This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.mft File: KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.mft (raw, json) Hash identifier: qccsHObzS1Xdd8lw5nncc8zYQ/EJ3daTF+bPCux7O7U= Subject key identifier: 0D:AD:1B:66:E5:05:DE:0F:55:C3:6C:FF:54:C9:E0:54:B7:B8:D3:EF Authority key identifier: 28:5F:EE:C8:7D:19:59:34:08:72:F8:F7:98:31:20:2F:24:C8:0C:9E Certificate issuer: /CN=285feec87d1959340872f8f79831202f24c80c9e Certificate serial: 019B5305AC8F2FAA2CEAE04216D61F5C54A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.mft Manifest number: 1793 Signing time: Thu 25 Dec 2025 01:00:39 +0000 Manifest this update: Thu 25 Dec 2025 01:00:39 +0000 Manifest next update: Fri 26 Dec 2025 01:00:39 +0000 Files and hashes: 1: KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.crl (hash: gsRqzEETDP/E81ATldN26kZkqbVatEEnHexvnlfczV8=) 2: dufDt0AmSEl5MX84gmoizwQiTsk.roa (hash: aXEbp58hPoSuyC6IS1AxqUQLOo+BHH3jFCGl+xNSnf8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.mft rsync://rpki.ripe.net/repository/DEFAULT/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:05:ac:8f:2f:aa:2c:ea:e0:42:16:d6:1f:5c:54:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=285feec87d1959340872f8f79831202f24c80c9e Validity Not Before: Dec 25 01:00:39 2025 GMT Not After : Dec 26 01:00:39 2025 GMT Subject: CN=0dad1b66e505de0f55c36cff54c9e054b7b8d3ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:89:0a:8e:27:cf:03:2e:bf:0c:d7:8e:0a:cd: 19:4d:f1:45:4d:16:02:b2:37:37:9b:5e:f2:32:15: 6e:72:76:80:1d:d8:09:39:78:e8:c4:ff:c6:b0:5c: 87:b6:37:af:f2:d1:a1:be:1c:c6:3e:53:79:f1:ab: 2f:df:75:00:25:a8:13:ec:b4:97:42:42:f9:ba:72: 9b:88:ec:e6:b1:01:ae:79:a2:0f:2a:12:bd:eb:8d: b5:2b:c6:85:80:f5:5c:38:4c:41:92:61:b1:2c:46: 7c:f5:29:b1:04:95:ad:6e:6e:91:92:ba:87:74:18: b4:72:b2:c8:4c:3c:66:b5:64:e8:e5:4a:4b:a7:1f: 76:f2:a1:95:fa:df:a9:ff:fd:e0:3a:31:e4:7a:43: 94:5d:ce:d9:42:c9:ab:01:c4:45:34:ee:1a:7d:f5: 06:df:15:b4:e0:70:2d:c5:c7:df:b1:c8:1b:26:fb: 15:25:d3:77:c7:d8:54:53:1e:3b:44:1b:27:69:6b: 07:41:1d:71:4c:3d:dc:df:6f:74:cf:75:fb:0b:4a: 1f:12:a2:bb:86:56:6e:29:e9:f4:08:c0:5f:ce:70: 00:c4:27:cf:0e:85:7c:71:31:3c:e7:95:9e:57:8a: 01:82:9b:57:e8:a7:7e:ec:54:cf:8f:03:53:3f:37: 38:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:AD:1B:66:E5:05:DE:0F:55:C3:6C:FF:54:C9:E0:54:B7:B8:D3:EF X509v3 Authority Key Identifier: keyid:28:5F:EE:C8:7D:19:59:34:08:72:F8:F7:98:31:20:2F:24:C8:0C:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:68:9d:fa:67:fe:73:4d:13:a2:f8:51:93:c9:4d:65:c9:48: 9e:92:ab:1f:79:f7:3c:86:7b:5e:c1:21:d4:7b:06:4f:66:e3: 39:55:f3:17:8e:a7:81:6a:50:d8:16:cb:70:51:dd:dc:22:a6: 47:7f:ef:e4:8c:4c:40:23:4d:14:d8:ae:a7:f3:2f:80:f9:58: f3:e7:da:a6:66:b7:6c:2e:97:fc:fd:27:23:be:89:cf:ae:2c: 4f:b1:31:cb:b5:73:e8:8e:44:02:fd:54:61:f4:1d:c5:52:0c: 85:b6:25:e7:93:db:34:ed:b7:ea:6a:76:14:20:a9:fc:ca:63: a4:00:72:65:31:19:5d:a6:f4:6c:6c:f1:0f:73:79:da:8a:01: 83:4c:98:fd:9d:16:f7:53:25:f2:fb:0f:c9:03:c8:0f:69:24: 48:10:9f:05:ec:e5:4c:dd:ed:c9:f0:9b:68:7d:ec:b9:37:dc: 24:ef:7e:2f:08:d8:d4:19:83:6c:ef:ed:9f:cc:7e:12:6a:25: 49:4b:8a:5c:65:30:1a:6b:4b:25:e3:d6:d4:bf:e6:98:8d:1d: 8d:ad:31:d2:56:8b:f9:5b:11:73:8a:52:ba:0f:28:89:d8:3f: 3b:5f:8b:e3:d2:3b:e7:31:26:b6:92:77:2d:b4:7e:e1:65:dd: 0d:6c:d5:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTBayPL6os6uBCFtYfXFSmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4NWZlZWM4N2QxOTU5MzQwODcyZjhmNzk4MzEyMDJmMjRj ODBjOWUwHhcNMjUxMjI1MDEwMDM5WhcNMjUxMjI2MDEwMDM5WjAzMTEwLwYDVQQD EygwZGFkMWI2NmU1MDVkZTBmNTVjMzZjZmY1NGM5ZTA1NGI3YjhkM2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYkKjifPAy6/DNeOCs0ZTfFFTRYC sjc3m17yMhVucnaAHdgJOXjoxP/GsFyHtjev8tGhvhzGPlN58asv33UAJagT7LSX QkL5unKbiOzmsQGueaIPKhK96421K8aFgPVcOExBkmGxLEZ89SmxBJWtbm6RkrqH dBi0crLITDxmtWTo5UpLpx928qGV+t+p//3gOjHkekOUXc7ZQsmrAcRFNO4affUG 3xW04HAtxcffscgbJvsVJdN3x9hUUx47RBsnaWsHQR1xTD3c3290z3X7C0ofEqK7 hlZuKen0CMBfznAAxCfPDoV8cTE855WeV4oBgptX6Kd+7FTPjwNTPzc4owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA2tG2blBd4PVcNs/1TJ4FS3uNPvMB8GA1UdIwQY MBaAFChf7sh9GVk0CHL495gxIC8kyAyeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0ZfdXlIMFpXVFFJY3ZqM21ERWdMeVRJREo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jNmVmZGItMzE2NS00NTM1LThhYjQt ZmQzY2ZlNjAxMjQ1LzEvS0ZfdXlIMFpXVFFJY3ZqM21ERWdMeVRJREo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9jNmVmZGItMzE2NS00NTM1LThhYjQtZmQzY2ZlNjAxMjQ1 LzEvS0ZfdXlIMFpXVFFJY3ZqM21ERWdMeVRJREo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATWid+mf+ c00TovhRk8lNZclInpKrH3n3PIZ7XsEh1HsGT2bjOVXzF46ngWpQ2BbLcFHd3CKm R3/v5IxMQCNNFNiup/MvgPlY8+fapma3bC6X/P0nI76Jz64sT7Exy7Vz6I5EAv1U YfQdxVIMhbYl55PbNO236mp2FCCp/MpjpAByZTEZXab0bGzxD3N52ooBg0yY/Z0W 91Ml8vsPyQPID2kkSBCfBezlTN3tyfCbaH3suTfcJO9+LwjY1BmDbO/tn8x+Emol SUuKXGUwGmtLJePW1L/mmI0dja0x0laL+VsRc4pSug8oidg/O1+L49I75zEmtpJ3 LbR+4WXdDWzVbA== -----END CERTIFICATE-----Generated at Thu Dec 25 09:16:20 2025 by rpki-client