This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft File: ktf2mgS9nK1SOzn3ei3atEwpEZI.mft (raw, json) Hash identifier: e+FQRVy0v+lND5e9z4yvyxt2LBWmZJau+Nm7QzFMmpU= Subject key identifier: 76:E8:9A:28:3E:DB:F6:01:D7:95:BA:21:DB:1E:53:C3:6D:E1:45:55 Authority key identifier: 92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92 Certificate issuer: /CN=92d7f69a04bd9cad523b39f77a2ddab44c291192 Certificate serial: 019B3CB4FB41D29AB8207EBF6545ADFAB85A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft Manifest number: 1719 Signing time: Sat 20 Dec 2025 17:00:52 +0000 Manifest this update: Sat 20 Dec 2025 17:00:52 +0000 Manifest next update: Sun 21 Dec 2025 17:00:52 +0000 Files and hashes: 1: ktf2mgS9nK1SOzn3ei3atEwpEZI.crl (hash: G7Nw7B+6Vc9V6GGAJwHZs0w1ytFLoVtO1nrxrOol3gw=) 2: tX7ugzTELMCfaa10qZ6cRQFzo6s.roa (hash: pM1f1c7cpi8tX6YPlXTmsRIvmuNbzIiqqMIx6Cp/Bqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:fb:41:d2:9a:b8:20:7e:bf:65:45:ad:fa:b8:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7f69a04bd9cad523b39f77a2ddab44c291192 Validity Not Before: Dec 20 17:00:52 2025 GMT Not After : Dec 21 17:00:52 2025 GMT Subject: CN=76e89a283edbf601d795ba21db1e53c36de14555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5b:74:33:00:29:43:4e:bf:64:3f:f0:5b:3f: ed:91:0a:94:e9:45:ad:03:a8:a9:a9:b1:47:fe:ef: 9b:00:10:3e:73:79:e4:c9:e9:51:e2:30:26:81:e0: 6f:bd:7a:fd:69:79:ec:b6:72:e0:7e:72:2c:fd:3d: 5e:c9:35:44:97:8a:e6:ca:60:02:ce:bc:6d:29:0f: ca:74:cb:57:e6:e1:23:39:09:f7:3e:50:40:75:e4: c8:28:bf:46:c8:ca:05:70:41:34:6c:30:ac:e4:cc: ab:6f:f0:02:8a:c3:9b:e8:1b:c4:45:05:cf:b9:b6: d7:29:c7:4c:90:8f:45:46:b1:00:d4:f8:b2:a6:2d: 15:35:f6:a1:84:6d:f3:7e:a1:87:0b:50:61:6b:da: dc:e2:36:ee:a2:b4:13:15:40:56:61:e1:73:3b:d9: 05:0c:88:7c:0f:3b:0b:20:a8:a4:46:51:71:e9:ba: 62:87:e2:47:90:1e:62:92:50:1a:b5:ba:e7:a1:71: 30:c9:3c:a7:fc:89:2b:d8:d8:e8:d3:dc:91:6f:85: 8d:7b:f9:59:dc:23:51:d4:60:ed:2d:3c:55:22:dc: 04:8a:07:b0:f5:ba:ce:34:ea:b8:8e:93:bd:ed:da: cf:d4:0a:16:a2:3d:3c:cd:b5:ec:b8:e9:54:24:94: 35:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E8:9A:28:3E:DB:F6:01:D7:95:BA:21:DB:1E:53:C3:6D:E1:45:55 X509v3 Authority Key Identifier: keyid:92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:20:05:b2:5b:7c:d6:a6:6b:0f:18:03:62:c7:41:55:e1:35: 3a:ff:dd:e4:cd:6d:2f:8d:e9:11:76:12:d6:6b:d3:4c:d4:29: 83:22:da:d5:45:61:19:e6:f1:a6:30:f9:cc:36:a0:89:28:a1: 41:d3:f9:98:74:c3:ba:14:e0:49:17:9e:d8:6b:c3:0f:7e:1e: e7:fa:fb:d1:69:cc:41:85:d6:d1:19:ef:2a:3c:4b:0c:9c:c9: 07:e6:d9:3c:99:26:d5:3e:27:40:20:4a:3b:8f:73:a0:14:cc: 7d:e8:a5:9c:99:1e:a7:42:47:b6:5f:bf:6d:97:11:bd:fe:b0: 34:76:38:c6:aa:71:44:5a:f5:ac:d9:42:d5:e8:6d:cf:9b:0a: 23:61:17:5d:58:46:d5:ac:f0:8d:eb:85:c6:74:7e:35:7b:40: b3:99:d3:32:0f:57:b9:d4:1a:0c:3f:92:9c:b0:15:c4:9b:2f: d3:3a:a9:28:52:d6:6a:df:72:3a:f9:27:10:76:7b:2c:57:a1: 26:4d:d6:ba:c9:1e:67:35:5f:ca:4f:f8:ae:37:8d:4d:a7:75: ef:6b:5b:8e:61:0e:c8:3b:54:d1:cc:14:7d:5d:90:9f:1e:f3: 42:62:a7:c0:8d:6a:70:54:b0:0f:16:89:95:44:d0:25:3b:4a: 22:9f:92:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tPtB0pq4IH6/ZUWt+rhaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdmNjlhMDRiZDljYWQ1MjNiMzlmNzdhMmRkYWI0NGMy OTExOTIwHhcNMjUxMjIwMTcwMDUyWhcNMjUxMjIxMTcwMDUyWjAzMTEwLwYDVQQD Eyg3NmU4OWEyODNlZGJmNjAxZDc5NWJhMjFkYjFlNTNjMzZkZTE0NTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVt0MwApQ06/ZD/wWz/tkQqU6UWt A6ipqbFH/u+bABA+c3nkyelR4jAmgeBvvXr9aXnstnLgfnIs/T1eyTVEl4rmymAC zrxtKQ/KdMtX5uEjOQn3PlBAdeTIKL9GyMoFcEE0bDCs5Myrb/ACisOb6BvERQXP ubbXKcdMkI9FRrEA1Piypi0VNfahhG3zfqGHC1Bha9rc4jbuorQTFUBWYeFzO9kF DIh8DzsLIKikRlFx6bpih+JHkB5iklAatbrnoXEwyTyn/Ikr2Njo09yRb4WNe/lZ 3CNR1GDtLTxVItwEigew9brONOq4jpO97drP1AoWoj08zbXsuOlUJJQ1uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHbomig+2/YB15W6IdseU8Nt4UVVMB8GA1UdIwQY MBaAFJLX9poEvZytUjs593ot2rRMKRGSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmMm1nUzluSzFTT3puM2VpM2F0RXdwRVpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy81MGQ4NTUtY2Q4MS00ODFhLTk1ZWYt Yjg0NDg3ZjkyMGU0LzEva3RmMm1nUzluSzFTT3puM2VpM2F0RXdwRVpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy81MGQ4NTUtY2Q4MS00ODFhLTk1ZWYtYjg0NDg3ZjkyMGU0 LzEva3RmMm1nUzluSzFTT3puM2VpM2F0RXdwRVpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwyAFslt8 1qZrDxgDYsdBVeE1Ov/d5M1tL43pEXYS1mvTTNQpgyLa1UVhGebxpjD5zDagiSih QdP5mHTDuhTgSRee2GvDD34e5/r70WnMQYXW0RnvKjxLDJzJB+bZPJkm1T4nQCBK O49zoBTMfeilnJkep0JHtl+/bZcRvf6wNHY4xqpxRFr1rNlC1ehtz5sKI2EXXVhG 1azwjeuFxnR+NXtAs5nTMg9XudQaDD+SnLAVxJsv0zqpKFLWat9yOvknEHZ7LFeh Jk3WuskeZzVfyk/4rjeNTad172tbjmEOyDtU0cwUfV2Qnx7zQmKnwI1qcFSwDxaJ lUTQJTtKIp+Sgw== -----END CERTIFICATE-----Generated at Sun Dec 21 01:11:42 2025 by rpki-client