This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/KdlQvBhFV79QTPK3yUp9zsCHbWY.mft File: KdlQvBhFV79QTPK3yUp9zsCHbWY.mft (raw, json) Hash identifier: j/l75IWABaPkafU+tcuF8G1L+/VvtNj2pnnvp3FikNU= Subject key identifier: E9:15:66:28:87:D5:54:FD:55:95:49:84:11:ED:61:6C:E2:F1:94:00 Authority key identifier: 29:D9:50:BC:18:45:57:BF:50:4C:F2:B7:C9:4A:7D:CE:C0:87:6D:66 Certificate issuer: /CN=29d950bc184557bf504cf2b7c94a7dcec0876d66 Certificate serial: 019B53AC51019DEB0EA3754454FDE2FF3562 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdlQvBhFV79QTPK3yUp9zsCHbWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/KdlQvBhFV79QTPK3yUp9zsCHbWY.mft Manifest number: 1793 Signing time: Thu 25 Dec 2025 04:02:40 +0000 Manifest this update: Thu 25 Dec 2025 04:02:40 +0000 Manifest next update: Fri 26 Dec 2025 04:02:40 +0000 Files and hashes: 1: KdlQvBhFV79QTPK3yUp9zsCHbWY.crl (hash: G/WKvo6BdGcD+PiF7i5HbMLKK3apFG/e49yVyDktg6Y=) 2: zbr28h6G65Bn1Q6ZX_BmInmSKTE.roa (hash: ETLOFsK2osYgbAep7Hus0i1EKEQGmJzxLIzfnOkM508=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/KdlQvBhFV79QTPK3yUp9zsCHbWY.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/KdlQvBhFV79QTPK3yUp9zsCHbWY.mft rsync://rpki.ripe.net/repository/DEFAULT/KdlQvBhFV79QTPK3yUp9zsCHbWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 04:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ac:51:01:9d:eb:0e:a3:75:44:54:fd:e2:ff:35:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d950bc184557bf504cf2b7c94a7dcec0876d66 Validity Not Before: Dec 25 04:02:40 2025 GMT Not After : Dec 26 04:02:40 2025 GMT Subject: CN=e915662887d554fd5595498411ed616ce2f19400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bb:9e:49:a3:fe:18:66:b7:cb:41:49:cc:8a: 7b:c8:a5:ea:ce:23:c3:41:19:ae:20:43:4b:e8:3e: 0d:08:4c:73:46:5e:07:52:54:ef:a1:4a:00:67:93: 09:69:0a:2f:4f:44:73:41:2a:89:e7:54:ae:28:c2: 59:10:13:2f:73:08:2b:68:74:8b:58:09:1b:c0:d2: 59:ec:9a:8b:7d:fc:80:7a:81:88:5c:34:b7:ac:2f: aa:86:e4:9e:73:56:c8:e4:eb:22:9f:e3:0d:a0:f1: 8d:94:9f:6e:0b:1b:5c:db:db:de:1c:b1:03:1c:02: 0e:ac:b7:73:f4:e1:c0:5f:74:27:27:71:e5:a0:00: 95:6c:a0:5f:0a:ca:e6:08:52:5b:26:3c:c2:cd:56: 89:d8:46:ee:c8:2f:5a:1a:7d:73:55:d6:d4:db:a6: db:9b:cf:08:96:15:23:41:b5:13:9d:fd:5c:e5:ec: 2e:84:dd:7a:e8:30:4e:d0:ea:b4:ca:c9:f3:42:78: 19:45:a9:76:82:9f:e2:59:a5:39:1a:5f:0f:c9:c1: fc:21:14:ee:48:80:87:4a:c9:b6:4f:ca:29:9d:6c: a6:5a:81:91:93:7f:b2:9b:98:b2:2d:7c:5d:32:37: db:07:4a:74:1a:ed:4a:dc:c2:20:cc:97:a0:a0:37: 1d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:15:66:28:87:D5:54:FD:55:95:49:84:11:ED:61:6C:E2:F1:94:00 X509v3 Authority Key Identifier: keyid:29:D9:50:BC:18:45:57:BF:50:4C:F2:B7:C9:4A:7D:CE:C0:87:6D:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdlQvBhFV79QTPK3yUp9zsCHbWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/KdlQvBhFV79QTPK3yUp9zsCHbWY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/KdlQvBhFV79QTPK3yUp9zsCHbWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:36:dd:1e:07:7a:72:d9:00:e6:7c:46:2c:64:0a:f7:f0:c3: 1a:c5:de:6e:89:61:eb:ff:66:08:52:18:4a:68:4b:84:16:c7: bf:bf:77:08:15:ae:b6:0a:7d:5d:48:90:ac:16:8e:ce:68:b4: 28:c9:11:ce:1c:41:94:33:d0:2b:50:0a:d2:76:3f:0c:54:88: 84:06:3b:12:7f:8a:04:2e:61:bf:16:1e:1a:05:ee:a4:35:bd: 57:b2:41:c0:1c:86:9d:d2:3e:02:e8:64:26:e8:7e:64:96:c2: f1:1b:cd:90:f5:24:9d:56:c9:d2:9a:ff:c8:6a:9d:32:e2:f9: 07:fd:95:31:3d:d2:95:f2:fa:57:a7:70:80:36:ad:dc:ad:1c: 0d:a5:76:77:ac:cb:15:f0:5d:e7:3a:d7:f9:5d:75:7f:54:ae: b3:2a:92:13:e5:38:62:36:f7:c6:fb:8e:14:a1:27:90:7f:95: 2c:5e:ca:17:a0:f5:53:f5:66:cc:91:b4:69:03:c7:f1:9c:88: 06:50:06:21:4d:a1:f6:11:fa:5e:96:6f:a1:1a:34:e9:b5:ef: e5:0d:dd:57:ba:80:28:e7:76:50:f1:11:94:d6:22:a2:b9:cb: 81:7a:fc:26:10:7b:8b:e1:02:8c:bf:57:c8:eb:90:2f:2c:ca: 2b:58:98:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTrFEBnesOo3VEVP3i/zViMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDk1MGJjMTg0NTU3YmY1MDRjZjJiN2M5NGE3ZGNlYzA4 NzZkNjYwHhcNMjUxMjI1MDQwMjQwWhcNMjUxMjI2MDQwMjQwWjAzMTEwLwYDVQQD EyhlOTE1NjYyODg3ZDU1NGZkNTU5NTQ5ODQxMWVkNjE2Y2UyZjE5NDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprueSaP+GGa3y0FJzIp7yKXqziPD QRmuIENL6D4NCExzRl4HUlTvoUoAZ5MJaQovT0RzQSqJ51SuKMJZEBMvcwgraHSL WAkbwNJZ7JqLffyAeoGIXDS3rC+qhuSec1bI5Osin+MNoPGNlJ9uCxtc29veHLED HAIOrLdz9OHAX3QnJ3HloACVbKBfCsrmCFJbJjzCzVaJ2EbuyC9aGn1zVdbU26bb m88IlhUjQbUTnf1c5ewuhN166DBO0Oq0ysnzQngZRal2gp/iWaU5Gl8PycH8IRTu SICHSsm2T8opnWymWoGRk3+ym5iyLXxdMjfbB0p0Gu1K3MIgzJegoDcdBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOkVZiiH1VT9VZVJhBHtYWzi8ZQAMB8GA1UdIwQY MBaAFCnZULwYRVe/UEzyt8lKfc7Ah21mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RsUXZCaEZWNzlRVFBLM3lVcDl6c0NIYldZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi83NzJmZWEtNDcxNS00MDEwLThjMWUt ZGVlNjZhMzU1MDZjLzEvS2RsUXZCaEZWNzlRVFBLM3lVcDl6c0NIYldZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi83NzJmZWEtNDcxNS00MDEwLThjMWUtZGVlNjZhMzU1MDZj LzEvS2RsUXZCaEZWNzlRVFBLM3lVcDl6c0NIYldZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdjbdHgd6 ctkA5nxGLGQK9/DDGsXebolh6/9mCFIYSmhLhBbHv793CBWutgp9XUiQrBaOzmi0 KMkRzhxBlDPQK1AK0nY/DFSIhAY7En+KBC5hvxYeGgXupDW9V7JBwByGndI+Auhk Juh+ZJbC8RvNkPUknVbJ0pr/yGqdMuL5B/2VMT3SlfL6V6dwgDat3K0cDaV2d6zL FfBd5zrX+V11f1SusyqSE+U4Yjb3xvuOFKEnkH+VLF7KF6D1U/VmzJG0aQPH8ZyI BlAGIU2h9hH6XpZvoRo06bXv5Q3dV7qAKOd2UPERlNYiornLgXr8JhB7i+ECjL9X yOuQLyzKK1iYkQ== -----END CERTIFICATE-----Generated at Thu Dec 25 14:06:26 2025 by rpki-client