This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft File: KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft (raw, json) Hash identifier: CJF0zlof9dCvfZjZXwAfrxyii+mocefDfz/oERiMHKM= Subject key identifier: C6:A4:5F:B7:DB:11:6D:BF:95:B5:2E:54:ED:18:95:A8:0A:A0:3F:7F Authority key identifier: 29:A3:9E:BB:4E:57:FF:34:85:3C:76:B0:F5:87:7A:E8:AB:3C:7C:F6 Certificate issuer: /CN=29a39ebb4e57ff34853c76b0f5877ae8ab3c7cf6 Certificate serial: 019B4815BC541597FF41E883E5FE3F208D1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft Manifest number: 178F Signing time: Mon 22 Dec 2025 22:02:22 +0000 Manifest this update: Mon 22 Dec 2025 22:02:22 +0000 Manifest next update: Tue 23 Dec 2025 22:02:22 +0000 Files and hashes: 1: 023NXf0NRLbsgezphpzZHNxZ3e4.roa (hash: 5Oh3BvS9337aAFlKHkUHIB4jGr7DBQIIdxMScBWVcOU=) 2: KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl (hash: C7z5fp0hoseINjVty9zf6vpubXAWyISwz7KMjdIUJug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:15:bc:54:15:97:ff:41:e8:83:e5:fe:3f:20:8d:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29a39ebb4e57ff34853c76b0f5877ae8ab3c7cf6 Validity Not Before: Dec 22 22:02:22 2025 GMT Not After : Dec 23 22:02:22 2025 GMT Subject: CN=c6a45fb7db116dbf95b52e54ed1895a80aa03f7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:83:56:97:3c:99:90:95:cf:1a:e3:6c:d7:4e: 15:e1:46:79:73:8f:1d:4f:8a:8f:fb:e5:fc:3a:2e: 4a:46:63:f1:09:fb:b9:4f:28:f2:44:65:bc:b7:a3: 81:c4:50:09:f2:ac:24:0a:3e:7c:f2:6d:0e:92:b9: ba:47:d2:04:13:b0:a9:b3:f8:c2:9b:78:25:47:ef: 28:d4:f4:17:97:b9:8e:d0:f3:fd:b9:de:df:51:85: 88:06:b8:8a:4f:5a:d0:7a:b2:6a:27:ee:20:60:14: 6d:b9:ba:28:a9:85:0c:94:17:8f:10:09:5f:74:c1: 3f:78:05:a9:fe:be:25:f4:07:41:b5:f9:05:6c:54: e1:0b:c9:92:38:da:0a:4e:a7:0b:92:d7:d1:b2:9f: 69:2a:7e:fb:3d:a8:42:4a:b7:36:8d:15:c5:9c:ea: 43:fd:a8:52:b4:a6:28:31:a4:60:65:2e:73:26:c7: b8:65:28:33:58:95:8b:41:14:82:28:3c:e9:33:80: 3d:e7:be:b9:31:1a:32:ec:ca:57:dc:7e:f1:10:8d: 7d:db:38:08:a8:83:fb:ec:5e:f3:b3:51:0a:b3:a6: ea:ad:af:18:f5:0e:d9:69:bb:c2:b8:99:c0:c0:11: 90:fb:88:1d:44:31:15:94:06:e3:45:40:0f:d2:16: 3c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:A4:5F:B7:DB:11:6D:BF:95:B5:2E:54:ED:18:95:A8:0A:A0:3F:7F X509v3 Authority Key Identifier: keyid:29:A3:9E:BB:4E:57:FF:34:85:3C:76:B0:F5:87:7A:E8:AB:3C:7C:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:7b:09:aa:17:a3:04:04:a4:9d:23:30:46:41:3a:ca:f8:5b: e9:95:80:6d:c0:82:e3:78:89:d5:ed:5d:bf:0c:3b:a0:2d:56: 34:6e:71:7b:93:df:c7:2b:0c:bd:3c:e9:cd:f4:62:47:54:5c: 83:77:b0:34:0f:af:40:a8:19:a8:14:29:fa:74:ed:ef:d5:a3: aa:7d:0d:fb:61:9c:6c:af:4b:36:28:0d:ff:7d:bc:8e:01:af: e5:0c:f8:9a:1c:8f:2e:fb:1c:b9:e6:65:e6:d8:2c:ea:ed:a6: f8:c2:4b:40:8b:7a:11:3e:55:e7:df:bf:ab:db:aa:2e:7e:d9: 89:d4:8c:3d:48:37:2c:a2:70:7c:96:bc:62:0d:cf:69:e4:f2: 31:96:84:70:83:4f:e7:c4:d2:c3:db:bf:a1:e3:82:99:b9:ca: d7:64:43:2c:75:0c:b7:4b:dd:fc:de:77:5d:c0:4b:83:a2:62: e9:46:b0:76:20:50:8e:f7:0e:6d:08:9f:12:63:a2:79:8c:c4: 5f:fa:81:f8:4a:92:34:6a:7e:b2:87:92:9b:6f:05:b6:ae:7f: 58:58:8d:59:12:0a:89:3b:f5:e2:89:73:da:99:ab:a2:22:ff: a4:34:4f:cf:8f:58:36:a4:fc:ba:3b:d4:a6:5a:81:26:f7:ed: 13:01:c4:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFbxUFZf/QeiD5f4/II0dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YTM5ZWJiNGU1N2ZmMzQ4NTNjNzZiMGY1ODc3YWU4YWIz YzdjZjYwHhcNMjUxMjIyMjIwMjIyWhcNMjUxMjIzMjIwMjIyWjAzMTEwLwYDVQQD EyhjNmE0NWZiN2RiMTE2ZGJmOTViNTJlNTRlZDE4OTVhODBhYTAzZjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoNWlzyZkJXPGuNs104V4UZ5c48d T4qP++X8Oi5KRmPxCfu5TyjyRGW8t6OBxFAJ8qwkCj588m0Okrm6R9IEE7Cps/jC m3glR+8o1PQXl7mO0PP9ud7fUYWIBriKT1rQerJqJ+4gYBRtubooqYUMlBePEAlf dME/eAWp/r4l9AdBtfkFbFThC8mSONoKTqcLktfRsp9pKn77PahCSrc2jRXFnOpD /ahStKYoMaRgZS5zJse4ZSgzWJWLQRSCKDzpM4A95765MRoy7MpX3H7xEI192zgI qIP77F7zs1EKs6bqra8Y9Q7ZabvCuJnAwBGQ+4gdRDEVlAbjRUAP0hY8nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMakX7fbEW2/lbUuVO0YlagKoD9/MB8GA1UdIwQY MBaAFCmjnrtOV/80hTx2sPWHeuirPHz2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2FPZXUwNVhfelNGUEhhdzlZZDY2S3M4ZlBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yZjk3ZmMtNWZhMy00MDgzLTk1MTUt Y2Q5ZGEyZDkyZThkLzEvS2FPZXUwNVhfelNGUEhhdzlZZDY2S3M4ZlBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8yZjk3ZmMtNWZhMy00MDgzLTk1MTUtY2Q5ZGEyZDkyZThk LzEvS2FPZXUwNVhfelNGUEhhdzlZZDY2S3M4ZlBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZnsJqhej BASknSMwRkE6yvhb6ZWAbcCC43iJ1e1dvww7oC1WNG5xe5PfxysMvTzpzfRiR1Rc g3ewNA+vQKgZqBQp+nTt79Wjqn0N+2GcbK9LNigN/328jgGv5Qz4mhyPLvscueZl 5tgs6u2m+MJLQIt6ET5V59+/q9uqLn7ZidSMPUg3LKJwfJa8Yg3PaeTyMZaEcINP 58TSw9u/oeOCmbnK12RDLHUMt0vd/N53XcBLg6Ji6UawdiBQjvcObQifEmOieYzE X/qB+EqSNGp+soeSm28Ftq5/WFiNWRIKiTv14olz2pmroiL/pDRPz49YNqT8ujvU plqBJvftEwHEwg== -----END CERTIFICATE-----Generated at Tue Dec 23 02:36:25 2025 by rpki-client