This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft File: KUoc22jxVM-VQYowjILY2lB3UQk.mft (raw, json) Hash identifier: +eemg9OmWmuXv7p9fk3hvUEjQYtOhO0lx8gzwj17jeE= Subject key identifier: C9:8A:7C:9D:97:5F:39:B0:68:65:39:18:46:C0:31:0E:4F:DC:71:65 Authority key identifier: 29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09 Certificate issuer: /CN=294a1cdb68f154cf95418a308c82d8da50775109 Certificate serial: 019B35D6FD3B8385DAF4FDB0C6F978A90F90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft Manifest number: 141A Signing time: Fri 19 Dec 2025 09:00:40 +0000 Manifest this update: Fri 19 Dec 2025 09:00:40 +0000 Manifest next update: Sat 20 Dec 2025 09:00:40 +0000 Files and hashes: 1: KUoc22jxVM-VQYowjILY2lB3UQk.crl (hash: vPapmOzDVU+IGUptbNhMBqlT3yhIvJd0pmbhOWh/NxA=) 2: KZGod_BqVRdmwfNvBiSAHniE4gQ.roa (hash: 6XoOJiv494XxgxSZpKNQsumj729QUswWc6xs9n2QuB0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d6:fd:3b:83:85:da:f4:fd:b0:c6:f9:78:a9:0f:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=294a1cdb68f154cf95418a308c82d8da50775109 Validity Not Before: Dec 19 09:00:40 2025 GMT Not After : Dec 20 09:00:40 2025 GMT Subject: CN=c98a7c9d975f39b06865391846c0310e4fdc7165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7e:7d:ea:83:f5:0d:56:22:c5:78:ee:fa:87: 52:fc:ce:cb:cc:46:55:f2:a0:7c:70:8f:c3:a1:ec: 09:a6:15:78:25:fe:10:4e:40:64:bb:a2:83:15:cb: de:d5:9f:ae:3a:13:43:e8:a9:9b:80:12:a0:6b:a0: ff:f2:fb:bd:b6:9e:08:67:7e:cc:5f:5a:ee:9f:60: 93:bd:f6:03:9d:bd:f3:6e:30:19:fa:42:70:64:a2: c9:86:5d:0e:5f:1f:1d:cb:38:66:3c:86:8b:3f:29: 4b:e5:27:01:1d:8b:a1:5e:bf:8e:15:6c:05:81:9f: 2f:fa:69:70:ab:d8:cb:01:d5:ba:0d:64:13:bc:b6: 9b:7e:d1:59:35:82:03:55:c5:b6:35:ba:2a:b2:0c: 01:59:db:cd:d0:33:af:3e:80:e7:29:8e:48:b2:9b: b2:2a:bf:3e:f3:7a:8b:ad:fb:0f:df:a6:be:03:c2: 29:81:7a:3a:3b:bf:c8:af:1e:80:e6:2a:ee:e3:c6: 3b:50:40:aa:99:84:ca:30:7f:be:b9:84:aa:a8:0e: cf:e0:69:7d:45:ad:f6:39:e0:ee:80:58:79:b8:4a: 3c:5f:d4:5f:ca:4e:69:9e:c8:7c:6c:d4:2f:84:6a: 4b:85:65:96:a9:b3:0d:b6:01:33:b6:77:fa:88:f1: c9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:8A:7C:9D:97:5F:39:B0:68:65:39:18:46:C0:31:0E:4F:DC:71:65 X509v3 Authority Key Identifier: keyid:29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:a0:d3:4d:69:49:08:5a:bd:63:70:a6:9f:63:bb:04:dd:22: 1f:f3:25:55:43:c6:8c:42:86:bd:c4:65:30:87:62:aa:e2:e4: a2:b6:88:9b:9b:35:06:62:2f:16:bd:89:23:55:53:dc:1d:af: 87:64:4c:b5:27:fb:09:b3:36:74:b4:db:65:ca:e2:56:7c:24: be:9d:e4:95:13:41:83:50:7a:28:ea:4a:d6:9a:b7:5e:6e:7f: 23:e1:99:f0:5e:f1:26:7a:93:47:19:64:d5:5c:73:ac:b1:fd: cb:f1:78:c0:bc:84:58:e8:69:e6:27:c9:7c:45:8f:5f:e7:57: c8:73:a8:c5:ff:dc:4f:4f:28:fb:b8:24:6d:35:12:7a:97:c9: a1:53:9c:55:ab:b0:6a:7f:df:1e:d7:82:bc:20:f6:ed:b8:29: 9d:7a:61:df:de:9d:ae:db:55:77:7f:c5:10:b9:13:d9:87:67: 8b:d3:bf:27:e7:24:36:d8:c9:7d:5a:b6:51:6d:a3:e1:3e:6c: 62:ff:99:c0:20:f5:a5:77:e2:0a:ca:fa:80:95:58:18:90:ab: e9:ae:e9:30:55:9e:63:a6:77:cf:0e:37:2b:00:20:f1:7e:91: 6c:1c:81:c8:49:84:ad:5a:b2:c7:49:ba:e0:d4:35:19:eb:74: f4:4d:21:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs11v07g4Xa9P2wxvl4qQ+QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NGExY2RiNjhmMTU0Y2Y5NTQxOGEzMDhjODJkOGRhNTA3 NzUxMDkwHhcNMjUxMjE5MDkwMDQwWhcNMjUxMjIwMDkwMDQwWjAzMTEwLwYDVQQD EyhjOThhN2M5ZDk3NWYzOWIwNjg2NTM5MTg0NmMwMzEwZTRmZGM3MTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmn596oP1DVYixXju+odS/M7LzEZV 8qB8cI/DoewJphV4Jf4QTkBku6KDFcve1Z+uOhND6KmbgBKga6D/8vu9tp4IZ37M X1run2CTvfYDnb3zbjAZ+kJwZKLJhl0OXx8dyzhmPIaLPylL5ScBHYuhXr+OFWwF gZ8v+mlwq9jLAdW6DWQTvLabftFZNYIDVcW2NboqsgwBWdvN0DOvPoDnKY5Ispuy Kr8+83qLrfsP36a+A8IpgXo6O7/Irx6A5iru48Y7UECqmYTKMH++uYSqqA7P4Gl9 Ra32OeDugFh5uEo8X9Rfyk5pnsh8bNQvhGpLhWWWqbMNtgEztnf6iPHJDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMmKfJ2XXzmwaGU5GEbAMQ5P3HFlMB8GA1UdIwQY MBaAFClKHNto8VTPlUGKMIyC2NpQd1EJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1VvYzIyanhWTS1WUVlvd2pJTFkybEIzVVFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8wNGY0NzQtZTNiNS00NTk1LWEwNDQt NjU3ZTQxYzYzY2E5LzEvS1VvYzIyanhWTS1WUVlvd2pJTFkybEIzVVFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS8wNGY0NzQtZTNiNS00NTk1LWEwNDQtNjU3ZTQxYzYzY2E5 LzEvS1VvYzIyanhWTS1WUVlvd2pJTFkybEIzVVFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZaDTTWlJ CFq9Y3Cmn2O7BN0iH/MlVUPGjEKGvcRlMIdiquLkoraIm5s1BmIvFr2JI1VT3B2v h2RMtSf7CbM2dLTbZcriVnwkvp3klRNBg1B6KOpK1pq3Xm5/I+GZ8F7xJnqTRxlk 1VxzrLH9y/F4wLyEWOhp5ifJfEWPX+dXyHOoxf/cT08o+7gkbTUSepfJoVOcVauw an/fHteCvCD27bgpnXph396drttVd3/FELkT2Ydni9O/J+ckNtjJfVq2UW2j4T5s Yv+ZwCD1pXfiCsr6gJVYGJCr6a7pMFWeY6Z3zw43KwAg8X6RbByByEmErVqyx0m6 4NQ1Get09E0hww== -----END CERTIFICATE-----Generated at Fri Dec 19 10:23:05 2025 by rpki-client