This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft File: KsPteUra-5HLgalp64qbKQX-4uw.mft (raw, json) Hash identifier: Hc1Atj2iZ7kpovJlNl3+aIEZM/rMc8IEj8LON+NbH3o= Subject key identifier: 59:24:09:89:A8:D2:13:38:92:E2:12:17:9D:41:36:45:01:84:B4:7F Authority key identifier: 2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC Certificate issuer: /CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec Certificate serial: 019B3CB53C4642BA3873F365C73BF0E5CF3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 17:01:08 +0000 Manifest this update: Sat 20 Dec 2025 17:01:08 +0000 Manifest next update: Sun 21 Dec 2025 17:01:08 +0000 Files and hashes: 1: KsPteUra-5HLgalp64qbKQX-4uw.crl (hash: TJPPtd+PCkwUgScBNUzdeTnTfH0UORZ0MtiWu0baJcw=) 2: PKyx0DcFoAagRLDeVRH7IggDBvs.roa (hash: pNDjxNhK4qz1Wc21dlphpRgyPK79NSu66uAh/Cd4/LQ=) 3: zxynKoaXLk9CSCbEuR1SMnhOszM.roa (hash: 0C0maO3P6rLabRCNi4Fq6yr5sjK9+mFynQgMmbGpRUM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:3c:46:42:ba:38:73:f3:65:c7:3b:f0:e5:cf:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec Validity Not Before: Dec 20 17:01:08 2025 GMT Not After : Dec 21 17:01:08 2025 GMT Subject: CN=59240989a8d2133892e212179d4136450184b47f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9c:1e:28:40:fc:84:79:b4:16:48:cb:a8:a3: bd:eb:26:d3:0e:29:b1:d8:4d:37:a0:37:a5:7b:ac: 50:e7:97:c9:f2:b0:bc:43:3e:10:27:e9:ab:d7:bb: 91:f7:40:5c:a8:cc:70:7f:13:58:03:95:50:c0:ee: 36:d6:20:19:93:a3:e6:17:63:de:a0:58:e1:91:7e: a7:54:a5:f9:cd:80:29:7b:cc:96:0a:9d:2c:d2:34: 77:df:64:40:77:28:0a:5e:a4:82:89:8c:0a:4e:4f: f4:31:61:84:10:7b:12:c5:29:a2:fe:d3:1b:b0:8d: 34:cb:58:c9:b1:0a:78:97:c5:d3:2f:fe:31:ee:c4: 5a:1f:9e:59:85:ab:d5:21:95:bf:7f:c1:05:dc:fc: 66:17:c4:a2:12:60:51:00:62:15:8f:fa:d9:f0:48: 45:3c:9a:f2:f0:f0:3d:21:c5:bc:06:0d:8a:c4:15: 79:2b:52:44:d8:12:52:ef:b4:c1:79:95:18:b5:bf: be:a2:84:b4:2a:a1:79:7a:25:57:78:ff:3c:12:5a: 7a:1e:9b:70:d0:fd:0a:de:6b:da:5a:1f:54:90:81: 77:56:8c:55:ca:9b:e2:3e:26:c3:2f:88:37:e6:99: 87:a4:ba:6c:b0:f2:7f:7a:30:f6:4e:80:e3:ac:30: 5c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:24:09:89:A8:D2:13:38:92:E2:12:17:9D:41:36:45:01:84:B4:7F X509v3 Authority Key Identifier: keyid:2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:fc:dc:f1:89:d5:18:7a:c3:ab:3d:0c:16:df:bb:fe:e6:12: ea:be:a1:95:42:92:63:e6:b8:62:f0:6e:6a:59:52:68:b9:8a: 18:5b:15:90:a6:fd:ac:70:f8:38:2d:c1:3c:8c:54:e6:10:b0: fc:d1:c0:aa:7a:91:ba:e0:07:68:bd:be:d6:1e:5d:15:93:14: 09:fc:8a:8f:18:64:da:00:d5:62:8d:21:70:8e:3e:cb:42:d5: 2d:60:f3:c7:ba:8d:31:e3:73:ab:42:1b:ae:6f:ae:69:32:d3: c5:72:70:ac:fa:a4:c7:eb:80:25:16:86:c4:08:1c:74:49:f7: 6e:46:bb:c3:90:bb:86:10:e1:23:63:f8:8f:5c:fd:c2:80:6d: d3:0a:1e:9a:e4:57:ef:20:bd:a6:6c:21:8b:a3:b5:7e:bf:5a: f9:75:49:9d:95:77:6a:7e:8e:eb:7f:80:84:24:5a:9f:79:53: df:b5:f2:c5:32:0e:ef:8a:65:91:fc:6f:86:38:b7:78:4c:e4: dc:9b:36:0b:45:8b:15:86:e0:0f:3f:73:da:e2:2e:67:24:2e: 50:ca:d1:ce:a7:96:e6:52:96:38:3e:72:67:68:5c:41:1d:16: cb:cd:c7:f7:2f:d9:dd:e8:b9:c8:6f:6f:4e:d7:8d:8a:d2:dd: d2:47:f5:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tTxGQro4c/Nlxzvw5c8+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzNlZDc5NGFkYWZiOTFjYjgxYTk2OWViOGE5YjI5MDVm ZWUyZWMwHhcNMjUxMjIwMTcwMTA4WhcNMjUxMjIxMTcwMTA4WjAzMTEwLwYDVQQD Eyg1OTI0MDk4OWE4ZDIxMzM4OTJlMjEyMTc5ZDQxMzY0NTAxODRiNDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZweKED8hHm0FkjLqKO96ybTDimx 2E03oDele6xQ55fJ8rC8Qz4QJ+mr17uR90BcqMxwfxNYA5VQwO421iAZk6PmF2Pe oFjhkX6nVKX5zYApe8yWCp0s0jR332RAdygKXqSCiYwKTk/0MWGEEHsSxSmi/tMb sI00y1jJsQp4l8XTL/4x7sRaH55ZhavVIZW/f8EF3PxmF8SiEmBRAGIVj/rZ8EhF PJry8PA9IcW8Bg2KxBV5K1JE2BJS77TBeZUYtb++ooS0KqF5eiVXeP88Elp6Hptw 0P0K3mvaWh9UkIF3VoxVypviPibDL4g35pmHpLpssPJ/ejD2ToDjrDBcswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFkkCYmo0hM4kuISF51BNkUBhLR/MB8GA1UdIwQY MBaAFCrD7XlK2vuRy4GpaeuKmykF/uLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NQdGVVcmEtNUhMZ2FscDY0cWJLUVgtNHV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi83YjEyN2ItNDRjZS00Y2FkLWFkOGYt MDg5YzFjM2Q0MzU3LzEvS3NQdGVVcmEtNUhMZ2FscDY0cWJLUVgtNHV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi83YjEyN2ItNDRjZS00Y2FkLWFkOGYtMDg5YzFjM2Q0MzU3 LzEvS3NQdGVVcmEtNUhMZ2FscDY0cWJLUVgtNHV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgvzc8YnV GHrDqz0MFt+7/uYS6r6hlUKSY+a4YvBuallSaLmKGFsVkKb9rHD4OC3BPIxU5hCw /NHAqnqRuuAHaL2+1h5dFZMUCfyKjxhk2gDVYo0hcI4+y0LVLWDzx7qNMeNzq0Ib rm+uaTLTxXJwrPqkx+uAJRaGxAgcdEn3bka7w5C7hhDhI2P4j1z9woBt0woemuRX 7yC9pmwhi6O1fr9a+XVJnZV3an6O63+AhCRan3lT37XyxTIO74plkfxvhji3eEzk 3Js2C0WLFYbgDz9z2uIuZyQuUMrRzqeW5lKWOD5yZ2hcQR0Wy83H9y/Z3ei5yG9v TteNitLd0kf1pA== -----END CERTIFICATE-----Generated at Sat Dec 20 23:57:18 2025 by rpki-client