This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft File: KJkuu4Pri3Oioh5bAz296x308j0.mft (raw, json) Hash identifier: Fmajj5NkTv5G+vYnHg32r8AM+1fU8a0xv2KduEj3kCY= Subject key identifier: 32:71:E7:22:8D:0E:95:71:9D:BE:D9:D0:4F:2A:F3:62:DC:7B:F8:6F Authority key identifier: 28:99:2E:BB:83:EB:8B:73:A2:A2:1E:5B:03:3D:BD:EB:1D:F4:F2:3D Certificate issuer: /CN=28992ebb83eb8b73a2a21e5b033dbdeb1df4f23d Certificate serial: 019B24AC5966DA81F279CD660EEDDECC44CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft Manifest number: 0B5B Signing time: Tue 16 Dec 2025 01:00:33 +0000 Manifest this update: Tue 16 Dec 2025 01:00:33 +0000 Manifest next update: Wed 17 Dec 2025 01:00:33 +0000 Files and hashes: 1: KJkuu4Pri3Oioh5bAz296x308j0.crl (hash: RcYBvg+XMtSEQHspFj+ev6gAsqMoTZT1vJ0taQjojO8=) 2: MdutrPnIA4jtsUw7J4Yelrok5X0.roa (hash: r2kS0LoTxgu8taO5YAtvMzxTwqT6ILx9UD2HUGC3ccI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.crl rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:ac:59:66:da:81:f2:79:cd:66:0e:ed:de:cc:44:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28992ebb83eb8b73a2a21e5b033dbdeb1df4f23d Validity Not Before: Dec 16 01:00:33 2025 GMT Not After : Dec 17 01:00:33 2025 GMT Subject: CN=3271e7228d0e95719dbed9d04f2af362dc7bf86f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6a:d8:7c:d0:a0:09:dd:10:d9:62:54:cb:5e: 01:96:c9:29:03:a6:9c:c1:64:f5:1b:38:23:be:c2: 42:fa:65:dc:9b:13:ae:86:53:7a:57:74:d9:01:ab: b9:89:62:e8:42:88:27:39:93:ed:06:c5:a4:3d:ef: 71:d9:d7:9d:26:7b:e6:f5:6b:ab:0f:53:46:75:d1: 82:f1:30:bf:95:60:4f:d4:96:c1:6e:14:b6:61:a0: c3:3e:07:64:e4:c3:53:15:d2:8e:47:74:3f:d8:9e: fc:ba:cd:23:ad:b6:97:8e:92:b5:3e:4e:98:7c:61: 61:bb:30:49:e7:59:a5:46:e2:b2:3f:9e:dc:19:96: 74:a0:24:5c:f3:13:5a:36:59:43:07:a6:17:93:f4: 5b:fb:78:e5:14:0e:fe:87:d7:cd:df:8f:49:91:da: 2d:45:54:c3:c7:21:5c:c1:67:42:49:16:bd:de:62: a8:c3:10:f9:1c:c6:98:fe:ec:a0:ee:52:51:8c:fd: b6:9e:64:98:58:a1:f4:99:cb:37:ee:8a:8e:5a:8d: d4:ab:4a:17:f8:03:fe:79:04:4a:c2:20:ce:64:ff: 62:93:3d:29:e6:9e:f5:04:aa:7f:18:e6:af:76:a6: ff:b6:af:34:bd:fb:53:a7:ef:87:d7:cc:99:1d:06: 95:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:71:E7:22:8D:0E:95:71:9D:BE:D9:D0:4F:2A:F3:62:DC:7B:F8:6F X509v3 Authority Key Identifier: keyid:28:99:2E:BB:83:EB:8B:73:A2:A2:1E:5B:03:3D:BD:EB:1D:F4:F2:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:6d:a0:6b:b5:d6:d0:24:8d:32:44:78:cd:33:43:38:27:38: d5:b2:44:5b:13:05:c5:d8:a2:80:91:db:d2:d5:ef:ac:f2:71: ab:c8:37:71:d7:d2:70:11:e5:f9:81:90:1f:84:ce:a5:82:77: b1:fb:bf:81:6c:22:38:fa:99:6a:42:35:61:ec:05:fb:5d:44: 3e:ac:a4:c5:b8:61:63:40:b0:6b:d0:e2:8a:b5:7c:16:e9:41: 70:85:18:5c:23:74:42:23:9d:60:2f:f0:26:6a:cc:e9:4e:13: 7f:27:cf:68:07:9c:f8:96:e1:23:90:7e:ac:08:a2:28:74:4f: ee:3b:7d:f2:70:54:89:13:42:55:f9:2d:46:3d:2a:44:c2:29: 4b:bc:26:da:ef:1a:09:34:b6:8d:c2:d3:ad:97:35:da:f8:46: 5b:25:fa:56:59:2c:55:c4:26:c1:d5:24:3c:42:fb:43:43:05: 7d:4e:62:7c:36:24:eb:01:7b:71:50:1f:11:d4:45:8f:b2:7f: 26:9b:82:7d:b8:aa:e6:47:61:09:fa:7b:be:dc:91:b8:02:89: 4b:10:0a:fc:2a:49:0a:25:e6:4c:3e:63:c3:72:32:19:8a:5e: 93:f6:fc:af:a3:2b:3f:17:ef:f0:6c:a5:67:90:e8:e9:c1:df: 87:e3:69:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskrFlm2oHyec1mDu3ezETMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4OTkyZWJiODNlYjhiNzNhMmEyMWU1YjAzM2RiZGViMWRm NGYyM2QwHhcNMjUxMjE2MDEwMDMzWhcNMjUxMjE3MDEwMDMzWjAzMTEwLwYDVQQD EygzMjcxZTcyMjhkMGU5NTcxOWRiZWQ5ZDA0ZjJhZjM2MmRjN2JmODZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWrYfNCgCd0Q2WJUy14BlskpA6ac wWT1GzgjvsJC+mXcmxOuhlN6V3TZAau5iWLoQognOZPtBsWkPe9x2dedJnvm9Wur D1NGddGC8TC/lWBP1JbBbhS2YaDDPgdk5MNTFdKOR3Q/2J78us0jrbaXjpK1Pk6Y fGFhuzBJ51mlRuKyP57cGZZ0oCRc8xNaNllDB6YXk/Rb+3jlFA7+h9fN349Jkdot RVTDxyFcwWdCSRa93mKowxD5HMaY/uyg7lJRjP22nmSYWKH0mcs37oqOWo3Uq0oX +AP+eQRKwiDOZP9ikz0p5p71BKp/GOavdqb/tq80vftTp++H18yZHQaVswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDJx5yKNDpVxnb7Z0E8q82Lce/hvMB8GA1UdIwQY MBaAFCiZLruD64tzoqIeWwM9vesd9PI9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0prdXU0UHJpM09pb2g1YkF6Mjk2eDMwOGowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9mOThkY2UtOTkyZC00ZjY0LWJjMzgt YjM2YjhlODkyYzZjLzEvS0prdXU0UHJpM09pb2g1YkF6Mjk2eDMwOGowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9mOThkY2UtOTkyZC00ZjY0LWJjMzgtYjM2YjhlODkyYzZj LzEvS0prdXU0UHJpM09pb2g1YkF6Mjk2eDMwOGowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcm2ga7XW 0CSNMkR4zTNDOCc41bJEWxMFxdiigJHb0tXvrPJxq8g3cdfScBHl+YGQH4TOpYJ3 sfu/gWwiOPqZakI1YewF+11EPqykxbhhY0Cwa9DiirV8FulBcIUYXCN0QiOdYC/w JmrM6U4TfyfPaAec+JbhI5B+rAiiKHRP7jt98nBUiRNCVfktRj0qRMIpS7wm2u8a CTS2jcLTrZc12vhGWyX6VlksVcQmwdUkPEL7Q0MFfU5ifDYk6wF7cVAfEdRFj7J/ JpuCfbiq5kdhCfp7vtyRuAKJSxAK/CpJCiXmTD5jw3IyGYpek/b8r6MrPxfv8Gyl Z5Do6cHfh+Npag== -----END CERTIFICATE-----Generated at Tue Dec 16 04:37:21 2025 by rpki-client