReqOsiMprjME+3vQD/eI4qpXpon0whhkUrlkXr9dK0AjHEMVoSqrEjHP 1I4Wa16cSV+i+uJFAD0T6NrEf+5hXAor+xpC/VDtXAcHE1lcCqYrPBvYX+yBwGaz +3YJa5p50efr0wTuHZeulh6t8hGYDQUGZzRCjl8d42UWmXuQCMzx0g0r5ZF+tVeE sgEPzR/rpX/Z2YupZzzHOjrsbihs5wD3BOkfr6o5NzNP5SSv/WieDMLE4ry+gFL3 eWQ3bppHq/hMFnc0ayO53mra86n2sviQ2LPNavvKDcCDwmZvSRNmCZroXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAAIoP6u8F0qi0F5IxHT/6EqGDCoMB8GA1UdIwQY MBaAFCrD7XlK2vuRy4GpaeuKmykF/uLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NQdGVVcmEtNUhMZ2FscDY0cWJLUVgtNHV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi83YjEyN2ItNDRjZS00Y2FkLWFkOGYt MDg5YzFjM2Q0MzU3LzEvS3NQdGVVcmEtNUhMZ2FscDY0cWJLUVgtNHV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi83YjEyN2ItNDRjZS00Y2FkLWFkOGYtMDg5YzFjM2Q0MzU3 LzEvS3NQdGVVcmEtNUhMZ2FscDY0cWJLUVgtNHV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARft2VNT/ 4kBHZoiY7/nEoE2KCvNmkiIiJ4mm5wvqk2i6/kjKAHJ2kParnKzV1KkBl/AA+qEc hHQlwJwn3EpnxL3NO0ZgI37D5/0dGcng7O3frbOyVnpMEvvsVLosfbuYhDbxjdBp ArlhtKzaVMVSlDysT+2jXmm7u6o/H7p1/ZN/f10ES7nYxOlpGY4DRiPtw80r0zor 3BDDXo3wKqP6Nti7i3DIJ/vkfkBp35KeQCsjk/ue2sVuc629NrEPB7dVUrrLceBH j0owSZBV3dmNSG+whfDYNPM+J8+RkHUH5z202ivUjn95i9K+YqhTXlRT+K26G6hj x6GwqWXWOJRaQQ== -----END CERTIFICATE-----Generated at Sat Dec 20 11:29:31 2025 by rpki-client