This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft File: KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft (raw, json) Hash identifier: 0gCASgdgSDTQC5lAqyxUa9nHR/EK0V0sJaT7MCExWUI= Subject key identifier: 88:56:2C:5D:1C:CE:BC:56:54:73:ED:47:1C:DC:0E:D5:D8:80:01:D0 Authority key identifier: 28:20:3D:EC:D0:8B:D4:7D:8A:91:62:A6:E1:74:2F:3C:53:EA:3C:74 Certificate issuer: /CN=28203decd08bd47d8a9162a6e1742f3c53ea3c74 Certificate serial: 019B66FB0BC45EEFFD7BFE01BAB27C8D168B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCA97NCL1H2KkWKm4XQvPFPqPHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft Manifest number: 0A1B Signing time: Sun 28 Dec 2025 22:01:27 +0000 Manifest this update: Sun 28 Dec 2025 22:01:27 +0000 Manifest next update: Mon 29 Dec 2025 22:01:27 +0000 Files and hashes: 1: Ep5Q_paEMkoQ8JMNVQev_VtcdmY.roa (hash: Bu1EiGDnBTDp8uoDAPAoyCI9ib5FJjnia2bO4NVERCs=) 2: KCA97NCL1H2KkWKm4XQvPFPqPHQ.crl (hash: TfMD+4nqVHXeK7YHtoG6xfST20b/UihPXXtltJvOYLQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KCA97NCL1H2KkWKm4XQvPFPqPHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:fb:0b:c4:5e:ef:fd:7b:fe:01:ba:b2:7c:8d:16:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28203decd08bd47d8a9162a6e1742f3c53ea3c74 Validity Not Before: Dec 28 22:01:27 2025 GMT Not After : Dec 29 22:01:27 2025 GMT Subject: CN=88562c5d1ccebc565473ed471cdc0ed5d88001d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:39:ab:8b:a1:d3:54:c3:04:15:fe:66:3c:dc: 60:eb:00:13:cc:ac:a5:ea:34:4b:f0:0c:0c:d6:cb: d1:07:05:e8:9a:8b:3f:b3:c0:e9:db:55:3b:82:16: 06:06:54:1a:c3:ec:d8:50:e2:d0:2b:8a:5b:73:d4: 94:4c:8e:0a:12:1b:70:c8:9e:db:d2:d4:ac:c6:4b: dd:fd:c5:b9:e0:c2:e0:f7:60:18:ff:69:57:30:a6: df:51:e3:bb:a4:17:ce:13:0c:19:81:91:68:64:31: 51:c0:34:cf:f8:99:15:be:f0:2a:63:45:46:ba:68: c6:8a:e8:9e:b7:27:30:2d:38:9f:55:fa:41:b1:90: b9:ee:65:3b:0a:20:f0:66:78:ea:5c:15:69:1a:67: ab:9c:b0:14:1a:87:83:b7:dd:e9:52:c7:f7:24:d6: 10:8f:ae:48:c4:35:3d:cd:8b:a5:aa:a5:fb:df:65: 7b:ce:06:75:f2:82:6e:5b:a5:a5:1d:f7:90:e1:39: 85:59:47:4c:61:b1:e4:6d:e4:f1:17:52:c2:3b:1f: 54:53:56:fb:55:de:3f:fb:5b:bc:01:88:01:5b:8d: c8:c5:d9:02:83:51:a1:bd:4b:67:47:65:fb:9d:67: c4:94:cc:6e:10:90:68:78:b7:f9:43:ad:25:82:6f: 82:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:56:2C:5D:1C:CE:BC:56:54:73:ED:47:1C:DC:0E:D5:D8:80:01:D0 X509v3 Authority Key Identifier: keyid:28:20:3D:EC:D0:8B:D4:7D:8A:91:62:A6:E1:74:2F:3C:53:EA:3C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCA97NCL1H2KkWKm4XQvPFPqPHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:0b:6a:be:07:4a:c3:2e:fc:bf:d0:a3:e1:92:35:7d:8e:7d: 74:20:72:97:3b:6b:ab:90:2a:38:81:c0:d6:4c:32:93:f6:a9: 76:58:76:95:3a:cb:a6:ad:f4:84:12:07:33:91:f3:f7:49:46: 39:6e:99:59:2f:52:ce:02:20:74:19:27:ae:4f:18:a3:3d:bc: 97:48:8b:18:4f:ba:0e:56:d5:16:38:01:d8:f8:2c:62:3b:76: b0:99:c4:e2:dc:0a:2c:b4:b6:f0:af:78:9b:7e:eb:0c:14:84: d6:de:58:30:31:7f:8c:57:91:b9:ea:3d:5b:5e:3f:aa:af:12: 93:a3:23:4a:06:46:ee:a1:08:02:d7:a8:fe:c8:df:d0:8e:a2: 00:15:0f:cc:d4:ec:aa:db:3e:03:8c:1e:1a:13:18:bf:b1:2a: 74:40:7c:e1:57:65:a3:29:7c:4c:43:be:ad:87:09:63:20:97: ba:2f:3b:3d:2f:0d:66:b0:5c:e7:78:02:af:d2:a1:b6:2b:5e: 71:00:76:f5:fe:49:21:7d:99:90:e1:bc:6e:12:33:ff:fc:fc: 05:c5:d3:88:aa:e9:c0:24:54:e0:12:f3:f8:08:fe:b3:32:67: 39:29:a0:4e:08:a2:81:e1:e3:6a:ca:6b:17:ba:1b:14:84:47: 05:2c:8d:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtm+wvEXu/9e/4BurJ8jRaLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MjAzZGVjZDA4YmQ0N2Q4YTkxNjJhNmUxNzQyZjNjNTNl YTNjNzQwHhcNMjUxMjI4MjIwMTI3WhcNMjUxMjI5MjIwMTI3WjAzMTEwLwYDVQQD Eyg4ODU2MmM1ZDFjY2ViYzU2NTQ3M2VkNDcxY2RjMGVkNWQ4ODAwMWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzmri6HTVMMEFf5mPNxg6wATzKyl 6jRL8AwM1svRBwXomos/s8Dp21U7ghYGBlQaw+zYUOLQK4pbc9SUTI4KEhtwyJ7b 0tSsxkvd/cW54MLg92AY/2lXMKbfUeO7pBfOEwwZgZFoZDFRwDTP+JkVvvAqY0VG umjGiuietycwLTifVfpBsZC57mU7CiDwZnjqXBVpGmernLAUGoeDt93pUsf3JNYQ j65IxDU9zYulqqX732V7zgZ18oJuW6WlHfeQ4TmFWUdMYbHkbeTxF1LCOx9UU1b7 Vd4/+1u8AYgBW43IxdkCg1GhvUtnR2X7nWfElMxuEJBoeLf5Q60lgm+CUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIhWLF0czrxWVHPtRxzcDtXYgAHQMB8GA1UdIwQY MBaAFCggPezQi9R9ipFipuF0LzxT6jx0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0NBOTdOQ0wxSDJLa1dLbTRYUXZQRlBxUEhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jOTBhMzQtMGFmZC00OWI5LWJiZDYt YTI5N2MxNDA4MDg1LzEvS0NBOTdOQ0wxSDJLa1dLbTRYUXZQRlBxUEhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jOTBhMzQtMGFmZC00OWI5LWJiZDYtYTI5N2MxNDA4MDg1 LzEvS0NBOTdOQ0wxSDJLa1dLbTRYUXZQRlBxUEhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANQtqvgdK wy78v9Cj4ZI1fY59dCBylztrq5AqOIHA1kwyk/apdlh2lTrLpq30hBIHM5Hz90lG OW6ZWS9SzgIgdBknrk8Yoz28l0iLGE+6DlbVFjgB2PgsYjt2sJnE4twKLLS28K94 m37rDBSE1t5YMDF/jFeRueo9W14/qq8Sk6MjSgZG7qEIAteo/sjf0I6iABUPzNTs qts+A4weGhMYv7EqdEB84Vdloyl8TEO+rYcJYyCXui87PS8NZrBc53gCr9Khtite cQB29f5JIX2ZkOG8bhIz//z8BcXTiKrpwCRU4BLz+Aj+szJnOSmgTgiigeHjaspr F7obFIRHBSyN2Q== -----END CERTIFICATE-----Generated at Mon Dec 29 02:23:46 2025 by rpki-client