This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft File: Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft (raw, json) Hash identifier: +cblKQWpzyAcPoBtSTg1Blk3tGljly7/XoFvVnmOzPg= Subject key identifier: 13:FF:24:01:85:60:94:00:3B:05:75:AC:6D:26:82:34:9A:96:BC:14 Authority key identifier: 29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE Certificate issuer: /CN=29db7ca4eee1e453d26fab99c8201adf894612be Certificate serial: 019B397D2493BEEF599040781409F5A3EC96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft Manifest number: 1449 Signing time: Sat 20 Dec 2025 02:01:01 +0000 Manifest this update: Sat 20 Dec 2025 02:01:01 +0000 Manifest next update: Sun 21 Dec 2025 02:01:01 +0000 Files and hashes: 1: 7RH8q326KlHuJPjQMSVa_xv9mM8.roa (hash: jYAaBPFexodAbG01790lRYCRx2XbFPYuT6Kt3pZUZ84=) 2: 86BJ0tf44AvFSPojuuBVHQjlnBU.roa (hash: a0d0fyTctB2pb4UQURZCBOpZA1JPgrlTVV7wSAI3T8Q=) 3: Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl (hash: dTtRA4SyOjSsnkwbEwBrQtwOEVoN8Ii1Qqi1wWAYPtg=) 4: c6ZD9P3H30o78749ZEWyxOqABSU.roa (hash: cprASPGCBwZQZqsXiJOC/24dbl0p4JtT0bpDH9Sk/a4=) 5: idwzkQBauFhn5yVkIjeQVtz5mZE.roa (hash: 44TjgVB7J3xRAwnTMWxvN7AZUFhxeYggq97H4Mjz/Lw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:24:93:be:ef:59:90:40:78:14:09:f5:a3:ec:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29db7ca4eee1e453d26fab99c8201adf894612be Validity Not Before: Dec 20 02:01:01 2025 GMT Not After : Dec 21 02:01:01 2025 GMT Subject: CN=13ff2401856094003b0575ac6d2682349a96bc14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:19:5a:bf:c8:94:24:89:38:3a:b0:9e:16:21: 96:2a:02:6e:98:bb:5e:e8:80:a3:1f:2a:dc:91:c1: 0e:00:55:97:42:61:78:b1:d7:9b:58:2b:22:64:ab: 70:d1:ef:8a:82:6b:96:18:d1:a8:99:53:40:ab:aa: b5:be:93:49:16:d5:45:b7:55:ba:4d:1c:34:db:08: 8f:f0:2e:af:de:65:2a:54:57:83:d8:4f:8e:40:d7: ec:5a:71:33:3d:fc:48:96:a9:12:1d:b2:cf:39:81: a7:3f:6e:3c:7a:12:41:09:00:fd:52:2d:36:4a:f9: 7e:15:84:8a:58:6b:f0:ff:52:ab:e4:8c:e0:c5:ee: 9d:dc:03:b5:1f:42:ac:cb:f0:47:52:6c:d7:ba:ef: 03:33:8e:aa:ba:06:a1:1b:7e:f8:c0:05:62:2f:41: 20:ff:a0:9b:71:7c:33:36:44:65:d7:c6:24:a2:86: 3a:eb:3b:0a:84:37:28:e5:7f:47:91:99:d5:bb:bf: 97:0f:25:80:e3:2e:71:60:25:33:9e:e3:a7:e6:5d: bc:41:04:5e:e3:50:82:03:c3:b5:ad:ca:e6:b4:92: a7:f0:57:4a:24:8a:0c:00:41:d1:a5:50:1b:f8:42: 19:20:84:fb:3d:11:91:a5:a7:d7:77:0f:97:7a:01: 52:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:FF:24:01:85:60:94:00:3B:05:75:AC:6D:26:82:34:9A:96:BC:14 X509v3 Authority Key Identifier: keyid:29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:f4:f4:35:5a:e9:fc:24:1e:b5:b9:c2:9d:84:c6:42:74:29: fb:03:4f:08:ca:42:1f:ae:4d:8f:e8:44:6a:6a:be:d7:a6:78: 11:cd:89:4f:0e:0e:55:7f:7d:f2:c9:21:4d:f2:14:4d:7d:87: b4:f5:4d:01:db:76:9a:ba:7a:8a:89:5f:d8:87:0e:ba:87:d8: b6:04:8a:be:51:73:d0:c5:c7:1c:ab:74:40:5b:da:a7:be:82: cd:35:1a:a0:8a:1f:29:cc:fb:77:0d:ab:3d:3f:da:98:8f:a4: cc:4d:ba:d0:22:f1:39:4a:3b:f7:fa:8c:ea:aa:d0:9e:45:bb: df:cd:5b:37:63:5f:cd:00:57:9f:8b:1c:b2:70:23:75:c7:b7: 8e:35:59:92:3e:b4:a8:2b:c8:ca:47:9f:5f:2f:f5:07:c2:77: eb:bf:9f:7c:c6:86:6f:da:d0:24:b7:29:80:1d:b9:9f:a6:8d: a6:dc:d5:6e:e9:71:80:09:ed:5a:ce:63:75:81:87:d9:82:66: 2b:5d:68:95:48:83:af:14:a1:29:cb:1c:50:f9:09:ad:0e:b9: e9:01:e0:73:50:f7:d1:71:78:89:be:17:a6:28:6e:50:b7:6c: 20:56:49:a0:24:0d:ad:ba:38:11:59:59:65:09:0c:df:fe:14: 3d:e2:d8:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fSSTvu9ZkEB4FAn1o+yWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZGI3Y2E0ZWVlMWU0NTNkMjZmYWI5OWM4MjAxYWRmODk0 NjEyYmUwHhcNMjUxMjIwMDIwMTAxWhcNMjUxMjIxMDIwMTAxWjAzMTEwLwYDVQQD EygxM2ZmMjQwMTg1NjA5NDAwM2IwNTc1YWM2ZDI2ODIzNDlhOTZiYzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Blav8iUJIk4OrCeFiGWKgJumLte 6ICjHyrckcEOAFWXQmF4sdebWCsiZKtw0e+KgmuWGNGomVNAq6q1vpNJFtVFt1W6 TRw02wiP8C6v3mUqVFeD2E+OQNfsWnEzPfxIlqkSHbLPOYGnP248ehJBCQD9Ui02 Svl+FYSKWGvw/1Kr5Izgxe6d3AO1H0Ksy/BHUmzXuu8DM46qugahG374wAViL0Eg /6CbcXwzNkRl18YkooY66zsKhDco5X9HkZnVu7+XDyWA4y5xYCUznuOn5l28QQRe 41CCA8O1rcrmtJKn8FdKJIoMAEHRpVAb+EIZIIT7PRGRpafXdw+XegFSMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBP/JAGFYJQAOwV1rG0mgjSalrwUMB8GA1UdIwQY MBaAFCnbfKTu4eRT0m+rmcggGt+JRhK+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2R0OHBPN2g1RlBTYjZ1WnlDQWEzNGxHRXI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy83ZjI5MGItODFjNy00MmI3LTk0N2Yt ZDMzZmExNjA1YWUxLzEvS2R0OHBPN2g1RlBTYjZ1WnlDQWEzNGxHRXI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy83ZjI5MGItODFjNy00MmI3LTk0N2YtZDMzZmExNjA1YWUx LzEvS2R0OHBPN2g1RlBTYjZ1WnlDQWEzNGxHRXI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcfT0NVrp /CQetbnCnYTGQnQp+wNPCMpCH65Nj+hEamq+16Z4Ec2JTw4OVX998skhTfIUTX2H tPVNAdt2mrp6iolf2IcOuofYtgSKvlFz0MXHHKt0QFvap76CzTUaoIofKcz7dw2r PT/amI+kzE260CLxOUo79/qM6qrQnkW7381bN2NfzQBXn4scsnAjdce3jjVZkj60 qCvIykefXy/1B8J367+ffMaGb9rQJLcpgB25n6aNptzVbulxgAntWs5jdYGH2YJm K11olUiDrxShKcscUPkJrQ656QHgc1D30XF4ib4XpihuULdsIFZJoCQNrbo4EVlZ ZQkM3/4UPeLYmQ== -----END CERTIFICATE-----Generated at Sat Dec 20 06:33:56 2025 by rpki-client