This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft File: KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft (raw, json) Hash identifier: FGqPyBDiOPflScSzM/llIB1tsHqgF0ijNRjd54B/vYA= Subject key identifier: BE:06:43:E7:E0:AC:74:C0:85:6B:48:98:7A:D9:9E:B3:E8:76:6E:DC Authority key identifier: 29:3F:2E:C7:4B:40:66:AC:67:A8:76:8D:8E:38:60:6E:FC:D6:40:13 Certificate issuer: /CN=293f2ec74b4066ac67a8768d8e38606efcd64013 Certificate serial: 019B342039F65D3375DBE733935479B1794E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft Manifest number: 14B9 Signing time: Fri 19 Dec 2025 01:01:25 +0000 Manifest this update: Fri 19 Dec 2025 01:01:25 +0000 Manifest next update: Sat 20 Dec 2025 01:01:25 +0000 Files and hashes: 1: KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl (hash: EjR48mqcjVaX2VFNReJYTNc3EXv/XUkz05Z+iYO4jHs=) 2: Lc2MOeHrhJYACH3DTtJSFK-up5U.roa (hash: jsqmE6guApHIEUr5xOYbDvIqn7++Rg1hChyQTZ/F2xY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:20:39:f6:5d:33:75:db:e7:33:93:54:79:b1:79:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=293f2ec74b4066ac67a8768d8e38606efcd64013 Validity Not Before: Dec 19 01:01:25 2025 GMT Not After : Dec 20 01:01:25 2025 GMT Subject: CN=be0643e7e0ac74c0856b48987ad99eb3e8766edc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8d:78:19:d1:68:2f:a9:79:46:bb:13:67:d1: a1:cb:df:e1:da:55:fa:e5:11:2f:d4:3a:73:7a:40: ac:42:55:ca:4d:f3:cd:3e:83:40:75:a6:ee:ff:09: d1:71:40:00:a3:12:04:c0:15:3f:55:a0:c8:e9:56: 63:5a:57:18:22:ac:a4:14:95:13:72:ce:7e:36:d2: 34:08:85:20:f9:15:50:c6:cc:87:32:18:f3:87:97: 95:31:61:f9:9e:03:71:ac:97:e8:71:63:42:22:d2: fc:27:bf:2d:c5:06:88:3c:09:97:24:d9:e6:66:53: b7:88:96:31:14:38:7e:45:21:3d:ac:a7:04:1a:f6: 94:27:a7:bb:1b:66:d7:3e:4d:54:ba:38:89:27:fe: ec:1e:27:94:3b:11:73:fc:94:b9:84:64:eb:5b:5b: 04:ab:e3:ca:5b:a3:4f:7f:16:e3:b1:24:71:10:ff: 0f:18:c7:ac:1a:cc:47:1b:d0:20:b9:c8:59:3f:21: 99:fd:71:fd:b5:e5:1a:b8:d5:bc:ba:b6:54:7e:c7: e6:3f:e8:8b:9a:f4:d9:08:74:8c:40:55:ab:9a:4b: 7e:ee:13:6b:62:7e:41:a2:8a:05:62:a6:57:ea:c3: 55:49:85:94:8c:78:a4:ed:23:df:9d:52:dd:02:7f: e2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:06:43:E7:E0:AC:74:C0:85:6B:48:98:7A:D9:9E:B3:E8:76:6E:DC X509v3 Authority Key Identifier: keyid:29:3F:2E:C7:4B:40:66:AC:67:A8:76:8D:8E:38:60:6E:FC:D6:40:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:99:f6:e9:51:d7:8e:27:9b:2e:83:de:d5:8a:ce:2e:85:1b: fa:b4:38:e7:b2:01:6c:57:97:2e:0c:32:27:00:ff:3b:24:97: 11:79:62:57:7e:74:48:4f:d5:55:6c:88:60:13:04:df:83:70: 23:20:50:e6:ea:65:ce:14:ef:02:17:9a:dd:16:40:f9:96:2f: 15:a3:3f:21:14:c6:04:31:02:1b:cb:80:de:f9:2d:51:91:19: 2a:84:11:6a:3f:0d:cd:4d:92:14:d5:b1:af:02:3a:ea:b2:65: 67:f4:6d:57:fe:be:2c:b8:4e:20:66:68:df:83:ad:e5:87:1f: b7:54:52:1b:63:a9:fe:08:0a:69:c5:2f:4c:9e:47:70:e7:14: ca:39:f9:4e:50:b1:9e:a2:fe:a6:f9:44:9f:11:18:55:87:f2: e2:3e:f5:9a:07:bb:d8:b6:de:40:a5:dc:f0:1c:34:63:d0:16: 3b:70:ec:0c:4a:2e:9c:8c:c9:ac:0c:b6:70:56:d2:24:59:47: 7b:18:95:29:83:5e:19:c4:76:11:7e:ae:fe:32:f2:be:d2:56: 99:d2:c6:03:6d:79:fb:75:02:bd:b3:cf:f6:35:99:5c:ea:b9: b0:dd:34:4d:49:83:ef:de:5b:b3:d4:f9:24:4d:19:a1:37:7f: 00:50:d6:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0IDn2XTN12+czk1R5sXlOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5M2YyZWM3NGI0MDY2YWM2N2E4NzY4ZDhlMzg2MDZlZmNk NjQwMTMwHhcNMjUxMjE5MDEwMTI1WhcNMjUxMjIwMDEwMTI1WjAzMTEwLwYDVQQD EyhiZTA2NDNlN2UwYWM3NGMwODU2YjQ4OTg3YWQ5OWViM2U4NzY2ZWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Y14GdFoL6l5RrsTZ9Ghy9/h2lX6 5REv1DpzekCsQlXKTfPNPoNAdabu/wnRcUAAoxIEwBU/VaDI6VZjWlcYIqykFJUT cs5+NtI0CIUg+RVQxsyHMhjzh5eVMWH5ngNxrJfocWNCItL8J78txQaIPAmXJNnm ZlO3iJYxFDh+RSE9rKcEGvaUJ6e7G2bXPk1UujiJJ/7sHieUOxFz/JS5hGTrW1sE q+PKW6NPfxbjsSRxEP8PGMesGsxHG9AguchZPyGZ/XH9teUauNW8urZUfsfmP+iL mvTZCHSMQFWrmkt+7hNrYn5BoooFYqZX6sNVSYWUjHik7SPfnVLdAn/iswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL4GQ+fgrHTAhWtImHrZnrPodm7cMB8GA1UdIwQY MBaAFCk/LsdLQGasZ6h2jY44YG781kATMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1Q4dXgwdEFacXhucUhhTmpqaGdidnpXUUJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82OTA0NWEtYTViMS00ZTU5LTk3MTct MjNmMjI2M2I5YmQyLzEvS1Q4dXgwdEFacXhucUhhTmpqaGdidnpXUUJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC82OTA0NWEtYTViMS00ZTU5LTk3MTctMjNmMjI2M2I5YmQy LzEvS1Q4dXgwdEFacXhucUhhTmpqaGdidnpXUUJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU5n26VHX jiebLoPe1YrOLoUb+rQ457IBbFeXLgwyJwD/OySXEXliV350SE/VVWyIYBME34Nw IyBQ5uplzhTvAhea3RZA+ZYvFaM/IRTGBDECG8uA3vktUZEZKoQRaj8NzU2SFNWx rwI66rJlZ/RtV/6+LLhOIGZo34Ot5Ycft1RSG2Op/ggKacUvTJ5HcOcUyjn5TlCx nqL+pvlEnxEYVYfy4j71mge72LbeQKXc8Bw0Y9AWO3DsDEounIzJrAy2cFbSJFlH exiVKYNeGcR2EX6u/jLyvtJWmdLGA215+3UCvbPP9jWZXOq5sN00TUmD795bs9T5 JE0ZoTd/AFDWOw== -----END CERTIFICATE-----Generated at Fri Dec 19 09:22:17 2025 by rpki-client