This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft File: KslDUX9eO3R-dTAyB4mgNES0ORI.mft (raw, json) Hash identifier: HBqXdwqUta/gJ//G4UG7eiGv+4C88ZbifWycN+xBRV0= Subject key identifier: 11:F5:84:2E:FF:2A:3B:16:94:9E:E9:AB:2E:EC:29:B2:76:FF:55:94 Authority key identifier: 2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12 Certificate issuer: /CN=2ac943517f5e3b747e7530320789a03444b43912 Certificate serial: 019B3CB4EE51D7D0DBD58D1F71C36B1650EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft Manifest number: 1077 Signing time: Sat 20 Dec 2025 17:00:48 +0000 Manifest this update: Sat 20 Dec 2025 17:00:48 +0000 Manifest next update: Sun 21 Dec 2025 17:00:48 +0000 Files and hashes: 1: KslDUX9eO3R-dTAyB4mgNES0ORI.crl (hash: 52d/1yaJB5SvhKr1mcI43OZYWx2yy4UWX/nyJ16H3IE=) 2: hRopNkKlsL4OwqAqAiJ3QXD2oug.roa (hash: NMdRr2OaOIcyhizjr1sKy4ahHmQgfdQZAiHU+pJ6knM=) 3: wXKkmEzVnT6wH-e4RUZ5ISziflM.roa (hash: 0ibg6oISPGaXyJMIkBYpRfjFyr2Dyc5Kyu9O/zaq9rU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:ee:51:d7:d0:db:d5:8d:1f:71:c3:6b:16:50:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac943517f5e3b747e7530320789a03444b43912 Validity Not Before: Dec 20 17:00:48 2025 GMT Not After : Dec 21 17:00:48 2025 GMT Subject: CN=11f5842eff2a3b16949ee9ab2eec29b276ff5594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:90:7b:fd:77:1d:0b:e3:bd:23:46:8b:54:ea: 15:84:dd:c6:64:7d:9f:20:63:b6:99:d4:83:d0:bc: 6d:24:3f:d3:a7:91:86:0e:05:92:37:2b:4b:60:79: 81:5f:1f:45:f0:cc:65:91:e9:78:13:6e:8b:1b:0a: b1:18:92:b0:f1:fc:3a:18:58:5a:53:f8:5b:71:7a: bf:4d:e1:4e:16:4b:20:e9:7a:63:4a:43:38:f3:7e: a7:e0:54:e3:63:e6:41:ec:c0:9c:13:af:ed:eb:13: 71:3d:df:dd:bf:e7:39:5b:48:93:ce:f3:27:18:d8: 39:f1:c7:29:1c:be:0d:d5:fc:ef:42:b0:fd:75:34: ea:6b:63:ef:bd:7f:c3:0d:8e:e6:3c:fc:8b:d8:0f: 1c:65:d7:9e:f7:54:2d:2f:66:dc:51:b7:12:68:95: fd:a9:66:53:37:3c:8a:55:5b:86:5e:f8:d1:3f:fc: 90:25:bc:15:12:62:1b:60:3a:55:df:2c:2b:ff:01: a8:c1:10:10:b1:ae:cb:e5:df:06:53:c9:71:bf:57: a0:32:da:84:14:83:09:e9:b9:d5:a9:0a:f9:77:1f: a8:15:16:7b:29:a9:7a:15:00:c2:11:b3:7c:c3:61: 9e:e7:20:94:0a:b2:63:a9:1f:2c:68:8d:52:f5:86: b9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F5:84:2E:FF:2A:3B:16:94:9E:E9:AB:2E:EC:29:B2:76:FF:55:94 X509v3 Authority Key Identifier: keyid:2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:d7:39:b4:68:e9:17:d7:4d:7f:5f:e1:eb:c1:f2:27:40:2a: 95:d1:72:95:3a:7a:4f:22:9a:ad:60:66:e4:1c:d6:b2:c7:7a: 32:17:a0:0f:19:66:52:97:96:90:a2:88:b7:85:58:5d:eb:1d: 71:bc:a0:27:34:0d:2c:1f:1d:05:af:a5:39:40:c6:ca:ab:8c: f5:1d:21:64:5f:ee:43:8d:d5:2f:a3:3a:f4:e2:f0:fe:27:b2: cf:03:cb:dc:72:98:76:94:5c:8a:7c:7e:73:1b:a2:7f:a6:df: 6f:df:f1:cc:59:da:e1:9d:60:4e:cf:d4:a3:e2:af:cd:98:61: e7:af:e6:3f:35:0f:19:81:49:5e:f8:8b:97:b1:10:f2:a9:ea: 51:11:8f:de:e8:b6:f9:0a:9f:e0:01:99:de:0e:4f:b8:f5:bb: 24:9c:b5:12:43:f4:16:4e:aa:66:80:bb:d6:1f:a6:52:59:45: 97:7f:ae:74:16:f8:f7:01:ee:22:bc:51:b8:fe:7a:d5:0c:39: ef:f4:02:00:da:7c:73:1c:fa:6c:24:99:16:27:d3:53:b0:44: d2:86:5a:0b:6b:73:33:86:ad:06:20:25:96:3a:2c:a4:d2:b2: 0a:4b:b8:d6:b7:e0:28:2b:89:47:8a:54:01:48:8d:15:35:f7: 8a:30:15:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tO5R19Db1Y0fccNrFlDqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzk0MzUxN2Y1ZTNiNzQ3ZTc1MzAzMjA3ODlhMDM0NDRi NDM5MTIwHhcNMjUxMjIwMTcwMDQ4WhcNMjUxMjIxMTcwMDQ4WjAzMTEwLwYDVQQD EygxMWY1ODQyZWZmMmEzYjE2OTQ5ZWU5YWIyZWVjMjliMjc2ZmY1NTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZB7/XcdC+O9I0aLVOoVhN3GZH2f IGO2mdSD0LxtJD/Tp5GGDgWSNytLYHmBXx9F8Mxlkel4E26LGwqxGJKw8fw6GFha U/hbcXq/TeFOFksg6XpjSkM4836n4FTjY+ZB7MCcE6/t6xNxPd/dv+c5W0iTzvMn GNg58ccpHL4N1fzvQrD9dTTqa2PvvX/DDY7mPPyL2A8cZdee91QtL2bcUbcSaJX9 qWZTNzyKVVuGXvjRP/yQJbwVEmIbYDpV3ywr/wGowRAQsa7L5d8GU8lxv1egMtqE FIMJ6bnVqQr5dx+oFRZ7Kal6FQDCEbN8w2Ge5yCUCrJjqR8saI1S9Ya5xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBH1hC7/KjsWlJ7pqy7sKbJ2/1WUMB8GA1UdIwQY MBaAFCrJQ1F/Xjt0fnUwMgeJoDREtDkSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NsRFVYOWVPM1ItZFRBeUI0bWdORVMwT1JJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8xOTUxMWQtNTM3ZS00MjQxLWEwZDgt MmQ5MWNmZDdhYWY0LzEvS3NsRFVYOWVPM1ItZFRBeUI0bWdORVMwT1JJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8xOTUxMWQtNTM3ZS00MjQxLWEwZDgtMmQ5MWNmZDdhYWY0 LzEvS3NsRFVYOWVPM1ItZFRBeUI0bWdORVMwT1JJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiNc5tGjp F9dNf1/h68HyJ0AqldFylTp6TyKarWBm5BzWssd6MhegDxlmUpeWkKKIt4VYXesd cbygJzQNLB8dBa+lOUDGyquM9R0hZF/uQ43VL6M69OLw/ieyzwPL3HKYdpRcinx+ cxuif6bfb9/xzFna4Z1gTs/Uo+KvzZhh56/mPzUPGYFJXviLl7EQ8qnqURGP3ui2 +Qqf4AGZ3g5PuPW7JJy1EkP0Fk6qZoC71h+mUllFl3+udBb49wHuIrxRuP561Qw5 7/QCANp8cxz6bCSZFifTU7BE0oZaC2tzM4atBiAlljospNKyCku41rfgKCuJR4pU AUiNFTX3ijAVpw== -----END CERTIFICATE-----Generated at Sat Dec 20 19:45:43 2025 by rpki-client