This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft File: KtNUu6DgTX5arSd5J4n8Jt3W31E.mft (raw, json) Hash identifier: m2cqsvzS/lVKBIritRbvgBk6SpNScWaaiIpe2aGMXhk= Subject key identifier: B9:4E:3E:18:F2:DE:A2:90:31:0E:7B:D8:ED:83:A1:50:CD:37:E1:B4 Authority key identifier: 2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51 Certificate issuer: /CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51 Certificate serial: 019B1203868BFDE17B10DDE4BE1ED468CD15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft Manifest number: 1192 Signing time: Fri 12 Dec 2025 10:02:59 +0000 Manifest this update: Fri 12 Dec 2025 10:02:59 +0000 Manifest next update: Sat 13 Dec 2025 10:02:59 +0000 Files and hashes: 1: KtNUu6DgTX5arSd5J4n8Jt3W31E.crl (hash: Y689Hx4IoinS2JCguOs2BK/DAXB840JZ6GxmZvTCcvY=) 2: ybOe8ZqyigG4FWAsCMbOcL0c5L0.roa (hash: eOMsv1LZ5Dq7SSni9aMR0p8V/nr5wD1XrXlWWtuivxY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:03:86:8b:fd:e1:7b:10:dd:e4:be:1e:d4:68:cd:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51 Validity Not Before: Dec 12 10:02:59 2025 GMT Not After : Dec 13 10:02:59 2025 GMT Subject: CN=b94e3e18f2dea290310e7bd8ed83a150cd37e1b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:30:1d:cb:27:65:cd:9c:7d:3b:e2:05:59:62: b6:fc:a5:a7:88:c0:34:92:40:69:5c:79:69:e3:9f: 90:27:fd:cd:a4:a0:97:fc:c4:c5:c4:56:24:b6:a9: 51:3e:65:62:d7:5b:58:0a:51:b7:df:9d:00:e7:47: 8f:90:bd:f8:37:9b:b8:34:92:36:fc:89:5e:36:b9: 14:71:cf:f6:e8:61:88:44:4a:7a:09:d3:62:70:bb: 77:c7:fd:9d:48:73:63:5d:89:23:f8:c6:88:de:65: 94:c4:1f:8b:2a:33:d9:4d:18:75:90:f2:61:8f:fc: c7:83:28:28:33:6e:e7:42:ea:b5:15:43:4a:ba:7c: ef:98:97:a9:55:84:f4:6f:d5:2e:ed:37:30:f3:14: 73:84:2b:3a:79:36:7f:20:40:7e:46:35:e6:94:bd: 7e:9f:eb:db:97:47:4b:91:74:b9:4d:c9:45:f2:a3: 06:da:59:c0:8c:4e:0f:b6:bd:6f:5c:14:3e:96:b2: 55:f4:1d:b0:9c:84:46:8c:61:05:33:72:cc:f2:a8: c5:a0:27:02:3d:a1:cc:b7:29:a9:28:6d:4f:84:be: f9:5e:e6:7d:66:e8:ad:c8:cf:22:b4:c1:84:76:18: fb:e7:c2:ae:cf:74:fe:bd:8f:40:92:11:7d:e9:17: 3f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:4E:3E:18:F2:DE:A2:90:31:0E:7B:D8:ED:83:A1:50:CD:37:E1:B4 X509v3 Authority Key Identifier: keyid:2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:5e:78:49:90:88:dc:7f:96:1b:8b:ff:48:51:4f:8a:47:6c: 3d:1c:08:2f:c2:a8:4d:6a:1c:29:8e:66:a3:f9:e0:3b:7f:a7: cd:c2:cb:89:9a:cd:ac:51:4e:0f:33:4f:b3:4d:a1:5d:8c:88: 4d:e2:a2:ce:21:9c:69:24:08:24:26:34:03:a5:65:28:d4:7a: fb:cb:fa:3b:c9:6d:d2:c6:14:19:84:67:ce:21:a4:02:b6:a7: db:ad:67:46:0a:b2:f1:97:29:47:ca:10:b6:c6:3e:38:2a:40: 80:5c:ed:fd:1e:88:0b:0d:ff:b7:4c:2a:8e:0d:91:37:3f:83: 59:47:02:d4:78:0d:fd:1a:7e:13:aa:7c:e8:3d:1c:24:cd:f5: 52:02:c7:9d:f8:8c:a3:e0:99:e9:c4:18:83:0e:ff:19:43:83: d0:b7:3d:fe:30:b4:e0:9b:3f:ca:b7:bd:f3:85:82:de:15:f5: 34:3d:96:d1:04:3c:a4:cb:d2:78:a2:3e:52:05:6b:39:3a:d3: 25:3b:b9:27:ae:70:3a:76:43:13:31:fc:f2:5b:d8:68:62:3e: ae:61:dd:b4:b0:53:e6:51:58:cd:10:04:28:d1:db:67:bc:a4: f5:47:91:a1:76:d7:8a:61:84:8e:0d:35:8d:b4:87:67:5e:9c: e0:8a:ae:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSA4aL/eF7EN3kvh7UaM0VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhZDM1NGJiYTBlMDRkN2U1YWFkMjc3OTI3ODlmYzI2ZGRk NmRmNTEwHhcNMjUxMjEyMTAwMjU5WhcNMjUxMjEzMTAwMjU5WjAzMTEwLwYDVQQD EyhiOTRlM2UxOGYyZGVhMjkwMzEwZTdiZDhlZDgzYTE1MGNkMzdlMWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzAdyydlzZx9O+IFWWK2/KWniMA0 kkBpXHlp45+QJ/3NpKCX/MTFxFYktqlRPmVi11tYClG3350A50ePkL34N5u4NJI2 /IleNrkUcc/26GGIREp6CdNicLt3x/2dSHNjXYkj+MaI3mWUxB+LKjPZTRh1kPJh j/zHgygoM27nQuq1FUNKunzvmJepVYT0b9Uu7Tcw8xRzhCs6eTZ/IEB+RjXmlL1+ n+vbl0dLkXS5TclF8qMG2lnAjE4Ptr1vXBQ+lrJV9B2wnIRGjGEFM3LM8qjFoCcC PaHMtympKG1PhL75XuZ9ZuityM8itMGEdhj758Kuz3T+vY9AkhF96Rc/iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLlOPhjy3qKQMQ572O2DoVDNN+G0MB8GA1UdIwQY MBaAFCrTVLug4E1+Wq0neSeJ/Cbd1t9RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3ROVXU2RGdUWDVhclNkNUo0bjhKdDNXMzFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS83OTlmMGQtYTRmMS00YTViLThjYzAt M2E3MDM3ODliMDNiLzEvS3ROVXU2RGdUWDVhclNkNUo0bjhKdDNXMzFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS83OTlmMGQtYTRmMS00YTViLThjYzAtM2E3MDM3ODliMDNi LzEvS3ROVXU2RGdUWDVhclNkNUo0bjhKdDNXMzFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB154SZCI 3H+WG4v/SFFPikdsPRwIL8KoTWocKY5mo/ngO3+nzcLLiZrNrFFODzNPs02hXYyI TeKiziGcaSQIJCY0A6VlKNR6+8v6O8lt0sYUGYRnziGkAran261nRgqy8ZcpR8oQ tsY+OCpAgFzt/R6ICw3/t0wqjg2RNz+DWUcC1HgN/Rp+E6p86D0cJM31UgLHnfiM o+CZ6cQYgw7/GUOD0Lc9/jC04Js/yre984WC3hX1ND2W0QQ8pMvSeKI+UgVrOTrT JTu5J65wOnZDEzH88lvYaGI+rmHdtLBT5lFYzRAEKNHbZ7yk9UeRoXbXimGEjg01 jbSHZ16c4IquOg== -----END CERTIFICATE-----Generated at Fri Dec 12 13:01:21 2025 by rpki-client