This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft File: KUC2lLuglTROS9uZ9R4fECO-V84.mft (raw, json) Hash identifier: BWHYJO5k4L7poVH0gZyrmdiWzGiF9Y4eIoiJS/JttnM= Subject key identifier: F3:A7:6D:FB:6D:7F:B9:53:67:02:E4:50:50:63:4F:47:0A:E2:3F:96 Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE Certificate issuer: /CN=2940b694bba095344e4bdb99f51e1f1023be57ce Certificate serial: 019B3C7E8CFE5CEA466E8DD592913A71C9D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft Manifest number: 13D9 Signing time: Sat 20 Dec 2025 16:01:25 +0000 Manifest this update: Sat 20 Dec 2025 16:01:25 +0000 Manifest next update: Sun 21 Dec 2025 16:01:25 +0000 Files and hashes: 1: 1ovUioPSRpwIq2x5dlTtKSWuJt4.roa (hash: glwS98kItQ5aoRJZQt2/p+Tl6Vu2+KBQ6fnWyRCpxeE=) 2: 5ukXNC3ufs5Ifk5kp-hI7U2U8bk.roa (hash: 7ZgXZStDcuyKQtO7JFrlQRnqUqaRLXXlsW/IZ58nkBY=) 3: 6RkSnq1YobTmQ_SgAx2wlTkM2hY.roa (hash: Qt/KZiThTuHL2rOKsl4Ng5FOwbzizcKz0/dUQrpTSQc=) 4: B5wkeGWZjqgz1y_Wsk4MaKTCZiQ.roa (hash: ygucH/c6MgSrKR9IgUN2NMGsbIDgc3W5HpOJEaJUGPw=) 5: BXsWIMS27-emUbxg3N856ta0Zhs.roa (hash: VLEvZClMBOllgwcFIEd17EnHHY/+y56YDL+ioA9gy2o=) 6: KUC2lLuglTROS9uZ9R4fECO-V84.crl (hash: hQ+vkOymL3Xjq0KMtQS0V+2+2qqhYiaBxqMwYVUfrlk=) 7: YCe-DX5vspCo53n_t9ku3ipwr0c.roa (hash: bsw052ayicKeBY1zBDEewyIk2nJP8d+tgqf/wW7oirc=) 8: i4f1t__SHD-QTSI70hcDe0-iLuE.roa (hash: x5mSq7hcGWnjVGsMlKR9T5XBSWXyZ8MGhLOD1IalJyI=) 9: nlwD__Rr_Kz3vDBdg3j2YS8w3UU.roa (hash: oYim5zXBclNnekk/jArnYzaiEFQpBbNaF9nzqE+fJWU=) 10: t_T_n2rHgRaUg9w286JLApHuPsY.roa (hash: Xw7YLCCdVoaSNcuVfBLtogrNakQDxTgFieuFH7n8sSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:8c:fe:5c:ea:46:6e:8d:d5:92:91:3a:71:c9:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce Validity Not Before: Dec 20 16:01:25 2025 GMT Not After : Dec 21 16:01:25 2025 GMT Subject: CN=f3a76dfb6d7fb9536702e45050634f470ae23f96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b9:85:20:66:41:c2:56:15:19:85:2b:87:9d: 50:1a:ba:57:98:11:a2:36:42:a5:eb:25:ce:61:5c: 66:de:16:7a:88:e4:95:5c:0b:e4:93:6e:54:1a:96: c6:00:16:d9:8a:57:6d:6e:3a:e1:6f:03:9c:9c:1e: 5c:dc:5d:76:d7:88:67:ef:0a:3e:a3:ef:8b:d1:da: 8a:15:92:7b:56:4f:f1:84:d8:7c:73:94:7d:d5:41: 7e:fd:22:64:82:24:27:0d:a8:55:6c:08:41:87:04: 24:87:94:8f:21:54:89:73:24:bb:0f:0e:9a:2c:ef: ab:05:4d:ec:fb:07:6b:40:30:06:03:4b:1f:0c:54: ed:53:46:ba:13:72:31:fc:05:d2:0a:16:73:92:5a: 82:00:47:2f:fe:06:3d:dd:ba:09:e0:6a:c7:ff:99: 82:64:bd:1a:d1:d8:6d:ba:f9:43:87:27:21:3d:ed: 75:b6:8f:0e:aa:20:f7:99:19:9e:38:44:4f:63:8c: e0:2c:27:b1:db:cc:ff:53:d8:68:89:33:3f:72:37: cf:23:95:f2:6f:99:7d:41:a5:57:64:ab:e9:0f:3f: 62:9d:4d:dd:08:37:b4:57:d0:b4:99:10:5e:b3:75: ee:73:76:81:86:47:1a:88:09:f2:51:d0:8b:9d:f8: 71:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:A7:6D:FB:6D:7F:B9:53:67:02:E4:50:50:63:4F:47:0A:E2:3F:96 X509v3 Authority Key Identifier: keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:91:70:76:36:4a:67:e7:cb:5b:da:10:e3:17:2d:2b:83:88: eb:2b:23:c5:e6:36:5f:8b:ce:c7:2d:7f:01:00:bd:f0:3c:58: e6:15:06:af:36:16:85:55:59:8b:a7:d7:eb:d2:fd:5c:68:e3: 81:90:9c:20:73:f7:53:18:08:45:73:2f:77:d1:42:65:27:1b: 47:03:23:06:e5:6a:4f:f9:d0:c6:31:0e:7c:7e:ea:15:a1:a8: be:e0:31:b6:10:86:90:94:92:dc:fe:e3:b1:70:f3:93:6f:35: dd:7c:07:59:4a:70:85:e2:37:5e:a6:a7:a0:e3:f4:07:ee:ce: 91:57:a7:7b:0b:cf:cd:b7:72:85:f7:68:33:31:a3:ef:ab:c3: 5a:95:bf:39:34:da:0c:a2:08:49:38:36:02:43:08:57:c4:c7: 22:9a:a7:33:b6:d8:63:0e:1c:f7:58:7f:97:2a:50:24:09:5f: 91:14:b8:88:64:dd:26:dd:d1:0b:4e:ab:a0:bd:54:54:67:92: b1:6c:c0:98:57:9e:ef:ee:1a:b6:f5:d5:47:9a:e7:71:78:d1: 54:ff:88:5f:e7:d1:49:bd:b7:c1:57:f5:93:e4:c4:db:40:42: 1b:ab:ca:6d:ce:da:f3:3e:ce:57:c1:5f:7c:db:ef:f9:21:72: 8c:c9:a6:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8foz+XOpGbo3VkpE6ccnTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NDBiNjk0YmJhMDk1MzQ0ZTRiZGI5OWY1MWUxZjEwMjNi ZTU3Y2UwHhcNMjUxMjIwMTYwMTI1WhcNMjUxMjIxMTYwMTI1WjAzMTEwLwYDVQQD EyhmM2E3NmRmYjZkN2ZiOTUzNjcwMmU0NTA1MDYzNGY0NzBhZTIzZjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprmFIGZBwlYVGYUrh51QGrpXmBGi NkKl6yXOYVxm3hZ6iOSVXAvkk25UGpbGABbZildtbjrhbwOcnB5c3F1214hn7wo+ o++L0dqKFZJ7Vk/xhNh8c5R91UF+/SJkgiQnDahVbAhBhwQkh5SPIVSJcyS7Dw6a LO+rBU3s+wdrQDAGA0sfDFTtU0a6E3Ix/AXSChZzklqCAEcv/gY93boJ4GrH/5mC ZL0a0dhtuvlDhychPe11to8OqiD3mRmeOERPY4zgLCex28z/U9hoiTM/cjfPI5Xy b5l9QaVXZKvpDz9inU3dCDe0V9C0mRBes3Xuc3aBhkcaiAnyUdCLnfhxywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPOnbfttf7lTZwLkUFBjT0cK4j+WMB8GA1UdIwQY MBaAFClAtpS7oJU0TkvbmfUeHxAjvlfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzIt MjdjMWEzNTk3NmRlLzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzItMjdjMWEzNTk3NmRl LzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXJFwdjZK Z+fLW9oQ4xctK4OI6ysjxeY2X4vOxy1/AQC98DxY5hUGrzYWhVVZi6fX69L9XGjj gZCcIHP3UxgIRXMvd9FCZScbRwMjBuVqT/nQxjEOfH7qFaGovuAxthCGkJSS3P7j sXDzk2813XwHWUpwheI3XqanoOP0B+7OkVenewvPzbdyhfdoMzGj76vDWpW/OTTa DKIISTg2AkMIV8THIpqnM7bYYw4c91h/lypQJAlfkRS4iGTdJt3RC06roL1UVGeS sWzAmFee7+4atvXVR5rncXjRVP+IX+fRSb23wVf1k+TE20BCG6vKbc7a8z7OV8Ff fNvv+SFyjMmm4Q== -----END CERTIFICATE-----Generated at Sat Dec 20 19:02:20 2025 by rpki-client