This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft File: KTdcnACxUp1VHufijGBwq0Oi_nY.mft (raw, json) Hash identifier: 4+ajSECGwByZFFoR0MpR79wXcIcPWVoOzn2QiET9DsA= Subject key identifier: 70:A4:46:94:33:30:49:35:78:ED:30:55:C2:EA:41:08:88:4A:1F:D6 Authority key identifier: 29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76 Certificate issuer: /CN=29375c9c00b1529d551ee7e28c6070ab43a2fe76 Certificate serial: 019B53AA57802090FFBF64109FDC83DD9230 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft Manifest number: 0F5A Signing time: Thu 25 Dec 2025 04:00:30 +0000 Manifest this update: Thu 25 Dec 2025 04:00:30 +0000 Manifest next update: Fri 26 Dec 2025 04:00:30 +0000 Files and hashes: 1: 2muVnH1_oI_9ztpeyJIqq88lM1c.roa (hash: UznFOVn685h5ihMi8FItxWdR/wWRBKXy+8YPxE2cn9c=) 2: KTdcnACxUp1VHufijGBwq0Oi_nY.crl (hash: OsqiSvPPfoDeKq1TN+HNoLQBK39WuTFlk3quLrzh/VU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:aa:57:80:20:90:ff:bf:64:10:9f:dc:83:dd:92:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29375c9c00b1529d551ee7e28c6070ab43a2fe76 Validity Not Before: Dec 25 04:00:30 2025 GMT Not After : Dec 26 04:00:30 2025 GMT Subject: CN=70a446943330493578ed3055c2ea4108884a1fd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7c:54:8c:00:c0:75:58:38:1a:c8:6d:c0:fa: 9f:80:d8:6e:2e:1b:7f:4e:e8:f6:4f:7a:d6:a6:93: 02:fd:cb:c4:d6:ba:35:73:b3:6d:a9:29:95:e6:ad: 01:39:92:65:5e:88:87:5a:a3:02:20:dd:5f:88:5e: 0c:d4:43:ae:20:6a:3a:0d:f8:fb:fc:29:e7:48:34: f5:f6:98:98:90:64:8f:ce:8e:d9:29:a6:35:f8:52: b6:3c:3f:6f:17:c8:33:ef:aa:c2:81:96:d7:ca:5f: 57:39:b7:c0:bc:b2:a6:f4:de:56:1b:1d:f1:2d:41: c9:b9:d1:33:e5:0d:43:e8:83:35:f2:a5:29:82:1b: 11:9f:3e:74:01:0b:92:eb:51:0f:21:cf:2d:2a:3a: 19:78:43:d6:ac:23:18:76:c4:58:10:6c:50:b6:65: 40:eb:fd:98:74:e2:12:91:5d:8c:d9:c4:f7:e0:c9: 0f:dc:53:f7:2a:e6:3e:66:f6:4b:72:de:dd:ce:79: 42:ee:f6:67:46:c8:29:b9:af:ed:9d:90:e6:0d:6a: ed:07:6a:9f:ff:22:cd:bd:ff:58:5b:00:b5:a2:f4: 4f:9c:53:a7:9d:aa:b4:55:8a:bc:8c:37:f9:ad:ee: d4:a5:41:1f:78:3a:7e:ff:36:65:0c:f3:ce:7d:07: 98:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A4:46:94:33:30:49:35:78:ED:30:55:C2:EA:41:08:88:4A:1F:D6 X509v3 Authority Key Identifier: keyid:29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:78:66:c9:88:bc:f1:9a:eb:39:21:cb:b9:ed:a4:fe:89:76: dc:55:16:21:76:96:ef:b9:08:0b:3b:c9:04:f8:c2:bb:c0:92: 5a:b5:ef:5c:2e:e4:9c:30:fb:5d:ae:9a:21:11:4a:65:65:db: 79:6f:d7:de:1e:31:b0:54:f5:d6:8d:f0:d2:ae:21:65:4e:8b: ba:dd:b4:5c:4d:1e:25:80:2e:c4:d8:f3:de:9e:36:bf:84:a7: e8:0f:ba:50:6a:7b:3d:22:d6:83:ad:f9:d3:8b:1d:fa:ff:70: fc:8f:65:d0:b1:2f:26:a7:38:32:a1:1a:32:bc:6b:1f:77:9d: e7:3b:63:d5:71:e3:b9:e6:04:0e:1a:76:0a:d1:4a:4c:44:fc: ec:68:56:a3:b6:f0:91:18:93:32:65:59:1e:c4:33:5f:c9:0c: c5:df:3c:62:33:70:38:ae:ff:75:21:8b:79:f5:4d:5b:05:02: 57:93:15:9d:10:c0:e7:dc:27:b1:8e:90:5b:52:b8:39:35:95: 0b:12:d4:be:81:e7:47:24:89:ac:29:86:b9:e0:15:31:44:9b: 61:b2:15:27:e6:92:fc:f1:3c:c7:5f:43:74:d6:42:68:2d:a1: 5c:ac:f2:de:6e:32:ac:ba:7a:00:13:fc:1e:ff:21:73:db:87: 75:5b:94:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTqleAIJD/v2QQn9yD3ZIwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5Mzc1YzljMDBiMTUyOWQ1NTFlZTdlMjhjNjA3MGFiNDNh MmZlNzYwHhcNMjUxMjI1MDQwMDMwWhcNMjUxMjI2MDQwMDMwWjAzMTEwLwYDVQQD Eyg3MGE0NDY5NDMzMzA0OTM1NzhlZDMwNTVjMmVhNDEwODg4NGExZmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHxUjADAdVg4GshtwPqfgNhuLht/ Tuj2T3rWppMC/cvE1ro1c7NtqSmV5q0BOZJlXoiHWqMCIN1fiF4M1EOuIGo6Dfj7 /CnnSDT19piYkGSPzo7ZKaY1+FK2PD9vF8gz76rCgZbXyl9XObfAvLKm9N5WGx3x LUHJudEz5Q1D6IM18qUpghsRnz50AQuS61EPIc8tKjoZeEPWrCMYdsRYEGxQtmVA 6/2YdOISkV2M2cT34MkP3FP3KuY+ZvZLct7dznlC7vZnRsgpua/tnZDmDWrtB2qf /yLNvf9YWwC1ovRPnFOnnaq0VYq8jDf5re7UpUEfeDp+/zZlDPPOfQeYYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHCkRpQzMEk1eO0wVcLqQQiISh/WMB8GA1UdIwQY MBaAFCk3XJwAsVKdVR7n4oxgcKtDov52MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1RkY25BQ3hVcDFWSHVmaWpHQndxME9pX25ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy83N2Y5NzctMDE1Yi00Y2FmLTg5M2Yt MDUwNGUxMTFhM2I4LzEvS1RkY25BQ3hVcDFWSHVmaWpHQndxME9pX25ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy83N2Y5NzctMDE1Yi00Y2FmLTg5M2YtMDUwNGUxMTFhM2I4 LzEvS1RkY25BQ3hVcDFWSHVmaWpHQndxME9pX25ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwnhmyYi8 8ZrrOSHLue2k/ol23FUWIXaW77kICzvJBPjCu8CSWrXvXC7knDD7Xa6aIRFKZWXb eW/X3h4xsFT11o3w0q4hZU6Lut20XE0eJYAuxNjz3p42v4Sn6A+6UGp7PSLWg635 04sd+v9w/I9l0LEvJqc4MqEaMrxrH3ed5ztj1XHjueYEDhp2CtFKTET87GhWo7bw kRiTMmVZHsQzX8kMxd88YjNwOK7/dSGLefVNWwUCV5MVnRDA59wnsY6QW1K4OTWV CxLUvoHnRySJrCmGueAVMUSbYbIVJ+aS/PE8x19DdNZCaC2hXKzy3m4yrLp6ABP8 Hv8hc9uHdVuU5w== -----END CERTIFICATE-----Generated at Thu Dec 25 06:24:50 2025 by rpki-client