This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft File: KL69RlhhhHPtTIN2fFHejiM8MpI.mft (raw, json) Hash identifier: J8MyFDhRV3CylCv6Pv+wckoQJ+hhwfKrQcTlySrbXik= Subject key identifier: 03:18:AF:5F:41:35:6C:CF:79:2A:20:81:6C:6B:0A:04:2E:42:42:C5 Authority key identifier: 28:BE:BD:46:58:61:84:73:ED:4C:83:76:7C:51:DE:8E:23:3C:32:92 Certificate issuer: /CN=28bebd4658618473ed4c83767c51de8e233c3292 Certificate serial: 019B3BD9BB4B72FB12AAE33CB64EC8173093 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KL69RlhhhHPtTIN2fFHejiM8MpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft Manifest number: 1105 Signing time: Sat 20 Dec 2025 13:01:23 +0000 Manifest this update: Sat 20 Dec 2025 13:01:23 +0000 Manifest next update: Sun 21 Dec 2025 13:01:23 +0000 Files and hashes: 1: KL69RlhhhHPtTIN2fFHejiM8MpI.crl (hash: phwwcZd1i6gFEjs9OZz0BQ2yCxIAdNfAEifiNQYKw0o=) 2: jp-8lbUOvN6sUPZsTL-dh7MOVR8.roa (hash: /kMpoM5rzLA4Q5DdnfjuYEV0in2H+0XYtN+u4LENV/A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft rsync://rpki.ripe.net/repository/DEFAULT/KL69RlhhhHPtTIN2fFHejiM8MpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:bb:4b:72:fb:12:aa:e3:3c:b6:4e:c8:17:30:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28bebd4658618473ed4c83767c51de8e233c3292 Validity Not Before: Dec 20 13:01:23 2025 GMT Not After : Dec 21 13:01:23 2025 GMT Subject: CN=0318af5f41356ccf792a20816c6b0a042e4242c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b8:e5:d8:8c:0c:5b:1b:47:55:e1:96:28:d1: 1c:09:86:22:23:d0:23:49:35:74:07:ff:c2:d8:3f: 47:d5:77:39:bc:0e:42:be:13:47:f7:76:ac:64:82: 76:eb:cc:0c:cb:af:02:4c:3b:f1:75:28:1d:ee:9a: d7:84:e6:c7:69:56:5f:49:ff:53:b0:d3:12:eb:99: 75:92:cc:7e:d9:75:a9:bc:4b:6e:40:80:ca:ad:76: 8e:17:cf:e6:b8:e6:6f:5b:d5:72:1b:ec:ab:61:68: 7a:29:84:fb:ab:c7:74:8f:71:00:b9:61:c8:f6:35: 68:d1:5f:bb:f0:2b:3b:9b:3c:4f:b4:e0:5b:c4:80: 34:fb:64:ce:b9:da:ee:7f:c0:1d:47:f2:06:4a:3d: a5:4a:99:67:7b:43:cd:95:4d:c3:75:38:a0:21:28: 9a:60:cf:e6:d4:86:2a:06:21:64:95:da:1a:d3:7d: 8a:5d:0e:52:e6:42:1c:3b:f3:6d:f4:8b:0d:20:1f: ec:f4:2e:01:67:0e:74:f2:d3:29:24:25:5a:53:be: 1d:e5:0b:20:2d:5e:e5:86:73:d1:81:eb:82:eb:4f: a6:39:b0:f0:62:61:9e:25:28:9f:c1:cd:11:da:26: f8:72:74:37:ed:f3:29:9a:2b:aa:37:d2:eb:13:14: 3f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:18:AF:5F:41:35:6C:CF:79:2A:20:81:6C:6B:0A:04:2E:42:42:C5 X509v3 Authority Key Identifier: keyid:28:BE:BD:46:58:61:84:73:ED:4C:83:76:7C:51:DE:8E:23:3C:32:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KL69RlhhhHPtTIN2fFHejiM8MpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:bb:bf:e8:15:63:e8:46:13:f4:d4:1c:73:0a:77:69:99:69: 62:c0:65:c4:9c:56:9d:34:e3:28:9a:d4:2f:0a:17:78:1e:b6: cc:9a:b3:98:a3:01:96:cb:ac:5f:5e:db:6c:59:7f:81:ea:2b: d7:61:10:2a:69:68:09:6a:99:9a:f6:00:5c:be:1c:55:7e:04: 3e:5c:82:95:3d:f7:4f:5d:63:fe:8b:5b:74:c4:de:06:55:cd: 69:87:33:8d:73:3f:68:65:0d:2f:a1:ed:66:04:79:8b:57:5b: ef:c4:ba:8c:72:18:18:3e:84:ba:95:e8:e9:a7:e6:7d:46:00: 82:6b:4c:01:fc:98:6b:0b:f4:8b:9f:cf:79:9b:5f:9b:76:6d: ac:ab:d9:45:89:30:92:7e:00:d8:0d:14:b0:f5:49:75:df:eb: 9f:61:02:9d:b1:ef:ac:de:46:72:56:17:26:bd:03:d1:fa:56: ae:cc:d9:56:e2:6f:f0:b1:21:99:4d:48:8e:5e:f6:e3:d0:f1: a8:58:4d:a4:f0:3b:67:04:39:ae:dd:63:a5:8d:c1:a6:75:1f: de:b6:a9:0e:15:8b:30:d4:5c:00:24:83:ec:94:1d:90:53:4b: d2:d4:7f:a2:2e:08:d6:99:ea:6f:27:de:d9:24:52:52:08:7a: 80:53:4e:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72btLcvsSquM8tk7IFzCTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4YmViZDQ2NTg2MTg0NzNlZDRjODM3NjdjNTFkZThlMjMz YzMyOTIwHhcNMjUxMjIwMTMwMTIzWhcNMjUxMjIxMTMwMTIzWjAzMTEwLwYDVQQD EygwMzE4YWY1ZjQxMzU2Y2NmNzkyYTIwODE2YzZiMGEwNDJlNDI0MmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLjl2IwMWxtHVeGWKNEcCYYiI9Aj STV0B//C2D9H1Xc5vA5CvhNH93asZIJ268wMy68CTDvxdSgd7prXhObHaVZfSf9T sNMS65l1ksx+2XWpvEtuQIDKrXaOF8/muOZvW9VyG+yrYWh6KYT7q8d0j3EAuWHI 9jVo0V+78Cs7mzxPtOBbxIA0+2TOudruf8AdR/IGSj2lSplne0PNlU3DdTigISia YM/m1IYqBiFkldoa032KXQ5S5kIcO/Nt9IsNIB/s9C4BZw508tMpJCVaU74d5Qsg LV7lhnPRgeuC60+mObDwYmGeJSifwc0R2ib4cnQ37fMpmiuqN9LrExQ/5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAMYr19BNWzPeSoggWxrCgQuQkLFMB8GA1UdIwQY MBaAFCi+vUZYYYRz7UyDdnxR3o4jPDKSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0w2OVJsaGhoSFB0VElOMmZGSGVqaU04TXBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9hYTk3NWMtYjliNS00NjUxLWJjNWIt YmE3OTU2YjBmMmRkLzEvS0w2OVJsaGhoSFB0VElOMmZGSGVqaU04TXBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9hYTk3NWMtYjliNS00NjUxLWJjNWItYmE3OTU2YjBmMmRk LzEvS0w2OVJsaGhoSFB0VElOMmZGSGVqaU04TXBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWLu/6BVj 6EYT9NQccwp3aZlpYsBlxJxWnTTjKJrULwoXeB62zJqzmKMBlsusX17bbFl/geor 12EQKmloCWqZmvYAXL4cVX4EPlyClT33T11j/otbdMTeBlXNaYczjXM/aGUNL6Ht ZgR5i1db78S6jHIYGD6EupXo6afmfUYAgmtMAfyYawv0i5/PeZtfm3ZtrKvZRYkw kn4A2A0UsPVJdd/rn2ECnbHvrN5GclYXJr0D0fpWrszZVuJv8LEhmU1Ijl7249Dx qFhNpPA7ZwQ5rt1jpY3BpnUf3rapDhWLMNRcACSD7JQdkFNL0tR/oi4I1pnqbyfe 2SRSUgh6gFNO0A== -----END CERTIFICATE-----Generated at Sat Dec 20 19:28:25 2025 by rpki-client