This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft File: KD3ro7EwXJpI03S6Rzab8fgn7gg.mft (raw, json) Hash identifier: vVDqkovzJLN7C1pSjxv8QHLpz+J+rZIQ4Iy8LYmXPUQ= Subject key identifier: D1:3E:66:B6:DB:A1:E7:48:71:EC:73:4B:39:19:B5:25:3F:9D:FD:73 Authority key identifier: 28:3D:EB:A3:B1:30:5C:9A:48:D3:74:BA:47:36:9B:F1:F8:27:EE:08 Certificate issuer: /CN=283deba3b1305c9a48d374ba47369bf1f827ee08 Certificate serial: 019B4CCCE886E7AF746E1D219D2F8E37A7FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft Manifest number: 0ADE Signing time: Tue 23 Dec 2025 20:00:55 +0000 Manifest this update: Tue 23 Dec 2025 20:00:55 +0000 Manifest next update: Wed 24 Dec 2025 20:00:55 +0000 Files and hashes: 1: KD3ro7EwXJpI03S6Rzab8fgn7gg.crl (hash: TLyLvmg7IPOLbljWa5jMMrmNu0LgSGk0pVIcOGmW6iY=) 2: hy1vd6FMybZThTm3SvjJ_hE7qn4.roa (hash: vLPWUWT2tszs2HUF2XNEiqkWjYMRC5uDHz+kbz1YJLg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:cc:e8:86:e7:af:74:6e:1d:21:9d:2f:8e:37:a7:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=283deba3b1305c9a48d374ba47369bf1f827ee08 Validity Not Before: Dec 23 20:00:55 2025 GMT Not After : Dec 24 20:00:55 2025 GMT Subject: CN=d13e66b6dba1e74871ec734b3919b5253f9dfd73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f6:3e:81:f4:52:e9:17:b2:6f:8a:31:81:32: a4:23:da:d2:cc:4b:6f:ad:24:9b:41:4d:72:17:fd: 5c:1c:32:db:96:af:a0:55:35:fd:5d:27:ab:27:7b: b7:f4:bd:45:e6:1a:3d:3e:e7:4e:3f:f5:df:bc:ff: 20:15:64:95:e4:40:fe:74:86:73:62:fb:55:9b:f5: 21:15:1c:bb:ee:63:42:ea:74:47:0a:f1:79:f7:42: 1f:81:28:99:68:f9:16:23:b6:18:d3:4e:96:66:8a: 2c:c4:f0:a7:35:3e:fd:03:ba:b2:3d:d7:77:12:65: 3a:97:c2:32:e6:4a:04:9c:10:0d:7e:49:15:d5:e7: 21:87:c0:22:6b:ad:48:8c:c9:e2:81:bf:5c:a9:c1: f1:3a:2f:0c:d2:ec:4c:8a:4c:b1:ff:8d:d6:cc:ea: 69:4d:66:37:2c:b8:47:ca:8a:a2:d8:de:72:ad:d1: 58:95:38:1b:6a:d8:e6:67:aa:25:81:33:05:f6:e3: 4f:38:14:e0:4f:a2:95:f8:79:c1:f7:18:3e:ca:7d: 6a:9f:c9:79:43:f4:4d:92:03:8b:05:65:f1:12:a0: d4:87:ca:6a:67:2c:8d:9b:ae:9e:ec:a6:a9:ed:8b: 6e:83:4f:be:0c:5e:e8:88:38:bb:b2:85:33:72:e8: 2c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:3E:66:B6:DB:A1:E7:48:71:EC:73:4B:39:19:B5:25:3F:9D:FD:73 X509v3 Authority Key Identifier: keyid:28:3D:EB:A3:B1:30:5C:9A:48:D3:74:BA:47:36:9B:F1:F8:27:EE:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:13:e5:98:12:c0:71:cd:20:37:07:f4:a9:c4:52:6a:3e:47: c7:dd:c4:09:76:5f:9b:fe:c7:33:98:9e:1e:37:17:70:66:f3: 2c:24:75:f5:47:d4:f5:53:f8:e8:71:25:1e:f7:71:f7:1d:60: d3:b3:d7:61:55:6b:4e:ab:13:db:a8:28:f3:41:29:3e:29:34: cc:76:67:2b:a4:b9:28:a4:0a:da:8b:5d:41:e6:51:a3:13:80: 5c:d4:06:1f:b6:40:2b:ba:db:68:e6:64:0b:dc:6b:d8:31:b2: f3:75:e0:cd:fb:b9:b9:79:c1:e4:86:73:d4:d3:0e:96:7f:1a: 8c:6a:f1:71:f7:f1:c3:b1:47:f1:c6:5e:23:0f:69:ed:90:7f: 3f:40:3b:df:38:ee:b1:c9:3c:26:88:1a:1f:a1:a1:db:1b:a6: 71:45:df:7e:40:b7:f6:1a:5a:75:5e:b8:b2:98:21:32:12:3d: 20:4b:0b:c0:7a:0a:5a:44:7a:0e:dd:ca:57:f6:8d:bd:99:58: 72:9c:ac:bc:49:16:4d:05:f9:36:2b:61:80:72:f4:f1:0d:bd: c9:57:cd:ef:7b:2a:49:03:71:6f:6f:4d:6c:0d:e1:d8:bc:99: 5d:79:20:01:44:e2:9d:b9:ca:97:49:5b:7c:40:48:71:71:d5: c8:dc:70:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMzOiG5690bh0hnS+ON6f/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4M2RlYmEzYjEzMDVjOWE0OGQzNzRiYTQ3MzY5YmYxZjgy N2VlMDgwHhcNMjUxMjIzMjAwMDU1WhcNMjUxMjI0MjAwMDU1WjAzMTEwLwYDVQQD EyhkMTNlNjZiNmRiYTFlNzQ4NzFlYzczNGIzOTE5YjUyNTNmOWRmZDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPY+gfRS6Reyb4oxgTKkI9rSzEtv rSSbQU1yF/1cHDLblq+gVTX9XSerJ3u39L1F5ho9PudOP/XfvP8gFWSV5ED+dIZz YvtVm/UhFRy77mNC6nRHCvF590IfgSiZaPkWI7YY006WZoosxPCnNT79A7qyPdd3 EmU6l8Iy5koEnBANfkkV1echh8Aia61IjMnigb9cqcHxOi8M0uxMikyx/43WzOpp TWY3LLhHyoqi2N5yrdFYlTgbatjmZ6olgTMF9uNPOBTgT6KV+HnB9xg+yn1qn8l5 Q/RNkgOLBWXxEqDUh8pqZyyNm66e7Kap7Ytug0++DF7oiDi7soUzcugsHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNE+ZrbboedIcexzSzkZtSU/nf1zMB8GA1UdIwQY MBaAFCg966OxMFyaSNN0ukc2m/H4J+4IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0Qzcm83RXdYSnBJMDNTNlJ6YWI4ZmduN2dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9lNWRmYTktNTE5Ni00OGNkLTkxNzgt NWEzMWY2MjBiMDRhLzEvS0Qzcm83RXdYSnBJMDNTNlJ6YWI4ZmduN2dnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9lNWRmYTktNTE5Ni00OGNkLTkxNzgtNWEzMWY2MjBiMDRh LzEvS0Qzcm83RXdYSnBJMDNTNlJ6YWI4ZmduN2dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMBPlmBLA cc0gNwf0qcRSaj5Hx93ECXZfm/7HM5ieHjcXcGbzLCR19UfU9VP46HElHvdx9x1g 07PXYVVrTqsT26go80EpPik0zHZnK6S5KKQK2otdQeZRoxOAXNQGH7ZAK7rbaOZk C9xr2DGy83Xgzfu5uXnB5IZz1NMOln8ajGrxcffxw7FH8cZeIw9p7ZB/P0A73zju sck8JogaH6Gh2xumcUXffkC39hpadV64spghMhI9IEsLwHoKWkR6Dt3KV/aNvZlY cpysvEkWTQX5NithgHL08Q29yVfN73sqSQNxb29NbA3h2LyZXXkgAUTinbnKl0lb fEBIcXHVyNxwAw== -----END CERTIFICATE-----Generated at Tue Dec 23 22:07:12 2025 by rpki-client