This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft File: KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft (raw, json) Hash identifier: qtdblgu1PBuBwfU4Monjv9Xipku20Sxr1V7dLw4ARPk= Subject key identifier: C2:2F:2C:DC:14:59:2A:88:C1:26:08:36:0D:03:09:8B:B0:0A:C1:4D Authority key identifier: 28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2 Certificate issuer: /CN=28f8ede20b78f995993da98f434a966074d562c2 Certificate serial: 019B3C7ECC80D78242D7410C20FE9D6E7F21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft Manifest number: 0F13 Signing time: Sat 20 Dec 2025 16:01:41 +0000 Manifest this update: Sat 20 Dec 2025 16:01:41 +0000 Manifest next update: Sun 21 Dec 2025 16:01:41 +0000 Files and hashes: 1: KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl (hash: yaFyugnyZrJ1SyRj3if9mYXMmoDzJWcRTYqFjZtuwHI=) 2: QrZTcjFrQJb3bvPYCzlmoBO_9JQ.roa (hash: WYTR6hwNEJJPOZupDqIytAiSQqBtGgxwk+L0S3fkxlw=) 3: oEDAb_-YZ2g4zh9tclXwopyXjP4.roa (hash: E6+8HcazGwD4GmKYHyq4M2SPeGPxJmXR/m+ObVabJaI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:cc:80:d7:82:42:d7:41:0c:20:fe:9d:6e:7f:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28f8ede20b78f995993da98f434a966074d562c2 Validity Not Before: Dec 20 16:01:41 2025 GMT Not After : Dec 21 16:01:41 2025 GMT Subject: CN=c22f2cdc14592a88c12608360d03098bb00ac14d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:10:e0:cc:43:8a:cc:69:c8:fc:bd:81:10:4c: b9:68:35:77:0f:f4:67:87:55:7f:09:f8:9b:0b:d0: 86:0c:bf:7a:cf:39:63:32:dd:f7:71:6b:e8:3d:95: df:e3:89:72:59:de:80:c7:21:38:bf:1c:ca:c5:1a: 65:90:35:b7:9e:dc:27:36:79:ae:7a:2f:14:28:85: b6:23:61:05:cd:e2:9f:55:db:73:28:aa:40:49:3a: 66:2e:29:c1:b6:54:94:99:96:df:62:8e:f1:1b:91: 40:b4:a9:24:51:cd:73:63:d5:6c:59:09:bf:9c:25: 83:c1:40:77:42:84:f3:d2:aa:ad:41:9d:51:c3:ab: 61:36:4a:09:4a:11:4c:50:d5:9d:7f:52:04:40:d7: 34:a5:ee:47:1c:4d:f8:c7:89:95:cc:19:52:09:90: 89:8b:c5:40:9d:19:87:d3:5e:eb:cd:e5:e9:9b:3c: db:41:8e:1c:4b:d7:6b:f1:7c:d4:73:01:b3:2e:c7: 46:3d:05:23:46:00:13:70:d6:e4:a2:51:53:22:aa: f2:7b:c0:ea:f7:24:b9:1c:3e:da:f7:83:1f:1f:de: 15:51:6e:51:dd:32:d3:8f:f0:e5:52:99:43:9c:df: 2c:16:41:66:21:6e:44:08:10:21:61:36:c5:b8:c2: ba:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:2F:2C:DC:14:59:2A:88:C1:26:08:36:0D:03:09:8B:B0:0A:C1:4D X509v3 Authority Key Identifier: keyid:28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:27:b2:5b:49:00:cd:78:72:c2:7e:0a:56:24:bd:95:b1:13: eb:72:11:d8:c7:e8:7d:5c:33:ae:20:38:6b:d4:3a:25:d5:6a: b5:52:55:ee:07:b0:7e:e4:b5:c3:86:87:72:78:6c:d9:78:c6: 9e:a8:d6:c8:61:50:c3:a8:06:b2:62:52:a3:81:42:15:45:89: 2f:21:6c:60:26:e5:55:b0:af:e9:4b:bf:97:68:88:b7:7a:a6: 05:30:dd:fa:08:b4:9a:3c:26:be:43:e0:67:f8:fc:5d:67:32: c4:e9:37:c8:d6:92:75:2b:6e:e3:93:21:74:36:3c:e0:36:ee: 4d:34:b3:dc:c1:9b:bf:85:96:fe:63:dd:46:d3:99:15:ac:21: b1:47:54:72:df:70:a0:38:d7:0a:2b:9e:ea:b6:d5:fc:87:0f: 12:1f:2e:bd:18:13:46:37:d1:c3:30:65:8d:7c:56:16:8c:3d: 94:f8:1a:c6:f0:71:87:f1:2d:ab:bb:11:db:0c:53:67:9a:ab: 79:5e:87:72:0b:39:8b:64:03:eb:b8:ff:47:73:4d:c9:5f:1d: db:55:14:27:ea:36:61:1a:4d:38:00:88:99:d1:32:a5:d2:53: d7:57:67:3a:9d:cd:43:01:98:e1:80:4e:77:46:a2:58:45:ba: 58:58:08:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fsyA14JC10EMIP6dbn8hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ZjhlZGUyMGI3OGY5OTU5OTNkYTk4ZjQzNGE5NjYwNzRk NTYyYzIwHhcNMjUxMjIwMTYwMTQxWhcNMjUxMjIxMTYwMTQxWjAzMTEwLwYDVQQD EyhjMjJmMmNkYzE0NTkyYTg4YzEyNjA4MzYwZDAzMDk4YmIwMGFjMTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRDgzEOKzGnI/L2BEEy5aDV3D/Rn h1V/CfibC9CGDL96zzljMt33cWvoPZXf44lyWd6AxyE4vxzKxRplkDW3ntwnNnmu ei8UKIW2I2EFzeKfVdtzKKpASTpmLinBtlSUmZbfYo7xG5FAtKkkUc1zY9VsWQm/ nCWDwUB3QoTz0qqtQZ1Rw6thNkoJShFMUNWdf1IEQNc0pe5HHE34x4mVzBlSCZCJ i8VAnRmH017rzeXpmzzbQY4cS9dr8XzUcwGzLsdGPQUjRgATcNbkolFTIqrye8Dq 9yS5HD7a94MfH94VUW5R3TLTj/DlUplDnN8sFkFmIW5ECBAhYTbFuMK6uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMIvLNwUWSqIwSYINg0DCYuwCsFNMB8GA1UdIwQY MBaAFCj47eILePmVmT2pj0NKlmB01WLCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1BqdDRndDQtWldaUGFtUFEwcVdZSFRWWXNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jZmNmZmEtNjAyOS00MmRkLTllZjgt OWQzYTBmMjNjYmU3LzEvS1BqdDRndDQtWldaUGFtUFEwcVdZSFRWWXNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9jZmNmZmEtNjAyOS00MmRkLTllZjgtOWQzYTBmMjNjYmU3 LzEvS1BqdDRndDQtWldaUGFtUFEwcVdZSFRWWXNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJSeyW0kA zXhywn4KViS9lbET63IR2MfofVwzriA4a9Q6JdVqtVJV7gewfuS1w4aHcnhs2XjG nqjWyGFQw6gGsmJSo4FCFUWJLyFsYCblVbCv6Uu/l2iIt3qmBTDd+gi0mjwmvkPg Z/j8XWcyxOk3yNaSdStu45MhdDY84DbuTTSz3MGbv4WW/mPdRtOZFawhsUdUct9w oDjXCiue6rbV/IcPEh8uvRgTRjfRwzBljXxWFow9lPgaxvBxh/Etq7sR2wxTZ5qr eV6Hcgs5i2QD67j/R3NNyV8d21UUJ+o2YRpNOACImdEypdJT11dnOp3NQwGY4YBO d0aiWEW6WFgIaA== -----END CERTIFICATE-----Generated at Sun Dec 21 00:54:14 2025 by rpki-client