This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft File: KflnDuKjDqyMCjncR_96jNJHOwA.mft (raw, json) Hash identifier: br56LzoceqCP+yML0124oEslQ9bMp4FqhKXYq2twcUU= Subject key identifier: 1B:B9:81:06:60:1C:D9:99:05:FB:91:A6:77:AC:3C:67:08:73:6F:BE Authority key identifier: 29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00 Certificate issuer: /CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00 Certificate serial: 019B0E26121D2F71BCC6492F88FDC72BA77C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft Manifest number: 0F3D Signing time: Thu 11 Dec 2025 16:02:14 +0000 Manifest this update: Thu 11 Dec 2025 16:02:14 +0000 Manifest next update: Fri 12 Dec 2025 16:02:14 +0000 Files and hashes: 1: KflnDuKjDqyMCjncR_96jNJHOwA.crl (hash: uqKfkxx8JNjnVOq0m5NBzfPYUx7g73mNaCDI718k+DM=) 2: mL9iMZ16_8ZjCy4qonDTON3ib5Q.roa (hash: ZVZsKyrcHGv4PPqTEb+ceebYDVLTESRPFX1GG8GQzE8=) 3: y2LXjfv6XAO363F71AjmXKGlqgQ.roa (hash: 4mLPhNeJT0HKJvx3+B0TdXW/+X53H3DeeKwHTkudT30=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:12:1d:2f:71:bc:c6:49:2f:88:fd:c7:2b:a7:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00 Validity Not Before: Dec 11 16:02:14 2025 GMT Not After : Dec 12 16:02:14 2025 GMT Subject: CN=1bb98106601cd99905fb91a677ac3c6708736fbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:e3:4e:b3:59:9a:09:97:13:81:7a:d3:39:10: 4d:5a:42:8b:15:05:7f:45:3c:60:dc:ec:99:dc:ec: e6:c0:51:b8:0a:85:52:b6:c1:59:7b:1c:18:8b:20: 26:f6:0f:9a:98:ce:07:8e:fb:77:3d:eb:e3:00:64: e2:ad:d4:67:aa:41:4d:d5:10:84:f5:b3:08:7d:23: 07:62:46:eb:6a:52:64:9b:0b:2f:05:5d:b9:b1:2e: 42:11:06:7d:e7:02:91:c3:c8:bb:c4:fc:db:3a:fc: 20:c3:ec:1f:c2:57:79:96:05:9e:0b:4c:a6:a8:25: 8e:0f:37:6e:99:5b:7d:55:93:01:2e:fe:73:38:0c: e4:a6:1c:bd:79:d3:7f:39:1c:48:31:27:da:01:6a: 12:53:71:4d:f5:a3:cb:a6:b8:f3:21:0a:85:ae:83: ba:c5:6c:f1:01:3f:08:ab:9a:73:d3:15:bd:0a:8d: d3:b2:02:81:5b:db:f8:18:f6:ad:42:ed:08:b1:94: bb:9b:73:68:38:14:a9:bf:0d:c6:98:9e:48:45:09: 58:26:70:94:a4:30:71:73:c4:42:04:6a:d0:b0:e7: 5e:6b:c3:15:34:a2:e7:82:3a:0e:5a:4b:a3:8e:e4: 37:f0:38:a1:1c:86:9d:c2:d5:eb:6f:ee:c0:82:d3: e0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:B9:81:06:60:1C:D9:99:05:FB:91:A6:77:AC:3C:67:08:73:6F:BE X509v3 Authority Key Identifier: keyid:29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:a4:93:91:7b:9c:3b:19:81:9e:59:db:9d:57:c0:76:a2:01: 5c:2e:1b:f5:81:f8:3e:70:73:03:ba:9e:bc:93:5a:0d:d9:19: a7:6d:0d:04:c5:ce:67:12:a2:4f:86:7a:45:9f:38:42:94:97: 45:8b:b9:0e:05:9c:05:aa:a9:1e:cb:6d:71:ca:4d:a7:0e:c8: 1f:d9:f1:f7:ea:fe:9c:c5:7e:3b:42:75:ea:3a:1a:3b:c0:70: dc:4d:26:90:96:16:c6:eb:00:ea:e5:53:83:8b:f3:38:a6:8b: 0f:ce:2b:9f:05:e5:0e:dc:95:18:f9:79:91:70:95:db:21:ba: 9f:24:7f:39:eb:d1:1d:a0:5f:ff:3e:89:ad:27:8c:0d:f6:81: 73:8b:56:69:20:a5:77:13:16:88:2e:84:77:a0:3d:57:bd:fa: 18:fb:1d:fc:04:79:45:af:26:03:e2:04:e0:6a:28:c6:d6:49: 0e:4d:d2:17:f2:7a:01:e3:6a:69:e6:6b:5e:2f:8b:b8:94:67: 16:f2:fd:4b:3b:a1:bc:3f:64:2e:49:11:ab:ee:6f:41:7a:b4: 43:b0:6d:e9:a9:7e:51:2c:27:1e:c1:44:de:6d:ca:f0:e9:78: 57:d7:81:fe:cf:52:68:fc:8c:d9:19:e5:c7:e5:55:ab:5d:71: 1d:0e:08:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJhIdL3G8xkkviP3HK6d8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5Zjk2NzBlZTJhMzBlYWM4YzBhMzlkYzQ3ZmY3YThjZDI0 NzNiMDAwHhcNMjUxMjExMTYwMjE0WhcNMjUxMjEyMTYwMjE0WjAzMTEwLwYDVQQD EygxYmI5ODEwNjYwMWNkOTk5MDVmYjkxYTY3N2FjM2M2NzA4NzM2ZmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ONOs1maCZcTgXrTORBNWkKLFQV/ RTxg3OyZ3OzmwFG4CoVStsFZexwYiyAm9g+amM4Hjvt3PevjAGTirdRnqkFN1RCE 9bMIfSMHYkbralJkmwsvBV25sS5CEQZ95wKRw8i7xPzbOvwgw+wfwld5lgWeC0ym qCWODzdumVt9VZMBLv5zOAzkphy9edN/ORxIMSfaAWoSU3FN9aPLprjzIQqFroO6 xWzxAT8Iq5pz0xW9Co3TsgKBW9v4GPatQu0IsZS7m3NoOBSpvw3GmJ5IRQlYJnCU pDBxc8RCBGrQsOdea8MVNKLngjoOWkujjuQ38DihHIadwtXrb+7AgtPgmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBu5gQZgHNmZBfuRpnesPGcIc2++MB8GA1UdIwQY MBaAFCn5Zw7iow6sjAo53Ef/eozSRzsAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2ZsbkR1S2pEcXlNQ2puY1JfOTZqTkpIT3dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8yZmY3NmQtZjExNi00NDMwLTg0MDct NmUyOWVmZGZkNGUzLzEvS2ZsbkR1S2pEcXlNQ2puY1JfOTZqTkpIT3dBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8yZmY3NmQtZjExNi00NDMwLTg0MDctNmUyOWVmZGZkNGUz LzEvS2ZsbkR1S2pEcXlNQ2puY1JfOTZqTkpIT3dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVaSTkXuc OxmBnlnbnVfAdqIBXC4b9YH4PnBzA7qevJNaDdkZp20NBMXOZxKiT4Z6RZ84QpSX RYu5DgWcBaqpHsttccpNpw7IH9nx9+r+nMV+O0J16joaO8Bw3E0mkJYWxusA6uVT g4vzOKaLD84rnwXlDtyVGPl5kXCV2yG6nyR/OevRHaBf/z6JrSeMDfaBc4tWaSCl dxMWiC6Ed6A9V736GPsd/AR5Ra8mA+IE4GooxtZJDk3SF/J6AeNqaeZrXi+LuJRn FvL9SzuhvD9kLkkRq+5vQXq0Q7Bt6al+USwnHsFE3m3K8Ol4V9eB/s9SaPyM2Rnl x+VVq11xHQ4Ifg== -----END CERTIFICATE-----Generated at Fri Dec 12 00:10:45 2025 by rpki-client