This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft File: KcIQP9JBfIhpFFYX3pT8yROwhe8.mft (raw, json) Hash identifier: zGtKRsCbqg6P8DqLxTl4sxHPwld+GS0gqo/jORpgg7E= Subject key identifier: 6E:61:92:04:2A:93:B5:59:0B:7B:26:90:B1:65:F7:94:4F:9A:12:FD Authority key identifier: 29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF Certificate issuer: /CN=29c2103fd2417c8869145617de94fcc913b085ef Certificate serial: 019B2BF8BBF0DDA0956C14035DB2EADA5C0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft Manifest number: 1504 Signing time: Wed 17 Dec 2025 11:01:19 +0000 Manifest this update: Wed 17 Dec 2025 11:01:19 +0000 Manifest next update: Thu 18 Dec 2025 11:01:19 +0000 Files and hashes: 1: HFzLX8JfB09bMiykDXTNNVwsa28.roa (hash: RkC66kEQrpDYwov3VUFFbJbKcNeYjT04dJ6fhWE8V94=) 2: KcIQP9JBfIhpFFYX3pT8yROwhe8.crl (hash: WHRd6BMynLD2yqPKvU4zsmsDeBifohQTZHD928kBlo8=) 3: _C12IjEOj75oE5QypNCeEnRnlyI.roa (hash: EBWCxN3qkCMZlfAoAwH4ZzgBiUuNGMo8jh7xQFNJR1g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:bb:f0:dd:a0:95:6c:14:03:5d:b2:ea:da:5c:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29c2103fd2417c8869145617de94fcc913b085ef Validity Not Before: Dec 17 11:01:19 2025 GMT Not After : Dec 18 11:01:19 2025 GMT Subject: CN=6e6192042a93b5590b7b2690b165f7944f9a12fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:79:7c:64:71:c8:c9:94:af:f6:66:03:90:d0: 5f:03:82:c1:18:12:4a:7f:5b:3a:62:1b:5c:f2:40: 49:26:af:6d:a3:8f:51:e5:fe:2b:45:c7:8e:7b:83: 8f:6d:f3:6b:cf:f7:85:4f:d9:cb:36:cd:21:4d:ee: e5:84:8e:d0:83:75:e6:3a:47:8d:bf:99:18:95:83: 21:38:b7:9d:88:80:b0:35:01:34:2f:ae:83:cf:95: 8f:d7:39:04:07:44:c8:cb:80:ba:fa:b4:f5:83:3f: 9a:30:5d:a1:98:ee:78:15:69:bc:d5:08:82:0a:18: 7a:fa:af:89:d6:49:e5:ed:9b:c1:70:29:b5:6c:75: 70:06:67:5a:39:a3:7e:e1:e8:f8:c1:98:69:56:f3: fc:14:49:76:a1:2a:75:34:6b:99:2f:0d:21:51:e9: 15:f0:26:af:ba:99:da:8e:d6:e3:9e:fa:fc:38:0a: 7c:f4:7d:21:60:42:ad:7d:f1:91:df:cd:8c:7a:de: 8a:32:30:30:76:9a:07:db:f7:2f:fb:0b:a1:78:61: b9:87:19:7e:6e:4a:22:10:82:bd:ce:9c:e0:78:3e: d4:6f:da:d1:10:26:f3:7e:a1:2c:33:db:81:ec:15: 14:e0:bb:8b:7b:38:57:19:32:09:e0:43:c6:1d:43: c1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:61:92:04:2A:93:B5:59:0B:7B:26:90:B1:65:F7:94:4F:9A:12:FD X509v3 Authority Key Identifier: keyid:29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:15:a3:ea:b1:b8:56:22:d4:df:90:2b:ce:4d:7f:81:67:d9: c8:d0:0e:b8:0e:39:49:81:d2:f6:c9:3a:2b:42:7d:4e:60:b2: 18:61:d8:09:5c:ad:9b:f7:b4:0e:4c:61:ff:b4:39:af:46:4f: 1b:cc:3c:f6:06:f7:a9:ab:ef:03:c2:6d:d1:ca:09:bc:ef:96: 19:70:38:99:2f:10:58:5d:2c:61:2f:52:ea:71:69:a3:09:31: 49:28:80:91:7c:88:3e:6e:22:5d:49:b7:c1:eb:79:0e:98:2e: d9:24:4f:a5:ba:0b:c2:3b:17:13:b6:bc:f6:97:26:59:10:4e: 39:e1:80:a6:1b:4c:55:b0:ea:f1:c5:f3:70:95:ea:7b:94:7d: 2a:3b:14:cd:ee:c4:44:0b:d3:98:11:0d:0c:5c:2c:ae:36:82: 47:2b:f0:1d:72:c5:7c:1e:02:e0:8a:27:84:57:a4:cd:57:04: ca:37:72:75:78:50:42:d8:ad:95:95:de:a2:c8:6d:19:94:88: 12:0f:11:6d:d5:45:31:e5:31:69:a0:1d:07:08:d7:d2:90:18: cd:0b:a9:85:0e:4e:52:72:23:4e:fb:22:77:d7:d5:df:61:95: 3b:b6:8c:6c:51:26:49:fd:f4:c2:3b:7a:14:29:22:42:e3:aa: ae:9a:74:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+Lvw3aCVbBQDXbLq2lwPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YzIxMDNmZDI0MTdjODg2OTE0NTYxN2RlOTRmY2M5MTNi MDg1ZWYwHhcNMjUxMjE3MTEwMTE5WhcNMjUxMjE4MTEwMTE5WjAzMTEwLwYDVQQD Eyg2ZTYxOTIwNDJhOTNiNTU5MGI3YjI2OTBiMTY1Zjc5NDRmOWExMmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Xl8ZHHIyZSv9mYDkNBfA4LBGBJK f1s6Yhtc8kBJJq9to49R5f4rRceOe4OPbfNrz/eFT9nLNs0hTe7lhI7Qg3XmOkeN v5kYlYMhOLediICwNQE0L66Dz5WP1zkEB0TIy4C6+rT1gz+aMF2hmO54FWm81QiC Chh6+q+J1knl7ZvBcCm1bHVwBmdaOaN+4ej4wZhpVvP8FEl2oSp1NGuZLw0hUekV 8Cavupnajtbjnvr8OAp89H0hYEKtffGR382Met6KMjAwdpoH2/cv+wuheGG5hxl+ bkoiEIK9zpzgeD7Ub9rRECbzfqEsM9uB7BUU4LuLezhXGTIJ4EPGHUPBWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG5hkgQqk7VZC3smkLFl95RPmhL9MB8GA1UdIwQY MBaAFCnCED/SQXyIaRRWF96U/MkTsIXvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2NJUVA5SkJmSWhwRkZZWDNwVDh5Uk93aGU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8yYjhkODItMzlmYi00YTU2LTg5YzUt OWQ1NjU3NTEzZTIwLzEvS2NJUVA5SkJmSWhwRkZZWDNwVDh5Uk93aGU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS8yYjhkODItMzlmYi00YTU2LTg5YzUtOWQ1NjU3NTEzZTIw LzEvS2NJUVA5SkJmSWhwRkZZWDNwVDh5Uk93aGU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdhWj6rG4 ViLU35Arzk1/gWfZyNAOuA45SYHS9sk6K0J9TmCyGGHYCVytm/e0Dkxh/7Q5r0ZP G8w89gb3qavvA8Jt0coJvO+WGXA4mS8QWF0sYS9S6nFpowkxSSiAkXyIPm4iXUm3 wet5Dpgu2SRPpboLwjsXE7a89pcmWRBOOeGAphtMVbDq8cXzcJXqe5R9KjsUze7E RAvTmBENDFwsrjaCRyvwHXLFfB4C4IonhFekzVcEyjdydXhQQtitlZXeoshtGZSI Eg8RbdVFMeUxaaAdBwjX0pAYzQuphQ5OUnIjTvsid9fV32GVO7aMbFEmSf30wjt6 FCkiQuOqrpp0fw== -----END CERTIFICATE-----Generated at Wed Dec 17 19:41:52 2025 by rpki-client