This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft File: KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft (raw, json) Hash identifier: ms8mFIioGSfl0Aunl48bAWdjJp9hhHQI96Rv3PuU8M8= Subject key identifier: D6:DC:92:54:94:D0:25:CD:46:65:9E:C2:66:22:DE:CE:C1:06:DB:F0 Authority key identifier: 29:36:F6:43:28:C1:E6:69:11:40:9E:A7:C6:97:22:F8:D2:62:66:B5 Certificate issuer: /CN=2936f64328c1e66911409ea7c69722f8d26266b5 Certificate serial: 019B24761D0EF2906EAABDCC7328C931CE22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft Manifest number: 0B74 Signing time: Tue 16 Dec 2025 00:01:18 +0000 Manifest this update: Tue 16 Dec 2025 00:01:18 +0000 Manifest next update: Wed 17 Dec 2025 00:01:18 +0000 Files and hashes: 1: KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl (hash: EVqJcM+mn0OfE6OoaRbi4f7H0+Es31EQNSFcomcmj9Q=) 2: Yu3sg19gw9RqxXtaBobOTcFABCU.roa (hash: s1VpHCeBK4q+0ERblkTkQcFQicVxzMLQOo1cXvgRehs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:76:1d:0e:f2:90:6e:aa:bd:cc:73:28:c9:31:ce:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2936f64328c1e66911409ea7c69722f8d26266b5 Validity Not Before: Dec 16 00:01:18 2025 GMT Not After : Dec 17 00:01:18 2025 GMT Subject: CN=d6dc925494d025cd46659ec26622decec106dbf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:81:ea:7f:70:7d:8c:de:39:29:80:34:54:19: ee:fa:83:40:52:a7:90:d3:df:11:be:5d:f0:1a:25: a8:af:d5:52:4b:13:e7:b4:b4:1e:95:5d:ac:ea:cc: 6a:96:43:85:44:ed:42:0a:b6:60:4a:60:26:e5:4c: 3c:53:9c:fe:b5:b0:f7:0d:f7:8a:b4:6e:8b:bf:f6: a3:3d:c5:f2:48:f3:86:af:d0:4c:08:28:e9:a4:db: b0:70:0a:39:36:aa:9f:e2:73:cf:47:58:b1:77:cb: bb:19:b6:fb:c0:6b:55:82:18:fe:20:3d:28:da:79: f7:9e:6b:e2:d5:a6:0b:98:5a:83:2c:d6:82:11:e3: 5c:a2:56:72:b2:29:67:f3:53:c2:8c:7e:92:91:24: 5c:20:e3:d1:b4:2c:22:d8:f1:20:1a:24:33:d3:9e: f9:41:8b:e3:cf:5f:0f:8f:53:21:99:0d:39:f3:47: 78:d4:69:dc:af:55:1c:e7:13:d2:cd:b9:60:11:77: ff:2f:aa:a2:a9:80:ca:b0:68:26:98:b0:2d:af:0b: 48:61:a7:f7:5d:e2:ca:17:88:34:8e:bb:a1:20:d2: b2:dd:3e:f0:92:94:44:55:fc:94:8b:64:a3:b4:55: 56:56:ce:cd:28:7d:58:9a:30:77:f0:b1:97:7b:56: 63:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:DC:92:54:94:D0:25:CD:46:65:9E:C2:66:22:DE:CE:C1:06:DB:F0 X509v3 Authority Key Identifier: keyid:29:36:F6:43:28:C1:E6:69:11:40:9E:A7:C6:97:22:F8:D2:62:66:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:98:a8:b5:01:62:70:7b:ab:aa:86:32:65:fa:96:ad:95:92: 5b:1e:04:1a:02:da:c7:2f:91:5d:70:dc:75:a0:26:70:dc:2f: 4e:94:04:c7:5c:8a:7e:47:44:43:42:f7:4c:25:65:01:b0:6d: 5f:3b:64:e4:a9:a9:dc:e7:84:19:58:06:f6:db:e9:0f:b1:36: 76:7c:af:0e:77:94:0e:93:13:6e:1d:57:e3:7f:c9:45:a1:aa: 23:84:bb:43:51:c6:c7:fb:f4:9d:dd:f1:d7:64:2c:b2:bd:a2: eb:72:b0:69:dd:bd:23:38:a0:57:3c:28:e9:84:54:78:fd:e8: 03:07:71:4d:98:74:4d:9c:b7:18:34:0e:a8:96:d8:9c:26:03: 82:ba:58:d7:67:c0:a0:57:3f:0b:b7:64:4b:08:60:16:4b:1d: 58:42:42:84:78:64:03:b4:d5:75:b1:85:e9:a1:2d:d5:9f:2e: 3f:97:49:e4:90:f9:ac:18:ff:2c:90:b8:fb:0e:d8:e1:81:25: ca:50:87:18:54:7d:78:34:cf:29:d2:bb:de:05:a7:9c:cc:e7: ec:2e:59:78:f6:1d:f5:3f:90:3d:c0:ec:b6:2b:59:c0:63:45: b6:0a:44:62:12:ed:d1:67:e5:21:53:39:41:73:e7:e3:50:9a: 5f:ae:dd:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskdh0O8pBuqr3McyjJMc4iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MzZmNjQzMjhjMWU2NjkxMTQwOWVhN2M2OTcyMmY4ZDI2 MjY2YjUwHhcNMjUxMjE2MDAwMTE4WhcNMjUxMjE3MDAwMTE4WjAzMTEwLwYDVQQD EyhkNmRjOTI1NDk0ZDAyNWNkNDY2NTllYzI2NjIyZGVjZWMxMDZkYmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7IHqf3B9jN45KYA0VBnu+oNAUqeQ 098Rvl3wGiWor9VSSxPntLQelV2s6sxqlkOFRO1CCrZgSmAm5Uw8U5z+tbD3DfeK tG6Lv/ajPcXySPOGr9BMCCjppNuwcAo5Nqqf4nPPR1ixd8u7Gbb7wGtVghj+ID0o 2nn3nmvi1aYLmFqDLNaCEeNcolZysiln81PCjH6SkSRcIOPRtCwi2PEgGiQz0575 QYvjz18Pj1MhmQ0580d41Gncr1Uc5xPSzblgEXf/L6qiqYDKsGgmmLAtrwtIYaf3 XeLKF4g0jruhINKy3T7wkpREVfyUi2SjtFVWVs7NKH1YmjB38LGXe1ZjgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbcklSU0CXNRmWewmYi3s7BBtvwMB8GA1UdIwQY MBaAFCk29kMoweZpEUCep8aXIvjSYma1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1RiMlF5akI1bWtSUUo2bnhwY2ktTkppWnJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS83ZGM3MTItZmY1ZC00ZmYyLWEyYWUt MzlkYzUzZTM3ODJmLzEvS1RiMlF5akI1bWtSUUo2bnhwY2ktTkppWnJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS83ZGM3MTItZmY1ZC00ZmYyLWEyYWUtMzlkYzUzZTM3ODJm LzEvS1RiMlF5akI1bWtSUUo2bnhwY2ktTkppWnJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcZiotQFi cHurqoYyZfqWrZWSWx4EGgLaxy+RXXDcdaAmcNwvTpQEx1yKfkdEQ0L3TCVlAbBt Xztk5Kmp3OeEGVgG9tvpD7E2dnyvDneUDpMTbh1X43/JRaGqI4S7Q1HGx/v0nd3x 12Qssr2i63Kwad29IzigVzwo6YRUeP3oAwdxTZh0TZy3GDQOqJbYnCYDgrpY12fA oFc/C7dkSwhgFksdWEJChHhkA7TVdbGF6aEt1Z8uP5dJ5JD5rBj/LJC4+w7Y4YEl ylCHGFR9eDTPKdK73gWnnMzn7C5ZePYd9T+QPcDstitZwGNFtgpEYhLt0WflIVM5 QXPn41CaX67dyA== -----END CERTIFICATE-----Generated at Tue Dec 16 06:20:02 2025 by rpki-client