This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft File: ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft (raw, json) Hash identifier: mEdW3ipOWZLTKaknz4b8TTdrMbOanjiAN/+uknrPcyk= Subject key identifier: C5:2F:41:56:B3:DB:E7:72:AF:3B:49:BA:26:06:8E:0E:3F:B8:13:D0 Authority key identifier: 92:EF:F6:16:25:02:EA:3B:52:FD:8C:A3:AE:10:8D:13:D6:BF:F6:52 Certificate issuer: /CN=92eff6162502ea3b52fd8ca3ae108d13d6bff652 Certificate serial: 019B785C614C5C804B7A2A6EDF3A2A038809 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft Manifest number: 17A7 Signing time: Thu 01 Jan 2026 07:01:18 +0000 Manifest this update: Thu 01 Jan 2026 07:01:18 +0000 Manifest next update: Fri 02 Jan 2026 07:01:18 +0000 Files and hashes: 1: ku_2FiUC6jtS_YyjrhCNE9a_9lI.crl (hash: lsBgs/6LJLPWDTpBTlNR6Olknq7+Hr02gi7KrpdW41M=) 2: vIUD6qLiZhlDA8IvWgGD4RFZTgQ.roa (hash: 8f4c2O05sapdQ4wcaKqtNByBFKGfiB5rQ1o7fR58j44=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft rsync://rpki.ripe.net/repository/DEFAULT/ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 07:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:5c:61:4c:5c:80:4b:7a:2a:6e:df:3a:2a:03:88:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92eff6162502ea3b52fd8ca3ae108d13d6bff652 Validity Not Before: Jan 1 07:01:18 2026 GMT Not After : Jan 2 07:01:18 2026 GMT Subject: CN=c52f4156b3dbe772af3b49ba26068e0e3fb813d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:49:39:66:78:3c:05:9f:50:f1:44:67:75:bf: 69:e5:02:55:86:8b:d6:32:66:68:9d:77:32:6e:4e: eb:bd:a0:31:b7:f6:d4:a9:47:3c:8f:41:75:7e:df: 88:4f:b7:3d:c5:ff:41:e5:fc:69:16:9e:66:6d:e7: ab:51:c3:b4:62:d6:ff:24:02:19:a5:9e:26:48:df: f1:dd:f4:ab:c8:b4:3c:99:e9:02:c1:a4:89:41:13: b7:e6:62:43:67:f6:83:71:5c:68:4d:de:b9:91:52: 71:3a:60:29:53:06:87:b7:56:84:72:0c:30:c9:45: 5c:13:d7:60:0a:97:a6:79:d5:67:6a:ed:2d:3d:b2: be:ef:7a:1a:c0:f7:be:a3:94:6b:3c:b6:9f:a0:f4: ac:20:0f:4c:45:8c:70:af:1a:74:bd:a8:4c:e2:63: 96:ae:43:cc:ee:83:0f:63:18:2a:68:f9:34:be:f9: 82:5a:c0:24:fd:c6:bf:5b:c0:15:e5:3e:25:d8:e3: 93:d5:a6:9f:dd:18:0c:8d:62:d7:f6:cf:a5:68:5f: e4:42:0f:58:c5:2e:25:b2:15:8a:d4:75:5b:05:b0: 60:d9:0a:aa:41:01:33:77:81:24:39:79:0a:fe:2b: 19:c5:33:93:ed:57:7f:32:97:5b:93:6e:c1:e5:77: 4a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:2F:41:56:B3:DB:E7:72:AF:3B:49:BA:26:06:8E:0E:3F:B8:13:D0 X509v3 Authority Key Identifier: keyid:92:EF:F6:16:25:02:EA:3B:52:FD:8C:A3:AE:10:8D:13:D6:BF:F6:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:28:01:b9:4b:96:47:7f:f7:05:60:f9:2c:56:04:06:e3:15: cc:2b:54:06:21:8c:14:af:c3:ac:4a:f2:8b:6b:57:67:48:12: 9f:cc:31:e5:69:ca:f8:cf:8d:85:f9:b5:bf:08:0c:76:59:4a: 24:8d:bb:29:0d:49:dc:23:cb:0a:71:6a:c3:4a:c3:66:ca:90: 97:28:6e:b4:d5:05:6a:44:4a:ed:ac:b5:b2:1d:81:e9:99:7f: bd:68:0e:a6:68:01:59:09:87:a5:89:a1:d3:4b:0c:65:32:d5: f6:22:e2:62:f8:3f:a1:e0:c3:4a:55:45:ab:a6:22:1a:7a:f7: a9:33:8b:69:e2:cd:f2:3f:36:83:a9:29:2b:42:45:d2:29:36: 57:d0:a7:ca:bf:95:3a:fa:19:22:ef:67:75:c3:0a:10:67:c9: ec:df:10:c1:d5:65:97:06:08:ce:a3:7a:f2:e8:78:a4:0f:86: 69:11:95:36:bf:0d:39:b9:ac:52:56:a8:f4:90:35:67:99:de: fb:ac:99:16:fd:03:1c:8a:0b:80:29:70:46:d5:8f:71:a0:ab: c1:f6:ab:83:2c:38:ce:d0:89:b8:e2:ac:8d:46:78:b8:b7:63: 3e:14:a8:98:da:a1:f3:11:39:8a:c5:23:81:9e:0d:22:4c:e7: 09:00:60:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4XGFMXIBLeipu3zoqA4gJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZWZmNjE2MjUwMmVhM2I1MmZkOGNhM2FlMTA4ZDEzZDZi ZmY2NTIwHhcNMjYwMTAxMDcwMTE4WhcNMjYwMTAyMDcwMTE4WjAzMTEwLwYDVQQD EyhjNTJmNDE1NmIzZGJlNzcyYWYzYjQ5YmEyNjA2OGUwZTNmYjgxM2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0k5Zng8BZ9Q8URndb9p5QJVhovW MmZonXcybk7rvaAxt/bUqUc8j0F1ft+IT7c9xf9B5fxpFp5mbeerUcO0Ytb/JAIZ pZ4mSN/x3fSryLQ8mekCwaSJQRO35mJDZ/aDcVxoTd65kVJxOmApUwaHt1aEcgww yUVcE9dgCpemedVnau0tPbK+73oawPe+o5RrPLafoPSsIA9MRYxwrxp0vahM4mOW rkPM7oMPYxgqaPk0vvmCWsAk/ca/W8AV5T4l2OOT1aaf3RgMjWLX9s+laF/kQg9Y xS4lshWK1HVbBbBg2QqqQQEzd4EkOXkK/isZxTOT7Vd/Mpdbk27B5XdKFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMUvQVaz2+dyrztJuiYGjg4/uBPQMB8GA1UdIwQY MBaAFJLv9hYlAuo7Uv2Mo64QjRPWv/ZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3VfMkZpVUM2anRTX1l5anJoQ05FOWFfOWxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS83OTQzYTAtY2NhYi00MjYwLWJkNTEt YWZlODlhYWNjNDkyLzEva3VfMkZpVUM2anRTX1l5anJoQ05FOWFfOWxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS83OTQzYTAtY2NhYi00MjYwLWJkNTEtYWZlODlhYWNjNDky LzEva3VfMkZpVUM2anRTX1l5anJoQ05FOWFfOWxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEigBuUuW R3/3BWD5LFYEBuMVzCtUBiGMFK/DrEryi2tXZ0gSn8wx5WnK+M+Nhfm1vwgMdllK JI27KQ1J3CPLCnFqw0rDZsqQlyhutNUFakRK7ay1sh2B6Zl/vWgOpmgBWQmHpYmh 00sMZTLV9iLiYvg/oeDDSlVFq6YiGnr3qTOLaeLN8j82g6kpK0JF0ik2V9Cnyr+V OvoZIu9ndcMKEGfJ7N8QwdVllwYIzqN68uh4pA+GaRGVNr8NObmsUlao9JA1Z5ne +6yZFv0DHIoLgClwRtWPcaCrwfargyw4ztCJuOKsjUZ4uLdjPhSomNqh8xE5isUj gZ4NIkznCQBgeA== -----END CERTIFICATE-----Generated at Thu Jan 1 12:32:18 2026 by rpki-client