This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft File: Kf49-nfrAgHIVtHh6_AyvMixJNg.mft (raw, json) Hash identifier: 5qNf6Ql4GhgY4/0QUN2sdR7bTxjfmOOc8cq2k6L1Idk= Subject key identifier: CF:FF:CD:FC:63:E6:F4:98:ED:06:E5:3B:E4:64:7C:77:6A:C1:7B:7B Authority key identifier: 29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8 Certificate issuer: /CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8 Certificate serial: 019B70A27F30C0C847036260AEAF305708A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft Manifest number: 1735 Signing time: Tue 30 Dec 2025 19:00:56 +0000 Manifest this update: Tue 30 Dec 2025 19:00:56 +0000 Manifest next update: Wed 31 Dec 2025 19:00:56 +0000 Files and hashes: 1: Kf49-nfrAgHIVtHh6_AyvMixJNg.crl (hash: /4n8eMgdFn4RQbptKIGKOeHL/fmsdJbClU0vLslrXXQ=) 2: m11OWXhefXzJ44FLBlsWKfsOtOo.roa (hash: djUPPyQWxYPvFQMatObPciTtNbLwqpNgMtWLRjYVwc0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 19:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:a2:7f:30:c0:c8:47:03:62:60:ae:af:30:57:08:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8 Validity Not Before: Dec 30 19:00:56 2025 GMT Not After : Dec 31 19:00:56 2025 GMT Subject: CN=cfffcdfc63e6f498ed06e53be4647c776ac17b7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f7:27:a0:71:fb:4e:1e:6d:55:17:56:1b:34: 7b:ac:81:ac:b7:d9:57:ea:c6:fa:f3:ad:96:71:93: 34:35:63:77:29:18:ab:43:0d:ae:46:3c:d9:6a:9b: d9:c1:1a:fa:d9:f9:ea:2d:a1:7d:62:e9:4b:c8:1d: ed:95:29:25:bf:a7:7e:cf:54:c5:f3:7b:55:34:56: 0d:7e:28:e7:7c:c3:e6:03:47:e4:16:70:aa:08:21: 77:94:05:a7:c8:c0:b3:89:69:f3:58:c0:79:7a:96: d4:86:7c:c0:b2:77:21:61:87:3b:f5:8d:35:c5:c6: fc:9f:58:0a:da:a1:cb:4f:29:92:bd:f5:c0:bc:e0: 88:76:d0:20:52:d3:b2:71:d4:0c:d2:d0:a9:2f:b1: 4c:97:c9:89:17:9b:da:bf:b2:3d:d8:5c:4a:db:60: 31:28:e2:fa:9f:33:ad:e5:74:9e:2c:85:2f:37:39: e0:36:95:27:c9:f3:77:53:ee:f9:23:f8:ed:99:e2: 14:c7:7c:81:81:52:d5:1d:5a:2a:21:4c:46:ae:d6: 7a:61:84:9b:91:e8:08:e5:f4:8e:1e:cf:0f:00:6c: ae:d8:93:3f:7e:87:cc:63:0d:24:ce:60:78:96:b5: 13:45:43:3a:45:59:d8:4b:5a:54:ef:5e:33:58:5f: 9f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:FF:CD:FC:63:E6:F4:98:ED:06:E5:3B:E4:64:7C:77:6A:C1:7B:7B X509v3 Authority Key Identifier: keyid:29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:90:18:8d:6b:85:69:db:fb:6e:7e:49:eb:d3:38:8f:f3:9c: b0:a8:3c:fd:cb:6c:bf:50:b9:ad:2c:05:39:b3:c9:c6:9a:18: 38:9f:f3:52:36:2f:9b:35:67:ce:74:fd:9a:23:13:c8:84:8c: f4:49:38:ae:c8:7b:0c:1e:c3:d9:e4:86:d0:b9:07:66:f3:e7: af:b7:4e:4a:5e:d4:57:08:c2:69:26:d0:d2:91:f2:f0:6d:2f: 98:49:3f:57:5f:69:2b:67:6b:63:8f:d3:54:bc:34:d1:37:c2: 89:d4:b8:9b:16:26:ef:55:9d:f9:07:c9:df:c5:b4:37:32:2e: ec:7e:76:42:57:62:b2:28:a5:ae:c0:e2:5b:23:5c:09:7b:3e: 17:93:5b:37:88:bd:c3:65:fc:a5:0a:db:0d:c1:ad:e3:75:ec: f2:31:e8:cf:eb:49:01:7a:7b:1d:2c:70:b3:ac:92:29:d4:ca: c8:e5:86:46:32:ca:c4:19:98:01:df:09:ae:9e:54:f6:60:07: 4e:d5:90:25:23:1d:ff:6a:74:f1:59:ff:24:91:3b:ee:69:56: e7:6f:c2:68:5a:e7:17:a9:ed:ee:a5:7b:27:a5:46:f9:97:d1: c4:1e:3d:92:d8:d8:6f:41:ed:4f:5b:5b:a4:44:e6:d9:3a:03: 2f:96:a1:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtwon8wwMhHA2Jgrq8wVwikMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZmUzZGZhNzdlYjAyMDFjODU2ZDFlMWViZjAzMmJjYzhi MTI0ZDgwHhcNMjUxMjMwMTkwMDU2WhcNMjUxMjMxMTkwMDU2WjAzMTEwLwYDVQQD EyhjZmZmY2RmYzYzZTZmNDk4ZWQwNmU1M2JlNDY0N2M3NzZhYzE3YjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvcnoHH7Th5tVRdWGzR7rIGst9lX 6sb6862WcZM0NWN3KRirQw2uRjzZapvZwRr62fnqLaF9YulLyB3tlSklv6d+z1TF 83tVNFYNfijnfMPmA0fkFnCqCCF3lAWnyMCziWnzWMB5epbUhnzAsnchYYc79Y01 xcb8n1gK2qHLTymSvfXAvOCIdtAgUtOycdQM0tCpL7FMl8mJF5vav7I92FxK22Ax KOL6nzOt5XSeLIUvNzngNpUnyfN3U+75I/jtmeIUx3yBgVLVHVoqIUxGrtZ6YYSb kegI5fSOHs8PAGyu2JM/fofMYw0kzmB4lrUTRUM6RVnYS1pU714zWF+fawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM//zfxj5vSY7QblO+RkfHdqwXt7MB8GA1UdIwQY MBaAFCn+Pfp36wIByFbR4evwMrzIsSTYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2Y0OS1uZnJBZ0hJVnRIaDZfQXl2TWl4Sk5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9iZjI0MzAtMzJiMC00OTNjLWFjYmUt YmViZWMyMzM2ZDQ4LzEvS2Y0OS1uZnJBZ0hJVnRIaDZfQXl2TWl4Sk5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9iZjI0MzAtMzJiMC00OTNjLWFjYmUtYmViZWMyMzM2ZDQ4 LzEvS2Y0OS1uZnJBZ0hJVnRIaDZfQXl2TWl4Sk5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQpAYjWuF adv7bn5J69M4j/OcsKg8/ctsv1C5rSwFObPJxpoYOJ/zUjYvmzVnznT9miMTyISM 9Ek4rsh7DB7D2eSG0LkHZvPnr7dOSl7UVwjCaSbQ0pHy8G0vmEk/V19pK2drY4/T VLw00TfCidS4mxYm71Wd+QfJ38W0NzIu7H52QldisiilrsDiWyNcCXs+F5NbN4i9 w2X8pQrbDcGt43Xs8jHoz+tJAXp7HSxws6ySKdTKyOWGRjLKxBmYAd8Jrp5U9mAH TtWQJSMd/2p08Vn/JJE77mlW52/CaFrnF6nt7qV7J6VG+ZfRxB49ktjYb0HtT1tb pETm2ToDL5ahcA== -----END CERTIFICATE-----Generated at Wed Dec 31 03:37:18 2025 by rpki-client