This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft File: KC6tuNjCny5wNVBD4meGIpc08LI.mft (raw, json) Hash identifier: 6ZsAUfQvxzAAaCKq06gatJlJHueUhLPPF2m+iYo+swA= Subject key identifier: 82:8E:EF:20:05:63:D0:F0:19:3E:54:0B:30:59:30:22:1E:34:1F:31 Authority key identifier: 28:2E:AD:B8:D8:C2:9F:2E:70:35:50:43:E2:67:86:22:97:34:F0:B2 Certificate issuer: /CN=282eadb8d8c29f2e70355043e26786229734f0b2 Certificate serial: 019B2B8ACB79E05F5A4F84AAE99EA89B048B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KC6tuNjCny5wNVBD4meGIpc08LI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 09:01:14 +0000 Manifest this update: Wed 17 Dec 2025 09:01:14 +0000 Manifest next update: Thu 18 Dec 2025 09:01:14 +0000 Files and hashes: 1: EdTyc-f6MbzKNflZEVb0lTRcFng.roa (hash: LosjQRA+dA0QESjdH00I3Sd8eYNzb4MjK8b7Xcsie8w=) 2: KC6tuNjCny5wNVBD4meGIpc08LI.crl (hash: KDAYUooFJZrimX1ka63DBEfm4buNBE08lxndyWPG0T4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.crl rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft rsync://rpki.ripe.net/repository/DEFAULT/KC6tuNjCny5wNVBD4meGIpc08LI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:cb:79:e0:5f:5a:4f:84:aa:e9:9e:a8:9b:04:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=282eadb8d8c29f2e70355043e26786229734f0b2 Validity Not Before: Dec 17 09:01:14 2025 GMT Not After : Dec 18 09:01:14 2025 GMT Subject: CN=828eef200563d0f0193e540b305930221e341f31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c3:be:96:4e:05:cc:4d:1e:37:44:f6:16:b1: 9c:7c:2f:49:f1:2e:dc:35:a0:44:10:04:7f:34:ec: 25:d0:cf:87:05:71:a2:b2:d6:51:fc:76:93:56:81: 29:6e:aa:6e:54:1e:e2:a9:1f:8e:aa:c8:2d:62:3c: 88:ee:31:e7:82:4a:fd:7f:17:0b:bc:95:af:61:0a: 99:51:70:56:b7:2c:37:29:72:d7:fe:51:9c:20:24: 65:64:8e:2e:d0:51:c3:ac:08:cb:1c:8f:64:a2:1c: f1:ae:63:14:62:87:cf:bb:16:86:a2:1a:f4:70:a6: 5e:77:02:1a:bb:cd:40:b9:62:97:df:46:5e:ae:ba: 08:f9:b5:c6:c6:9f:91:eb:97:83:40:ec:dd:58:c9: 8e:70:1e:ed:d0:a7:88:d4:1a:28:cc:f8:83:d1:74: 4f:bf:38:fe:f7:b3:c2:81:a8:4e:fe:46:1a:af:cf: d5:c6:cf:3e:aa:de:cb:56:8a:45:eb:db:9f:56:00: 7d:9b:8f:be:06:05:dc:c6:ff:11:69:46:13:e9:9d: 16:62:18:53:7d:76:db:7b:14:1f:59:6d:0e:91:5d: 00:1a:59:a1:06:49:94:aa:f6:d8:40:86:8e:50:5c: cb:c6:0c:31:ea:f3:4e:4c:81:18:04:a9:7d:3b:a3: 27:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:8E:EF:20:05:63:D0:F0:19:3E:54:0B:30:59:30:22:1E:34:1F:31 X509v3 Authority Key Identifier: keyid:28:2E:AD:B8:D8:C2:9F:2E:70:35:50:43:E2:67:86:22:97:34:F0:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KC6tuNjCny5wNVBD4meGIpc08LI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:f2:cb:bf:5a:20:eb:5d:3e:d3:cb:d9:dc:83:ab:be:aa:f9: c5:3f:77:9e:fc:87:35:68:14:e7:50:16:29:96:f7:e6:7e:8f: 7c:f8:e5:a9:b3:71:33:ce:e5:eb:1a:64:ec:88:7e:cb:a9:38: 44:2a:3c:d7:0a:69:e0:a4:5e:c7:5b:4c:ab:d0:33:49:68:0b: 4b:73:d7:19:ee:ea:d0:37:63:99:a0:93:74:7b:67:1a:07:37: 11:ec:ee:95:51:4e:6f:ed:a2:8b:06:aa:d7:af:8c:67:20:b6: a6:cb:23:36:04:96:c8:f8:76:68:b7:2a:5d:b3:8b:e3:21:38: dd:3f:b3:66:70:2d:1b:96:85:0c:bb:84:ae:9c:88:7e:f2:0a: 49:8f:d9:46:df:14:6d:30:4c:e3:e6:92:ae:84:7b:db:10:e3: d2:59:45:7f:d4:35:58:3c:0f:ac:cd:0e:d2:dd:4d:4d:7a:5b: f0:42:23:aa:f5:c4:12:95:35:45:05:73:75:a7:5a:6b:30:f0: 7c:b0:ee:b7:00:c0:5a:79:d4:44:e2:91:f7:d3:af:1c:ff:6b: bd:b3:cc:33:5a:a5:23:a5:78:3c:0a:66:57:fb:7a:5f:18:d4: 65:88:ec:04:1d:cc:53:eb:fd:50:0d:6d:68:20:40:52:b2:9a: 50:6e:6a:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrist54F9aT4Sq6Z6omwSLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MmVhZGI4ZDhjMjlmMmU3MDM1NTA0M2UyNjc4NjIyOTcz NGYwYjIwHhcNMjUxMjE3MDkwMTE0WhcNMjUxMjE4MDkwMTE0WjAzMTEwLwYDVQQD Eyg4MjhlZWYyMDA1NjNkMGYwMTkzZTU0MGIzMDU5MzAyMjFlMzQxZjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8O+lk4FzE0eN0T2FrGcfC9J8S7c NaBEEAR/NOwl0M+HBXGistZR/HaTVoEpbqpuVB7iqR+OqsgtYjyI7jHngkr9fxcL vJWvYQqZUXBWtyw3KXLX/lGcICRlZI4u0FHDrAjLHI9kohzxrmMUYofPuxaGohr0 cKZedwIau81AuWKX30ZerroI+bXGxp+R65eDQOzdWMmOcB7t0KeI1BoozPiD0XRP vzj+97PCgahO/kYar8/Vxs8+qt7LVopF69ufVgB9m4++BgXcxv8RaUYT6Z0WYhhT fXbbexQfWW0OkV0AGlmhBkmUqvbYQIaOUFzLxgwx6vNOTIEYBKl9O6Mn1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIKO7yAFY9DwGT5UCzBZMCIeNB8xMB8GA1UdIwQY MBaAFCgurbjYwp8ucDVQQ+JnhiKXNPCyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0M2dHVOakNueTV3TlZCRDRtZUdJcGMwOExJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wZmFmNzAtNGMzOC00MDZmLThjY2Qt YjY3ZjQwYjRlYzE0LzEvS0M2dHVOakNueTV3TlZCRDRtZUdJcGMwOExJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8wZmFmNzAtNGMzOC00MDZmLThjY2QtYjY3ZjQwYjRlYzE0 LzEvS0M2dHVOakNueTV3TlZCRDRtZUdJcGMwOExJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQfLLv1og 610+08vZ3IOrvqr5xT93nvyHNWgU51AWKZb35n6PfPjlqbNxM87l6xpk7Ih+y6k4 RCo81wpp4KRex1tMq9AzSWgLS3PXGe7q0DdjmaCTdHtnGgc3EezulVFOb+2iiwaq 16+MZyC2pssjNgSWyPh2aLcqXbOL4yE43T+zZnAtG5aFDLuErpyIfvIKSY/ZRt8U bTBM4+aSroR72xDj0llFf9Q1WDwPrM0O0t1NTXpb8EIjqvXEEpU1RQVzdadaazDw fLDutwDAWnnUROKR99OvHP9rvbPMM1qlI6V4PApmV/t6XxjUZYjsBB3MU+v9UA1t aCBAUrKaUG5qeQ== -----END CERTIFICATE-----Generated at Wed Dec 17 19:08:28 2025 by rpki-client