This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft File: KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft (raw, json) Hash identifier: roWe/h7+2YVe6mo+SaZqvNBRnH78yf96fswn1REsu/0= Subject key identifier: DC:5C:D7:A1:F4:22:6A:A3:42:EC:1B:23:B7:15:B1:53:00:2B:0C:38 Authority key identifier: 28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F Certificate issuer: /CN=282b2cb977153baad1dd99eec14ce0ca46e2219f Certificate serial: 019B4A71B85BBD7B75E51E36BA45F8019C81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft Manifest number: 0965 Signing time: Tue 23 Dec 2025 09:02:05 +0000 Manifest this update: Tue 23 Dec 2025 09:02:05 +0000 Manifest next update: Wed 24 Dec 2025 09:02:05 +0000 Files and hashes: 1: 5v35qWKD8NjR5CYJwsa3ZCJmcaE.roa (hash: 8EnKiqZmxqaxCmZk9qwGpftXBFsMv4XGXaWZ2Oqridk=) 2: KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl (hash: /d7ohkdOD4hS09yR9DFJuTfALvw2Y+495lT2XXNNa9E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:71:b8:5b:bd:7b:75:e5:1e:36:ba:45:f8:01:9c:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=282b2cb977153baad1dd99eec14ce0ca46e2219f Validity Not Before: Dec 23 09:02:05 2025 GMT Not After : Dec 24 09:02:05 2025 GMT Subject: CN=dc5cd7a1f4226aa342ec1b23b715b153002b0c38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1f:75:4a:45:5e:63:10:8f:5e:79:b7:1d:d0: 83:8d:68:f8:29:c0:26:06:db:b9:03:76:89:3c:69: 9f:d9:f4:17:eb:97:fa:aa:3f:3d:93:36:12:21:e1: ae:69:6b:2e:e0:7f:bd:ec:ac:8f:ea:36:be:e4:05: 9e:43:3a:19:19:c3:06:55:88:94:c4:10:c1:ee:4a: 38:48:ff:95:6b:c2:67:94:c2:e3:fe:a5:14:27:c0: 9e:80:7d:32:0c:d3:e8:5c:a5:23:b5:3a:85:62:0c: dd:0c:89:ec:87:70:c9:86:b6:d9:e1:51:39:58:2f: 84:55:19:d2:ae:71:70:f2:21:5f:f2:1d:bc:80:af: 05:a7:cb:66:7a:4e:ce:3e:f8:e0:50:8d:b8:d2:95: a9:29:f8:5c:d2:bc:4e:90:5d:da:4f:73:56:78:5a: 6c:b4:eb:ce:8f:6d:9e:0e:a5:b8:85:3d:78:4a:c3: 66:71:07:1d:0d:63:1e:a0:6c:47:bf:74:2a:c9:d1: a0:64:42:2d:1c:4a:9a:5c:53:db:c2:ee:f9:af:24: ec:a9:ae:4f:0d:7d:dd:22:92:a1:43:06:15:a0:1f: 2a:59:64:c3:a8:66:a1:b3:f1:e3:9c:a3:da:0d:35: d3:e8:f3:a8:a1:70:46:2b:c4:ce:c1:dd:17:d0:23: 62:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:5C:D7:A1:F4:22:6A:A3:42:EC:1B:23:B7:15:B1:53:00:2B:0C:38 X509v3 Authority Key Identifier: keyid:28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:62:94:d7:79:ee:cc:1f:42:aa:e8:af:d1:e2:65:46:de:b0: 4c:33:a9:53:5c:ab:fb:ca:db:ac:eb:74:e7:d9:b8:1a:b5:c8: 26:f0:41:19:8f:77:1b:08:c5:cf:bb:f5:0b:54:7e:34:dc:4d: cd:09:f1:cc:93:d0:ba:60:40:d0:57:14:3b:71:27:bb:ed:80: 27:49:73:f0:62:d9:84:6b:2f:70:f1:3b:ea:82:34:22:11:42: df:d5:de:21:26:eb:e3:87:64:d8:f9:15:88:b3:6e:df:df:17: 64:88:04:f9:4f:fc:cb:47:ef:70:e8:9f:34:62:0d:c7:64:29: c7:e6:6b:7d:33:9f:5f:05:25:8c:67:5b:47:d2:d9:89:44:ab: 3b:79:42:5a:da:e5:ad:d3:a0:aa:4a:43:8e:30:2e:0e:23:d9: 57:85:e1:52:54:19:e9:7d:25:56:6c:e5:c3:8e:0e:a2:f3:3b: 4d:eb:75:31:a1:19:cb:ca:93:85:51:cf:12:8f:05:0a:fb:2c: 64:56:1c:06:46:1d:58:f4:4b:7e:08:2e:af:da:85:d9:2a:6f: d7:6d:73:77:cd:f5:4b:17:6a:c0:c6:28:8a:b7:a0:f7:9e:99: 16:65:3b:97:16:89:61:35:7f:a0:b2:92:00:80:a3:32:94:9c: 96:ca:c4:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcbhbvXt15R42ukX4AZyBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MmIyY2I5NzcxNTNiYWFkMWRkOTllZWMxNGNlMGNhNDZl MjIxOWYwHhcNMjUxMjIzMDkwMjA1WhcNMjUxMjI0MDkwMjA1WjAzMTEwLwYDVQQD EyhkYzVjZDdhMWY0MjI2YWEzNDJlYzFiMjNiNzE1YjE1MzAwMmIwYzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkx91SkVeYxCPXnm3HdCDjWj4KcAm Btu5A3aJPGmf2fQX65f6qj89kzYSIeGuaWsu4H+97KyP6ja+5AWeQzoZGcMGVYiU xBDB7ko4SP+Va8JnlMLj/qUUJ8CegH0yDNPoXKUjtTqFYgzdDInsh3DJhrbZ4VE5 WC+EVRnSrnFw8iFf8h28gK8Fp8tmek7OPvjgUI240pWpKfhc0rxOkF3aT3NWeFps tOvOj22eDqW4hT14SsNmcQcdDWMeoGxHv3QqydGgZEItHEqaXFPbwu75ryTsqa5P DX3dIpKhQwYVoB8qWWTDqGahs/HjnKPaDTXT6POooXBGK8TOwd0X0CNiIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNxc16H0ImqjQuwbI7cVsVMAKww4MB8GA1UdIwQY MBaAFCgrLLl3FTuq0d2Z7sFM4MpG4iGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0Nzc3VYY1ZPNnJSM1pudXdVemd5a2JpSVo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8wYjBiMzMtOThhMS00ODE4LWFkMTgt OTVmMjdkM2U4YWJiLzEvS0Nzc3VYY1ZPNnJSM1pudXdVemd5a2JpSVo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8wYjBiMzMtOThhMS00ODE4LWFkMTgtOTVmMjdkM2U4YWJi LzEvS0Nzc3VYY1ZPNnJSM1pudXdVemd5a2JpSVo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM2KU13nu zB9Cquiv0eJlRt6wTDOpU1yr+8rbrOt059m4GrXIJvBBGY93GwjFz7v1C1R+NNxN zQnxzJPQumBA0FcUO3Enu+2AJ0lz8GLZhGsvcPE76oI0IhFC39XeISbr44dk2PkV iLNu398XZIgE+U/8y0fvcOifNGINx2Qpx+ZrfTOfXwUljGdbR9LZiUSrO3lCWtrl rdOgqkpDjjAuDiPZV4XhUlQZ6X0lVmzlw44OovM7Tet1MaEZy8qThVHPEo8FCvss ZFYcBkYdWPRLfggur9qF2Spv121zd831SxdqwMYoireg956ZFmU7lxaJYTV/oLKS AICjMpSclsrEzA== -----END CERTIFICATE-----Generated at Tue Dec 23 15:25:00 2025 by rpki-client