This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft File: KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft (raw, json) Hash identifier: t7bzKj3hiS8RO99aXTYG8bpeRnsrOoAWtkxjjUFPk5E= Subject key identifier: F2:97:F2:D1:30:A5:D3:7E:02:1B:44:BE:D2:E4:61:B9:E1:1C:2B:20 Authority key identifier: 2A:D2:FE:64:66:D0:70:94:A4:25:6D:A2:CC:84:70:83:C5:00:6B:1A Certificate issuer: /CN=2ad2fe6466d07094a4256da2cc847083c5006b1a Certificate serial: 019B3DC7B9687C98B2CA415652B4104C039F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft Manifest number: 1492 Signing time: Sat 20 Dec 2025 22:00:57 +0000 Manifest this update: Sat 20 Dec 2025 22:00:57 +0000 Manifest next update: Sun 21 Dec 2025 22:00:57 +0000 Files and hashes: 1: KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl (hash: 5Tt25BR6nCntbhGqE9f344hGVU7+4TJDgpHs3OMXEJ0=) 2: uSrOots_DMPy38Ek0_9yV10Tzw8.roa (hash: Ypv5LfASDsUldkz8kd27ybD8JIawSksjG/puUQcmBe4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:b9:68:7c:98:b2:ca:41:56:52:b4:10:4c:03:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ad2fe6466d07094a4256da2cc847083c5006b1a Validity Not Before: Dec 20 22:00:57 2025 GMT Not After : Dec 21 22:00:57 2025 GMT Subject: CN=f297f2d130a5d37e021b44bed2e461b9e11c2b20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d2:bb:bd:8a:f3:50:df:4c:c0:8e:a3:ed:9d: 83:20:bf:c3:00:ba:a3:93:46:06:88:1f:3b:c5:19: 5f:16:66:ed:2d:65:aa:d3:c8:ac:ac:c7:db:e2:b9: 74:11:21:e4:a7:71:a5:70:b9:a0:69:f6:2c:85:8d: 41:b0:b2:02:fd:eb:ab:4d:d5:19:61:5d:81:de:28: 42:6b:56:78:48:30:f4:32:5e:89:e1:fe:cb:1c:09: ee:08:19:d2:8b:e0:c3:d0:e8:a6:8c:d6:41:06:5a: d5:c4:1f:37:96:08:6d:fc:68:7d:ab:31:4d:e6:65: e4:ab:37:67:f1:7c:99:e8:e3:da:31:6f:5f:9f:aa: d4:c6:a2:95:ce:a0:1c:a3:1e:23:26:71:90:d5:7a: 57:22:b0:47:7a:3c:92:ce:eb:5b:c1:e5:61:56:ba: 40:7e:7a:13:b9:23:6c:72:dd:6e:b8:44:e6:26:9a: 9f:01:45:51:28:a1:48:71:e7:9c:54:53:77:7d:ae: 02:bc:0b:27:30:1b:f6:70:84:9d:76:ac:a0:c3:c2: ac:0d:91:4a:6e:57:98:31:4e:3b:a8:e0:2c:51:81: 27:e2:e7:a9:53:a8:74:d4:be:d1:33:6a:7f:7a:5f: 68:50:98:01:84:c6:b5:3a:e8:2b:d3:13:af:0c:c1: a1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:97:F2:D1:30:A5:D3:7E:02:1B:44:BE:D2:E4:61:B9:E1:1C:2B:20 X509v3 Authority Key Identifier: keyid:2A:D2:FE:64:66:D0:70:94:A4:25:6D:A2:CC:84:70:83:C5:00:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:00:59:c5:88:64:5e:d3:2f:8e:a5:bd:6b:89:bb:a9:3e:d3: 29:c5:32:24:a7:c8:b2:48:00:35:bd:56:b8:d5:2f:54:4f:70: 7e:cd:5d:db:25:50:ab:88:66:cb:dc:da:05:9e:7c:5a:aa:6d: be:6a:50:55:6f:7a:dd:cd:c2:5e:6c:3c:57:3d:57:d7:34:31: b2:79:3f:48:d8:72:ce:bb:7d:0e:70:fa:fe:63:f8:38:7b:3c: 04:1d:47:86:b2:9c:ad:6f:fd:46:4b:6e:0a:f2:56:52:96:eb: f3:0c:b8:66:38:e7:0f:94:12:22:66:e9:eb:ff:55:bb:06:cf: 15:d0:e5:1d:83:e0:91:5a:cf:27:87:06:27:cd:db:45:5a:d7: 8b:dc:61:fe:30:de:1e:32:f3:8a:4e:60:64:3c:bc:1d:59:a1: da:a8:27:d9:02:f6:7d:d8:df:07:c3:31:2b:22:1b:25:21:33: 9c:cf:be:f0:b1:cc:5e:37:18:3e:54:8c:53:f3:ef:1b:89:36: 9b:f8:67:51:94:58:3d:26:b3:82:49:95:d3:7c:c0:7f:90:50: 4e:af:99:2c:d0:a4:1a:30:15:8f:be:8e:fe:3a:2b:6a:5d:de: 7d:dc:66:19:8e:a0:90:ef:29:f1:70:69:1e:f4:1f:95:2e:b6: 83:cc:49:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x7lofJiyykFWUrQQTAOfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhZDJmZTY0NjZkMDcwOTRhNDI1NmRhMmNjODQ3MDgzYzUw MDZiMWEwHhcNMjUxMjIwMjIwMDU3WhcNMjUxMjIxMjIwMDU3WjAzMTEwLwYDVQQD EyhmMjk3ZjJkMTMwYTVkMzdlMDIxYjQ0YmVkMmU0NjFiOWUxMWMyYjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9K7vYrzUN9MwI6j7Z2DIL/DALqj k0YGiB87xRlfFmbtLWWq08isrMfb4rl0ESHkp3GlcLmgafYshY1BsLIC/eurTdUZ YV2B3ihCa1Z4SDD0Ml6J4f7LHAnuCBnSi+DD0OimjNZBBlrVxB83lght/Gh9qzFN 5mXkqzdn8XyZ6OPaMW9fn6rUxqKVzqAcox4jJnGQ1XpXIrBHejySzutbweVhVrpA fnoTuSNsct1uuETmJpqfAUVRKKFIceecVFN3fa4CvAsnMBv2cISddqygw8KsDZFK bleYMU47qOAsUYEn4uepU6h01L7RM2p/el9oUJgBhMa1Ougr0xOvDMGhYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKX8tEwpdN+AhtEvtLkYbnhHCsgMB8GA1UdIwQY MBaAFCrS/mRm0HCUpCVtosyEcIPFAGsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3RMLVpHYlFjSlNrSlcyaXpJUndnOFVBYXhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84YTMxZjMtN2FjZi00N2I0LWI5N2It ZmEzMWUyZGM2YWJiLzEvS3RMLVpHYlFjSlNrSlcyaXpJUndnOFVBYXhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC84YTMxZjMtN2FjZi00N2I0LWI5N2ItZmEzMWUyZGM2YWJi LzEvS3RMLVpHYlFjSlNrSlcyaXpJUndnOFVBYXhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjgBZxYhk XtMvjqW9a4m7qT7TKcUyJKfIskgANb1WuNUvVE9wfs1d2yVQq4hmy9zaBZ58Wqpt vmpQVW963c3CXmw8Vz1X1zQxsnk/SNhyzrt9DnD6/mP4OHs8BB1HhrKcrW/9Rktu CvJWUpbr8wy4ZjjnD5QSImbp6/9VuwbPFdDlHYPgkVrPJ4cGJ83bRVrXi9xh/jDe HjLzik5gZDy8HVmh2qgn2QL2fdjfB8MxKyIbJSEznM++8LHMXjcYPlSMU/PvG4k2 m/hnUZRYPSazgkmV03zAf5BQTq+ZLNCkGjAVj76O/joral3efdxmGY6gkO8p8XBp HvQflS62g8xJmA== -----END CERTIFICATE-----Generated at Sun Dec 21 04:57:58 2025 by rpki-client