This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft File: kdjDKnA5cqrqCToB-N7fV_lnVXU.mft (raw, json) Hash identifier: uvJLLTWmM1WglRMsNKRHhraSWdeTq0A48bSD0mXQuus= Subject key identifier: F2:D5:83:62:D7:37:95:8D:52:1B:A1:E4:D4:D1:E3:A9:F9:C3:A6:F0 Authority key identifier: 91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75 Certificate issuer: /CN=91d8c32a703972aaea093a01f8dedf57f9675575 Certificate serial: 019B6F8F5EB1036C4A193F3FA6D3537F72BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft Manifest number: 17A3 Signing time: Tue 30 Dec 2025 14:00:25 +0000 Manifest this update: Tue 30 Dec 2025 14:00:25 +0000 Manifest next update: Wed 31 Dec 2025 14:00:25 +0000 Files and hashes: 1: aJJ-YdVMN1blRA6zgwpwFOSytEA.roa (hash: 18Fas5Pt/vlUe10SXqZ/nCZNIMF4HTl3m3WAOZlwA4Y=) 2: kdjDKnA5cqrqCToB-N7fV_lnVXU.crl (hash: oJgXk21erZfJPrj9bGNGbNBW0pF8V+LuoQc48qfDjm0=) 3: tAP5YUU5DttldDjJZneQqbjMnns.roa (hash: Wr2DWhImWg05UEtM87fECNOHzZETG/9GHlcwfpi8dUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 14:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:8f:5e:b1:03:6c:4a:19:3f:3f:a6:d3:53:7f:72:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91d8c32a703972aaea093a01f8dedf57f9675575 Validity Not Before: Dec 30 14:00:25 2025 GMT Not After : Dec 31 14:00:25 2025 GMT Subject: CN=f2d58362d737958d521ba1e4d4d1e3a9f9c3a6f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:46:c5:14:cd:11:9b:36:47:2c:a8:a0:57:c0: 66:72:d4:3e:1c:e4:52:37:84:fd:02:b3:99:eb:44: 35:69:2f:13:31:20:66:5d:16:8d:10:28:d5:80:b9: 49:04:8e:6c:9c:07:18:43:7f:a0:1d:07:92:fb:66: 46:49:92:27:78:e3:bc:1e:68:7e:cd:ce:ef:7b:96: ce:38:9b:15:a5:21:4e:30:eb:b2:e2:f2:16:72:cc: 80:a9:bd:9a:e6:5f:1b:59:47:bf:56:70:cc:63:88: 6c:2b:ed:d5:3d:f9:c0:68:c7:1d:14:89:bd:40:82: 5d:05:63:d5:f8:ec:e6:e9:65:3b:8e:79:ab:46:0e: 58:5a:be:cb:e8:e8:92:f0:05:04:1d:4a:61:2f:03: 85:07:12:5a:d9:2b:b4:35:7b:d1:87:b1:75:de:a8: 64:ce:2d:e3:11:32:ec:a6:6e:8c:e5:25:08:2f:c0: 3f:66:b0:2a:d5:29:ef:d6:f2:57:c8:06:59:bd:23: 09:a1:20:b6:9a:31:62:5f:3f:20:6a:a2:0e:44:90: 6a:e6:2d:25:99:8b:c9:8e:f3:13:ee:14:be:4f:db: ca:ce:5f:c1:db:65:76:fb:de:96:a5:70:bd:8e:b1: e6:3c:07:7d:de:c6:20:b1:9b:e9:84:08:c9:41:5b: 15:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:D5:83:62:D7:37:95:8D:52:1B:A1:E4:D4:D1:E3:A9:F9:C3:A6:F0 X509v3 Authority Key Identifier: keyid:91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:0b:04:fe:36:7e:75:ca:20:da:c7:1e:4f:69:6e:71:bb:af: 62:c7:01:36:3c:c0:c4:09:80:82:b9:72:08:2e:bc:22:a4:02: 6f:c5:bf:8d:66:26:cf:22:71:f7:f4:c5:b1:3a:ba:df:6d:3e: 24:18:36:6e:78:08:f1:2b:ae:0a:aa:bf:3f:41:dd:aa:a3:e9: c0:a8:5c:71:11:1c:cd:8b:69:ea:04:b0:75:c7:bb:09:dc:6e: c2:5e:d0:60:1e:ca:56:a6:be:f2:e9:6c:49:1f:e1:08:eb:70: 6f:25:44:05:91:44:06:01:88:55:84:f4:2b:d8:31:72:36:3b: 87:6b:8c:d4:d7:19:e9:ee:b3:94:d2:b8:80:02:45:d8:3e:ed: 1f:3a:b0:10:ca:44:d4:79:42:bf:dc:e3:75:74:eb:00:de:79: ac:9f:15:eb:c1:85:87:99:5f:4a:e5:13:7d:d2:88:e6:36:f7: 0c:81:72:ef:28:bf:9a:6c:3f:8e:7a:9d:5f:81:80:4a:12:81: 9d:b7:f9:aa:34:49:f0:8b:95:ff:8b:4d:75:6d:e0:98:2e:79: 25:9a:54:89:d9:44:bf:3a:9e:21:ac:68:72:66:83:c1:2f:ee: ed:bc:9f:d2:7d:7a:a4:0b:fa:b9:2c:45:86:a7:b8:85:38:09: b6:b4:37:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtvj16xA2xKGT8/ptNTf3K6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZDhjMzJhNzAzOTcyYWFlYTA5M2EwMWY4ZGVkZjU3Zjk2 NzU1NzUwHhcNMjUxMjMwMTQwMDI1WhcNMjUxMjMxMTQwMDI1WjAzMTEwLwYDVQQD EyhmMmQ1ODM2MmQ3Mzc5NThkNTIxYmExZTRkNGQxZTNhOWY5YzNhNmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5kbFFM0RmzZHLKigV8BmctQ+HORS N4T9ArOZ60Q1aS8TMSBmXRaNECjVgLlJBI5snAcYQ3+gHQeS+2ZGSZIneOO8Hmh+ zc7ve5bOOJsVpSFOMOuy4vIWcsyAqb2a5l8bWUe/VnDMY4hsK+3VPfnAaMcdFIm9 QIJdBWPV+Ozm6WU7jnmrRg5YWr7L6OiS8AUEHUphLwOFBxJa2Su0NXvRh7F13qhk zi3jETLspm6M5SUIL8A/ZrAq1Snv1vJXyAZZvSMJoSC2mjFiXz8gaqIORJBq5i0l mYvJjvMT7hS+T9vKzl/B22V2+96WpXC9jrHmPAd93sYgsZvphAjJQVsVGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPLVg2LXN5WNUhuh5NTR46n5w6bwMB8GA1UdIwQY MBaAFJHYwypwOXKq6gk6Afje31f5Z1V1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2RqREtuQTVjcXJxQ1RvQi1ON2ZWX2xuVlhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC80ZTgxNmQtZDhlYy00MzdjLTk4NmEt M2MxMjc4MWUyMDJkLzEva2RqREtuQTVjcXJxQ1RvQi1ON2ZWX2xuVlhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC80ZTgxNmQtZDhlYy00MzdjLTk4NmEtM2MxMjc4MWUyMDJk LzEva2RqREtuQTVjcXJxQ1RvQi1ON2ZWX2xuVlhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgQsE/jZ+ dcog2sceT2lucbuvYscBNjzAxAmAgrlyCC68IqQCb8W/jWYmzyJx9/TFsTq6320+ JBg2bngI8SuuCqq/P0HdqqPpwKhccREczYtp6gSwdce7Cdxuwl7QYB7KVqa+8uls SR/hCOtwbyVEBZFEBgGIVYT0K9gxcjY7h2uM1NcZ6e6zlNK4gAJF2D7tHzqwEMpE 1HlCv9zjdXTrAN55rJ8V68GFh5lfSuUTfdKI5jb3DIFy7yi/mmw/jnqdX4GAShKB nbf5qjRJ8IuV/4tNdW3gmC55JZpUidlEvzqeIaxocmaDwS/u7byf0n16pAv6uSxF hqe4hTgJtrQ3qQ== -----END CERTIFICATE-----Generated at Wed Dec 31 00:11:44 2025 by rpki-client