This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
File: KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft (raw, json)
Hash identifier: 5V4akLzBxnVONefwD0yrqpPnmoDjtkqBjTrPHoqTGKc=
Subject key identifier: 52:5D:05:FE:6E:E9:30:BF:B8:E5:2A:B5:F9:8D:40:D8:4F:A8:A6:91
Authority key identifier: 29:85:1F:7A:E6:10:B1:D0:06:15:00:B3:43:A4:86:8F:32:56:06:6E
Certificate issuer: /CN=29851f7ae610b1d0061500b343a4868f3256066e
Certificate serial: 019B74ED7DABF664A12ED262081EC09668A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
Manifest number: 0840
Signing time: Wed 31 Dec 2025 15:01:19 +0000
Manifest this update: Wed 31 Dec 2025 15:01:19 +0000
Manifest next update: Thu 01 Jan 2026 15:01:19 +0000
Files and hashes: 1: JCxOuTIjLujlao5I9hrb5gQegGo.roa (hash: SDv0FBjSKSZUTMpJ38YSkos63s4YQ/vsV3WiI+cz/dg=)
2: KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl (hash: 5tNChMOozDjg3hU6j8V9oSkXS8BBOUB0leBg18o2Uts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Jan 2026 15:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:74:ed:7d:ab:f6:64:a1:2e:d2:62:08:1e:c0:96:68:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29851f7ae610b1d0061500b343a4868f3256066e
Validity
Not Before: Dec 31 15:01:19 2025 GMT
Not After : Jan 1 15:01:19 2026 GMT
Subject: CN=525d05fe6ee930bfb8e52ab5f98d40d84fa8a691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:aa:07:ce:65:2e:1e:1f:75:be:41:a1:b7:72:
a1:a8:13:fa:be:07:92:a1:13:8c:9b:aa:72:e2:fa:
a0:04:82:7c:17:d8:7d:e2:94:fe:ae:20:3c:1f:ad:
18:b5:19:8a:64:b7:44:2c:ff:5c:58:37:0a:23:76:
44:a8:d7:3b:d1:3f:ef:ed:eb:f3:20:a9:79:3b:32:
d3:b5:be:ae:1a:13:87:23:8b:60:32:93:e2:22:a0:
9e:c3:06:c8:0e:20:49:f4:5e:7e:36:9c:74:20:5c:
ab:38:1e:09:38:1e:a7:8d:71:8d:c2:43:15:a0:82:
9b:c3:06:29:6c:7f:6d:44:62:04:34:20:51:35:00:
4a:fa:bb:18:d3:c0:72:99:ce:9e:ee:9e:64:43:b5:
6f:53:6d:6e:d9:1d:87:5a:e3:56:8a:71:d9:f7:26:
34:02:9f:34:f8:57:d7:2d:f3:30:c3:a4:46:6c:ef:
71:2c:66:7a:5a:91:5d:d5:f3:5d:00:77:db:f3:f6:
1e:fd:fc:36:4a:32:af:ee:0c:56:be:40:e0:4e:60:
4a:32:70:ea:fa:a8:f4:0c:b1:43:93:08:56:97:16:
3f:b3:1e:62:d6:0d:06:f6:cb:e9:7c:77:46:cd:0c:
d6:9a:db:ed:60:36:59:89:50:2a:39:45:e1:eb:4c:
d8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5D:05:FE:6E:E9:30:BF:B8:E5:2A:B5:F9:8D:40:D8:4F:A8:A6:91
X509v3 Authority Key Identifier:
keyid:29:85:1F:7A:E6:10:B1:D0:06:15:00:B3:43:A4:86:8F:32:56:06:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:c8:b1:ab:c7:31:9f:ee:15:ac:c8:74:a0:b4:6a:0f:95:e8:
46:95:fc:18:9e:f6:b5:a9:ee:c3:5c:74:29:95:08:40:e1:60:
d9:8b:70:77:de:69:2e:d9:0b:b6:9e:d1:a1:6a:e6:2b:7a:9d:
81:6c:48:80:b6:67:e6:3b:bb:d0:40:f0:4d:00:e0:35:54:fe:
91:bf:eb:93:a4:09:7f:f9:14:c9:d5:eb:27:1d:60:fb:bb:4d:
e2:dc:de:92:bc:1e:57:89:d4:ad:f4:91:09:39:09:10:c2:70:
ae:a2:02:73:6b:8b:c2:9d:67:fc:d7:fd:ec:e0:4e:2d:7d:7b:
d1:1c:ca:d4:9c:50:b6:29:89:59:5e:9e:e7:b5:19:bc:c4:fd:
ba:7e:72:a8:4e:ac:5e:93:b6:02:65:e9:6b:4a:f6:ac:be:d4:
8d:49:b8:2f:7e:c1:9b:3b:66:89:85:70:5d:56:97:e9:b2:a4:
81:9e:c2:c3:94:f4:c7:b9:27:d1:7d:91:84:25:5b:75:36:e5:
94:48:40:a2:5e:8f:a5:9a:6e:14:de:3e:cf:88:da:57:40:be:
31:42:b8:a9:4d:7c:9a:1b:78:92:59:a2:2b:c2:ba:94:bd:5b:
e6:70:f5:87:1a:e1:83:02:a0:5a:54:e6:14:eb:73:01:32:54:
c7:87:2d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 00:28:22 2026 by rpki-client