This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft File: kdjDKnA5cqrqCToB-N7fV_lnVXU.mft (raw, json) Hash identifier: kRuqGSjD+HGjS/e4DFMfBnRe7ruAUt0K8DZFwyAkurg= Subject key identifier: 63:86:56:D0:8A:B8:17:3F:C4:C4:3C:7C:95:4A:D0:A3:17:48:6C:AD Authority key identifier: 91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75 Certificate issuer: /CN=91d8c32a703972aaea093a01f8dedf57f9675575 Certificate serial: 019B3B6B2D5326AADC9EC00308ECA8A504FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 11:00:38 +0000 Manifest this update: Sat 20 Dec 2025 11:00:38 +0000 Manifest next update: Sun 21 Dec 2025 11:00:38 +0000 Files and hashes: 1: aJJ-YdVMN1blRA6zgwpwFOSytEA.roa (hash: 18Fas5Pt/vlUe10SXqZ/nCZNIMF4HTl3m3WAOZlwA4Y=) 2: kdjDKnA5cqrqCToB-N7fV_lnVXU.crl (hash: Lpkq5uwyWStQkUWGDdZlKXFcNB+f1BV30wlJmwXKUCM=) 3: tAP5YUU5DttldDjJZneQqbjMnns.roa (hash: Wr2DWhImWg05UEtM87fECNOHzZETG/9GHlcwfpi8dUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:2d:53:26:aa:dc:9e:c0:03:08:ec:a8:a5:04:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91d8c32a703972aaea093a01f8dedf57f9675575 Validity Not Before: Dec 20 11:00:38 2025 GMT Not After : Dec 21 11:00:38 2025 GMT Subject: CN=638656d08ab8173fc4c43c7c954ad0a317486cad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:70:45:c0:53:7e:90:06:63:e5:72:93:83:4d: 51:75:f5:e1:8b:af:c0:f1:c7:39:92:ac:44:09:04: f4:68:16:5c:d1:a5:b8:a7:bb:4c:e1:60:4a:97:7d: be:e0:39:b1:c8:6a:b8:3f:94:b2:91:f0:73:59:82: 84:da:d9:f6:ae:f5:ca:cf:d1:a7:ac:f5:7f:9b:51: 4d:da:71:8f:0b:a6:41:e1:90:3b:40:5d:37:bd:37: 33:9f:e2:97:d5:05:25:6f:1b:28:3f:4b:35:30:ac: d6:76:72:65:84:92:0d:9b:47:c5:9a:25:7c:43:e8: 42:71:91:fe:b2:a7:4e:3c:8b:59:b6:6e:52:42:e1: b9:5b:37:93:50:cf:c6:89:61:dc:07:5d:c0:c3:32: bf:18:10:ed:74:62:b4:32:20:9a:0a:2c:6d:1d:af: de:09:73:c7:7b:3b:ed:bf:b4:39:04:ff:1d:d6:ed: 6d:e7:a1:12:9b:fc:35:ce:90:ca:59:3c:06:ad:21: 3d:63:e4:d2:14:58:28:3e:c0:74:b0:f7:ef:0a:5b: cd:c4:9e:19:88:9c:ea:e9:5e:22:db:4b:65:77:0f: 05:7d:d5:77:09:db:c3:12:a1:88:72:06:17:13:0e: dd:9a:85:a7:53:64:78:02:fa:a2:b3:f8:5c:fb:19: da:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:86:56:D0:8A:B8:17:3F:C4:C4:3C:7C:95:4A:D0:A3:17:48:6C:AD X509v3 Authority Key Identifier: keyid:91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:d0:58:a1:3f:11:f1:a5:64:96:6e:02:f2:b5:ed:81:86:3f: 5d:5e:47:03:53:3a:42:a6:d0:ca:de:0c:74:f3:4c:fc:f4:65: 98:2a:97:e5:42:c8:a9:e1:16:3e:bd:55:a5:33:e7:7a:0c:96: d8:93:84:99:cc:16:29:52:2e:26:45:d1:6c:72:1d:de:ed:c5: 01:a0:ac:71:d3:3a:5b:69:78:e6:2b:42:b1:67:7c:67:a3:6d: db:6b:dc:97:32:d2:88:0a:6b:64:76:f5:92:3c:38:22:19:be: e7:52:7b:7a:74:ee:28:57:76:ca:1d:e4:39:8a:f3:5b:98:58: 85:5e:e5:fb:db:0b:e5:f0:57:69:94:80:67:af:52:aa:e1:8f: 6b:c7:d3:d8:d6:3d:ca:66:2f:5c:e8:fe:f3:aa:3a:d1:e3:bb: f3:8f:fd:66:62:c4:7a:24:32:88:40:44:42:ae:c0:09:4b:69: be:8f:7f:54:7e:b6:7f:4f:d4:e0:1c:34:d4:36:39:1a:46:50: 6c:fd:af:bb:78:e4:2b:c5:43:e1:9a:b9:09:78:d4:e2:c7:d1: ed:b7:97:04:52:fa:09:43:39:7c:90:71:86:7c:d3:cd:21:3d: 3a:15:17:03:fe:78:22:a1:ec:3f:1c:39:e6:56:37:79:c5:ad: a4:83:aa:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ay1TJqrcnsADCOyopQT8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZDhjMzJhNzAzOTcyYWFlYTA5M2EwMWY4ZGVkZjU3Zjk2 NzU1NzUwHhcNMjUxMjIwMTEwMDM4WhcNMjUxMjIxMTEwMDM4WjAzMTEwLwYDVQQD Eyg2Mzg2NTZkMDhhYjgxNzNmYzRjNDNjN2M5NTRhZDBhMzE3NDg2Y2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHBFwFN+kAZj5XKTg01RdfXhi6/A 8cc5kqxECQT0aBZc0aW4p7tM4WBKl32+4DmxyGq4P5SykfBzWYKE2tn2rvXKz9Gn rPV/m1FN2nGPC6ZB4ZA7QF03vTczn+KX1QUlbxsoP0s1MKzWdnJlhJINm0fFmiV8 Q+hCcZH+sqdOPItZtm5SQuG5WzeTUM/GiWHcB13AwzK/GBDtdGK0MiCaCixtHa/e CXPHezvtv7Q5BP8d1u1t56ESm/w1zpDKWTwGrSE9Y+TSFFgoPsB0sPfvClvNxJ4Z iJzq6V4i20tldw8FfdV3CdvDEqGIcgYXEw7dmoWnU2R4Avqis/hc+xna+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGOGVtCKuBc/xMQ8fJVK0KMXSGytMB8GA1UdIwQY MBaAFJHYwypwOXKq6gk6Afje31f5Z1V1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2RqREtuQTVjcXJxQ1RvQi1ON2ZWX2xuVlhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC80ZTgxNmQtZDhlYy00MzdjLTk4NmEt M2MxMjc4MWUyMDJkLzEva2RqREtuQTVjcXJxQ1RvQi1ON2ZWX2xuVlhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC80ZTgxNmQtZDhlYy00MzdjLTk4NmEtM2MxMjc4MWUyMDJk LzEva2RqREtuQTVjcXJxQ1RvQi1ON2ZWX2xuVlhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAitBYoT8R 8aVklm4C8rXtgYY/XV5HA1M6QqbQyt4MdPNM/PRlmCqX5ULIqeEWPr1VpTPnegyW 2JOEmcwWKVIuJkXRbHId3u3FAaCscdM6W2l45itCsWd8Z6Nt22vclzLSiAprZHb1 kjw4Ihm+51J7enTuKFd2yh3kOYrzW5hYhV7l+9sL5fBXaZSAZ69SquGPa8fT2NY9 ymYvXOj+86o60eO784/9ZmLEeiQyiEBEQq7ACUtpvo9/VH62f0/U4Bw01DY5GkZQ bP2vu3jkK8VD4Zq5CXjU4sfR7beXBFL6CUM5fJBxhnzTzSE9OhUXA/54IqHsPxw5 5lY3ecWtpIOqvw== -----END CERTIFICATE-----Generated at Sat Dec 20 18:47:32 2025 by rpki-client