This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft File: kpt6l07Tg6w46Pwkh5IjLuracio.mft (raw, json) Hash identifier: ed6+0r2IApfB3TMb0ywnnFuiHLOrEYJr9ez7dmw5lNM= Subject key identifier: E2:18:AC:38:E0:50:27:B6:5B:49:86:29:34:25:8E:6E:2B:19:F3:00 Authority key identifier: 92:9B:7A:97:4E:D3:83:AC:38:E8:FC:24:87:92:23:2E:EA:DA:72:2A Certificate issuer: /CN=929b7a974ed383ac38e8fc248792232eeada722a Certificate serial: 019B6D6A7AED07E7473A8CF9E7F04ACE103E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpt6l07Tg6w46Pwkh5IjLuracio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft Manifest number: 179C Signing time: Tue 30 Dec 2025 04:00:53 +0000 Manifest this update: Tue 30 Dec 2025 04:00:53 +0000 Manifest next update: Wed 31 Dec 2025 04:00:53 +0000 Files and hashes: 1: kpt6l07Tg6w46Pwkh5IjLuracio.crl (hash: mpjbjY/2p5UNivDnoCF1hNjM4FFsTlQE/RdeiNVmsMA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.crl rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft rsync://rpki.ripe.net/repository/DEFAULT/kpt6l07Tg6w46Pwkh5IjLuracio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:6a:7a:ed:07:e7:47:3a:8c:f9:e7:f0:4a:ce:10:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=929b7a974ed383ac38e8fc248792232eeada722a Validity Not Before: Dec 30 04:00:53 2025 GMT Not After : Dec 31 04:00:53 2025 GMT Subject: CN=e218ac38e05027b65b49862934258e6e2b19f300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5f:be:60:e2:12:38:c8:1f:14:0b:f1:88:2d: 9f:76:e4:1d:1a:85:af:85:57:b7:6e:13:6d:79:2e: f2:23:eb:a4:71:fc:de:91:25:3b:ed:0a:0f:87:4a: 45:08:3d:0a:89:10:b8:84:02:e6:da:b2:e1:29:ac: a9:2e:51:ac:75:a7:ea:25:63:bb:81:80:f6:d9:2c: d5:52:db:d1:04:9b:23:cb:87:fc:81:ef:e5:c8:b6: 7f:5e:97:aa:d5:c8:bb:04:1d:15:6e:f6:d3:5d:b7: 9a:3a:2e:4c:f9:99:06:9a:72:29:c4:af:96:63:42: 26:19:aa:47:f8:55:6b:d6:2f:70:25:aa:74:29:8c: 1f:f9:5a:2c:dd:1b:66:96:94:8c:51:5c:eb:10:9d: ac:ec:0d:2c:09:08:c0:23:3e:8d:66:d7:dd:a8:f3: 57:ab:77:7d:90:77:df:9a:64:c9:dc:0e:1c:9b:5a: 66:26:91:57:48:9d:78:8d:b2:5a:32:3a:de:6d:d5: 5c:a4:83:37:20:22:8e:fb:f1:9e:55:dd:47:10:12: 12:a6:41:43:78:3d:28:dd:3d:a4:b6:a3:e2:ce:cc: 07:de:bc:37:88:0c:da:1f:5a:17:a6:b3:fa:f4:77: 81:61:b9:2d:72:6b:80:13:8e:04:4f:8d:8c:2a:15: 60:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:18:AC:38:E0:50:27:B6:5B:49:86:29:34:25:8E:6E:2B:19:F3:00 X509v3 Authority Key Identifier: keyid:92:9B:7A:97:4E:D3:83:AC:38:E8:FC:24:87:92:23:2E:EA:DA:72:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpt6l07Tg6w46Pwkh5IjLuracio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:f7:b0:e1:4f:76:e8:e1:1c:33:6e:89:5b:03:d5:4d:81:74: f8:11:89:d9:b4:af:52:62:31:3a:e6:d4:b4:07:d1:12:fb:6d: 6c:10:4d:8c:29:b8:55:a4:1c:fd:cb:59:7f:3a:3f:9b:01:02: 92:52:96:55:d1:a8:c6:46:42:2e:2e:ee:3d:d4:4f:d6:7f:ec: b1:54:3b:3b:69:b6:1d:e6:90:b0:17:40:13:a1:7e:3e:fb:57: c8:67:ac:ea:75:a8:c5:b6:99:da:c5:83:9c:19:ad:80:3a:99: b4:3f:1c:99:8e:ba:a6:e6:4b:bc:8c:e0:bf:bd:f8:73:9c:8b: eb:ed:c0:87:b7:96:8a:4c:0a:34:bf:27:ea:90:97:6a:04:eb: a5:7f:54:43:ee:94:68:ef:58:12:ea:33:b9:7f:ab:c6:e1:5a: bd:e7:26:80:31:ac:1a:c3:02:b3:92:89:20:b9:a1:46:be:ef: bd:ca:fb:53:30:25:5a:d9:ed:8b:51:4e:42:f5:54:d1:78:26: 7b:d4:29:b1:6a:98:34:94:84:b7:ec:39:dd:4c:0f:6b:7e:4f: 43:7c:64:9c:8d:9a:80:3f:a3:2e:a7:e7:6f:80:d3:a1:9f:1b: be:60:d1:36:33:ca:46:a3:82:73:bb:eb:4c:91:81:36:65:ad: d8:ec:0e:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttanrtB+dHOoz55/BKzhA+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyOWI3YTk3NGVkMzgzYWMzOGU4ZmMyNDg3OTIyMzJlZWFk YTcyMmEwHhcNMjUxMjMwMDQwMDUzWhcNMjUxMjMxMDQwMDUzWjAzMTEwLwYDVQQD EyhlMjE4YWMzOGUwNTAyN2I2NWI0OTg2MjkzNDI1OGU2ZTJiMTlmMzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuF++YOISOMgfFAvxiC2fduQdGoWv hVe3bhNteS7yI+ukcfzekSU77QoPh0pFCD0KiRC4hALm2rLhKaypLlGsdafqJWO7 gYD22SzVUtvRBJsjy4f8ge/lyLZ/Xpeq1ci7BB0VbvbTXbeaOi5M+ZkGmnIpxK+W Y0ImGapH+FVr1i9wJap0KYwf+Vos3RtmlpSMUVzrEJ2s7A0sCQjAIz6NZtfdqPNX q3d9kHffmmTJ3A4cm1pmJpFXSJ14jbJaMjrebdVcpIM3ICKO+/GeVd1HEBISpkFD eD0o3T2ktqPizswH3rw3iAzaH1oXprP69HeBYbktcmuAE44ET42MKhVgzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOIYrDjgUCe2W0mGKTQljm4rGfMAMB8GA1UdIwQY MBaAFJKbepdO04OsOOj8JIeSIy7q2nIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3B0NmwwN1RnNnc0NlB3a2g1SWpMdXJhY2lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC83ODc1ZGUtOWFlMi00NzYwLTlmNTAt ZDZhYzc3YjQ2NjY5LzEva3B0NmwwN1RnNnc0NlB3a2g1SWpMdXJhY2lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC83ODc1ZGUtOWFlMi00NzYwLTlmNTAtZDZhYzc3YjQ2NjY5 LzEva3B0NmwwN1RnNnc0NlB3a2g1SWpMdXJhY2lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL/ew4U92 6OEcM26JWwPVTYF0+BGJ2bSvUmIxOubUtAfREvttbBBNjCm4VaQc/ctZfzo/mwEC klKWVdGoxkZCLi7uPdRP1n/ssVQ7O2m2HeaQsBdAE6F+PvtXyGes6nWoxbaZ2sWD nBmtgDqZtD8cmY66puZLvIzgv734c5yL6+3Ah7eWikwKNL8n6pCXagTrpX9UQ+6U aO9YEuozuX+rxuFavecmgDGsGsMCs5KJILmhRr7vvcr7UzAlWtnti1FOQvVU0Xgm e9QpsWqYNJSEt+w53UwPa35PQ3xknI2agD+jLqfnb4DToZ8bvmDRNjPKRqOCc7vr TJGBNmWt2OwOuw== -----END CERTIFICATE-----Generated at Tue Dec 30 08:52:42 2025 by rpki-client