This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft File: KCyT0maFJ4jkmYLZ96Yg222fWI0.mft (raw, json) Hash identifier: Z72Ld90lCMXFmCeiu/i4qYdY59i6Pm3oOkszINQr1n4= Subject key identifier: D7:1A:89:E6:14:CE:F4:0C:1A:16:43:DB:89:F0:03:96:7A:90:7F:EE Authority key identifier: 28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D Certificate issuer: /CN=282c93d266852788e49982d9f7a620db6d9f588d Certificate serial: 019B38332049A55B4E84B6397C6E9F577F94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft Manifest number: 0CA2 Signing time: Fri 19 Dec 2025 20:00:33 +0000 Manifest this update: Fri 19 Dec 2025 20:00:33 +0000 Manifest next update: Sat 20 Dec 2025 20:00:33 +0000 Files and hashes: 1: FCRIl5Vt1LPdQ6IrZpaUR6T2zRk.roa (hash: dI7TXuZLS0+y6udtXa2yol0ikupwyIZAlaHrmt/VDI0=) 2: KCyT0maFJ4jkmYLZ96Yg222fWI0.crl (hash: 6fv0Fbv1qhtdNiEZNqjk05uiLx/epR1u30zr/6VKvHE=) 3: z3-dsZKj9j7nCKXS-M2vtq4aJrk.roa (hash: 28apFTsYy4v/YWMNME9MOhYcWfL7kBuIz5Y1C6vARJo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 20:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:33:20:49:a5:5b:4e:84:b6:39:7c:6e:9f:57:7f:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=282c93d266852788e49982d9f7a620db6d9f588d Validity Not Before: Dec 19 20:00:33 2025 GMT Not After : Dec 20 20:00:33 2025 GMT Subject: CN=d71a89e614cef40c1a1643db89f003967a907fee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f1:a4:ed:f0:7f:e5:2a:52:c0:93:d6:6c:e3: f7:b8:9a:35:a3:e8:13:57:dd:3a:c2:ac:1f:cd:9f: 18:95:0d:fd:5c:05:e1:d0:ae:f2:43:ea:26:14:ea: 8c:1a:95:a0:41:4d:03:0d:2c:3b:8a:1c:88:bb:33: e3:b2:22:a5:ca:3a:fd:d3:f3:16:64:b4:cb:85:a7: c6:8e:23:20:3a:9d:c3:70:85:8c:95:16:75:87:aa: 96:89:14:aa:a1:03:2b:57:71:3d:90:ae:e6:ba:02: 84:da:45:fb:72:b4:ff:ee:d5:51:21:9e:d0:5c:ce: 46:ec:e3:4b:7a:f1:14:02:92:75:12:d9:ab:e6:7e: eb:b1:40:ea:83:3c:0a:3a:56:87:87:c8:cd:c6:85: 36:00:5f:b2:e7:92:0f:ce:1f:a6:74:ce:a6:e4:da: e2:5f:7e:d3:da:c9:dc:ff:b9:a1:56:0d:95:ff:67: 94:db:e5:56:b5:f9:37:cc:c0:e1:9f:4e:a6:03:ec: ab:de:af:6e:53:1e:22:d9:26:55:dd:89:d3:99:a8: db:e6:48:a6:25:fb:4c:c9:76:19:3d:dc:bc:4d:ef: 34:7d:d2:cc:f1:cf:c8:e3:d0:d9:1c:79:4a:86:9f: 41:b7:51:2c:e5:5a:5d:d2:f0:d0:c3:96:85:d9:50: 70:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:1A:89:E6:14:CE:F4:0C:1A:16:43:DB:89:F0:03:96:7A:90:7F:EE X509v3 Authority Key Identifier: keyid:28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:95:f8:ef:55:c4:a4:82:dd:98:81:ee:7c:84:9f:f4:75:a1: c0:fb:70:5f:2a:48:d8:59:be:45:f4:43:84:cc:ce:59:07:5c: 13:65:66:72:d0:43:8d:6e:59:a2:aa:76:fe:32:39:ab:18:09: 04:10:91:67:d8:29:16:62:f5:33:e9:4c:7d:86:09:4c:60:fd: c2:6a:79:e0:78:0d:a0:2c:e2:66:e3:00:de:d2:bd:9b:36:ae: ef:0b:3e:d2:f1:af:b8:87:d1:0a:d4:0a:22:40:c7:24:09:de: e8:1f:e7:fb:87:97:8a:07:f8:a1:51:e1:9f:f7:42:d2:6e:9e: ee:9f:ba:26:87:14:62:74:99:fe:4e:5b:4e:51:92:b8:56:17: c0:af:1c:03:c7:95:f9:03:38:01:48:86:b6:8b:1b:5c:fa:29: 1d:fe:30:e9:5b:de:b0:7a:f3:c6:f2:c4:54:3e:ca:4f:c5:33: 04:f4:da:87:e1:b0:55:7e:5a:fc:cc:2e:a9:a7:42:47:30:c3: 3d:ad:29:46:b0:07:39:79:dd:1f:61:10:bf:42:10:32:2e:42: 4e:f5:94:29:a4:7f:14:8a:0d:fe:20:58:62:8d:39:37:7c:66: 3c:fc:0c:28:54:23:ee:3b:c9:f8:61:da:31:ae:99:19:89:87: 39:48:5d:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4MyBJpVtOhLY5fG6fV3+UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MmM5M2QyNjY4NTI3ODhlNDk5ODJkOWY3YTYyMGRiNmQ5 ZjU4OGQwHhcNMjUxMjE5MjAwMDMzWhcNMjUxMjIwMjAwMDMzWjAzMTEwLwYDVQQD EyhkNzFhODllNjE0Y2VmNDBjMWExNjQzZGI4OWYwMDM5NjdhOTA3ZmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPGk7fB/5SpSwJPWbOP3uJo1o+gT V906wqwfzZ8YlQ39XAXh0K7yQ+omFOqMGpWgQU0DDSw7ihyIuzPjsiKlyjr90/MW ZLTLhafGjiMgOp3DcIWMlRZ1h6qWiRSqoQMrV3E9kK7mugKE2kX7crT/7tVRIZ7Q XM5G7ONLevEUApJ1Etmr5n7rsUDqgzwKOlaHh8jNxoU2AF+y55IPzh+mdM6m5Nri X37T2snc/7mhVg2V/2eU2+VWtfk3zMDhn06mA+yr3q9uUx4i2SZV3YnTmajb5kim JftMyXYZPdy8Te80fdLM8c/I49DZHHlKhp9Bt1Es5Vpd0vDQw5aF2VBwCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNcaieYUzvQMGhZD24nwA5Z6kH/uMB8GA1UdIwQY MBaAFCgsk9JmhSeI5JmC2femINttn1iNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0N5VDBtYUZKNGprbVlMWjk2WWcyMjJmV0kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8zODJmZjQtNGZjMi00MzAyLWFmOTAt OTZhZGZmZTJlODZhLzEvS0N5VDBtYUZKNGprbVlMWjk2WWcyMjJmV0kwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8zODJmZjQtNGZjMi00MzAyLWFmOTAtOTZhZGZmZTJlODZh LzEvS0N5VDBtYUZKNGprbVlMWjk2WWcyMjJmV0kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApJX471XE pILdmIHufISf9HWhwPtwXypI2Fm+RfRDhMzOWQdcE2VmctBDjW5Zoqp2/jI5qxgJ BBCRZ9gpFmL1M+lMfYYJTGD9wmp54HgNoCziZuMA3tK9mzau7ws+0vGvuIfRCtQK IkDHJAne6B/n+4eXigf4oVHhn/dC0m6e7p+6JocUYnSZ/k5bTlGSuFYXwK8cA8eV +QM4AUiGtosbXPopHf4w6VvesHrzxvLEVD7KT8UzBPTah+GwVX5a/MwuqadCRzDD Pa0pRrAHOXndH2EQv0IQMi5CTvWUKaR/FIoN/iBYYo05N3xmPPwMKFQj7jvJ+GHa Ma6ZGYmHOUhdeA== -----END CERTIFICATE-----Generated at Sat Dec 20 04:38:05 2025 by rpki-client