This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft File: KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft (raw, json) Hash identifier: SW2oni/8QO8RgFe6Cuzxaah9t7rMJuoDB8hUiWSinic= Subject key identifier: 18:C5:34:ED:43:F0:C1:86:E4:FB:11:8B:52:6C:DF:C2:2D:F3:07:6D Authority key identifier: 28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4 Certificate issuer: /CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4 Certificate serial: 019AFB79F924521608C2787DB4C28C01149B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft Manifest number: 0542 Signing time: Mon 08 Dec 2025 01:01:06 +0000 Manifest this update: Mon 08 Dec 2025 01:01:06 +0000 Manifest next update: Tue 09 Dec 2025 01:01:06 +0000 Files and hashes: 1: KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl (hash: Cf9qSwZg7pkYBp2J60cIqOyu0Z1BDUGZKufwUtJOWqc=) 2: o05sdzj6m4fQO6_WrgnQWVEGn8s.roa (hash: 4PZyqJElCUrsee8Vele9Jxa/SXWOHXm1LP7RgEQB9SY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 01:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:79:f9:24:52:16:08:c2:78:7d:b4:c2:8c:01:14:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4 Validity Not Before: Dec 8 01:01:06 2025 GMT Not After : Dec 9 01:01:06 2025 GMT Subject: CN=18c534ed43f0c186e4fb118b526cdfc22df3076d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:6b:7c:ce:83:69:6e:73:65:00:7a:14:ed:cf: 6f:15:35:1f:79:97:57:70:d6:fd:f3:0c:18:76:49: 44:30:b0:e0:7b:93:7f:7d:10:ab:e7:f5:ac:2c:d9: 8e:3f:f6:f8:fe:57:d9:5c:c6:fd:65:72:d5:aa:40: d1:ae:37:50:c4:48:01:dd:d7:11:03:e3:fe:d2:10: 84:d0:a2:eb:dd:7b:78:24:ed:59:22:b4:eb:4f:d5: 39:fd:01:c5:14:41:cb:e1:5f:e6:ed:74:33:2c:6e: 66:f9:8d:a6:ce:91:4a:67:a9:af:d7:83:68:54:69: 89:f0:75:f7:e6:4b:bf:65:c6:ef:75:f8:3b:e2:1c: ac:d4:10:a7:b7:40:53:66:7b:4e:0b:ac:c9:10:1d: 1d:b1:09:96:78:c3:4d:0a:d2:28:96:2c:b5:1d:56: e2:74:1f:e5:08:03:aa:8a:d6:8c:d0:90:aa:5a:26: c3:b7:48:48:c4:95:a5:d9:f6:19:2d:52:75:6b:74: 3a:5d:6f:63:98:a0:6d:d4:a2:09:f3:c0:25:e9:cf: 34:70:b3:b8:b7:51:ae:8c:62:d1:ef:be:f2:e8:9e: 89:49:ca:56:e2:7f:5b:1f:16:91:30:f0:79:71:5f: 70:5e:63:dc:0d:f6:02:8b:f5:08:9d:17:fe:96:ec: 61:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C5:34:ED:43:F0:C1:86:E4:FB:11:8B:52:6C:DF:C2:2D:F3:07:6D X509v3 Authority Key Identifier: keyid:28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:eb:42:ad:ff:8c:85:f8:25:27:06:98:c3:3a:67:fe:8b:94: 11:5b:57:ea:8b:f5:00:ea:28:c9:4b:18:b2:e9:2b:ca:85:c3: d3:06:33:20:5b:ab:14:cf:76:c1:26:8e:da:42:cc:07:a1:97: f2:dd:da:75:11:77:17:cc:83:01:f0:3c:62:ea:6c:3d:16:f5: db:1b:e1:0a:c8:58:ea:79:af:e7:d1:84:f7:50:49:03:e7:73: ac:0f:eb:5b:00:cd:f6:fa:e8:8d:e7:b6:bc:02:5f:f9:e6:54: 65:86:e3:07:d6:ff:42:16:86:9e:7b:bb:d8:16:e1:14:7e:0a: e4:8a:fa:f3:64:ae:59:84:d7:87:04:37:55:ad:89:8a:ae:b3: de:6a:2b:0c:00:18:32:9e:0c:d8:8b:d1:c6:af:e6:0d:47:59: ce:65:c0:01:b4:30:e6:9b:29:37:ab:bc:48:07:84:a9:c3:ff: c9:00:5d:68:ec:49:f0:c4:be:33:bd:b6:c9:3f:d7:ff:19:40: c2:5d:72:b6:4c:45:9a:2e:1e:49:e8:97:45:ab:d2:59:4a:2a: eb:c3:a6:00:cb:83:1a:bb:34:67:69:16:df:b5:33:ac:57:05: 87:cf:dc:52:a5:e6:36:bb:25:80:f5:4a:cc:fe:68:6b:a4:d8: 44:a5:ae:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7efkkUhYIwnh9tMKMARSbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4OTU0ZTI4ZjZlMDFjYTVjNzM1M2JjMzcyZjM2OWE1ZjUx ZDliYjQwHhcNMjUxMjA4MDEwMTA2WhcNMjUxMjA5MDEwMTA2WjAzMTEwLwYDVQQD EygxOGM1MzRlZDQzZjBjMTg2ZTRmYjExOGI1MjZjZGZjMjJkZjMwNzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Wt8zoNpbnNlAHoU7c9vFTUfeZdX cNb98wwYdklEMLDge5N/fRCr5/WsLNmOP/b4/lfZXMb9ZXLVqkDRrjdQxEgB3dcR A+P+0hCE0KLr3Xt4JO1ZIrTrT9U5/QHFFEHL4V/m7XQzLG5m+Y2mzpFKZ6mv14No VGmJ8HX35ku/Zcbvdfg74hys1BCnt0BTZntOC6zJEB0dsQmWeMNNCtIoliy1HVbi dB/lCAOqitaM0JCqWibDt0hIxJWl2fYZLVJ1a3Q6XW9jmKBt1KIJ88Al6c80cLO4 t1GujGLR777y6J6JScpW4n9bHxaRMPB5cV9wXmPcDfYCi/UInRf+luxhBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBjFNO1D8MGG5PsRi1Js38It8wdtMB8GA1UdIwQY MBaAFCiVTij24BylxzU7w3LzaaX1HZu0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0pWT0tQYmdIS1hITlR2RGN2TnBwZlVkbTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mMzcwMjctYWZjNC00NDRmLTgwMDgt OTVjZTJjNzU1ZDQ3LzEvS0pWT0tQYmdIS1hITlR2RGN2TnBwZlVkbTdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9mMzcwMjctYWZjNC00NDRmLTgwMDgtOTVjZTJjNzU1ZDQ3 LzEvS0pWT0tQYmdIS1hITlR2RGN2TnBwZlVkbTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd+tCrf+M hfglJwaYwzpn/ouUEVtX6ov1AOooyUsYsukryoXD0wYzIFurFM92wSaO2kLMB6GX 8t3adRF3F8yDAfA8YupsPRb12xvhCshY6nmv59GE91BJA+dzrA/rWwDN9vrojee2 vAJf+eZUZYbjB9b/QhaGnnu72BbhFH4K5Ir682SuWYTXhwQ3Va2Jiq6z3morDAAY Mp4M2IvRxq/mDUdZzmXAAbQw5pspN6u8SAeEqcP/yQBdaOxJ8MS+M722yT/X/xlA wl1ytkxFmi4eSeiXRavSWUoq68OmAMuDGrs0Z2kW37UzrFcFh8/cUqXmNrslgPVK zP5oa6TYRKWuuQ== -----END CERTIFICATE-----Generated at Mon Dec 8 07:42:41 2025 by rpki-client