This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft File: Kt_vhCTbu4eonZOJhODis-2aq4s.mft (raw, json) Hash identifier: EcQkK3TUh1n7VUnjUCRsRNg6v2MB3MWSM12qXQcb6L8= Subject key identifier: D3:BF:1B:38:DA:CE:57:A3:42:2E:02:08:40:BC:AD:F2:5A:A4:A5:A6 Authority key identifier: 2A:DF:EF:84:24:DB:BB:87:A8:9D:93:89:84:E0:E2:B3:ED:9A:AB:8B Certificate issuer: /CN=2adfef8424dbbb87a89d938984e0e2b3ed9aab8b Certificate serial: 019B631DCA672D9E7751D97D95E4D646E07C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kt_vhCTbu4eonZOJhODis-2aq4s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft Manifest number: 0780 Signing time: Sun 28 Dec 2025 04:00:55 +0000 Manifest this update: Sun 28 Dec 2025 04:00:55 +0000 Manifest next update: Mon 29 Dec 2025 04:00:55 +0000 Files and hashes: 1: Kt_vhCTbu4eonZOJhODis-2aq4s.crl (hash: L0DTUMxpBjpAKdo3CRMPyBcTR1oW0eU4BMlo/tofva8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft rsync://rpki.ripe.net/repository/DEFAULT/Kt_vhCTbu4eonZOJhODis-2aq4s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1d:ca:67:2d:9e:77:51:d9:7d:95:e4:d6:46:e0:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2adfef8424dbbb87a89d938984e0e2b3ed9aab8b Validity Not Before: Dec 28 04:00:55 2025 GMT Not After : Dec 29 04:00:55 2025 GMT Subject: CN=d3bf1b38dace57a3422e020840bcadf25aa4a5a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b5:9c:fc:d1:f1:35:41:85:fc:d7:68:cb:06: 63:87:8b:a3:0c:d5:65:72:f5:dd:7e:02:5a:be:16: a6:56:0d:ab:31:b7:74:72:87:72:0c:40:9c:62:9b: b3:8b:90:3b:40:35:a2:4c:da:45:4c:64:fc:e3:8f: e5:ac:d3:49:2c:c1:03:6d:01:23:9a:9f:a8:41:55: c8:7f:99:aa:8b:42:fc:b9:c9:36:ae:7b:5d:b0:02: 8a:aa:ae:99:d6:6b:d8:08:be:fe:57:20:b8:c8:6a: 14:39:31:54:9f:e6:eb:ee:fa:01:f7:0a:5c:56:20: d8:48:7b:9e:2b:ad:f7:45:22:dd:10:16:88:71:e6: 23:c1:ea:93:3e:65:a0:cb:a7:2b:ae:c1:a6:e9:a9: fc:bf:75:a1:f0:1b:72:e8:74:6d:85:cc:ed:d0:7a: 23:52:33:de:b7:19:3b:e1:64:e6:a1:30:d7:c3:b2: 3b:8a:93:b4:1e:1d:3f:31:96:45:9f:5f:e7:38:4e: 13:b7:c7:78:2a:81:67:bf:e5:3a:07:2e:96:04:4e: ec:b3:ff:9f:71:9d:91:b6:bf:31:4f:48:fb:12:98: 9e:49:20:c6:2b:0a:71:2e:b2:50:54:14:78:42:70: c7:ef:4b:aa:70:44:65:e4:5d:0f:e1:b1:c0:19:76: dd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:BF:1B:38:DA:CE:57:A3:42:2E:02:08:40:BC:AD:F2:5A:A4:A5:A6 X509v3 Authority Key Identifier: keyid:2A:DF:EF:84:24:DB:BB:87:A8:9D:93:89:84:E0:E2:B3:ED:9A:AB:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt_vhCTbu4eonZOJhODis-2aq4s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:ac:6f:7e:cc:06:c6:ad:06:1e:23:c3:03:1b:dd:37:5e:7e: 2e:d2:f0:d3:01:0f:2c:4a:f5:ce:c0:9c:3f:28:fe:cc:f6:6b: eb:52:f3:15:65:91:65:ce:15:46:99:f2:4e:a8:6f:0e:fa:bb: d4:b4:25:b6:27:f8:34:40:ce:c6:ad:74:ba:94:89:0b:98:b1: eb:53:91:69:d0:25:76:45:23:e5:6e:6b:8e:d4:ab:35:97:de: 27:b7:a2:43:c4:a0:43:6b:c7:cc:b7:67:11:ea:e0:9f:07:a3: d2:9a:51:3f:f9:c5:8a:6d:83:fa:80:50:a9:d9:be:5f:76:04: dd:83:2f:40:bf:51:83:02:1f:c2:5d:19:c1:e9:53:0c:0c:db: a0:a1:b1:17:b1:d0:e6:b7:18:34:42:61:c3:d7:5a:1c:85:82: 9d:f8:f5:ad:6d:d8:c9:23:6f:7c:07:c0:05:05:08:bb:73:23: aa:91:f7:99:84:3d:8c:8d:70:27:b8:14:3d:01:98:f2:37:25: 29:68:d7:8f:dc:60:35:bc:b8:9b:68:4c:1c:0f:f2:ae:8c:80: dd:18:62:09:ff:70:86:68:1d:dc:a2:b5:17:5c:b7:76:ef:dc: 4d:0f:d7:68:27:a0:0a:bb:c1:0b:92:8a:e9:05:ea:2a:3b:89: e5:c5:35:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHcpnLZ53Udl9leTWRuB8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhZGZlZjg0MjRkYmJiODdhODlkOTM4OTg0ZTBlMmIzZWQ5 YWFiOGIwHhcNMjUxMjI4MDQwMDU1WhcNMjUxMjI5MDQwMDU1WjAzMTEwLwYDVQQD EyhkM2JmMWIzOGRhY2U1N2EzNDIyZTAyMDg0MGJjYWRmMjVhYTRhNWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrWc/NHxNUGF/NdoywZjh4ujDNVl cvXdfgJavhamVg2rMbd0codyDECcYpuzi5A7QDWiTNpFTGT844/lrNNJLMEDbQEj mp+oQVXIf5mqi0L8uck2rntdsAKKqq6Z1mvYCL7+VyC4yGoUOTFUn+br7voB9wpc ViDYSHueK633RSLdEBaIceYjweqTPmWgy6crrsGm6an8v3Wh8Bty6HRthczt0Hoj UjPetxk74WTmoTDXw7I7ipO0Hh0/MZZFn1/nOE4Tt8d4KoFnv+U6By6WBE7ss/+f cZ2Rtr8xT0j7EpieSSDGKwpxLrJQVBR4QnDH70uqcERl5F0P4bHAGXbdKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNO/GzjazlejQi4CCEC8rfJapKWmMB8GA1UdIwQY MBaAFCrf74Qk27uHqJ2TiYTg4rPtmquLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3RfdmhDVGJ1NGVvblpPSmhPRGlzLTJhcTRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9mOGQxMTEtN2VjYi00YmE2LWJlZWUt MTFhYTExMTNlOGQ2LzEvS3RfdmhDVGJ1NGVvblpPSmhPRGlzLTJhcTRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9mOGQxMTEtN2VjYi00YmE2LWJlZWUtMTFhYTExMTNlOGQ2 LzEvS3RfdmhDVGJ1NGVvblpPSmhPRGlzLTJhcTRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKKxvfswG xq0GHiPDAxvdN15+LtLw0wEPLEr1zsCcPyj+zPZr61LzFWWRZc4VRpnyTqhvDvq7 1LQltif4NEDOxq10upSJC5ix61ORadAldkUj5W5rjtSrNZfeJ7eiQ8SgQ2vHzLdn Eergnwej0ppRP/nFim2D+oBQqdm+X3YE3YMvQL9RgwIfwl0ZwelTDAzboKGxF7HQ 5rcYNEJhw9daHIWCnfj1rW3YySNvfAfABQUIu3MjqpH3mYQ9jI1wJ7gUPQGY8jcl KWjXj9xgNby4m2hMHA/yroyA3RhiCf9whmgd3KK1F1y3du/cTQ/XaCegCrvBC5KK 6QXqKjuJ5cU1Jw== -----END CERTIFICATE-----Generated at Sun Dec 28 08:07:55 2025 by rpki-client