This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft File: Kf49-nfrAgHIVtHh6_AyvMixJNg.mft (raw, json) Hash identifier: P4UQ4lXuMTn/h+NfYZy2zqxZVsfEfQanFM9OaIv1kGk= Subject key identifier: 61:64:C5:28:53:FC:C0:65:68:1F:91:29:33:BA:05:96:84:CA:3F:4C Authority key identifier: 29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8 Certificate issuer: /CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8 Certificate serial: 019B4A0442245377351A6E34143F1EAB989A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft Manifest number: 1721 Signing time: Tue 23 Dec 2025 07:02:31 +0000 Manifest this update: Tue 23 Dec 2025 07:02:31 +0000 Manifest next update: Wed 24 Dec 2025 07:02:31 +0000 Files and hashes: 1: Kf49-nfrAgHIVtHh6_AyvMixJNg.crl (hash: n65Cb8B53PcFr5qeKIX+b6DS9SXidG2wIuYbkh00aCg=) 2: m11OWXhefXzJ44FLBlsWKfsOtOo.roa (hash: djUPPyQWxYPvFQMatObPciTtNbLwqpNgMtWLRjYVwc0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:02:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:04:42:24:53:77:35:1a:6e:34:14:3f:1e:ab:98:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8 Validity Not Before: Dec 23 07:02:31 2025 GMT Not After : Dec 24 07:02:31 2025 GMT Subject: CN=6164c52853fcc065681f912933ba059684ca3f4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:94:14:46:6c:ff:82:08:04:73:3c:00:c1:12: 15:58:6a:ff:47:02:66:07:a6:a4:c1:5b:e4:f4:57: 17:31:98:10:51:08:8e:98:21:9b:f1:5d:e7:a2:04: 50:7c:fe:94:70:5f:88:a1:de:c2:75:3d:af:71:c7: ef:78:80:40:de:77:76:32:e5:5d:52:c2:c6:70:e0: 77:c6:bd:36:99:99:f9:ab:1e:1c:b1:63:f8:ac:a6: e3:fb:29:ca:b9:7f:85:a4:64:ad:66:8a:fb:1c:de: aa:14:bd:24:d1:36:e6:a1:8c:23:a5:a2:2d:d6:15: fd:cf:f2:00:dc:5d:a2:a9:bf:a5:8a:be:d3:66:37: e7:b9:40:b9:a1:72:e9:eb:ac:1c:c6:c9:07:51:c3: 1f:ae:ca:ef:cd:ae:87:b4:4e:13:68:fe:9b:58:20: df:2a:d8:94:1c:3f:24:cf:6b:0d:e2:5d:e0:ed:02: ba:a8:05:a4:4f:33:e7:d4:d2:5c:25:fe:92:7b:34: cd:e3:d4:f0:b2:e8:41:4c:cc:ed:f1:cb:0f:3b:f1: d0:2b:0a:58:21:2f:ce:69:3e:2d:b8:11:f7:8f:58: a2:f8:da:e4:55:2c:e6:a7:ba:e0:e6:54:a7:8f:be: 11:77:e0:32:96:fd:8c:92:9b:7d:ae:c9:dc:c5:f7: 27:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:64:C5:28:53:FC:C0:65:68:1F:91:29:33:BA:05:96:84:CA:3F:4C X509v3 Authority Key Identifier: keyid:29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:4e:10:a3:78:41:b7:9c:04:18:61:5a:a6:fa:1b:56:e3:c1: 3b:f6:08:65:52:d2:de:65:07:8c:85:aa:b1:9b:ec:b6:1b:40: 2e:48:b6:79:30:fb:8d:85:ff:f4:dc:1e:fe:01:ff:b4:04:ad: 8b:5e:d3:06:a0:42:e2:21:e1:2e:45:ac:0b:0f:f0:20:11:75: 89:3d:6a:38:b5:55:a5:9b:99:9a:76:65:44:ad:cd:e9:77:d4: 8e:1d:36:c2:84:99:67:bc:35:3d:5c:cb:db:fa:b9:45:cc:33: e3:32:a2:31:08:be:d2:c0:5d:d8:57:22:19:11:9d:9f:3b:6d: 63:21:7d:10:cf:21:c4:56:b2:17:a8:af:00:03:62:e6:36:ad: 68:f9:1d:c0:42:ff:fb:f5:59:40:55:5f:7e:e7:fd:a5:4d:7b: bb:6b:aa:7f:e3:98:06:ae:17:ae:d9:67:26:91:74:ae:e6:2b: c0:f4:7e:41:d4:07:6e:da:3a:98:21:b6:ac:d6:cb:2e:e7:8c: 3f:37:2d:9d:90:65:6b:f4:10:4c:2e:dd:3c:17:96:9b:20:d4: 86:9c:fe:f8:bd:df:53:90:7f:76:78:56:66:51:fa:92:eb:9a: 26:8f:d0:9c:fd:e6:f8:bd:9e:7f:c3:69:65:48:c6:12:2c:62: f7:c4:2b:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKBEIkU3c1Gm40FD8eq5iaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZmUzZGZhNzdlYjAyMDFjODU2ZDFlMWViZjAzMmJjYzhi MTI0ZDgwHhcNMjUxMjIzMDcwMjMxWhcNMjUxMjI0MDcwMjMxWjAzMTEwLwYDVQQD Eyg2MTY0YzUyODUzZmNjMDY1NjgxZjkxMjkzM2JhMDU5Njg0Y2EzZjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpQURmz/gggEczwAwRIVWGr/RwJm B6akwVvk9FcXMZgQUQiOmCGb8V3nogRQfP6UcF+Iod7CdT2vccfveIBA3nd2MuVd UsLGcOB3xr02mZn5qx4csWP4rKbj+ynKuX+FpGStZor7HN6qFL0k0TbmoYwjpaIt 1hX9z/IA3F2iqb+lir7TZjfnuUC5oXLp66wcxskHUcMfrsrvza6HtE4TaP6bWCDf KtiUHD8kz2sN4l3g7QK6qAWkTzPn1NJcJf6SezTN49TwsuhBTMzt8csPO/HQKwpY IS/OaT4tuBH3j1ii+NrkVSzmp7rg5lSnj74Rd+Aylv2Mkpt9rsncxfcnkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGFkxShT/MBlaB+RKTO6BZaEyj9MMB8GA1UdIwQY MBaAFCn+Pfp36wIByFbR4evwMrzIsSTYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2Y0OS1uZnJBZ0hJVnRIaDZfQXl2TWl4Sk5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9iZjI0MzAtMzJiMC00OTNjLWFjYmUt YmViZWMyMzM2ZDQ4LzEvS2Y0OS1uZnJBZ0hJVnRIaDZfQXl2TWl4Sk5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9iZjI0MzAtMzJiMC00OTNjLWFjYmUtYmViZWMyMzM2ZDQ4 LzEvS2Y0OS1uZnJBZ0hJVnRIaDZfQXl2TWl4Sk5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArU4Qo3hB t5wEGGFapvobVuPBO/YIZVLS3mUHjIWqsZvsthtALki2eTD7jYX/9Nwe/gH/tASt i17TBqBC4iHhLkWsCw/wIBF1iT1qOLVVpZuZmnZlRK3N6XfUjh02woSZZ7w1PVzL 2/q5Rcwz4zKiMQi+0sBd2FciGRGdnzttYyF9EM8hxFayF6ivAANi5jataPkdwEL/ +/VZQFVffuf9pU17u2uqf+OYBq4XrtlnJpF0ruYrwPR+QdQHbto6mCG2rNbLLueM PzctnZBla/QQTC7dPBeWmyDUhpz++L3fU5B/dnhWZlH6kuuaJo/QnP3m+L2ef8Np ZUjGEixi98QrBg== -----END CERTIFICATE-----Generated at Tue Dec 23 13:58:40 2025 by rpki-client