This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft File: KJDadlqZn3GYdcUe7PTH1hSKG9k.mft (raw, json) Hash identifier: YjlczBZFM+p9Qqeo681OEvnAxx1qfHurxORqbD9jDMo= Subject key identifier: 78:40:FF:25:AB:0D:37:43:C7:DC:DB:79:58:90:94:FD:87:97:D5:11 Authority key identifier: 28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9 Certificate issuer: /CN=2890da765a999f719875c51eecf4c7d6148a1bd9 Certificate serial: 019B3DFEDDA78B78206180FC54A6333B12CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft Manifest number: 0EB1 Signing time: Sat 20 Dec 2025 23:01:11 +0000 Manifest this update: Sat 20 Dec 2025 23:01:11 +0000 Manifest next update: Sun 21 Dec 2025 23:01:11 +0000 Files and hashes: 1: HMBy97dklkxPQBrLpsbW-ZNRc7U.roa (hash: lqft+CvpsJy14zKD+aRqKJHCgA+Rv0wI4PijqNi8qGo=) 2: IYTFbsH2zrYimow5PfBhyISAXgE.roa (hash: 3Ol+0d4dyS1miwyxB+aBgXHbVV5ki9Vv7rh4KQYX/5Y=) 3: KJDadlqZn3GYdcUe7PTH1hSKG9k.crl (hash: FwkGU0hYlTORYuYWQ90Ff227DiNyN75wV34t2DEdOSU=) 4: ruoDX0K9VhdXmRyoyMx7Kq-ps0U.roa (hash: zYFHs9Pc2fRsxf2yR98ieoabL4bJzJtKnSudDrvjoY4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:dd:a7:8b:78:20:61:80:fc:54:a6:33:3b:12:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2890da765a999f719875c51eecf4c7d6148a1bd9 Validity Not Before: Dec 20 23:01:11 2025 GMT Not After : Dec 21 23:01:11 2025 GMT Subject: CN=7840ff25ab0d3743c7dcdb79589094fd8797d511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f5:2a:46:b7:55:fa:6e:40:87:39:d3:26:31: 61:ed:47:c4:fa:af:0a:b8:6d:1e:3f:c2:31:52:d7: cb:7b:f1:c1:ad:0f:be:b1:97:ce:c8:25:5c:61:94: 06:e7:bd:cd:89:a3:6a:be:2c:41:54:86:5d:74:89: 19:d6:7d:97:f4:0e:f5:fd:09:2f:26:af:8f:01:a5: 4a:ec:a2:2f:0a:b6:f3:79:33:ae:aa:00:24:eb:2d: 61:82:25:2d:3a:64:ca:05:9b:db:e7:cd:48:de:31: ca:fb:06:6d:a1:4f:71:cc:7a:20:e2:aa:9d:31:91: 42:f2:96:7b:9f:f4:a6:09:3e:1b:ca:f0:84:e3:0e: 44:0f:6b:d7:da:70:13:3b:34:d8:51:44:0f:4c:8b: 82:11:26:a8:26:2b:75:63:f6:ed:31:62:72:6c:d2: 88:47:05:e3:1f:61:34:a6:76:20:13:ad:29:69:98: 2e:cc:37:16:1e:16:54:50:25:3e:62:26:fc:5a:bf: e4:9e:be:81:48:de:19:9b:cf:ee:85:24:4f:f5:bc: 19:0f:76:03:a1:b9:88:6c:ca:23:e4:c3:29:09:18: ef:7e:19:e8:c9:58:fe:29:b6:04:b6:c2:0b:b9:70: d9:c9:77:96:0b:ff:17:11:2a:a0:79:a9:31:ff:ab: 3c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:40:FF:25:AB:0D:37:43:C7:DC:DB:79:58:90:94:FD:87:97:D5:11 X509v3 Authority Key Identifier: keyid:28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:fd:e6:8a:e3:e4:66:fb:c4:e9:99:3f:be:5e:4b:73:d8:8f: b4:0b:b9:ea:70:64:a2:ee:7e:99:28:8c:e4:12:86:e9:3f:10: 47:07:bd:2d:d9:ab:cc:f8:92:c4:d8:6f:9c:40:02:48:38:bf: 1b:65:9b:c1:d3:75:73:a3:8f:98:62:8d:b7:dc:f9:29:a3:ee: 0a:6e:6c:5c:b0:08:c1:42:b3:94:54:57:3b:f8:4b:50:83:d5: 8d:f2:de:c8:d5:83:ec:a1:42:a5:48:59:a0:39:e6:ff:ca:57: 4a:96:99:b1:86:8f:b9:a3:06:1d:0c:1a:e7:c0:98:a0:4f:1a: f6:c1:63:57:d6:96:0e:0a:e3:9b:45:60:25:6e:5c:52:34:de: 20:a6:8d:e4:b3:2e:ea:76:c9:29:64:08:f8:6a:4b:11:af:f8: 06:ef:1d:c5:fe:c0:10:28:7b:dd:af:b0:e1:9a:f9:a4:37:ce: 4d:5f:aa:db:08:00:8b:97:41:e7:65:f7:0f:0e:ac:be:82:5c: 6e:1f:62:c5:5a:3b:f1:f2:0a:b2:d3:95:5a:06:64:0a:8a:c8: 23:24:a5:ae:f8:ae:a7:8d:77:ad:25:0e:d7:06:d6:54:24:33: f8:81:b0:c1:72:ef:2d:85:8e:4a:5a:8c:8e:cb:64:2f:e7:83: e9:bb:e5:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/t2ni3ggYYD8VKYzOxLNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4OTBkYTc2NWE5OTlmNzE5ODc1YzUxZWVjZjRjN2Q2MTQ4 YTFiZDkwHhcNMjUxMjIwMjMwMTExWhcNMjUxMjIxMjMwMTExWjAzMTEwLwYDVQQD Eyg3ODQwZmYyNWFiMGQzNzQzYzdkY2RiNzk1ODkwOTRmZDg3OTdkNTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/UqRrdV+m5AhznTJjFh7UfE+q8K uG0eP8IxUtfLe/HBrQ++sZfOyCVcYZQG573NiaNqvixBVIZddIkZ1n2X9A71/Qkv Jq+PAaVK7KIvCrbzeTOuqgAk6y1hgiUtOmTKBZvb581I3jHK+wZtoU9xzHog4qqd MZFC8pZ7n/SmCT4byvCE4w5ED2vX2nATOzTYUUQPTIuCESaoJit1Y/btMWJybNKI RwXjH2E0pnYgE60paZguzDcWHhZUUCU+Yib8Wr/knr6BSN4Zm8/uhSRP9bwZD3YD obmIbMoj5MMpCRjvfhnoyVj+KbYEtsILuXDZyXeWC/8XESqgeakx/6s8swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHhA/yWrDTdDx9zbeViQlP2Hl9URMB8GA1UdIwQY MBaAFCiQ2nZamZ9xmHXFHuz0x9YUihvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0pEYWRscVpuM0dZZGNVZTdQVEgxaFNLRzlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yYmJjZDQtZWRhYi00OGVlLWE0MTEt MjhmYzcwNjNkOTUyLzEvS0pEYWRscVpuM0dZZGNVZTdQVEgxaFNLRzlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8yYmJjZDQtZWRhYi00OGVlLWE0MTEtMjhmYzcwNjNkOTUy LzEvS0pEYWRscVpuM0dZZGNVZTdQVEgxaFNLRzlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0v3miuPk ZvvE6Zk/vl5Lc9iPtAu56nBkou5+mSiM5BKG6T8QRwe9LdmrzPiSxNhvnEACSDi/ G2WbwdN1c6OPmGKNt9z5KaPuCm5sXLAIwUKzlFRXO/hLUIPVjfLeyNWD7KFCpUhZ oDnm/8pXSpaZsYaPuaMGHQwa58CYoE8a9sFjV9aWDgrjm0VgJW5cUjTeIKaN5LMu 6nbJKWQI+GpLEa/4Bu8dxf7AECh73a+w4Zr5pDfOTV+q2wgAi5dB52X3Dw6svoJc bh9ixVo78fIKstOVWgZkCorIIySlrviup413rSUO1wbWVCQz+IGwwXLvLYWOSlqM jstkL+eD6bvl2w== -----END CERTIFICATE-----Generated at Sun Dec 21 06:01:53 2025 by rpki-client