This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft File: KUk3Me_Mx0rVwnOHS5Ng96polGU.mft (raw, json) Hash identifier: iDZ9tNPoSYZqISJZqi8PPQ5cX3k1wMEqO4bDLKPguFI= Subject key identifier: A3:19:89:39:6E:F0:4D:4A:22:25:80:44:94:04:40:71:E4:B0:BD:DA Authority key identifier: 29:49:37:31:EF:CC:C7:4A:D5:C2:73:87:4B:93:60:F7:AA:68:94:65 Certificate issuer: /CN=29493731efccc74ad5c273874b9360f7aa689465 Certificate serial: 019B42B71B5FE60A7447047D6796EF4E6EF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft Manifest number: 178E Signing time: Sun 21 Dec 2025 21:00:54 +0000 Manifest this update: Sun 21 Dec 2025 21:00:54 +0000 Manifest next update: Mon 22 Dec 2025 21:00:54 +0000 Files and hashes: 1: KUk3Me_Mx0rVwnOHS5Ng96polGU.crl (hash: osGUd89ttNCNSf/m6PUnYZzs1sKVMXl5mv+iini2hOU=) 2: Xiq-7Jev0boBEtsil-XGVvUzgqg.roa (hash: Xk6kyPCoONS0HAtum1UvzVR1hPVGojYHRenom/WPJ28=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:1b:5f:e6:0a:74:47:04:7d:67:96:ef:4e:6e:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29493731efccc74ad5c273874b9360f7aa689465 Validity Not Before: Dec 21 21:00:54 2025 GMT Not After : Dec 22 21:00:54 2025 GMT Subject: CN=a31989396ef04d4a2225804494044071e4b0bdda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b8:8e:ca:84:cf:6e:d3:3d:e0:ce:e7:9c:f7: 41:9d:95:97:47:57:f1:f3:c4:12:18:18:53:b9:66: da:7f:ce:98:1d:76:ef:07:fa:76:cf:80:fb:4a:ed: 7e:c9:97:98:fe:1b:0a:59:f6:4c:21:34:7c:34:19: 3c:86:30:05:83:ed:b1:8d:cd:eb:ba:a1:4c:41:08: 5c:eb:4a:d1:c6:5f:74:49:a9:f4:b1:1d:d6:fd:e4: 4e:e1:15:33:d6:9e:35:2e:9f:2c:be:37:c7:f7:89: 59:04:90:e9:83:f0:64:3e:a2:e8:b3:e8:d1:c9:0c: 2c:1b:40:65:09:ff:5b:c6:53:b6:f8:57:fc:f7:64: cd:be:76:ba:2a:da:cd:5b:b8:63:59:80:3f:cf:b3: 8e:e6:5f:b2:11:22:b0:41:8d:69:44:df:c8:5d:59: 69:36:ef:7b:d8:d5:60:7d:06:01:3f:b5:18:3a:27: 3e:73:28:84:fa:7a:83:8d:7f:1a:87:74:04:52:49: f5:4f:d3:9e:72:16:80:fd:75:ab:6d:d2:ee:e1:dd: c8:38:b5:4e:42:7d:13:13:b4:a7:6e:9e:96:21:33: 0e:8c:2c:4e:26:fd:4d:6a:22:0a:6c:6a:02:77:49: 3b:3a:09:0e:7d:b8:02:28:5d:59:80:9a:1c:de:9f: 62:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:19:89:39:6E:F0:4D:4A:22:25:80:44:94:04:40:71:E4:B0:BD:DA X509v3 Authority Key Identifier: keyid:29:49:37:31:EF:CC:C7:4A:D5:C2:73:87:4B:93:60:F7:AA:68:94:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:9a:30:fa:94:cf:11:99:89:0e:a7:4c:76:c2:21:56:c4:4e: 92:66:bd:7a:60:07:42:16:fb:21:13:74:3d:01:52:e3:8c:d9: 7d:74:97:9c:a4:d6:8a:ce:24:a9:d8:99:5e:27:fe:e3:59:6e: 63:7d:c5:f2:85:54:42:b6:f8:11:79:23:53:08:44:9b:c3:c9: 96:d4:6a:c4:8c:f5:ef:ad:dc:dc:57:5a:8e:4a:3b:38:83:37: 08:0c:96:00:23:5a:88:68:2c:be:8b:f2:66:62:d5:02:b4:6a: 9d:c5:4e:0a:c9:0c:96:b2:a0:71:bd:21:9e:ad:fe:74:43:71: 4b:4b:10:95:56:b6:7c:bc:f4:7b:19:1a:5b:f7:c1:2f:35:a4: ab:3a:b2:17:d7:af:78:c7:70:9c:04:b4:1c:24:0b:52:01:38: ae:37:bf:cb:96:29:52:fb:4b:9f:cf:50:00:ea:d2:0d:ca:a3: b8:fd:a5:31:8e:62:e7:33:0c:9b:8a:20:68:d4:60:5f:31:1c: 16:c1:e0:ee:ad:7e:f8:9d:43:7e:85:29:31:39:d1:43:8c:87: ea:e9:6d:b4:24:15:7c:8b:2c:7f:d2:b2:80:1c:ef:be:6f:49: bc:74:9c:d3:8d:bd:cb:71:55:a4:a6:0c:12:c8:6c:f9:07:0b: 39:9f:ba:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCtxtf5gp0RwR9Z5bvTm7wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NDkzNzMxZWZjY2M3NGFkNWMyNzM4NzRiOTM2MGY3YWE2 ODk0NjUwHhcNMjUxMjIxMjEwMDU0WhcNMjUxMjIyMjEwMDU0WjAzMTEwLwYDVQQD EyhhMzE5ODkzOTZlZjA0ZDRhMjIyNTgwNDQ5NDA0NDA3MWU0YjBiZGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtriOyoTPbtM94M7nnPdBnZWXR1fx 88QSGBhTuWbaf86YHXbvB/p2z4D7Su1+yZeY/hsKWfZMITR8NBk8hjAFg+2xjc3r uqFMQQhc60rRxl90San0sR3W/eRO4RUz1p41Lp8svjfH94lZBJDpg/BkPqLos+jR yQwsG0BlCf9bxlO2+Ff892TNvna6KtrNW7hjWYA/z7OO5l+yESKwQY1pRN/IXVlp Nu972NVgfQYBP7UYOic+cyiE+nqDjX8ah3QEUkn1T9OechaA/XWrbdLu4d3IOLVO Qn0TE7Snbp6WITMOjCxOJv1NaiIKbGoCd0k7OgkOfbgCKF1ZgJoc3p9iwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKMZiTlu8E1KIiWARJQEQHHksL3aMB8GA1UdIwQY MBaAFClJNzHvzMdK1cJzh0uTYPeqaJRlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1VrM01lX014MHJWd25PSFM1Tmc5NnBvbEdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9hZjRjMDktYzhjMi00ODkzLWExMGIt MGNkOGE2OTcyOWI3LzEvS1VrM01lX014MHJWd25PSFM1Tmc5NnBvbEdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9hZjRjMDktYzhjMi00ODkzLWExMGItMGNkOGE2OTcyOWI3 LzEvS1VrM01lX014MHJWd25PSFM1Tmc5NnBvbEdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnJow+pTP EZmJDqdMdsIhVsROkma9emAHQhb7IRN0PQFS44zZfXSXnKTWis4kqdiZXif+41lu Y33F8oVUQrb4EXkjUwhEm8PJltRqxIz1763c3Fdajko7OIM3CAyWACNaiGgsvovy ZmLVArRqncVOCskMlrKgcb0hnq3+dENxS0sQlVa2fLz0exkaW/fBLzWkqzqyF9ev eMdwnAS0HCQLUgE4rje/y5YpUvtLn89QAOrSDcqjuP2lMY5i5zMMm4ogaNRgXzEc FsHg7q1++J1DfoUpMTnRQ4yH6ulttCQVfIssf9KygBzvvm9JvHSc0429y3FVpKYM Eshs+QcLOZ+6zg== -----END CERTIFICATE-----Generated at Mon Dec 22 01:02:12 2025 by rpki-client