This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft File: KUC2lLuglTROS9uZ9R4fECO-V84.mft (raw, json) Hash identifier: OjlHf94ds7X0MlH5/zRSLh1lVYY/znb0jMajpJXmiHg= Subject key identifier: 2B:C1:0C:B7:48:4F:B1:E9:42:34:64:E6:42:DC:DA:0C:BE:FA:6E:CE Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE Certificate issuer: /CN=2940b694bba095344e4bdb99f51e1f1023be57ce Certificate serial: 019B631F01C03324CB6DBAB6778B86791DEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft Manifest number: 13ED Signing time: Sun 28 Dec 2025 04:02:15 +0000 Manifest this update: Sun 28 Dec 2025 04:02:15 +0000 Manifest next update: Mon 29 Dec 2025 04:02:15 +0000 Files and hashes: 1: 1ovUioPSRpwIq2x5dlTtKSWuJt4.roa (hash: glwS98kItQ5aoRJZQt2/p+Tl6Vu2+KBQ6fnWyRCpxeE=) 2: 5ukXNC3ufs5Ifk5kp-hI7U2U8bk.roa (hash: 7ZgXZStDcuyKQtO7JFrlQRnqUqaRLXXlsW/IZ58nkBY=) 3: 6RkSnq1YobTmQ_SgAx2wlTkM2hY.roa (hash: Qt/KZiThTuHL2rOKsl4Ng5FOwbzizcKz0/dUQrpTSQc=) 4: B5wkeGWZjqgz1y_Wsk4MaKTCZiQ.roa (hash: ygucH/c6MgSrKR9IgUN2NMGsbIDgc3W5HpOJEaJUGPw=) 5: BXsWIMS27-emUbxg3N856ta0Zhs.roa (hash: VLEvZClMBOllgwcFIEd17EnHHY/+y56YDL+ioA9gy2o=) 6: KUC2lLuglTROS9uZ9R4fECO-V84.crl (hash: wBNcxq2FVbAHy1jb1R5GVLZEg9Su9ZsUqRvqciEQefE=) 7: YCe-DX5vspCo53n_t9ku3ipwr0c.roa (hash: bsw052ayicKeBY1zBDEewyIk2nJP8d+tgqf/wW7oirc=) 8: i4f1t__SHD-QTSI70hcDe0-iLuE.roa (hash: x5mSq7hcGWnjVGsMlKR9T5XBSWXyZ8MGhLOD1IalJyI=) 9: nlwD__Rr_Kz3vDBdg3j2YS8w3UU.roa (hash: oYim5zXBclNnekk/jArnYzaiEFQpBbNaF9nzqE+fJWU=) 10: t_T_n2rHgRaUg9w286JLApHuPsY.roa (hash: Xw7YLCCdVoaSNcuVfBLtogrNakQDxTgFieuFH7n8sSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1f:01:c0:33:24:cb:6d:ba:b6:77:8b:86:79:1d:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce Validity Not Before: Dec 28 04:02:15 2025 GMT Not After : Dec 29 04:02:15 2025 GMT Subject: CN=2bc10cb7484fb1e9423464e642dcda0cbefa6ece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3f:1a:d0:53:1a:43:8f:94:ef:8c:ae:77:07: 6b:9f:0c:72:5b:94:10:59:c8:a6:c5:62:61:03:3b: 55:fc:42:a0:c9:69:0a:b1:ec:fe:96:23:68:50:fc: 7d:24:c0:41:44:e3:b9:c7:60:5d:72:42:e8:1b:43: 72:ef:48:ec:b1:20:85:c9:f7:01:40:fe:8c:47:67: 18:fa:9d:6a:09:4b:25:13:f5:0b:ac:7d:f2:d6:19: af:f8:2c:7b:4e:d4:e6:85:c3:ae:9f:9e:bd:fb:ec: b6:8b:3e:88:88:5a:67:12:4c:19:0c:61:91:d0:70: 11:74:16:c4:e8:f8:a2:82:3e:85:e0:44:8e:dd:59: b4:79:a8:e5:60:1a:d7:fc:7c:c5:64:d8:39:aa:93: 8f:4d:de:da:f4:71:13:e3:d8:bb:49:a1:34:11:0e: 75:34:6c:d3:bc:93:54:d2:99:f2:42:d6:86:65:91: 4a:64:ec:69:ac:0b:28:2d:93:c5:d0:7e:d9:52:bd: 98:f9:70:65:8e:b8:e4:d8:d3:c1:6d:69:ab:1a:36: 4d:1e:bd:a3:37:65:91:55:18:97:4f:38:65:c7:c9: 12:76:40:78:76:4e:67:c2:0d:f6:7b:d5:da:24:33: 72:a0:26:49:07:e8:8c:16:ca:65:3e:9c:c4:bd:68: e9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C1:0C:B7:48:4F:B1:E9:42:34:64:E6:42:DC:DA:0C:BE:FA:6E:CE X509v3 Authority Key Identifier: keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:e2:cb:09:f2:f4:7b:34:d5:89:91:08:0c:26:33:f9:4c:e9: 9e:7f:6d:d4:20:0b:40:ce:0c:92:ed:dd:81:13:77:4e:df:f2: 6c:e6:87:0d:37:5e:ac:3e:f8:c7:da:0d:d5:64:ef:63:a3:9a: f2:d8:67:81:73:bb:eb:27:50:27:85:e8:60:1e:50:42:89:10: 0c:d7:d5:eb:6e:c6:4e:2b:42:8e:73:3c:37:9b:2c:c8:8b:ef: e9:24:6f:b1:af:cd:0c:7c:4c:ac:ac:bc:5f:f0:34:d7:46:f3: 40:b8:43:ea:db:66:6f:5c:32:95:53:17:a3:8a:0c:38:4f:c6: 9d:77:de:73:e3:01:01:16:41:4c:ac:19:d5:d2:c6:d4:f9:34: 4f:45:09:54:d9:95:6b:13:f3:60:6d:dd:94:29:c4:bd:9a:68: a2:98:cb:71:2c:f9:2c:79:33:c5:8f:31:18:07:67:07:ae:85: 9e:15:f6:78:b3:ae:60:93:45:c2:15:c0:97:59:b0:b3:5b:06: 7b:da:9b:8c:38:3b:4a:eb:1e:90:d0:c3:57:12:bc:c3:a3:bb: cd:0c:d0:0c:a8:aa:b2:44:ab:53:26:7d:7c:85:45:fd:db:a7: e2:0e:7d:8f:ca:a4:01:63:86:b4:62:be:e9:50:27:3f:f8:23: 80:bc:1c:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHwHAMyTLbbq2d4uGeR3qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NDBiNjk0YmJhMDk1MzQ0ZTRiZGI5OWY1MWUxZjEwMjNi ZTU3Y2UwHhcNMjUxMjI4MDQwMjE1WhcNMjUxMjI5MDQwMjE1WjAzMTEwLwYDVQQD EygyYmMxMGNiNzQ4NGZiMWU5NDIzNDY0ZTY0MmRjZGEwY2JlZmE2ZWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqT8a0FMaQ4+U74yudwdrnwxyW5QQ WcimxWJhAztV/EKgyWkKsez+liNoUPx9JMBBROO5x2BdckLoG0Ny70jssSCFyfcB QP6MR2cY+p1qCUslE/ULrH3y1hmv+Cx7TtTmhcOun569++y2iz6IiFpnEkwZDGGR 0HARdBbE6Piigj6F4ESO3Vm0eajlYBrX/HzFZNg5qpOPTd7a9HET49i7SaE0EQ51 NGzTvJNU0pnyQtaGZZFKZOxprAsoLZPF0H7ZUr2Y+XBljrjk2NPBbWmrGjZNHr2j N2WRVRiXTzhlx8kSdkB4dk5nwg32e9XaJDNyoCZJB+iMFsplPpzEvWjpwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCvBDLdIT7HpQjRk5kLc2gy++m7OMB8GA1UdIwQY MBaAFClAtpS7oJU0TkvbmfUeHxAjvlfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzIt MjdjMWEzNTk3NmRlLzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzItMjdjMWEzNTk3NmRl LzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmOLLCfL0 ezTViZEIDCYz+Uzpnn9t1CALQM4Mku3dgRN3Tt/ybOaHDTderD74x9oN1WTvY6Oa 8thngXO76ydQJ4XoYB5QQokQDNfV627GTitCjnM8N5ssyIvv6SRvsa/NDHxMrKy8 X/A010bzQLhD6ttmb1wylVMXo4oMOE/GnXfec+MBARZBTKwZ1dLG1Pk0T0UJVNmV axPzYG3dlCnEvZpoopjLcSz5LHkzxY8xGAdnB66FnhX2eLOuYJNFwhXAl1mws1sG e9qbjDg7SusekNDDVxK8w6O7zQzQDKiqskSrUyZ9fIVF/dun4g59j8qkAWOGtGK+ 6VAnP/gjgLwcRA== -----END CERTIFICATE-----Generated at Sun Dec 28 06:20:47 2025 by rpki-client