This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft File: KsPteUra-5HLgalp64qbKQX-4uw.mft (raw, json) Hash identifier: Cc50k443+GwXUFpOnTcvqdpMbvu+M4riH0K3TbYRXhI= Subject key identifier: 04:08:16:07:05:43:BC:2F:65:1E:36:51:F8:B7:1A:E9:33:F2:BB:75 Authority key identifier: 2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC Certificate issuer: /CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec Certificate serial: 019B5D89B057AFA26ED4CDD591F5905DB1CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft Manifest number: 179B Signing time: Sat 27 Dec 2025 02:01:03 +0000 Manifest this update: Sat 27 Dec 2025 02:01:03 +0000 Manifest next update: Sun 28 Dec 2025 02:01:03 +0000 Files and hashes: 1: KsPteUra-5HLgalp64qbKQX-4uw.crl (hash: 3ZfLj/Vx4aKFCSXtA24C3ZSyDhiEXSUWsKT28hdlwAg=) 2: PKyx0DcFoAagRLDeVRH7IggDBvs.roa (hash: pNDjxNhK4qz1Wc21dlphpRgyPK79NSu66uAh/Cd4/LQ=) 3: zxynKoaXLk9CSCbEuR1SMnhOszM.roa (hash: 0C0maO3P6rLabRCNi4Fq6yr5sjK9+mFynQgMmbGpRUM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:89:b0:57:af:a2:6e:d4:cd:d5:91:f5:90:5d:b1:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec Validity Not Before: Dec 27 02:01:03 2025 GMT Not After : Dec 28 02:01:03 2025 GMT Subject: CN=040816070543bc2f651e3651f8b71ae933f2bb75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a2:64:c1:b7:1a:56:0d:a3:27:13:c9:89:d7: 76:32:c9:0b:9f:c3:7b:dc:a0:02:c2:cf:9b:47:cc: ea:6c:fd:3d:21:37:54:22:b1:fc:c5:ea:b9:4c:ef: c1:2c:08:f8:f6:29:02:c3:1b:4b:70:09:85:c8:fa: 35:12:fd:85:db:19:33:c9:e4:65:a0:98:ec:76:b7: 99:99:39:7a:95:bf:61:08:76:17:0b:cb:aa:ac:1a: 36:d0:64:cd:c2:63:20:ac:f2:ef:87:e6:84:d8:22: ff:57:58:cc:eb:21:0e:31:6a:8d:1a:70:8d:a1:1f: f2:b7:c6:97:a6:b2:ac:c9:d6:ea:d7:da:62:54:06: 11:26:e5:24:e7:ad:ec:8c:3b:ce:37:26:cb:85:fa: a7:87:de:b7:34:76:e8:f4:5a:f3:99:43:82:0e:a0: c2:2e:2c:7a:af:82:64:2b:24:fa:ce:4c:94:35:80: 52:08:c2:a7:d3:a1:c2:db:6e:ec:14:b8:1c:2a:f5: d9:19:a4:08:98:f8:5f:a9:64:2a:a8:2d:d8:5b:af: 0b:5a:79:3f:24:2e:a6:d9:22:ad:29:32:56:3d:a5: 6d:4c:9c:9b:29:fe:64:59:fb:66:b7:e7:f0:cd:18: 1f:7d:e0:90:4a:97:c3:b3:13:46:9d:b4:91:3b:ce: 35:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:08:16:07:05:43:BC:2F:65:1E:36:51:F8:B7:1A:E9:33:F2:BB:75 X509v3 Authority Key Identifier: keyid:2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:2b:b6:7a:f4:f1:c0:98:61:4b:1b:da:9b:20:b9:d5:b1:73: f5:31:81:84:58:ed:c8:eb:22:d4:02:3e:b7:35:09:5a:54:46: 22:b7:b7:89:8e:71:05:94:98:3e:0d:f9:75:35:6b:7a:e2:a9: 3f:a0:df:f1:37:fd:33:68:67:28:42:e6:5e:1f:4f:7d:14:46: 65:9e:90:55:f9:d0:3e:31:99:28:26:40:9d:34:3b:b2:48:78: 3c:5e:d6:23:18:30:6c:99:ee:6d:3c:ca:fa:97:cb:2a:da:86: 7f:1b:04:f6:b6:8c:6f:e0:f1:03:29:fd:30:1a:c6:eb:7b:d2: 25:c6:99:68:f1:1d:c3:fc:dc:02:73:4e:81:ce:f5:27:b4:89: 62:67:2b:d0:3a:9f:9f:4d:7b:62:b2:6a:33:de:d0:b5:a7:f9: 3e:d1:bb:58:fe:da:69:d9:ff:f2:ac:53:3c:4b:75:2b:ee:2c: a8:2e:5e:1b:77:9c:87:1d:f0:75:14:1d:53:01:f8:94:1c:75: 1d:0b:06:27:24:b3:13:86:c8:4b:6f:31:a2:cc:06:2d:c1:f2: 53:95:44:86:c7:a9:53:8e:2f:ce:e8:a5:83:3e:20:59:30:2f: 01:02:23:8f:15:d5:c3:b7:97:59:ce:42:5e:60:37:ed:6d:7c: 16:74:25:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdibBXr6Ju1M3VkfWQXbHOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzNlZDc5NGFkYWZiOTFjYjgxYTk2OWViOGE5YjI5MDVm ZWUyZWMwHhcNMjUxMjI3MDIwMTAzWhcNMjUxMjI4MDIwMTAzWjAzMTEwLwYDVQQD EygwNDA4MTYwNzA1NDNiYzJmNjUxZTM2NTFmOGI3MWFlOTMzZjJiYjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6JkwbcaVg2jJxPJidd2MskLn8N7 3KACws+bR8zqbP09ITdUIrH8xeq5TO/BLAj49ikCwxtLcAmFyPo1Ev2F2xkzyeRl oJjsdreZmTl6lb9hCHYXC8uqrBo20GTNwmMgrPLvh+aE2CL/V1jM6yEOMWqNGnCN oR/yt8aXprKsydbq19piVAYRJuUk563sjDvONybLhfqnh963NHbo9FrzmUOCDqDC Lix6r4JkKyT6zkyUNYBSCMKn06HC227sFLgcKvXZGaQImPhfqWQqqC3YW68LWnk/ JC6m2SKtKTJWPaVtTJybKf5kWftmt+fwzRgffeCQSpfDsxNGnbSRO8416QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQIFgcFQ7wvZR42Ufi3Gukz8rt1MB8GA1UdIwQY MBaAFCrD7XlK2vuRy4GpaeuKmykF/uLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NQdGVVcmEtNUhMZ2FscDY0cWJLUVgtNHV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi83YjEyN2ItNDRjZS00Y2FkLWFkOGYt MDg5YzFjM2Q0MzU3LzEvS3NQdGVVcmEtNUhMZ2FscDY0cWJLUVgtNHV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi83YjEyN2ItNDRjZS00Y2FkLWFkOGYtMDg5YzFjM2Q0MzU3 LzEvS3NQdGVVcmEtNUhMZ2FscDY0cWJLUVgtNHV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGyu2evTx wJhhSxvamyC51bFz9TGBhFjtyOsi1AI+tzUJWlRGIre3iY5xBZSYPg35dTVreuKp P6Df8Tf9M2hnKELmXh9PfRRGZZ6QVfnQPjGZKCZAnTQ7skh4PF7WIxgwbJnubTzK +pfLKtqGfxsE9raMb+DxAyn9MBrG63vSJcaZaPEdw/zcAnNOgc71J7SJYmcr0Dqf n017YrJqM97Qtaf5PtG7WP7aadn/8qxTPEt1K+4sqC5eG3echx3wdRQdUwH4lBx1 HQsGJySzE4bIS28xoswGLcHyU5VEhsepU44vzuilgz4gWTAvAQIjjxXVw7eXWc5C XmA37W18FnQlmg== -----END CERTIFICATE-----Generated at Sat Dec 27 06:16:16 2025 by rpki-client