This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft File: R_KdK9FeAku5fnKyEkK1I9yRUYE.mft (raw, json) Hash identifier: 6xM+40soLcy7xS7kbm3riOCe3oueoTlG3nqGoW8tbnY= Subject key identifier: B2:09:7A:95:B2:14:F6:42:D5:66:39:95:F6:51:3E:80:09:8D:FE:CD Authority key identifier: 47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81 Certificate issuer: /CN=47f29d2bd15e024bb97e72b21242b523dc915181 Certificate serial: 019B3E6D5A3881ADC3DE503636D2E98BFEA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 01:01:52 +0000 Manifest this update: Sun 21 Dec 2025 01:01:52 +0000 Manifest next update: Mon 22 Dec 2025 01:01:52 +0000 Files and hashes: 1: 2uH1JtbsSh2LEaKnPX8lAgWOEU4.roa (hash: GbQEJijg5o1dTfC76oTK57kNzuLPFqCLUWGp9VxRb9I=) 2: R_KdK9FeAku5fnKyEkK1I9yRUYE.crl (hash: sWSQew0BmXDjPtReIJirN4pS+h732eCJSISVzsyQ81Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 01:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:5a:38:81:ad:c3:de:50:36:36:d2:e9:8b:fe:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47f29d2bd15e024bb97e72b21242b523dc915181 Validity Not Before: Dec 21 01:01:52 2025 GMT Not After : Dec 22 01:01:52 2025 GMT Subject: CN=b2097a95b214f642d5663995f6513e80098dfecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b3:89:c4:6c:76:e2:ef:7d:94:72:fb:f9:6c: a1:d2:0b:db:eb:78:63:01:ec:f3:0b:fb:66:33:6c: 0b:18:bc:d2:85:07:6c:3e:37:1f:8e:56:9e:34:1b: 11:c8:34:df:90:f8:a5:0a:90:6f:19:d8:7a:7c:e3: e2:7b:37:af:a1:ab:19:11:be:26:49:3b:ea:75:0a: ec:64:fa:88:f0:eb:40:38:1b:94:09:ad:62:95:ea: 7b:18:b1:a9:c8:65:db:82:b5:70:3a:3a:ee:f3:f2: bf:34:fd:65:14:80:fa:2c:db:98:13:d6:8a:e8:4a: 04:67:c3:0e:a6:bd:e5:8a:c0:e4:bb:87:84:4c:c5: 04:8c:84:f7:59:e7:9e:6e:d3:d3:72:07:45:5f:75: b3:88:51:4b:20:3a:a7:e5:58:90:0e:a7:30:59:be: e6:61:e6:27:6b:24:79:88:0b:75:b0:6d:49:88:06: 8c:a0:d9:29:74:93:43:58:10:85:45:a4:33:f0:1e: 64:2f:ef:a8:4c:7f:c7:c6:26:13:f8:63:6a:00:c2: 2b:cb:25:19:8b:b3:a2:7e:63:56:9d:04:05:d8:22: ba:b3:a9:47:15:29:6c:2e:7c:81:47:1e:7c:ac:88: c9:e3:32:ec:30:9a:d6:9b:52:3c:70:97:a1:e8:04: d9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:09:7A:95:B2:14:F6:42:D5:66:39:95:F6:51:3E:80:09:8D:FE:CD X509v3 Authority Key Identifier: keyid:47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:f8:69:4c:23:a9:72:59:c3:f9:2b:a9:8c:5d:96:e3:1d:1d: 5d:cd:17:cf:52:80:a0:01:e8:df:3b:82:33:87:e3:dd:c8:cb: b4:5e:35:e1:5e:29:bf:dd:42:1f:d0:3e:a1:54:29:ad:6a:ef: 97:8c:d0:4a:a5:9d:2e:7c:9f:c8:af:3a:ef:e0:07:02:08:43: 0a:8a:2d:3d:b0:38:03:a1:23:2d:aa:05:51:dc:14:85:47:d5: a7:29:b0:46:82:25:88:04:53:e2:7f:60:6e:14:ab:bd:7d:85: da:45:6d:23:78:74:7b:bf:65:2e:8c:87:75:eb:b4:e6:6e:73: 0d:af:ed:4c:96:ea:c6:a0:4f:ae:0f:1a:94:59:b0:29:66:67: b9:e0:9f:e4:be:9e:41:8b:8b:b3:af:18:d7:d5:f3:89:64:4c: 12:dc:d5:9e:58:b9:e4:20:00:82:d3:a6:61:07:30:5e:34:9c: 61:4f:92:87:0b:47:34:3d:a6:d6:a7:e5:82:0c:90:e3:e1:1a: 85:32:4a:fd:5b:25:3f:99:87:08:58:78:f0:ec:87:9b:27:48: 5a:f4:06:24:f1:4a:a8:32:dd:3e:de:c4:5f:fa:2c:f3:dd:fc: b7:cc:e2:42:de:01:9b:cc:ac:35:f3:c6:06:28:57:46:48:3d: e9:dc:33:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bVo4ga3D3lA2NtLpi/6oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3ZjI5ZDJiZDE1ZTAyNGJiOTdlNzJiMjEyNDJiNTIzZGM5 MTUxODEwHhcNMjUxMjIxMDEwMTUyWhcNMjUxMjIyMDEwMTUyWjAzMTEwLwYDVQQD EyhiMjA5N2E5NWIyMTRmNjQyZDU2NjM5OTVmNjUxM2U4MDA5OGRmZWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLOJxGx24u99lHL7+Wyh0gvb63hj AezzC/tmM2wLGLzShQdsPjcfjlaeNBsRyDTfkPilCpBvGdh6fOPiezevoasZEb4m STvqdQrsZPqI8OtAOBuUCa1ilep7GLGpyGXbgrVwOjru8/K/NP1lFID6LNuYE9aK 6EoEZ8MOpr3lisDku4eETMUEjIT3WeeebtPTcgdFX3WziFFLIDqn5ViQDqcwWb7m YeYnayR5iAt1sG1JiAaMoNkpdJNDWBCFRaQz8B5kL++oTH/HxiYT+GNqAMIryyUZ i7OifmNWnQQF2CK6s6lHFSlsLnyBRx58rIjJ4zLsMJrWm1I8cJeh6ATZwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLIJepWyFPZC1WY5lfZRPoAJjf7NMB8GA1UdIwQY MBaAFEfynSvRXgJLuX5yshJCtSPckVGBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUl9LZEs5RmVBa3U1Zm5LeUVrSzFJOXlSVVlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9jMzI1OTgtMmE5NS00M2M0LTliNmEt MDE2NjUzMmRhYzU2LzEvUl9LZEs5RmVBa3U1Zm5LeUVrSzFJOXlSVVlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9jMzI1OTgtMmE5NS00M2M0LTliNmEtMDE2NjUzMmRhYzU2 LzEvUl9LZEs5RmVBa3U1Zm5LeUVrSzFJOXlSVVlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQvhpTCOp clnD+SupjF2W4x0dXc0Xz1KAoAHo3zuCM4fj3cjLtF414V4pv91CH9A+oVQprWrv l4zQSqWdLnyfyK867+AHAghDCootPbA4A6EjLaoFUdwUhUfVpymwRoIliART4n9g bhSrvX2F2kVtI3h0e79lLoyHdeu05m5zDa/tTJbqxqBPrg8alFmwKWZnueCf5L6e QYuLs68Y19XziWRMEtzVnli55CAAgtOmYQcwXjScYU+ShwtHND2m1qflggyQ4+Ea hTJK/VslP5mHCFh48OyHmydIWvQGJPFKqDLdPt7EX/os8938t8ziQt4Bm8ysNfPG BihXRkg96dwz2A== -----END CERTIFICATE-----Generated at Sun Dec 21 10:37:45 2025 by rpki-client