This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft File: kNdTolR-A6Sw0vkccOnOTkRoBBg.mft (raw, json) Hash identifier: L8ypbYXU4+dIDIsAJJz8oIeRQIxm7lUjx5loaJx6QRA= Subject key identifier: E3:D6:CD:84:9A:7D:7E:03:20:E6:CD:2D:24:E9:25:89:E8:25:AA:4F Authority key identifier: 90:D7:53:A2:54:7E:03:A4:B0:D2:F9:1C:70:E9:CE:4E:44:68:04:18 Certificate issuer: /CN=90d753a2547e03a4b0d2f91c70e9ce4e44680418 Certificate serial: 019B4ADEA29037E279B78E623BE8ED619B14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft Manifest number: 0C33 Signing time: Tue 23 Dec 2025 11:01:02 +0000 Manifest this update: Tue 23 Dec 2025 11:01:02 +0000 Manifest next update: Wed 24 Dec 2025 11:01:02 +0000 Files and hashes: 1: g5z8NV4dmlaKd11s7v3mxc0KYqU.roa (hash: bnZ9DFLSZGC/zi7MlcnpGi6LDIICQO79p3wjfCQfT+E=) 2: kNdTolR-A6Sw0vkccOnOTkRoBBg.crl (hash: Rh/2xD9jTVR72fNXhAuCf+4slkyo6LgAv8cZ3S+dRWo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.crl rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 11:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:de:a2:90:37:e2:79:b7:8e:62:3b:e8:ed:61:9b:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90d753a2547e03a4b0d2f91c70e9ce4e44680418 Validity Not Before: Dec 23 11:01:02 2025 GMT Not After : Dec 24 11:01:02 2025 GMT Subject: CN=e3d6cd849a7d7e0320e6cd2d24e92589e825aa4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9f:ea:f1:66:31:87:88:84:98:eb:06:62:a3: af:9b:d0:28:f8:4b:f1:2f:73:c6:7b:73:fe:da:97: bb:5f:56:bd:58:50:8d:ca:da:33:6a:ad:94:b1:d6: 86:51:cb:f0:1b:c9:14:41:22:47:e0:2a:52:f2:5b: dc:ea:91:53:6a:f2:9b:1c:de:30:0d:9f:7b:70:c2: f6:a3:74:91:3a:3f:15:b8:e7:6c:f2:63:99:b6:4c: 39:d1:91:84:13:f0:b9:6f:51:06:92:7a:01:65:fb: 38:90:ac:da:af:87:77:04:93:e1:22:45:15:4b:5d: 6f:46:11:b8:b0:9e:dc:82:a6:2d:e1:10:3a:3b:c7: 64:3d:da:cd:b6:dc:c1:3e:f5:4e:ef:0f:0a:42:bb: e6:4e:ca:3b:e6:c1:66:31:d9:b4:94:6f:c8:7f:34: bc:a8:0a:c2:e9:63:2e:f5:3e:24:8b:76:b2:86:27: 04:41:9c:a0:d8:55:80:90:de:0d:4b:c0:b8:ff:16: 0c:13:de:a0:f4:71:c2:66:f8:f4:c5:e2:79:0b:f8: 74:e0:98:41:b0:2a:36:d8:b6:8d:35:82:48:07:f2: 0d:17:33:5e:47:be:96:e4:4e:4a:87:82:bb:f4:7b: 3a:35:d0:e0:40:86:86:27:62:18:6c:f9:0e:31:76: 72:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D6:CD:84:9A:7D:7E:03:20:E6:CD:2D:24:E9:25:89:E8:25:AA:4F X509v3 Authority Key Identifier: keyid:90:D7:53:A2:54:7E:03:A4:B0:D2:F9:1C:70:E9:CE:4E:44:68:04:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:9d:a1:ff:c3:8d:3c:54:74:42:61:22:c5:f5:75:f9:79:21: ed:72:86:5e:a6:a7:bb:ec:14:98:9b:f5:0f:e7:a4:51:54:67: b0:ac:3c:c6:73:3e:bb:9a:7d:df:1d:d1:66:65:d8:c2:4b:6f: 8e:da:f9:e9:09:23:61:8c:56:bf:41:4f:e0:79:dd:b1:d1:8b: 5e:05:c6:1a:13:04:95:12:5a:a8:ba:ed:1e:a9:00:1c:a2:c9: 5b:aa:6f:ed:db:a2:8b:74:f3:41:ed:f8:1a:13:91:d0:d0:7d: 57:9c:9f:f2:74:ae:7d:43:81:b8:45:01:c9:c9:af:de:ff:52: 8a:14:47:c9:26:a3:49:f3:25:e4:1d:2e:76:10:07:9f:12:8c: 95:bb:ec:be:4f:04:f1:4a:3b:b8:38:dc:07:fe:42:78:6c:97: c3:08:fb:5b:8c:f0:3c:da:06:06:de:20:e4:aa:80:fe:6f:cd: e3:f2:af:5a:1a:24:9b:9e:45:7f:3b:45:ee:07:6a:81:6e:ab: 26:83:5e:bc:b4:43:c7:fb:bf:15:3d:bf:9d:fe:bb:4f:30:03: 42:81:11:d5:f3:87:45:ff:9e:24:6b:2a:65:c5:ba:6b:00:d2: 9e:99:e7:38:64:4d:83:4b:05:8d:fd:b2:95:f1:ef:e5:fa:ed: 96:90:d1:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtK3qKQN+J5t45iO+jtYZsUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZDc1M2EyNTQ3ZTAzYTRiMGQyZjkxYzcwZTljZTRlNDQ2 ODA0MTgwHhcNMjUxMjIzMTEwMTAyWhcNMjUxMjI0MTEwMTAyWjAzMTEwLwYDVQQD EyhlM2Q2Y2Q4NDlhN2Q3ZTAzMjBlNmNkMmQyNGU5MjU4OWU4MjVhYTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtp/q8WYxh4iEmOsGYqOvm9Ao+Evx L3PGe3P+2pe7X1a9WFCNytozaq2UsdaGUcvwG8kUQSJH4CpS8lvc6pFTavKbHN4w DZ97cML2o3SROj8VuOds8mOZtkw50ZGEE/C5b1EGknoBZfs4kKzar4d3BJPhIkUV S11vRhG4sJ7cgqYt4RA6O8dkPdrNttzBPvVO7w8KQrvmTso75sFmMdm0lG/IfzS8 qArC6WMu9T4ki3ayhicEQZyg2FWAkN4NS8C4/xYME96g9HHCZvj0xeJ5C/h04JhB sCo22LaNNYJIB/INFzNeR76W5E5Kh4K79Hs6NdDgQIaGJ2IYbPkOMXZy1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOPWzYSafX4DIObNLSTpJYnoJapPMB8GA1UdIwQY MBaAFJDXU6JUfgOksNL5HHDpzk5EaAQYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva05kVG9sUi1BNlN3MHZrY2NPbk9Ua1JvQkJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jYzkwOTktNzEwMS00NzJlLWFlZmMt NWViNjZiY2UzMThkLzEva05kVG9sUi1BNlN3MHZrY2NPbk9Ua1JvQkJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9jYzkwOTktNzEwMS00NzJlLWFlZmMtNWViNjZiY2UzMThk LzEva05kVG9sUi1BNlN3MHZrY2NPbk9Ua1JvQkJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANJ2h/8ON PFR0QmEixfV1+Xkh7XKGXqanu+wUmJv1D+ekUVRnsKw8xnM+u5p93x3RZmXYwktv jtr56QkjYYxWv0FP4HndsdGLXgXGGhMElRJaqLrtHqkAHKLJW6pv7duii3TzQe34 GhOR0NB9V5yf8nSufUOBuEUBycmv3v9SihRHySajSfMl5B0udhAHnxKMlbvsvk8E 8Uo7uDjcB/5CeGyXwwj7W4zwPNoGBt4g5KqA/m/N4/KvWhokm55FfztF7gdqgW6r JoNevLRDx/u/FT2/nf67TzADQoER1fOHRf+eJGsqZcW6awDSnpnnOGRNg0sFjf2y lfHv5frtlpDRdQ== -----END CERTIFICATE-----Generated at Tue Dec 23 20:51:48 2025 by rpki-client