This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft File: KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft (raw, json) Hash identifier: 8H2vOjmH2lAziWYNPRqourZTj5cEIOqZkzSULfe50rI= Subject key identifier: 88:E2:5A:DC:CE:51:8D:F0:F7:DE:84:78:82:A6:CD:31:C8:64:64:A5 Authority key identifier: 2A:52:75:AD:89:C9:97:6B:51:03:0C:5B:D2:56:79:9B:79:26:56:0C Certificate issuer: /CN=2a5275ad89c9976b51030c5bd256799b7926560c Certificate serial: 019B47DD1907B7386E4CF60FD7A01AC687B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft Manifest number: 0B3E Signing time: Mon 22 Dec 2025 21:00:30 +0000 Manifest this update: Mon 22 Dec 2025 21:00:30 +0000 Manifest next update: Tue 23 Dec 2025 21:00:30 +0000 Files and hashes: 1: KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.crl (hash: IrZhSAJEukbw47ap3ZQYrRm/6iew9kA2GvaAS3G8y/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft rsync://rpki.ripe.net/repository/DEFAULT/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:dd:19:07:b7:38:6e:4c:f6:0f:d7:a0:1a:c6:87:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a5275ad89c9976b51030c5bd256799b7926560c Validity Not Before: Dec 22 21:00:30 2025 GMT Not After : Dec 23 21:00:30 2025 GMT Subject: CN=88e25adcce518df0f7de847882a6cd31c86464a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:52:03:cc:0f:07:7f:69:0e:81:b6:39:68:18: 4f:51:89:1d:76:0e:96:74:6f:68:cd:ca:0d:c5:96: e5:79:c9:16:40:67:85:52:3d:11:ac:7b:1d:ea:47: fd:9b:09:b7:23:4c:3e:2e:92:51:ca:f9:bb:be:27: d3:ae:40:8b:0b:4b:ca:de:9b:92:99:e9:5c:8c:6b: 99:56:fb:3e:a2:0c:2b:25:05:ab:84:53:f3:4c:15: 24:d0:5c:4f:34:58:d0:6e:7a:3e:46:21:b0:76:ce: 75:41:b4:38:9a:84:95:10:24:6f:b5:24:fe:18:49: bf:34:b9:e4:3d:2d:09:09:ef:44:db:1e:85:51:e4: 5b:92:f8:36:42:ef:ec:76:02:7e:b5:27:a3:2e:61: 96:66:1d:88:a3:b2:53:94:30:dc:ea:95:8a:cc:7c: df:de:58:46:45:b9:83:92:f3:d8:cc:e4:cb:78:c6: 1f:f6:58:53:f0:c9:b6:cf:5e:34:c2:f7:80:9e:86: d9:50:67:4c:23:77:c4:2a:b2:95:5c:eb:70:22:16: 86:3c:ba:18:6d:a0:0b:62:f4:7f:77:89:94:8c:20: 88:51:7a:08:18:3f:62:a6:37:62:a9:08:cf:7f:0d: cb:0b:17:73:9a:8b:5b:05:a8:c8:cb:90:4f:8d:97: 81:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E2:5A:DC:CE:51:8D:F0:F7:DE:84:78:82:A6:CD:31:C8:64:64:A5 X509v3 Authority Key Identifier: keyid:2A:52:75:AD:89:C9:97:6B:51:03:0C:5B:D2:56:79:9B:79:26:56:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:55:af:90:f6:ce:90:5f:f8:01:5f:89:c0:7e:67:75:1a:da: ee:ca:13:1f:2a:57:f3:23:80:be:cd:ff:06:86:a3:36:3f:8f: f2:d5:45:7c:01:f6:c5:4d:e3:72:ac:89:95:8c:d2:96:6c:e3: f2:a5:e9:b9:1e:3e:46:7f:1c:8a:75:cb:53:db:ec:74:b9:bf: 13:68:4a:13:55:b3:0c:82:0a:0a:e0:84:b3:25:3c:70:ea:c8: 2f:b5:c8:63:b9:2b:65:34:f4:5f:14:3a:46:8a:60:ce:dc:e5: e6:2a:15:7b:8f:42:90:16:73:c8:a8:35:08:4d:70:04:d4:f1: 9c:6a:db:81:a5:77:73:5d:95:74:3f:91:42:b2:65:6b:30:b7: d7:18:c5:0b:94:06:21:be:a4:26:73:8b:82:ed:53:a1:ee:18: ea:d6:50:83:d5:d0:31:6e:c5:54:89:89:19:e5:00:7e:76:bc: 51:cd:1b:44:d1:15:d7:14:c0:9f:96:08:5b:3a:52:47:a8:73: 09:99:c7:5f:98:32:a0:9a:f1:fd:5c:51:e8:4a:99:83:23:64: 14:87:d7:74:2c:60:4e:21:a9:aa:f2:c3:5a:81:1c:44:18:2a: f2:e2:21:38:1f:2e:0f:55:70:03:91:b4:ad:c1:32:69:66:54: b9:b4:81:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtH3RkHtzhuTPYP16AaxoewMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhNTI3NWFkODljOTk3NmI1MTAzMGM1YmQyNTY3OTliNzky NjU2MGMwHhcNMjUxMjIyMjEwMDMwWhcNMjUxMjIzMjEwMDMwWjAzMTEwLwYDVQQD Eyg4OGUyNWFkY2NlNTE4ZGYwZjdkZTg0Nzg4MmE2Y2QzMWM4NjQ2NGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FIDzA8Hf2kOgbY5aBhPUYkddg6W dG9ozcoNxZbleckWQGeFUj0RrHsd6kf9mwm3I0w+LpJRyvm7vifTrkCLC0vK3puS melcjGuZVvs+ogwrJQWrhFPzTBUk0FxPNFjQbno+RiGwds51QbQ4moSVECRvtST+ GEm/NLnkPS0JCe9E2x6FUeRbkvg2Qu/sdgJ+tSejLmGWZh2Io7JTlDDc6pWKzHzf 3lhGRbmDkvPYzOTLeMYf9lhT8Mm2z140wveAnobZUGdMI3fEKrKVXOtwIhaGPLoY baALYvR/d4mUjCCIUXoIGD9ipjdiqQjPfw3LCxdzmotbBajIy5BPjZeBHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIjiWtzOUY3w996EeIKmzTHIZGSlMB8GA1UdIwQY MBaAFCpSda2JyZdrUQMMW9JWeZt5JlYMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2xKMXJZbkpsMnRSQXd4YjBsWjVtM2ttVmd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC85YmMyZDgtOTMyMC00YTMxLWE3ZDQt MTE1NjY5MGE0M2I1LzEvS2xKMXJZbkpsMnRSQXd4YjBsWjVtM2ttVmd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC85YmMyZDgtOTMyMC00YTMxLWE3ZDQtMTE1NjY5MGE0M2I1 LzEvS2xKMXJZbkpsMnRSQXd4YjBsWjVtM2ttVmd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJVWvkPbO kF/4AV+JwH5ndRra7soTHypX8yOAvs3/BoajNj+P8tVFfAH2xU3jcqyJlYzSlmzj 8qXpuR4+Rn8cinXLU9vsdLm/E2hKE1WzDIIKCuCEsyU8cOrIL7XIY7krZTT0XxQ6 Ropgztzl5ioVe49CkBZzyKg1CE1wBNTxnGrbgaV3c12VdD+RQrJlazC31xjFC5QG Ib6kJnOLgu1Toe4Y6tZQg9XQMW7FVImJGeUAfna8Uc0bRNEV1xTAn5YIWzpSR6hz CZnHX5gyoJrx/VxR6EqZgyNkFIfXdCxgTiGpqvLDWoEcRBgq8uIhOB8uD1VwA5G0 rcEyaWZUubSBmQ== -----END CERTIFICATE-----Generated at Tue Dec 23 04:10:17 2025 by rpki-client