This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft File: KUC2lLuglTROS9uZ9R4fECO-V84.mft (raw, json) Hash identifier: 3KctyY+F4rw/DHljlrLHx0ma95N7QFcwiUoCqTen/jo= Subject key identifier: AA:C6:7D:CB:60:22:EF:8C:AF:03:72:DA:5E:2A:F8:1B:2B:CF:62:52 Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE Certificate issuer: /CN=2940b694bba095344e4bdb99f51e1f1023be57ce Certificate serial: 019B12032C51EA3CCC8F79E14D56C21187BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft Manifest number: 13C3 Signing time: Fri 12 Dec 2025 10:02:36 +0000 Manifest this update: Fri 12 Dec 2025 10:02:36 +0000 Manifest next update: Sat 13 Dec 2025 10:02:36 +0000 Files and hashes: 1: 1ovUioPSRpwIq2x5dlTtKSWuJt4.roa (hash: glwS98kItQ5aoRJZQt2/p+Tl6Vu2+KBQ6fnWyRCpxeE=) 2: 5ukXNC3ufs5Ifk5kp-hI7U2U8bk.roa (hash: 7ZgXZStDcuyKQtO7JFrlQRnqUqaRLXXlsW/IZ58nkBY=) 3: 6RkSnq1YobTmQ_SgAx2wlTkM2hY.roa (hash: Qt/KZiThTuHL2rOKsl4Ng5FOwbzizcKz0/dUQrpTSQc=) 4: B5wkeGWZjqgz1y_Wsk4MaKTCZiQ.roa (hash: ygucH/c6MgSrKR9IgUN2NMGsbIDgc3W5HpOJEaJUGPw=) 5: BXsWIMS27-emUbxg3N856ta0Zhs.roa (hash: VLEvZClMBOllgwcFIEd17EnHHY/+y56YDL+ioA9gy2o=) 6: KUC2lLuglTROS9uZ9R4fECO-V84.crl (hash: 0t/p41TE3q8gSIy5Kt1lolPgMcUh6PQaZ2kRu4LTns4=) 7: YCe-DX5vspCo53n_t9ku3ipwr0c.roa (hash: bsw052ayicKeBY1zBDEewyIk2nJP8d+tgqf/wW7oirc=) 8: i4f1t__SHD-QTSI70hcDe0-iLuE.roa (hash: x5mSq7hcGWnjVGsMlKR9T5XBSWXyZ8MGhLOD1IalJyI=) 9: nlwD__Rr_Kz3vDBdg3j2YS8w3UU.roa (hash: oYim5zXBclNnekk/jArnYzaiEFQpBbNaF9nzqE+fJWU=) 10: t_T_n2rHgRaUg9w286JLApHuPsY.roa (hash: Xw7YLCCdVoaSNcuVfBLtogrNakQDxTgFieuFH7n8sSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:03:2c:51:ea:3c:cc:8f:79:e1:4d:56:c2:11:87:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce Validity Not Before: Dec 12 10:02:36 2025 GMT Not After : Dec 13 10:02:36 2025 GMT Subject: CN=aac67dcb6022ef8caf0372da5e2af81b2bcf6252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a9:46:87:22:ec:f2:79:4e:b9:98:95:83:31: e5:54:67:89:1c:34:93:9c:59:f2:6e:a0:80:e4:c2: 64:4e:e4:55:70:ad:e2:ff:29:75:80:e2:14:d5:71: 97:72:05:27:17:65:e8:b5:ae:e6:e9:06:02:89:0d: 8f:d4:a4:3c:9b:76:4f:73:61:de:29:c4:72:70:52: 8f:d9:c5:8a:6e:ab:7f:a6:65:01:e7:8f:70:ee:aa: c3:21:62:12:d9:30:95:80:0a:5e:5b:de:1e:78:60: ef:4d:a5:5b:d3:4e:71:96:b4:5a:45:09:26:70:d7: d9:57:78:d2:fc:53:8f:e4:fd:72:28:b3:fe:69:78: 88:df:68:83:31:54:62:d4:a3:2f:81:0c:96:7d:92: 7f:f4:26:02:ca:be:fc:07:0f:51:c3:e4:5f:38:be: 4a:9f:ac:87:99:38:d7:13:fa:29:63:0a:17:04:f9: 52:b8:f5:b3:d2:8c:5d:38:f1:1f:6a:07:bb:3b:d0: 77:7e:cd:36:5c:bb:c7:65:c9:df:10:22:ed:87:c5: 36:e1:5d:c2:c2:34:11:e1:2c:42:c4:9f:de:a1:1b: 6d:7b:44:c4:64:9b:e4:df:b9:ae:7a:40:42:12:76: 86:6c:b8:db:91:16:29:74:29:40:8a:84:49:a2:49: 9b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:C6:7D:CB:60:22:EF:8C:AF:03:72:DA:5E:2A:F8:1B:2B:CF:62:52 X509v3 Authority Key Identifier: keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:12:2d:04:e8:0c:72:3a:98:df:15:d9:87:fb:86:03:49:26: c7:0a:79:40:35:e0:8c:be:ff:66:dc:0c:ff:89:d5:e3:06:b1: 35:06:bf:0b:a7:c3:2b:aa:86:c7:5f:92:b0:78:86:69:f7:e0: 67:8b:1d:d1:65:be:23:9e:18:bd:b7:bb:a8:8e:58:fe:69:34: 17:e9:04:ce:48:b5:1d:14:ea:95:f2:5c:75:e1:9a:a4:04:78: 2b:d2:ef:c5:64:e7:44:d9:6c:a8:97:26:1a:82:8c:26:78:f8: 2b:84:b4:23:7a:a2:34:2f:06:e2:35:94:33:81:38:ca:51:95: 3a:06:8f:e1:ad:13:33:39:31:33:7a:6d:ad:4c:e0:1d:53:c8: d4:53:a0:28:41:56:5b:18:1e:68:f1:ca:af:26:38:8b:88:f5: 3d:6e:b0:9c:77:07:4a:f9:58:aa:da:c5:27:61:f5:28:8e:24: 3c:79:a6:bc:9c:aa:5a:9d:33:4e:eb:a5:13:7c:0c:d6:9e:fe: ef:87:48:46:d4:29:8b:1e:72:89:81:42:aa:49:39:91:bf:35: db:37:4f:20:7d:39:07:c4:4c:1d:07:0f:e3:8f:36:06:2f:ec: 55:5c:d3:51:52:62:19:26:a5:5e:6d:58:c2:7e:e6:ef:17:ec: 52:39:ff:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSAyxR6jzMj3nhTVbCEYe/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NDBiNjk0YmJhMDk1MzQ0ZTRiZGI5OWY1MWUxZjEwMjNi ZTU3Y2UwHhcNMjUxMjEyMTAwMjM2WhcNMjUxMjEzMTAwMjM2WjAzMTEwLwYDVQQD EyhhYWM2N2RjYjYwMjJlZjhjYWYwMzcyZGE1ZTJhZjgxYjJiY2Y2MjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqlGhyLs8nlOuZiVgzHlVGeJHDST nFnybqCA5MJkTuRVcK3i/yl1gOIU1XGXcgUnF2Xota7m6QYCiQ2P1KQ8m3ZPc2He KcRycFKP2cWKbqt/pmUB549w7qrDIWIS2TCVgApeW94eeGDvTaVb005xlrRaRQkm cNfZV3jS/FOP5P1yKLP+aXiI32iDMVRi1KMvgQyWfZJ/9CYCyr78Bw9Rw+RfOL5K n6yHmTjXE/opYwoXBPlSuPWz0oxdOPEfage7O9B3fs02XLvHZcnfECLth8U24V3C wjQR4SxCxJ/eoRtte0TEZJvk37muekBCEnaGbLjbkRYpdClAioRJokmbfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKrGfctgIu+MrwNy2l4q+Bsrz2JSMB8GA1UdIwQY MBaAFClAtpS7oJU0TkvbmfUeHxAjvlfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzIt MjdjMWEzNTk3NmRlLzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzItMjdjMWEzNTk3NmRl LzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApBItBOgM cjqY3xXZh/uGA0kmxwp5QDXgjL7/ZtwM/4nV4waxNQa/C6fDK6qGx1+SsHiGaffg Z4sd0WW+I54Yvbe7qI5Y/mk0F+kEzki1HRTqlfJcdeGapAR4K9LvxWTnRNlsqJcm GoKMJnj4K4S0I3qiNC8G4jWUM4E4ylGVOgaP4a0TMzkxM3ptrUzgHVPI1FOgKEFW WxgeaPHKryY4i4j1PW6wnHcHSvlYqtrFJ2H1KI4kPHmmvJyqWp0zTuulE3wM1p7+ 74dIRtQpix5yiYFCqkk5kb812zdPIH05B8RMHQcP4482Bi/sVVzTUVJiGSalXm1Y wn7m7xfsUjn/Ww== -----END CERTIFICATE-----Generated at Fri Dec 12 13:39:21 2025 by rpki-client