This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft File: KtWZlPKveVmc-z_y4-mOUY-RT7o.mft (raw, json) Hash identifier: F6+CTXJ918oWjxFMy5FCENVn6iWkVpu1Pqy9fiT8a8g= Subject key identifier: 99:4B:67:09:1E:71:78:46:18:76:FC:8E:EB:A5:5D:42:2B:A0:C5:C7 Authority key identifier: 2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA Certificate issuer: /CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba Certificate serial: 019B0F377602D695DF3BCCD8E72097DB3F9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft Manifest number: 086E Signing time: Thu 11 Dec 2025 21:00:51 +0000 Manifest this update: Thu 11 Dec 2025 21:00:51 +0000 Manifest next update: Fri 12 Dec 2025 21:00:51 +0000 Files and hashes: 1: KtWZlPKveVmc-z_y4-mOUY-RT7o.crl (hash: 8H6JYVkZoSQGelhbnlMqtTxyKJFWgTWtS+Knf1UDkyo=) 2: cp4lFEUau2mk3J8khN5tWSq6-qA.roa (hash: D4rIJ31bhlRPk+jgypW/dYYRdpcgCFWhZ+etBWhqECE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:76:02:d6:95:df:3b:cc:d8:e7:20:97:db:3f:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba Validity Not Before: Dec 11 21:00:51 2025 GMT Not After : Dec 12 21:00:51 2025 GMT Subject: CN=994b67091e7178461876fc8eeba55d422ba0c5c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c9:3d:ba:f2:21:64:0e:ab:6d:20:07:41:43: dc:29:b8:bb:e5:b0:94:1c:7d:a1:55:fa:fe:88:f0: 5d:28:a8:f8:4e:57:de:68:ce:85:12:5d:3b:75:5e: fd:7c:68:6f:52:43:63:af:e4:b8:b4:ba:22:84:b0: 1c:b4:4c:74:2c:cf:ac:14:3c:f6:bc:37:6b:50:ca: 32:0c:19:3c:fd:ca:03:2b:1a:24:91:22:bb:33:14: 71:ed:35:32:bb:a0:c5:62:05:21:e5:94:98:df:65: b2:e0:af:02:5f:e5:53:2e:d1:10:31:a6:1f:7d:a4: 75:41:31:c0:ad:77:e5:04:97:9d:d2:3e:89:4d:ae: 7c:a5:33:07:18:7f:61:64:af:42:91:6a:3f:97:06: 94:0f:81:fb:f8:39:1d:ba:84:1f:6b:1d:bc:d8:e6: 26:66:19:b5:8e:4b:a7:bc:ad:fc:a0:0c:d8:9b:3f: 36:bc:31:d7:10:a1:78:9f:d9:21:ca:6d:c8:26:7d: e5:4a:82:02:04:60:42:39:c2:7a:3f:c1:0b:86:0a: 98:92:b0:fb:4f:e6:2d:9c:4d:1f:8e:fb:cc:19:0a: 6a:43:aa:65:d0:4e:e7:3c:63:31:cb:6f:8c:61:83: 86:0b:1e:bf:4c:d3:b7:ac:fd:64:c7:18:a1:de:9e: c1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:4B:67:09:1E:71:78:46:18:76:FC:8E:EB:A5:5D:42:2B:A0:C5:C7 X509v3 Authority Key Identifier: keyid:2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:b6:e5:07:af:eb:3d:09:7b:44:21:70:fa:78:06:73:c0:46: 42:e9:77:8e:df:c9:1b:77:5d:2a:67:f3:b4:ab:68:71:cc:07: 8e:0f:89:19:e0:71:50:be:c2:26:90:47:dd:f7:c7:71:1e:bd: 25:bb:f5:42:2e:01:c4:54:fe:12:65:c6:13:6f:2c:e1:4b:eb: c8:54:0b:79:bd:97:93:75:1f:f9:ad:f1:02:5a:05:44:8e:d4: 1f:37:b4:9a:56:36:c4:50:d4:77:70:24:cf:39:6e:b1:f5:3e: 1f:fd:3d:e7:d4:a3:0c:b0:c4:fe:65:ab:60:e7:d0:65:88:26: 27:43:66:36:80:85:6d:b3:bd:c9:7a:dc:c9:5f:96:c3:f2:71: b7:30:79:83:61:65:b9:43:4c:00:bc:b6:f4:4f:9c:e2:21:b6: c4:6b:c1:cd:60:49:02:94:49:ba:1a:f2:1b:8a:ff:1d:29:00: d4:49:17:cb:c6:ab:dd:90:4e:28:86:bb:68:e7:5c:0f:dc:a1: 72:f1:5a:3c:d6:39:bc:d2:ff:f8:06:91:db:b5:3e:9c:ca:ad: 69:d5:b3:6f:ca:83:1b:ce:0b:7f:f9:1b:f9:94:f2:b5:c4:f9: 8f:13:fa:5c:e1:a1:80:56:1f:93:34:2e:4e:66:8e:35:1c:b0: 45:4d:9c:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN3YC1pXfO8zY5yCX2z+eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhZDU5OTk0ZjJhZjc5NTk5Y2ZiM2ZmMmUzZTk4ZTUxOGY5 MTRmYmEwHhcNMjUxMjExMjEwMDUxWhcNMjUxMjEyMjEwMDUxWjAzMTEwLwYDVQQD Eyg5OTRiNjcwOTFlNzE3ODQ2MTg3NmZjOGVlYmE1NWQ0MjJiYTBjNWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ck9uvIhZA6rbSAHQUPcKbi75bCU HH2hVfr+iPBdKKj4TlfeaM6FEl07dV79fGhvUkNjr+S4tLoihLActEx0LM+sFDz2 vDdrUMoyDBk8/coDKxokkSK7MxRx7TUyu6DFYgUh5ZSY32Wy4K8CX+VTLtEQMaYf faR1QTHArXflBJed0j6JTa58pTMHGH9hZK9CkWo/lwaUD4H7+DkduoQfax282OYm Zhm1jkunvK38oAzYmz82vDHXEKF4n9khym3IJn3lSoICBGBCOcJ6P8ELhgqYkrD7 T+YtnE0fjvvMGQpqQ6pl0E7nPGMxy2+MYYOGCx6/TNO3rP1kxxih3p7B6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJlLZwkecXhGGHb8juulXUIroMXHMB8GA1UdIwQY MBaAFCrVmZTyr3lZnPs/8uPpjlGPkU+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3RXWmxQS3ZlVm1jLXpfeTQtbU9VWS1SVDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yYmNmMzEtNjI3Ny00ZTg3LWEwMDct YmJlMmM0ZDg4YzJmLzEvS3RXWmxQS3ZlVm1jLXpfeTQtbU9VWS1SVDdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8yYmNmMzEtNjI3Ny00ZTg3LWEwMDctYmJlMmM0ZDg4YzJm LzEvS3RXWmxQS3ZlVm1jLXpfeTQtbU9VWS1SVDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYLblB6/r PQl7RCFw+ngGc8BGQul3jt/JG3ddKmfztKtoccwHjg+JGeBxUL7CJpBH3ffHcR69 Jbv1Qi4BxFT+EmXGE28s4UvryFQLeb2Xk3Uf+a3xAloFRI7UHze0mlY2xFDUd3Ak zzlusfU+H/0959SjDLDE/mWrYOfQZYgmJ0NmNoCFbbO9yXrcyV+Ww/JxtzB5g2Fl uUNMALy29E+c4iG2xGvBzWBJApRJuhryG4r/HSkA1EkXy8ar3ZBOKIa7aOdcD9yh cvFaPNY5vNL/+AaR27U+nMqtadWzb8qDG84Lf/kb+ZTytcT5jxP6XOGhgFYfkzQu TmaONRywRU2cGw== -----END CERTIFICATE-----Generated at Thu Dec 11 23:57:12 2025 by rpki-client