This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft File: KfNCRmRyXVgguqeCcTFDozB2kfM.mft (raw, json) Hash identifier: FlKGcsvJpwDFXZcSPjpHxg9p5RPy2J8L3ivSq2BRNjs= Subject key identifier: 91:4B:9C:B7:EA:59:92:B9:64:C5:2F:4A:A5:79:45:27:D2:51:F2:B2 Authority key identifier: 29:F3:42:46:64:72:5D:58:20:BA:A7:82:71:31:43:A3:30:76:91:F3 Certificate issuer: /CN=29f3424664725d5820baa782713143a3307691f3 Certificate serial: 019B1125C811F12E936016514348D8AA5115 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft Manifest number: 01CC Signing time: Fri 12 Dec 2025 06:00:47 +0000 Manifest this update: Fri 12 Dec 2025 06:00:47 +0000 Manifest next update: Sat 13 Dec 2025 06:00:47 +0000 Files and hashes: 1: KfNCRmRyXVgguqeCcTFDozB2kfM.crl (hash: GKLZWc1fxgMmUqsKgXZwuCbTQ+n7iIcdJSFcw03fHGc=) 2: lvisyME0LlQajyGS5pMcYDKFR08.roa (hash: 31DzKjH8PvmlicGQvfn7fIzRcBCmYUXLsghB5MjrccU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:25:c8:11:f1:2e:93:60:16:51:43:48:d8:aa:51:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29f3424664725d5820baa782713143a3307691f3 Validity Not Before: Dec 12 06:00:47 2025 GMT Not After : Dec 13 06:00:47 2025 GMT Subject: CN=914b9cb7ea5992b964c52f4aa5794527d251f2b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ef:0b:9d:6c:cf:5b:d9:11:4d:75:b8:23:8d: c2:f6:ef:12:fd:61:92:05:f1:2e:81:7e:96:e9:f0: 25:15:8b:b1:81:56:1a:27:28:35:2a:59:e7:33:f7: 82:29:6e:c6:99:fd:74:3c:c6:31:0f:bf:74:c8:87: 62:a8:c8:c4:45:78:11:2e:6d:e4:99:27:17:28:54: 41:38:c5:44:4d:c3:8a:63:40:0c:d6:98:cf:70:07: 3f:cf:34:ba:1a:54:01:af:58:14:af:d4:a1:56:d8: 70:2d:6f:10:5d:4a:d0:17:71:7e:42:7c:34:09:ea: c6:ea:a6:50:82:a0:5e:ec:91:48:63:a9:e5:04:aa: 9e:a8:43:0e:c6:86:ae:ec:3d:6e:b1:df:ce:b8:63: df:3c:09:8a:2f:2d:9c:c1:82:74:fd:01:8d:fd:8b: 2a:48:d1:e8:f7:b8:10:79:0d:e9:c4:83:2e:12:bf: e4:42:60:0b:59:c2:92:53:bc:57:6d:d8:b1:85:74: cc:55:d6:0b:7c:92:26:ec:35:54:10:f8:44:04:cc: ea:89:f1:0b:f8:ff:db:78:e5:2b:a1:91:36:5d:79: 20:fe:87:11:32:56:d6:2f:69:60:6f:bf:50:d6:4a: 23:e5:c5:52:e4:33:f3:2a:2c:03:3c:bb:7e:c4:ca: db:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:4B:9C:B7:EA:59:92:B9:64:C5:2F:4A:A5:79:45:27:D2:51:F2:B2 X509v3 Authority Key Identifier: keyid:29:F3:42:46:64:72:5D:58:20:BA:A7:82:71:31:43:A3:30:76:91:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:65:11:91:23:e0:98:47:9f:c4:b3:ac:e0:85:dd:39:c7:6d: ef:ed:0e:2a:09:78:53:31:6f:8f:9c:2a:e9:d8:4d:0b:bc:7a: 99:65:0f:09:00:39:3a:9b:b1:a6:05:1b:96:9e:67:f9:84:9f: 8e:6f:c3:10:7a:88:76:f8:5c:91:42:a4:81:97:61:70:7c:e4: 26:b7:77:ab:a0:2b:80:30:2a:d0:35:2b:68:63:f9:7e:e7:21: 51:9c:86:25:e9:38:76:48:a0:0c:d4:a1:48:bc:44:3c:bb:ee: 45:00:33:2c:45:91:c3:68:e9:c5:30:cd:bd:65:fe:1e:6b:4c: 3e:cf:23:63:01:a5:6a:cf:d9:45:0d:3a:2d:37:b2:88:fc:62: ac:f6:b8:b0:7a:05:77:db:e8:cf:ca:9d:03:49:7c:88:7d:2c: e1:e1:71:87:b6:00:7b:50:a7:cb:c4:70:56:ea:ba:f9:f8:e6: df:4e:57:40:16:2b:a0:ac:36:8e:fc:eb:67:91:ec:f9:c1:82: 94:b1:bb:a4:5c:d6:a3:b7:15:ca:62:2e:c8:b5:05:14:1b:21: c3:3e:66:72:4c:9b:f0:8a:3c:76:b7:b4:92:10:ad:ef:2d:2d: de:11:6a:e3:d5:00:5e:20:ba:00:69:6d:53:af:59:67:79:cc: ae:33:3e:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRJcgR8S6TYBZRQ0jYqlEVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZjM0MjQ2NjQ3MjVkNTgyMGJhYTc4MjcxMzE0M2EzMzA3 NjkxZjMwHhcNMjUxMjEyMDYwMDQ3WhcNMjUxMjEzMDYwMDQ3WjAzMTEwLwYDVQQD Eyg5MTRiOWNiN2VhNTk5MmI5NjRjNTJmNGFhNTc5NDUyN2QyNTFmMmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0O8LnWzPW9kRTXW4I43C9u8S/WGS BfEugX6W6fAlFYuxgVYaJyg1KlnnM/eCKW7Gmf10PMYxD790yIdiqMjERXgRLm3k mScXKFRBOMVETcOKY0AM1pjPcAc/zzS6GlQBr1gUr9ShVthwLW8QXUrQF3F+Qnw0 CerG6qZQgqBe7JFIY6nlBKqeqEMOxoau7D1usd/OuGPfPAmKLy2cwYJ0/QGN/Ysq SNHo97gQeQ3pxIMuEr/kQmALWcKSU7xXbdixhXTMVdYLfJIm7DVUEPhEBMzqifEL +P/beOUroZE2XXkg/ocRMlbWL2lgb79Q1koj5cVS5DPzKiwDPLt+xMrbRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJFLnLfqWZK5ZMUvSqV5RSfSUfKyMB8GA1UdIwQY MBaAFCnzQkZkcl1YILqngnExQ6MwdpHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2ZOQ1JtUnlYVmdndXFlQ2NURkRvekIya2ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8xMjk4ZTEtYTFlNC00YWJjLWFiMWYt NjQ5ZDI1YTk1OTA3LzEvS2ZOQ1JtUnlYVmdndXFlQ2NURkRvekIya2ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8xMjk4ZTEtYTFlNC00YWJjLWFiMWYtNjQ5ZDI1YTk1OTA3 LzEvS2ZOQ1JtUnlYVmdndXFlQ2NURkRvekIya2ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACGURkSPg mEefxLOs4IXdOcdt7+0OKgl4UzFvj5wq6dhNC7x6mWUPCQA5OpuxpgUblp5n+YSf jm/DEHqIdvhckUKkgZdhcHzkJrd3q6ArgDAq0DUraGP5fuchUZyGJek4dkigDNSh SLxEPLvuRQAzLEWRw2jpxTDNvWX+HmtMPs8jYwGlas/ZRQ06LTeyiPxirPa4sHoF d9voz8qdA0l8iH0s4eFxh7YAe1Cny8RwVuq6+fjm305XQBYroKw2jvzrZ5Hs+cGC lLG7pFzWo7cVymIuyLUFFBshwz5mckyb8Io8dre0khCt7y0t3hFq49UAXiC6AGlt U69ZZ3nMrjM+zA== -----END CERTIFICATE-----Generated at Fri Dec 12 07:58:56 2025 by rpki-client