This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft File: KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft (raw, json) Hash identifier: 52XYmfK1XtsItgfE9kz71VPOugG/VfI7I5DcYsk5RQw= Subject key identifier: FC:E8:29:05:3C:B2:DF:D2:44:4D:DF:A2:0D:65:8C:21:15:A5:48:DE Authority key identifier: 29:36:F6:43:28:C1:E6:69:11:40:9E:A7:C6:97:22:F8:D2:62:66:B5 Certificate issuer: /CN=2936f64328c1e66911409ea7c69722f8d26266b5 Certificate serial: 019B5E64F548570101A7BBE27290776C314A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft Manifest number: 0B92 Signing time: Sat 27 Dec 2025 06:00:33 +0000 Manifest this update: Sat 27 Dec 2025 06:00:33 +0000 Manifest next update: Sun 28 Dec 2025 06:00:33 +0000 Files and hashes: 1: KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl (hash: Hy5Nh73ojsIguKDZifQ2VQfGee+gDaruHKgzAr8HwQM=) 2: Yu3sg19gw9RqxXtaBobOTcFABCU.roa (hash: s1VpHCeBK4q+0ERblkTkQcFQicVxzMLQOo1cXvgRehs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5e:64:f5:48:57:01:01:a7:bb:e2:72:90:77:6c:31:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2936f64328c1e66911409ea7c69722f8d26266b5 Validity Not Before: Dec 27 06:00:33 2025 GMT Not After : Dec 28 06:00:33 2025 GMT Subject: CN=fce829053cb2dfd2444ddfa20d658c2115a548de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:28:76:1a:84:0a:29:ed:bf:35:d2:19:1d:21: 1c:cd:b0:2e:7b:fc:0a:71:73:bc:9f:3d:93:f5:ad: b5:7b:25:e5:70:d2:a2:1c:66:6e:04:c3:71:88:91: d4:ec:96:56:29:20:d8:58:70:8b:ae:aa:1c:8d:a1: 12:b3:d5:bb:38:ae:ad:a3:4e:b3:84:6e:d9:2d:c9: 28:7d:47:08:cb:6d:8a:e1:1a:7f:33:c8:ac:ec:39: 52:d3:6d:95:72:9c:1a:1f:85:4b:5d:6b:d2:45:9f: 4f:65:28:f5:73:31:56:01:02:eb:53:e0:db:8c:b4: 3d:44:f7:97:2a:b2:70:15:35:f3:2d:45:45:ab:27: 05:da:4c:c8:ea:5c:2e:a3:1a:90:5f:77:34:2f:54: f2:f1:b1:50:58:6e:88:4a:96:dd:7f:ff:92:50:4c: 02:ab:54:14:ce:fb:70:44:a7:54:e8:10:cb:aa:7f: 81:da:d8:9e:54:a5:29:ae:99:09:41:e8:7f:6a:82: 89:d6:b0:ee:44:f1:be:c7:2b:90:d9:d1:98:19:87: 25:1a:6b:c0:de:48:f6:5f:eb:27:e4:df:92:2a:aa: 54:4c:6e:cf:4b:82:aa:28:74:7a:65:fe:9c:c9:3b: b0:c5:4b:cb:bd:43:58:98:fe:a7:58:2a:d0:d3:61: 71:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E8:29:05:3C:B2:DF:D2:44:4D:DF:A2:0D:65:8C:21:15:A5:48:DE X509v3 Authority Key Identifier: keyid:29:36:F6:43:28:C1:E6:69:11:40:9E:A7:C6:97:22:F8:D2:62:66:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:f3:b7:a3:eb:6e:08:99:9d:10:35:ea:2d:8d:89:a5:2d:7d: d2:a8:ff:6e:52:4b:38:5f:10:de:6c:5f:fe:47:1f:3f:cc:8a: 64:48:f6:08:c4:f0:ce:50:7a:a4:0d:f8:fa:76:d8:9a:9e:fd: 35:ef:10:c5:4a:a8:c6:ca:7c:85:c7:45:8a:91:40:4f:d4:2d: bf:68:96:40:dc:14:3d:71:db:38:cf:c1:b7:1f:27:83:b7:ce: 74:bd:ba:f0:8a:e8:bc:56:46:85:3f:0c:91:1d:23:12:37:10: a2:08:43:c9:6f:bc:a5:e4:f5:8c:71:49:26:e3:9b:9f:8f:0e: 01:53:43:c5:66:f3:4f:c6:85:3e:aa:6b:58:26:60:49:d4:b7: 37:2f:37:0d:cb:81:5f:27:4e:c2:2f:48:bb:8c:e4:3f:a0:09: d1:51:0b:6a:5d:26:7f:b6:36:d3:f4:15:5c:95:8e:58:fe:27: 59:58:bf:95:5a:be:fd:00:54:26:ab:8f:94:c5:02:15:3b:77: 9c:d4:56:18:eb:2e:0c:6a:95:65:6a:8f:af:b5:b1:08:55:d9: 2f:33:e7:49:07:24:3c:6a:dd:16:6f:e6:d2:5b:6c:c2:46:0a: 3a:4f:ff:9b:c8:c6:1f:55:09:f7:1d:3c:84:1b:29:54:3d:14: 1c:4b:e6:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZteZPVIVwEBp7vicpB3bDFKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MzZmNjQzMjhjMWU2NjkxMTQwOWVhN2M2OTcyMmY4ZDI2 MjY2YjUwHhcNMjUxMjI3MDYwMDMzWhcNMjUxMjI4MDYwMDMzWjAzMTEwLwYDVQQD EyhmY2U4MjkwNTNjYjJkZmQyNDQ0ZGRmYTIwZDY1OGMyMTE1YTU0OGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSh2GoQKKe2/NdIZHSEczbAue/wK cXO8nz2T9a21eyXlcNKiHGZuBMNxiJHU7JZWKSDYWHCLrqocjaESs9W7OK6to06z hG7ZLckofUcIy22K4Rp/M8is7DlS022VcpwaH4VLXWvSRZ9PZSj1czFWAQLrU+Db jLQ9RPeXKrJwFTXzLUVFqycF2kzI6lwuoxqQX3c0L1Ty8bFQWG6ISpbdf/+SUEwC q1QUzvtwRKdU6BDLqn+B2tieVKUprpkJQeh/aoKJ1rDuRPG+xyuQ2dGYGYclGmvA 3kj2X+sn5N+SKqpUTG7PS4KqKHR6Zf6cyTuwxUvLvUNYmP6nWCrQ02Fx1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPzoKQU8st/SRE3fog1ljCEVpUjeMB8GA1UdIwQY MBaAFCk29kMoweZpEUCep8aXIvjSYma1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1RiMlF5akI1bWtSUUo2bnhwY2ktTkppWnJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS83ZGM3MTItZmY1ZC00ZmYyLWEyYWUt MzlkYzUzZTM3ODJmLzEvS1RiMlF5akI1bWtSUUo2bnhwY2ktTkppWnJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS83ZGM3MTItZmY1ZC00ZmYyLWEyYWUtMzlkYzUzZTM3ODJm LzEvS1RiMlF5akI1bWtSUUo2bnhwY2ktTkppWnJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp/O3o+tu CJmdEDXqLY2JpS190qj/blJLOF8Q3mxf/kcfP8yKZEj2CMTwzlB6pA34+nbYmp79 Ne8QxUqoxsp8hcdFipFAT9Qtv2iWQNwUPXHbOM/Btx8ng7fOdL268IrovFZGhT8M kR0jEjcQoghDyW+8peT1jHFJJuObn48OAVNDxWbzT8aFPqprWCZgSdS3Ny83DcuB XydOwi9Iu4zkP6AJ0VELal0mf7Y20/QVXJWOWP4nWVi/lVq+/QBUJquPlMUCFTt3 nNRWGOsuDGqVZWqPr7WxCFXZLzPnSQckPGrdFm/m0ltswkYKOk//m8jGH1UJ9x08 hBspVD0UHEvmSw== -----END CERTIFICATE-----Generated at Sat Dec 27 09:03:04 2025 by rpki-client