This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft File: KVdFdunOo46j9u6ybIMnUooKG_8.mft (raw, json) Hash identifier: /3Gx7Jnu1UFY/gyNTyoC9FA/FvkE7rbmVhTtoeiIFL0= Subject key identifier: EF:35:8C:9B:FD:36:AF:4E:BA:68:2E:CE:F6:8B:77:74:75:8E:26:8D Authority key identifier: 29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF Certificate issuer: /CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff Certificate serial: 019B4E8471DAA9D19EF976111125C4263949 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft Manifest number: 07E2 Signing time: Wed 24 Dec 2025 04:01:01 +0000 Manifest this update: Wed 24 Dec 2025 04:01:01 +0000 Manifest next update: Thu 25 Dec 2025 04:01:01 +0000 Files and hashes: 1: KVdFdunOo46j9u6ybIMnUooKG_8.crl (hash: mhf4nEGH9Z89ieTCQbyZnfyfogXH6/zc7TpkYCCpVzs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:84:71:da:a9:d1:9e:f9:76:11:11:25:c4:26:39:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff Validity Not Before: Dec 24 04:01:01 2025 GMT Not After : Dec 25 04:01:01 2025 GMT Subject: CN=ef358c9bfd36af4eba682ecef68b7774758e268d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:46:5d:e0:8f:dc:0c:22:69:f7:ed:48:e7:a0: f4:e1:a9:91:6c:24:f8:44:a0:f0:ca:3c:b0:04:e0: 51:d4:a3:66:76:ff:7b:2f:57:fd:24:76:f5:c2:00: a9:9b:61:70:c6:ec:2e:72:15:7c:40:c5:33:95:8b: 80:08:eb:c8:8b:89:8c:ac:4b:86:f7:8e:c5:24:d6: 44:bc:d8:79:5d:56:4a:21:89:f1:f0:eb:9a:eb:a6: 60:bb:97:a3:b8:49:a1:40:19:02:0a:ad:4c:00:46: ca:c6:e3:2f:a3:54:a0:bf:c4:fb:4f:0d:31:7e:8c: e0:3c:9a:f7:2b:65:8b:7c:a3:f7:66:07:d0:ff:1f: 84:7a:2e:63:47:21:85:f9:88:36:1f:0e:80:33:cd: 0f:40:9d:81:e9:0f:8c:be:e7:ef:a9:7b:be:f4:77: 6d:98:af:87:d6:1c:c2:39:77:9d:2a:52:6a:af:57: 2c:1b:6d:cb:18:6f:1f:49:c6:dc:04:e2:79:26:c4: ad:24:d8:3e:a9:1e:36:8d:7e:a6:7e:57:4d:69:ae: a4:d5:d9:b2:67:8f:21:b9:49:b1:cb:e3:73:e9:2b: a6:14:7e:a6:9a:74:e4:f0:d9:7a:70:d8:f8:1d:5d: 2b:dc:92:8b:61:29:c1:bb:9b:45:4d:c0:94:9e:d7: c9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:35:8C:9B:FD:36:AF:4E:BA:68:2E:CE:F6:8B:77:74:75:8E:26:8D X509v3 Authority Key Identifier: keyid:29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:20:5f:67:bf:db:40:ff:b8:f4:79:3c:58:ea:09:e3:8b:25: 84:33:b1:89:d8:ec:d5:65:e3:e7:de:45:cf:87:e0:67:fc:bf: 2b:d2:3a:fc:1a:bc:69:fc:e8:d1:01:c3:5e:ba:73:5d:63:ee: 6e:84:59:e7:9f:be:55:19:31:7b:eb:95:2e:a2:04:18:54:54: 4d:8a:f0:19:0d:9d:b2:d9:14:00:28:ff:9c:c7:a0:77:8f:2d: 86:97:00:a3:86:76:1a:7e:f3:b2:12:9c:97:3f:02:79:1d:21: 0a:cb:0b:da:c6:c9:b5:52:ee:e4:99:2c:55:04:34:92:47:f7: fb:4c:d0:e2:08:4e:c8:cb:52:70:b2:db:98:7f:fa:d8:cc:8e: 7b:6f:d0:bb:6a:70:41:3e:4d:89:7d:72:30:f2:e0:17:83:2f: 9f:b7:8f:84:bb:9c:a5:25:62:ae:75:60:27:8e:0c:bc:f0:4e: 1d:ff:f0:f6:d9:bf:0b:79:76:2b:bb:0c:34:57:58:cd:09:b6: 06:09:5a:9a:9b:1e:09:b6:4c:1a:fe:42:27:49:94:77:37:14: c8:73:fd:db:85:fc:8b:73:3b:67:68:f2:04:49:ed:f8:24:26: 4e:74:1e:26:66:51:73:2f:b6:30:a7:a8:c3:a3:a0:08:88:ba: d5:ce:ec:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOhHHaqdGe+XYRESXEJjlJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NTc0NTc2ZTljZWEzOGVhM2Y2ZWViMjZjODMyNzUyOGEw YTFiZmYwHhcNMjUxMjI0MDQwMTAxWhcNMjUxMjI1MDQwMTAxWjAzMTEwLwYDVQQD EyhlZjM1OGM5YmZkMzZhZjRlYmE2ODJlY2VmNjhiNzc3NDc1OGUyNjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9EZd4I/cDCJp9+1I56D04amRbCT4 RKDwyjywBOBR1KNmdv97L1f9JHb1wgCpm2FwxuwuchV8QMUzlYuACOvIi4mMrEuG 947FJNZEvNh5XVZKIYnx8Oua66Zgu5ejuEmhQBkCCq1MAEbKxuMvo1Sgv8T7Tw0x fozgPJr3K2WLfKP3ZgfQ/x+Eei5jRyGF+Yg2Hw6AM80PQJ2B6Q+MvufvqXu+9Hdt mK+H1hzCOXedKlJqr1csG23LGG8fScbcBOJ5JsStJNg+qR42jX6mfldNaa6k1dmy Z48huUmxy+Nz6SumFH6mmnTk8Nl6cNj4HV0r3JKLYSnBu5tFTcCUntfJrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO81jJv9Nq9OumguzvaLd3R1jiaNMB8GA1UdIwQY MBaAFClXRXbpzqOOo/busmyDJ1KKChv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1ZkRmR1bk9vNDZqOXU2eWJJTW5Vb29LR184LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iZDA1NTYtM2YzMy00NmRlLTkyOTEt M2IzNDQyMGQ5MGQyLzEvS1ZkRmR1bk9vNDZqOXU2eWJJTW5Vb29LR184Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9iZDA1NTYtM2YzMy00NmRlLTkyOTEtM2IzNDQyMGQ5MGQy LzEvS1ZkRmR1bk9vNDZqOXU2eWJJTW5Vb29LR184LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOiBfZ7/b QP+49Hk8WOoJ44slhDOxidjs1WXj595Fz4fgZ/y/K9I6/Bq8afzo0QHDXrpzXWPu boRZ55++VRkxe+uVLqIEGFRUTYrwGQ2dstkUACj/nMegd48thpcAo4Z2Gn7zshKc lz8CeR0hCssL2sbJtVLu5JksVQQ0kkf3+0zQ4ghOyMtScLLbmH/62MyOe2/Qu2pw QT5NiX1yMPLgF4Mvn7ePhLucpSVirnVgJ44MvPBOHf/w9tm/C3l2K7sMNFdYzQm2 BglampseCbZMGv5CJ0mUdzcUyHP924X8i3M7Z2jyBEnt+CQmTnQeJmZRcy+2MKeo w6OgCIi61c7s/Q== -----END CERTIFICATE-----Generated at Wed Dec 24 08:47:16 2025 by rpki-client