This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft File: KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft (raw, json) Hash identifier: c4w+DG6T6XGqcHpGxJf6qJ7ltgjlsdLyxPZ6OOnn8hI= Subject key identifier: E8:39:A3:D7:DA:36:7B:BD:94:8A:72:CB:D2:08:63:9B:59:02:B0:A1 Authority key identifier: 28:5D:EE:40:18:08:E1:B5:EC:04:B5:C1:AB:E5:D9:DE:5A:38:58:AC Certificate issuer: /CN=285dee401808e1b5ec04b5c1abe5d9de5a3858ac Certificate serial: 019B19160BDBD574291F0B94986B1454A4CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft Manifest number: 1776 Signing time: Sat 13 Dec 2025 19:00:33 +0000 Manifest this update: Sat 13 Dec 2025 19:00:33 +0000 Manifest next update: Sun 14 Dec 2025 19:00:33 +0000 Files and hashes: 1: KF3uQBgI4bXsBLXBq-XZ3lo4WKw.crl (hash: 8ajb974H36nv1zYDABm9/YH9Q6oQasfhf0bSUwD44as=) 2: uxMrGXP4FNtk4vhqO5cU5mQf3-A.roa (hash: hNIkM7+jAO3rAd67WrBtFJIrTsZ1lPQ5IhBNiYcTU/4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.crl rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:16:0b:db:d5:74:29:1f:0b:94:98:6b:14:54:a4:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=285dee401808e1b5ec04b5c1abe5d9de5a3858ac Validity Not Before: Dec 13 19:00:33 2025 GMT Not After : Dec 14 19:00:33 2025 GMT Subject: CN=e839a3d7da367bbd948a72cbd208639b5902b0a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:da:28:a4:46:f4:59:89:11:b5:f9:59:45:94: 9a:09:f2:67:8b:d5:57:5a:16:68:28:4d:ff:b8:ac: 00:46:bb:64:ff:de:12:f0:b2:0f:4c:49:1c:c2:1f: 71:86:00:24:ea:80:33:33:e9:ce:b4:95:ca:af:17: 41:2d:4c:1b:2e:0f:15:a5:55:70:23:3d:4e:b4:3e: 91:d6:f7:78:29:a4:a3:c9:5a:e5:2a:13:e6:4f:d6: 61:9f:8c:cb:8a:bb:e7:0e:a4:e6:46:11:fa:ff:1e: 01:b0:29:44:53:1f:d5:40:cf:7f:95:dc:21:9c:3f: 7a:94:a7:4c:0a:12:52:09:7a:c7:99:84:1f:51:26: f8:61:d1:88:64:1e:cb:b4:79:d9:11:a4:15:1d:14: 2c:c9:84:b1:ad:d6:82:b4:43:1c:d7:03:e5:fb:37: a7:c8:37:b0:c4:a9:db:20:5d:38:5b:2e:16:14:51: d3:7a:b5:b1:64:75:48:5c:13:6d:ff:35:b3:42:61: 61:b0:27:8c:8e:14:c4:4f:f4:1a:cd:b0:2b:5c:12: e5:d5:69:6d:48:ba:7d:f7:ab:f7:4d:3e:f1:0f:79: c8:6e:6f:a0:83:0d:8c:2e:ad:18:8d:ca:0d:9e:be: 12:cf:f5:ea:b2:ad:9c:96:10:b9:3c:fc:82:16:46: b4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:39:A3:D7:DA:36:7B:BD:94:8A:72:CB:D2:08:63:9B:59:02:B0:A1 X509v3 Authority Key Identifier: keyid:28:5D:EE:40:18:08:E1:B5:EC:04:B5:C1:AB:E5:D9:DE:5A:38:58:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:3d:fa:93:de:33:25:29:17:2d:5e:39:89:83:cd:ee:3b:60: f8:a8:5c:46:9e:d7:9a:ee:f3:d6:b5:c4:9e:47:35:fb:35:94: 70:9c:0e:75:ad:9f:b4:36:b1:30:45:56:59:5d:d3:80:23:cf: 72:5b:ab:da:bb:93:54:3b:cb:7a:25:43:4f:0a:be:b7:3d:33: ab:24:67:27:7a:11:e1:45:38:18:df:e3:54:50:b5:8f:d5:41: e4:c6:f2:c6:f9:09:91:43:3e:d2:5f:e5:98:4a:2e:62:a6:2d: c5:d6:1f:01:41:66:5a:f2:c0:0a:3c:90:4d:92:22:9e:03:b1: 4f:c9:2f:0d:17:e8:80:20:14:f0:d0:e8:c9:2a:b7:01:44:4b: e1:19:3a:e0:8a:64:26:16:bd:45:75:1c:03:1c:78:fa:ff:b4: de:e2:bf:17:d1:e2:10:ab:3b:6d:62:e9:0f:97:b5:a3:3b:06: e0:4a:e1:64:af:8a:20:59:32:bb:4b:da:38:08:6c:62:e7:9a: d1:a2:e8:5e:a7:49:b0:cd:70:f1:57:3c:0f:0c:62:d3:47:a5: 65:00:4a:6a:52:48:cb:62:fc:d5:81:d1:d4:c2:13:43:62:cf: 92:f0:6e:6f:17:cb:ec:1b:34:3d:0d:6d:ea:e5:10:f7:98:cb: b4:e3:ba:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZFgvb1XQpHwuUmGsUVKTMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4NWRlZTQwMTgwOGUxYjVlYzA0YjVjMWFiZTVkOWRlNWEz ODU4YWMwHhcNMjUxMjEzMTkwMDMzWhcNMjUxMjE0MTkwMDMzWjAzMTEwLwYDVQQD EyhlODM5YTNkN2RhMzY3YmJkOTQ4YTcyY2JkMjA4NjM5YjU5MDJiMGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldoopEb0WYkRtflZRZSaCfJni9VX WhZoKE3/uKwARrtk/94S8LIPTEkcwh9xhgAk6oAzM+nOtJXKrxdBLUwbLg8VpVVw Iz1OtD6R1vd4KaSjyVrlKhPmT9Zhn4zLirvnDqTmRhH6/x4BsClEUx/VQM9/ldwh nD96lKdMChJSCXrHmYQfUSb4YdGIZB7LtHnZEaQVHRQsyYSxrdaCtEMc1wPl+zen yDewxKnbIF04Wy4WFFHTerWxZHVIXBNt/zWzQmFhsCeMjhTET/QazbArXBLl1Wlt SLp996v3TT7xD3nIbm+ggw2MLq0YjcoNnr4Sz/Xqsq2clhC5PPyCFka0EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOg5o9faNnu9lIpyy9IIY5tZArChMB8GA1UdIwQY MBaAFChd7kAYCOG17AS1wavl2d5aOFisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0YzdVFCZ0k0YlhzQkxYQnEtWFozbG80V0t3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8zMzI4NDYtOWQ0Mi00MjFkLWIzZWQt OTgwYTRiNTQ0MDU2LzEvS0YzdVFCZ0k0YlhzQkxYQnEtWFozbG80V0t3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8zMzI4NDYtOWQ0Mi00MjFkLWIzZWQtOTgwYTRiNTQ0MDU2 LzEvS0YzdVFCZ0k0YlhzQkxYQnEtWFozbG80V0t3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgj36k94z JSkXLV45iYPN7jtg+KhcRp7Xmu7z1rXEnkc1+zWUcJwOda2ftDaxMEVWWV3TgCPP clur2ruTVDvLeiVDTwq+tz0zqyRnJ3oR4UU4GN/jVFC1j9VB5MbyxvkJkUM+0l/l mEouYqYtxdYfAUFmWvLACjyQTZIingOxT8kvDRfogCAU8NDoySq3AURL4Rk64Ipk Jha9RXUcAxx4+v+03uK/F9HiEKs7bWLpD5e1ozsG4ErhZK+KIFkyu0vaOAhsYuea 0aLoXqdJsM1w8Vc8Dwxi00elZQBKalJIy2L81YHR1MITQ2LPkvBubxfL7Bs0PQ1t 6uUQ95jLtOO6tg== -----END CERTIFICATE-----Generated at Sat Dec 13 21:22:55 2025 by rpki-client