This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft File: KVkHdOd6iZSkKDEow1kh0DewbyE.mft (raw, json) Hash identifier: XcGFdyiJFQiPGPqSE1g/+CLPqxm2ljTj8zv6IyIInYw= Subject key identifier: 96:A2:B8:81:AC:62:5D:5A:65:A2:D3:DF:68:B0:66:9F:F4:BD:EA:63 Authority key identifier: 29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21 Certificate issuer: /CN=29590774e77a8994a4283128c35921d037b06f21 Certificate serial: 019B42EE1D94A30FF8613C44F9E8ED85C778 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 22:00:59 +0000 Manifest this update: Sun 21 Dec 2025 22:00:59 +0000 Manifest next update: Mon 22 Dec 2025 22:00:59 +0000 Files and hashes: 1: KVkHdOd6iZSkKDEow1kh0DewbyE.crl (hash: K5mjU3RRLN3F+Coglh9UZrfU5f2TTVReB6ZWyfCDL/I=) 2: gxGfsBx6lLiLQDxOb4KsEBJPPD4.roa (hash: D/Hy5r+AT898TQXYisKdolhcFtwKf/D8Em+z0xE13iQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:1d:94:a3:0f:f8:61:3c:44:f9:e8:ed:85:c7:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29590774e77a8994a4283128c35921d037b06f21 Validity Not Before: Dec 21 22:00:59 2025 GMT Not After : Dec 22 22:00:59 2025 GMT Subject: CN=96a2b881ac625d5a65a2d3df68b0669ff4bdea63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:32:7c:d5:86:c3:0c:00:cb:e8:49:7e:ee:a3: 71:2b:6f:f3:a1:b5:e1:aa:e8:59:c4:d6:1f:65:3e: 82:a9:09:01:d2:e9:cc:bc:2c:87:bf:f0:a5:63:6d: 8e:ec:b0:1d:58:c1:cd:28:06:64:b0:af:b5:6c:4a: 2c:4c:8c:b8:87:24:52:a7:8d:06:01:a2:10:c6:3a: 9e:12:56:44:a7:1e:8c:37:a8:3c:df:41:3c:10:18: 93:9d:2a:07:ea:40:a0:11:78:6d:cb:af:03:da:75: e1:4c:72:e8:71:53:1d:d3:71:ed:b6:8a:26:88:91: de:17:61:49:d8:71:ec:9a:8a:fb:5c:6c:1f:08:56: c9:c7:dd:40:c3:7b:eb:08:ce:7e:2a:0d:81:d2:73: 09:87:78:fb:e0:de:0c:1d:15:ce:b8:f3:3b:dc:bb: 88:7b:f2:3e:f4:f6:bc:a7:2c:a4:49:31:bd:f1:b2: 86:11:e3:46:53:d5:d8:b5:92:45:52:ec:30:c9:21: 05:8f:05:5b:bb:e0:1e:57:4b:75:75:2a:54:c5:92: 95:1d:98:d6:e9:12:46:6c:28:53:8e:8c:5a:3c:56: fe:4d:10:05:b3:66:30:69:54:79:83:86:58:70:d6: 39:34:3d:43:a0:33:e8:8e:fb:7a:2a:5e:df:13:85: 19:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A2:B8:81:AC:62:5D:5A:65:A2:D3:DF:68:B0:66:9F:F4:BD:EA:63 X509v3 Authority Key Identifier: keyid:29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:dd:d3:56:4f:b6:82:cf:cc:79:60:3f:0f:63:83:c6:27:de: 88:a3:99:c9:76:79:b2:16:65:ca:c2:57:12:b9:58:ff:9d:82: bb:37:35:dd:48:bc:4f:73:95:26:d8:36:ab:b5:fb:45:71:4f: c4:4c:fc:a6:e5:2b:9c:c4:73:e9:85:1b:75:e8:0e:53:13:01: 0d:96:60:a8:fc:32:0c:89:8a:84:ff:36:92:4f:cd:87:9f:a7: 9c:d6:82:f1:16:62:a8:53:e4:bb:4f:82:08:53:40:87:a6:3d: 52:3a:24:db:ff:97:d9:a0:1c:67:75:be:30:80:fb:f1:be:ae: 36:97:bd:21:ff:e1:9a:32:05:49:e5:06:e0:4f:b0:45:c7:de: 11:c2:02:8e:58:1f:c4:33:ea:7a:8e:37:0e:c6:00:38:bf:9d: a5:22:05:e0:e0:22:d7:43:00:53:a1:0c:2e:d1:65:2e:4b:3b: f4:5d:ba:56:76:09:b5:16:ea:43:7f:f2:2b:34:26:7e:41:e4: 56:0e:81:8c:68:7a:23:53:50:66:48:2e:6c:5a:68:c0:51:bb: 5f:b0:de:d6:7c:b0:28:86:e6:f0:9e:14:4a:2e:f3:4a:3a:cf: 6a:f6:88:e3:51:68:3e:62:10:ef:46:b1:83:07:4a:d0:a2:f8: ef:36:b5:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7h2Uow/4YTxE+ejthcd4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NTkwNzc0ZTc3YTg5OTRhNDI4MzEyOGMzNTkyMWQwMzdi MDZmMjEwHhcNMjUxMjIxMjIwMDU5WhcNMjUxMjIyMjIwMDU5WjAzMTEwLwYDVQQD Eyg5NmEyYjg4MWFjNjI1ZDVhNjVhMmQzZGY2OGIwNjY5ZmY0YmRlYTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDJ81YbDDADL6El+7qNxK2/zobXh quhZxNYfZT6CqQkB0unMvCyHv/ClY22O7LAdWMHNKAZksK+1bEosTIy4hyRSp40G AaIQxjqeElZEpx6MN6g830E8EBiTnSoH6kCgEXhty68D2nXhTHLocVMd03Httoom iJHeF2FJ2HHsmor7XGwfCFbJx91Aw3vrCM5+Kg2B0nMJh3j74N4MHRXOuPM73LuI e/I+9Pa8pyykSTG98bKGEeNGU9XYtZJFUuwwySEFjwVbu+AeV0t1dSpUxZKVHZjW 6RJGbChTjoxaPFb+TRAFs2YwaVR5g4ZYcNY5ND1DoDPojvt6Kl7fE4UZHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJaiuIGsYl1aZaLT32iwZp/0vepjMB8GA1UdIwQY MBaAFClZB3TneomUpCgxKMNZIdA3sG8hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1ZrSGRPZDZpWlNrS0RFb3cxa2gwRGV3YnlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni82NzQ1ZmUtZTQ3NS00YzU4LWEzMWUt ZjJjMGRhNjFhYzEzLzEvS1ZrSGRPZDZpWlNrS0RFb3cxa2gwRGV3YnlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni82NzQ1ZmUtZTQ3NS00YzU4LWEzMWUtZjJjMGRhNjFhYzEz LzEvS1ZrSGRPZDZpWlNrS0RFb3cxa2gwRGV3YnlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR93TVk+2 gs/MeWA/D2ODxifeiKOZyXZ5shZlysJXErlY/52Cuzc13Ui8T3OVJtg2q7X7RXFP xEz8puUrnMRz6YUbdegOUxMBDZZgqPwyDImKhP82kk/Nh5+nnNaC8RZiqFPku0+C CFNAh6Y9Ujok2/+X2aAcZ3W+MID78b6uNpe9If/hmjIFSeUG4E+wRcfeEcICjlgf xDPqeo43DsYAOL+dpSIF4OAi10MAU6EMLtFlLks79F26VnYJtRbqQ3/yKzQmfkHk Vg6BjGh6I1NQZkgubFpowFG7X7De1nywKIbm8J4USi7zSjrPavaI41FoPmIQ70ax gwdK0KL47za1sw== -----END CERTIFICATE-----Generated at Mon Dec 22 02:05:16 2025 by rpki-client