This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft File: KNyB6jid1qrE77w01S13jrp6f8Q.mft (raw, json) Hash identifier: TwsTopvqoPygYKRjCus2nwEkjRDRWghxviIBNlrzfbo= Subject key identifier: AF:3D:53:90:E4:A3:24:42:BB:B5:10:2C:8B:BA:5E:FC:96:90:E4:BB Authority key identifier: 28:DC:81:EA:38:9D:D6:AA:C4:EF:BC:34:D5:2D:77:8E:BA:7A:7F:C4 Certificate issuer: /CN=28dc81ea389dd6aac4efbc34d52d778eba7a7fc4 Certificate serial: 019B522AD76941518ADAA64D80EB28EC3343 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft Manifest number: 1716 Signing time: Wed 24 Dec 2025 21:01:37 +0000 Manifest this update: Wed 24 Dec 2025 21:01:37 +0000 Manifest next update: Thu 25 Dec 2025 21:01:37 +0000 Files and hashes: 1: KNyB6jid1qrE77w01S13jrp6f8Q.crl (hash: zV+HcvMzWZu/V7bgXCJRgeBvlCruMl//sEdrCocXBcA=) 2: jzeNLpSr6ZsmMJ4zfkQyfVqA2rE.roa (hash: DE+RSjvcm7xMKntvmhh9CpWW/88iCje6f36L/NDszxo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:2a:d7:69:41:51:8a:da:a6:4d:80:eb:28:ec:33:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28dc81ea389dd6aac4efbc34d52d778eba7a7fc4 Validity Not Before: Dec 24 21:01:37 2025 GMT Not After : Dec 25 21:01:37 2025 GMT Subject: CN=af3d5390e4a32442bbb5102c8bba5efc9690e4bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c3:20:39:be:e4:eb:64:5f:69:65:bd:6b:bf: 4a:6b:89:72:36:16:16:eb:c9:05:9b:7e:34:13:a8: 37:01:b1:a0:36:ce:45:55:b7:d9:67:dd:71:81:43: 95:19:98:16:2d:38:29:be:9c:86:b9:34:c3:d2:12: 4b:c6:a8:fd:c0:92:47:6a:3b:b7:ee:f7:f2:e4:8a: 50:02:c0:90:05:b2:ed:7e:15:ae:47:6a:a0:7b:f8: 92:54:84:60:fe:70:83:3b:e6:ea:4b:c9:58:26:51: c8:ab:43:13:d7:6e:d5:51:c9:17:a1:ae:fb:1a:92: 0f:bc:5a:02:35:99:89:ca:8e:c8:21:80:64:b2:aa: a9:06:39:15:bb:2d:82:72:01:61:3c:e3:05:b3:e8: 17:a2:37:c7:63:c3:96:1a:01:41:66:ff:1c:54:f1: 00:71:d2:87:67:fa:14:5e:57:bc:d5:e0:57:e9:b0: 5e:c1:23:5c:fd:62:16:2b:d2:b3:34:98:7c:65:df: 72:7b:13:38:79:fd:7b:dd:d7:4c:89:2f:65:3e:0b: 9e:a4:ab:f3:01:52:af:4b:6a:3c:38:d1:5c:97:dc: 77:05:82:91:c6:84:0d:9a:3c:a7:3c:f2:5f:51:75: 59:0e:b0:9b:bc:dd:dc:0c:a6:d1:e3:56:61:09:1c: f7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:3D:53:90:E4:A3:24:42:BB:B5:10:2C:8B:BA:5E:FC:96:90:E4:BB X509v3 Authority Key Identifier: keyid:28:DC:81:EA:38:9D:D6:AA:C4:EF:BC:34:D5:2D:77:8E:BA:7A:7F:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:f1:36:8d:d3:e7:d5:2a:d0:ea:de:2f:91:89:5b:05:22:fb: 02:b1:c8:d1:06:8a:82:ce:47:f5:fa:d8:7b:fd:16:5e:02:bd: 32:35:b5:1c:ce:d2:6c:a8:fd:59:29:25:4b:6c:a7:35:28:b8: b9:cf:17:00:77:70:26:f9:e5:80:f4:5f:c0:5a:63:96:9e:ad: e7:ac:12:bc:e5:c9:2b:a9:37:85:5a:cb:68:e5:7d:42:b5:1c: 2e:06:ae:7d:c3:ae:4f:54:d5:7b:f9:03:53:c3:32:eb:fa:f7: f5:fb:52:0c:34:d3:2e:c0:89:02:53:b6:6e:6d:5e:bc:51:d7: 17:00:42:df:42:77:86:67:8b:1e:87:e1:22:da:d9:e1:69:74: 85:51:d2:81:3a:66:fa:24:08:2c:36:42:bb:f1:68:c1:5b:80: fd:a3:57:49:fd:33:f6:d1:12:54:73:71:b7:b9:e0:4e:81:df: fa:ef:eb:1c:d6:21:b3:33:b6:87:55:c2:16:c8:70:a7:d7:9c: 65:e3:55:cd:a6:b3:ec:af:52:bf:df:bc:c7:2c:4a:19:6f:b6: 72:78:26:b7:8b:45:81:96:63:ef:a9:4b:43:f9:11:b0:d2:a3: 8a:75:68:fd:a1:38:75:31:96:ca:00:b6:6c:d6:2e:af:e7:fa: 11:ae:20:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKtdpQVGK2qZNgOso7DNDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ZGM4MWVhMzg5ZGQ2YWFjNGVmYmMzNGQ1MmQ3NzhlYmE3 YTdmYzQwHhcNMjUxMjI0MjEwMTM3WhcNMjUxMjI1MjEwMTM3WjAzMTEwLwYDVQQD EyhhZjNkNTM5MGU0YTMyNDQyYmJiNTEwMmM4YmJhNWVmYzk2OTBlNGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssMgOb7k62RfaWW9a79Ka4lyNhYW 68kFm340E6g3AbGgNs5FVbfZZ91xgUOVGZgWLTgpvpyGuTTD0hJLxqj9wJJHaju3 7vfy5IpQAsCQBbLtfhWuR2qge/iSVIRg/nCDO+bqS8lYJlHIq0MT127VUckXoa77 GpIPvFoCNZmJyo7IIYBksqqpBjkVuy2CcgFhPOMFs+gXojfHY8OWGgFBZv8cVPEA cdKHZ/oUXle81eBX6bBewSNc/WIWK9KzNJh8Zd9yexM4ef173ddMiS9lPguepKvz AVKvS2o8ONFcl9x3BYKRxoQNmjynPPJfUXVZDrCbvN3cDKbR41ZhCRz3owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK89U5DkoyRCu7UQLIu6XvyWkOS7MB8GA1UdIwQY MBaAFCjcgeo4ndaqxO+8NNUtd466en/EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS055QjZqaWQxcXJFNzd3MDFTMTNqcnA2ZjhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9iNjljNmEtYjc4OC00YTFmLTljNWQt YzA3ZmZmNzQ2OTM4LzEvS055QjZqaWQxcXJFNzd3MDFTMTNqcnA2ZjhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9iNjljNmEtYjc4OC00YTFmLTljNWQtYzA3ZmZmNzQ2OTM4 LzEvS055QjZqaWQxcXJFNzd3MDFTMTNqcnA2ZjhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdfE2jdPn 1SrQ6t4vkYlbBSL7ArHI0QaKgs5H9frYe/0WXgK9MjW1HM7SbKj9WSklS2ynNSi4 uc8XAHdwJvnlgPRfwFpjlp6t56wSvOXJK6k3hVrLaOV9QrUcLgaufcOuT1TVe/kD U8My6/r39ftSDDTTLsCJAlO2bm1evFHXFwBC30J3hmeLHofhItrZ4Wl0hVHSgTpm +iQILDZCu/FowVuA/aNXSf0z9tESVHNxt7ngToHf+u/rHNYhszO2h1XCFshwp9ec ZeNVzaaz7K9Sv9+8xyxKGW+2cngmt4tFgZZj76lLQ/kRsNKjinVo/aE4dTGWygC2 bNYur+f6Ea4gAw== -----END CERTIFICATE-----Generated at Thu Dec 25 01:00:42 2025 by rpki-client