This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft File: KtWZlPKveVmc-z_y4-mOUY-RT7o.mft (raw, json) Hash identifier: uNC4O/igU5P31ulUOA/dQsDBRX82oF+q9wL4FL7i4yo= Subject key identifier: 2C:AF:52:61:48:41:DA:27:51:0A:B9:94:34:D6:E1:A4:75:CA:A2:CB Authority key identifier: 2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA Certificate issuer: /CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba Certificate serial: 019B37C59A2512FFCCC42E1B7E2A6519B120 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft Manifest number: 0883 Signing time: Fri 19 Dec 2025 18:00:55 +0000 Manifest this update: Fri 19 Dec 2025 18:00:55 +0000 Manifest next update: Sat 20 Dec 2025 18:00:55 +0000 Files and hashes: 1: KtWZlPKveVmc-z_y4-mOUY-RT7o.crl (hash: LMR9tkySpYRU4O5fuF5XeY5fTPTcsoke80E+iUSmdEc=) 2: cp4lFEUau2mk3J8khN5tWSq6-qA.roa (hash: D4rIJ31bhlRPk+jgypW/dYYRdpcgCFWhZ+etBWhqECE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:9a:25:12:ff:cc:c4:2e:1b:7e:2a:65:19:b1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba Validity Not Before: Dec 19 18:00:55 2025 GMT Not After : Dec 20 18:00:55 2025 GMT Subject: CN=2caf52614841da27510ab99434d6e1a475caa2cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:30:e7:d7:39:37:69:59:89:7a:55:9c:6d:6c: 40:c6:00:df:ac:b0:20:71:31:be:09:1b:56:f7:6f: 1c:bc:7d:24:45:2c:f8:10:83:d7:35:fa:c8:d1:48: 26:9f:9c:bb:9f:a1:83:0a:d0:60:93:50:45:95:ca: 9f:19:1a:54:50:4d:ef:90:b9:43:2e:6e:6c:22:03: 87:4e:13:ed:d6:60:e1:3f:80:dd:0f:c1:f2:bf:9a: 38:d0:67:d4:b8:81:f2:94:02:08:5a:f4:2c:fb:d0: e3:8c:b3:f2:91:1a:e1:7b:aa:36:ba:a4:d5:65:66: c8:a5:fa:4b:04:47:e8:08:71:6d:f3:84:d4:1b:63: d6:b3:ff:95:23:0f:75:75:61:88:58:b3:b3:32:e0: 79:98:74:bd:d1:58:26:ad:89:1c:1b:c4:81:7c:bb: 62:6c:de:67:73:4b:c9:f6:ba:54:2d:5e:01:65:19: ee:c0:9c:7e:3d:ef:96:77:5b:e4:82:71:cb:24:b4: 25:a0:14:93:91:24:57:51:f2:26:2d:93:3d:9b:29: 6f:8a:15:96:c6:d9:0b:29:09:54:de:9c:79:14:a3: 59:d8:d4:f2:90:7b:0b:c2:79:d6:13:96:14:33:aa: 4e:2a:ad:59:55:d2:b4:b9:ed:d5:90:b0:39:bf:13: fa:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:AF:52:61:48:41:DA:27:51:0A:B9:94:34:D6:E1:A4:75:CA:A2:CB X509v3 Authority Key Identifier: keyid:2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:a4:9f:f9:6b:9d:84:76:f3:77:8c:8f:f9:fa:f7:49:47:f4: e8:f9:da:9d:b6:85:db:ff:61:00:24:fe:01:1a:63:fd:03:97: ea:cc:2a:73:9f:97:c4:7c:e9:66:2d:5b:85:21:e3:ed:07:1e: 6f:7b:95:30:58:55:73:9b:08:72:84:20:1e:2e:19:88:67:75: 79:d9:ec:9a:6b:f2:5a:13:d1:22:3a:02:6b:34:a3:d0:fe:e1: 9a:d0:6e:dc:ea:38:fe:eb:cd:99:02:e5:4d:37:29:dd:8a:b9: f3:a7:b7:17:bf:01:89:c9:86:62:7b:78:37:b9:a3:a7:05:d2: c5:38:1d:cb:86:2e:9b:d0:8d:9a:92:b8:48:2a:a7:bc:00:fd: db:03:97:84:e1:21:e0:b4:8d:eb:21:54:f1:06:e1:16:01:ad: 43:e0:c9:f2:3c:f3:82:3a:ff:72:23:c3:83:79:12:ee:41:08: 79:69:5d:c0:24:21:b0:c0:c8:ec:a5:18:8d:ac:ec:b9:69:05: 7f:f4:a7:57:23:dc:57:8e:bf:52:37:c4:9f:a1:4d:a3:da:f6: d4:92:f9:f5:2b:79:25:12:f7:09:04:e1:7d:b3:99:ed:57:f3: 4b:22:dd:56:83:b5:23:95:26:b9:01:d3:a5:ed:fd:75:a9:af: 14:fa:e2:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xZolEv/MxC4bfiplGbEgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhZDU5OTk0ZjJhZjc5NTk5Y2ZiM2ZmMmUzZTk4ZTUxOGY5 MTRmYmEwHhcNMjUxMjE5MTgwMDU1WhcNMjUxMjIwMTgwMDU1WjAzMTEwLwYDVQQD EygyY2FmNTI2MTQ4NDFkYTI3NTEwYWI5OTQzNGQ2ZTFhNDc1Y2FhMmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTDn1zk3aVmJelWcbWxAxgDfrLAg cTG+CRtW928cvH0kRSz4EIPXNfrI0Ugmn5y7n6GDCtBgk1BFlcqfGRpUUE3vkLlD Lm5sIgOHThPt1mDhP4DdD8Hyv5o40GfUuIHylAIIWvQs+9DjjLPykRrhe6o2uqTV ZWbIpfpLBEfoCHFt84TUG2PWs/+VIw91dWGIWLOzMuB5mHS90VgmrYkcG8SBfLti bN5nc0vJ9rpULV4BZRnuwJx+Pe+Wd1vkgnHLJLQloBSTkSRXUfImLZM9mylvihWW xtkLKQlU3px5FKNZ2NTykHsLwnnWE5YUM6pOKq1ZVdK0ue3VkLA5vxP60wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCyvUmFIQdonUQq5lDTW4aR1yqLLMB8GA1UdIwQY MBaAFCrVmZTyr3lZnPs/8uPpjlGPkU+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3RXWmxQS3ZlVm1jLXpfeTQtbU9VWS1SVDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yYmNmMzEtNjI3Ny00ZTg3LWEwMDct YmJlMmM0ZDg4YzJmLzEvS3RXWmxQS3ZlVm1jLXpfeTQtbU9VWS1SVDdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8yYmNmMzEtNjI3Ny00ZTg3LWEwMDctYmJlMmM0ZDg4YzJm LzEvS3RXWmxQS3ZlVm1jLXpfeTQtbU9VWS1SVDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG6Sf+Wud hHbzd4yP+fr3SUf06PnanbaF2/9hACT+ARpj/QOX6swqc5+XxHzpZi1bhSHj7Qce b3uVMFhVc5sIcoQgHi4ZiGd1ednsmmvyWhPRIjoCazSj0P7hmtBu3Oo4/uvNmQLl TTcp3Yq586e3F78BicmGYnt4N7mjpwXSxTgdy4Yum9CNmpK4SCqnvAD92wOXhOEh 4LSN6yFU8QbhFgGtQ+DJ8jzzgjr/ciPDg3kS7kEIeWldwCQhsMDI7KUYjazsuWkF f/SnVyPcV46/UjfEn6FNo9r21JL59St5JRL3CQThfbOZ7VfzSyLdVoO1I5UmuQHT pe39damvFPri3A== -----END CERTIFICATE-----Generated at Sat Dec 20 00:16:44 2025 by rpki-client