This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft File: KcFw2YteNdfVFTdnHGBApRUYhLw.mft (raw, json) Hash identifier: yGyAmVLhdlNhfT682hXJoBGnuJNYweYvY3H36SCCEoY= Subject key identifier: 98:0D:67:27:A2:13:F2:E5:75:04:0C:22:79:A5:78:EC:E9:87:D4:66 Authority key identifier: 29:C1:70:D9:8B:5E:35:D7:D5:15:37:67:1C:60:40:A5:15:18:84:BC Certificate issuer: /CN=29c170d98b5e35d7d51537671c6040a5151884bc Certificate serial: 019B0E93579138D5D1AB97E93C82EF48736B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft Manifest number: 1770 Signing time: Thu 11 Dec 2025 18:01:35 +0000 Manifest this update: Thu 11 Dec 2025 18:01:35 +0000 Manifest next update: Fri 12 Dec 2025 18:01:35 +0000 Files and hashes: 1: 3ZJjipNvCnffHlBZEGLPYL1cd6o.roa (hash: 59Oe/VE87ztmqQyIvIAIji5wjLpRLRfwhyLcTm5yzDc=) 2: KcFw2YteNdfVFTdnHGBApRUYhLw.crl (hash: Khua5i8M8bX+Mcl09vjoHp9UrYrjKQywTJBuqqb3N9M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:57:91:38:d5:d1:ab:97:e9:3c:82:ef:48:73:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29c170d98b5e35d7d51537671c6040a5151884bc Validity Not Before: Dec 11 18:01:35 2025 GMT Not After : Dec 12 18:01:35 2025 GMT Subject: CN=980d6727a213f2e575040c2279a578ece987d466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:21:10:f9:0e:6c:32:11:d5:b9:a6:de:73:c5: 83:14:5f:61:43:6d:0a:f9:b1:6e:f8:dd:a5:4e:86: 0f:24:c6:95:47:48:d9:93:9f:fa:42:24:52:91:90: e0:f7:d9:89:14:3b:3b:36:79:33:fe:6d:b0:bb:aa: 83:16:b6:27:58:69:8f:2b:00:bf:3c:1a:c0:d4:df: a4:e4:b9:e6:54:ad:33:d5:e2:48:19:72:05:27:90: 89:f1:2b:87:45:e8:5d:21:29:b3:6f:c1:4b:a2:e4: a1:7b:88:77:18:b4:4a:fd:a1:c6:3d:3a:e1:19:61: 37:9f:65:45:03:7d:b3:4b:4c:6b:c1:83:c9:cd:2e: 7e:d9:26:68:78:40:7a:2c:41:8f:36:b1:28:ad:8b: 54:15:2b:ae:54:8f:ae:f3:3e:03:f2:d0:44:58:b1: ab:10:5a:0d:f9:a4:5c:f0:b8:55:51:15:29:c9:33: cc:ed:ef:07:ea:ae:e3:16:16:dd:f6:83:a6:48:fb: e1:65:6c:25:d4:9e:30:3a:a9:d0:3e:9d:b4:27:80: 94:9a:eb:cd:93:08:c7:62:bd:0e:3d:e2:ba:8a:f4: 14:c1:96:6d:bc:05:b1:79:ca:3b:22:65:4e:ca:e0: f1:fa:38:2e:e1:2b:e7:8a:73:51:7b:2e:47:dc:aa: 79:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:0D:67:27:A2:13:F2:E5:75:04:0C:22:79:A5:78:EC:E9:87:D4:66 X509v3 Authority Key Identifier: keyid:29:C1:70:D9:8B:5E:35:D7:D5:15:37:67:1C:60:40:A5:15:18:84:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:4a:ef:af:c0:c5:86:2f:ec:ae:a6:c7:da:c2:6d:b5:3c:69: 01:e7:67:7d:24:19:fb:53:0e:9e:3e:00:16:26:cc:28:41:b4: 2a:57:8d:f2:6f:df:f5:a4:f0:c2:a9:9e:d7:50:9f:04:1a:90: 27:9f:20:14:b8:21:cb:62:33:e8:9b:45:7b:c8:85:f7:cd:51: 74:1d:52:9f:33:07:64:9b:f7:c6:22:89:c1:c3:95:3e:6d:a5: ea:aa:91:62:29:90:92:4c:a5:46:33:dc:96:b9:2b:65:95:09: 75:2a:53:4b:2c:45:3a:6e:48:cb:d5:b4:b8:b6:88:06:6a:d1: 0b:bc:9a:f0:e7:89:22:0d:8b:12:85:94:62:8a:97:25:4c:20: 71:c1:f3:70:fc:88:b2:dd:0f:2c:c3:f9:05:68:f8:a3:58:61: 72:06:9c:90:00:b9:b1:ec:1e:9c:fb:61:f1:2f:35:25:04:0a: 13:fd:d6:e5:97:3a:e9:c4:88:13:4c:5c:3a:a7:53:a4:32:1a: 7f:52:19:91:f3:16:cf:15:59:8f:3b:a1:ce:ff:4c:6e:0e:67: 1f:fd:f4:25:5a:2e:fb:72:3f:fc:06:fe:f8:cf:bf:f5:6f:50: c4:47:58:a7:e1:9e:2d:45:13:fd:46:f4:2d:74:e9:66:95:43: 6d:43:44:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOk1eRONXRq5fpPILvSHNrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YzE3MGQ5OGI1ZTM1ZDdkNTE1Mzc2NzFjNjA0MGE1MTUx ODg0YmMwHhcNMjUxMjExMTgwMTM1WhcNMjUxMjEyMTgwMTM1WjAzMTEwLwYDVQQD Eyg5ODBkNjcyN2EyMTNmMmU1NzUwNDBjMjI3OWE1NzhlY2U5ODdkNDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyEQ+Q5sMhHVuabec8WDFF9hQ20K +bFu+N2lToYPJMaVR0jZk5/6QiRSkZDg99mJFDs7Nnkz/m2wu6qDFrYnWGmPKwC/ PBrA1N+k5LnmVK0z1eJIGXIFJ5CJ8SuHRehdISmzb8FLouShe4h3GLRK/aHGPTrh GWE3n2VFA32zS0xrwYPJzS5+2SZoeEB6LEGPNrEorYtUFSuuVI+u8z4D8tBEWLGr EFoN+aRc8LhVURUpyTPM7e8H6q7jFhbd9oOmSPvhZWwl1J4wOqnQPp20J4CUmuvN kwjHYr0OPeK6ivQUwZZtvAWxeco7ImVOyuDx+jgu4SvninNRey5H3Kp5TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJgNZyeiE/LldQQMInmleOzph9RmMB8GA1UdIwQY MBaAFCnBcNmLXjXX1RU3ZxxgQKUVGIS8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2NGdzJZdGVOZGZWRlRkbkhHQkFwUlVZaEx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9lMjVhM2MtZGVmNi00MjI4LWExMGIt YzQ1ZTk0OWU5Y2Q2LzEvS2NGdzJZdGVOZGZWRlRkbkhHQkFwUlVZaEx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9lMjVhM2MtZGVmNi00MjI4LWExMGItYzQ1ZTk0OWU5Y2Q2 LzEvS2NGdzJZdGVOZGZWRlRkbkhHQkFwUlVZaEx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPUrvr8DF hi/srqbH2sJttTxpAednfSQZ+1MOnj4AFibMKEG0KleN8m/f9aTwwqme11CfBBqQ J58gFLghy2Iz6JtFe8iF981RdB1SnzMHZJv3xiKJwcOVPm2l6qqRYimQkkylRjPc lrkrZZUJdSpTSyxFOm5Iy9W0uLaIBmrRC7ya8OeJIg2LEoWUYoqXJUwgccHzcPyI st0PLMP5BWj4o1hhcgackAC5sewenPth8S81JQQKE/3W5Zc66cSIE0xcOqdTpDIa f1IZkfMWzxVZjzuhzv9Mbg5nH/30JVou+3I//Ab++M+/9W9QxEdYp+GeLUUT/Ub0 LXTpZpVDbUNE5A== -----END CERTIFICATE-----Generated at Thu Dec 11 23:56:47 2025 by rpki-client