This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft File: KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft (raw, json) Hash identifier: D5BqtvNcOnKuEDQoLdlFPf7EktYyn06RH8syn3+bt4k= Subject key identifier: 26:2F:07:54:71:59:9D:54:D6:EE:1D:BE:A5:17:B4:00:26:6C:8D:01 Authority key identifier: 29:77:44:67:CC:9F:1E:D9:D9:57:B8:3A:A1:7A:09:0B:1D:F7:69:46 Certificate issuer: /CN=29774467cc9f1ed9d957b83aa17a090b1df76946 Certificate serial: 019B5975DBB301F1176B3691E1A459FA8615 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft Manifest number: 1033 Signing time: Fri 26 Dec 2025 07:00:54 +0000 Manifest this update: Fri 26 Dec 2025 07:00:54 +0000 Manifest next update: Sat 27 Dec 2025 07:00:54 +0000 Files and hashes: 1: KXdEZ8yfHtnZV7g6oXoJCx33aUY.crl (hash: ogX/kOILxJUHLAGH7eLJytr7fxGQmbYtkWysMv8yJGk=) 2: b64Uii9JYXCMSIcDqVfd-guKolk.roa (hash: zu1QMl+md4/UwiMRhp2koQ5VJ3r3EhScu5BVA2+NzSc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:db:b3:01:f1:17:6b:36:91:e1:a4:59:fa:86:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29774467cc9f1ed9d957b83aa17a090b1df76946 Validity Not Before: Dec 26 07:00:54 2025 GMT Not After : Dec 27 07:00:54 2025 GMT Subject: CN=262f075471599d54d6ee1dbea517b400266c8d01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:39:09:9a:4f:19:3b:b5:f5:61:63:9d:41:a4: 6c:00:e7:37:15:63:28:a1:e4:74:4c:b8:7f:c9:6c: 0b:8c:86:17:8a:8f:31:7f:56:5d:a5:6d:1a:a2:43: 68:1a:79:25:f4:50:de:cc:96:d2:5b:9d:71:2e:b7: ef:86:65:f4:76:41:61:b7:af:67:ef:79:32:fe:d8: 95:21:9f:55:d3:b3:53:64:75:f9:88:64:46:32:4a: 8b:97:36:be:48:0e:67:14:34:6e:f8:4d:9a:66:48: 13:37:74:e4:67:c9:6d:b2:b0:5b:13:78:a0:63:db: a4:97:0b:90:be:47:7c:ca:b4:ab:de:6f:6d:ed:0e: 5e:d4:d2:5b:b6:fe:ac:69:31:8f:81:f1:9e:60:f4: eb:f7:37:ab:0e:68:45:10:9e:d1:23:18:5b:9c:4c: c0:cb:7d:97:40:a9:d2:62:bc:1f:cf:78:28:93:b4: fd:44:06:3e:24:de:11:63:1a:93:bc:4f:d7:d3:3a: 9e:70:0a:4f:c5:09:49:65:c1:f7:96:2b:56:8a:10: 2a:2a:61:32:14:a8:1a:f5:76:ba:65:c7:df:f8:36: d2:db:f5:74:f9:bb:6b:af:3b:67:41:ae:df:8a:6b: 26:f9:87:58:e1:a7:7d:28:d3:fe:ae:34:2f:88:60: bf:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:2F:07:54:71:59:9D:54:D6:EE:1D:BE:A5:17:B4:00:26:6C:8D:01 X509v3 Authority Key Identifier: keyid:29:77:44:67:CC:9F:1E:D9:D9:57:B8:3A:A1:7A:09:0B:1D:F7:69:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:9c:f2:39:fb:55:e5:bf:10:37:b0:f4:6e:f7:e2:10:6d:9f: 07:4d:72:1c:4c:70:fe:21:44:1b:e4:c3:17:0f:4f:77:2b:64: bc:35:cc:a8:a6:c8:9c:7b:5b:de:bc:da:f8:93:15:27:4f:6d: 0d:a6:26:5f:82:19:dd:ae:2f:e6:cc:24:21:3e:0a:86:57:7e: 2c:12:a5:82:25:d9:57:f7:1c:e2:c7:d2:97:2a:27:27:16:d3: f7:f7:63:a7:0d:95:66:4b:ca:06:5c:d0:40:3a:e4:b6:14:a9: 64:a8:0c:b2:72:31:2f:e6:a0:58:49:e6:83:89:b4:c5:85:29: d9:3a:c0:d5:d0:45:f9:f1:a4:86:d7:e8:be:0b:33:44:82:c8: 3a:c3:56:5f:e8:6d:b5:6a:9c:95:ee:55:a6:ba:38:7b:4d:c7: 76:6e:9e:d8:1c:9b:dc:19:b6:aa:b8:79:e3:d1:72:8a:bb:5a: f5:88:79:dc:09:db:33:df:e1:4e:9d:54:83:f9:17:df:9d:37: 2a:ad:13:a3:d1:16:51:f1:83:cb:63:8f:d3:04:ba:90:de:2f: f3:8c:bb:5f:8c:2f:62:38:e6:83:f5:88:f0:33:ae:d6:b1:3e: 9a:80:e5:9f:22:9b:95:74:8f:76:d7:bc:8a:c4:01:58:f0:da: 98:75:98:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdduzAfEXazaR4aRZ+oYVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5Nzc0NDY3Y2M5ZjFlZDlkOTU3YjgzYWExN2EwOTBiMWRm NzY5NDYwHhcNMjUxMjI2MDcwMDU0WhcNMjUxMjI3MDcwMDU0WjAzMTEwLwYDVQQD EygyNjJmMDc1NDcxNTk5ZDU0ZDZlZTFkYmVhNTE3YjQwMDI2NmM4ZDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjkJmk8ZO7X1YWOdQaRsAOc3FWMo oeR0TLh/yWwLjIYXio8xf1ZdpW0aokNoGnkl9FDezJbSW51xLrfvhmX0dkFht69n 73ky/tiVIZ9V07NTZHX5iGRGMkqLlza+SA5nFDRu+E2aZkgTN3TkZ8ltsrBbE3ig Y9uklwuQvkd8yrSr3m9t7Q5e1NJbtv6saTGPgfGeYPTr9zerDmhFEJ7RIxhbnEzA y32XQKnSYrwfz3gok7T9RAY+JN4RYxqTvE/X0zqecApPxQlJZcH3litWihAqKmEy FKga9Xa6Zcff+DbS2/V0+btrrztnQa7fimsm+YdY4ad9KNP+rjQviGC/BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCYvB1RxWZ1U1u4dvqUXtAAmbI0BMB8GA1UdIwQY MBaAFCl3RGfMnx7Z2Ve4OqF6CQsd92lGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1hkRVo4eWZIdG5aVjdnNm9Yb0pDeDMzYVVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC85ZGMwOGMtZTFiNi00MjU5LWE1ZGIt ZDU1ZTM4ODY4YTUyLzEvS1hkRVo4eWZIdG5aVjdnNm9Yb0pDeDMzYVVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC85ZGMwOGMtZTFiNi00MjU5LWE1ZGItZDU1ZTM4ODY4YTUy LzEvS1hkRVo4eWZIdG5aVjdnNm9Yb0pDeDMzYVVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARpzyOftV 5b8QN7D0bvfiEG2fB01yHExw/iFEG+TDFw9PdytkvDXMqKbInHtb3rza+JMVJ09t DaYmX4IZ3a4v5swkIT4Khld+LBKlgiXZV/cc4sfSlyonJxbT9/djpw2VZkvKBlzQ QDrkthSpZKgMsnIxL+agWEnmg4m0xYUp2TrA1dBF+fGkhtfovgszRILIOsNWX+ht tWqcle5Vpro4e03Hdm6e2Byb3Bm2qrh549Fyirta9Yh53AnbM9/hTp1Ug/kX3503 Kq0To9EWUfGDy2OP0wS6kN4v84y7X4wvYjjmg/WI8DOu1rE+moDlnyKblXSPdte8 isQBWPDamHWYYQ== -----END CERTIFICATE-----Generated at Fri Dec 26 09:23:38 2025 by rpki-client