This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft File: Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft (raw, json) Hash identifier: IDONimRX9VXFqL4FYs8AU7Lt7NFy4Xo86w7MJ9yMuj8= Subject key identifier: EC:A6:20:1A:77:AA:D3:93:A6:50:F0:D8:38:78:AE:FD:36:A1:3E:30 Authority key identifier: 29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE Certificate issuer: /CN=29db7ca4eee1e453d26fab99c8201adf894612be Certificate serial: 019B3F482CC43A7C05D5035FEA26C9E9F69C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft Manifest number: 144C Signing time: Sun 21 Dec 2025 05:00:53 +0000 Manifest this update: Sun 21 Dec 2025 05:00:53 +0000 Manifest next update: Mon 22 Dec 2025 05:00:53 +0000 Files and hashes: 1: 7RH8q326KlHuJPjQMSVa_xv9mM8.roa (hash: jYAaBPFexodAbG01790lRYCRx2XbFPYuT6Kt3pZUZ84=) 2: 86BJ0tf44AvFSPojuuBVHQjlnBU.roa (hash: a0d0fyTctB2pb4UQURZCBOpZA1JPgrlTVV7wSAI3T8Q=) 3: Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl (hash: 7mgNvZ0hYG36KvNQMt7Hs/kvahTFqbezavvxV8bkjTw=) 4: c6ZD9P3H30o78749ZEWyxOqABSU.roa (hash: cprASPGCBwZQZqsXiJOC/24dbl0p4JtT0bpDH9Sk/a4=) 5: idwzkQBauFhn5yVkIjeQVtz5mZE.roa (hash: 44TjgVB7J3xRAwnTMWxvN7AZUFhxeYggq97H4Mjz/Lw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:2c:c4:3a:7c:05:d5:03:5f:ea:26:c9:e9:f6:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29db7ca4eee1e453d26fab99c8201adf894612be Validity Not Before: Dec 21 05:00:53 2025 GMT Not After : Dec 22 05:00:53 2025 GMT Subject: CN=eca6201a77aad393a650f0d83878aefd36a13e30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d5:29:14:64:bc:ca:f0:36:4c:bb:bf:d3:71: 3c:31:48:bc:0d:8d:f0:a2:d8:a2:0e:50:67:a8:93: 70:8c:29:02:27:c3:be:ad:ad:19:28:3e:f5:d5:c0: 32:a5:9c:5d:6f:e9:d6:4b:d8:f9:14:ae:e7:d9:97: b7:01:2c:50:a2:82:e1:70:dd:0d:52:2e:bf:96:ce: 4c:63:2a:21:29:f3:a8:b2:ce:f0:b6:14:62:af:55: 8e:3a:ec:91:f3:e3:de:72:90:43:fe:93:d4:ac:81: a9:72:cc:29:ca:55:b4:bf:04:c1:08:e5:7c:57:51: ce:6b:6b:48:48:e5:8d:bb:49:d1:8f:11:03:40:bc: 1e:f8:f2:c4:5b:8f:7b:36:ba:a7:ec:73:59:9a:76: d9:95:86:54:c7:8f:b2:81:93:6e:56:46:c5:3c:49: 25:ed:82:72:93:d3:f6:02:33:3c:ab:d6:12:a4:91: d9:e1:1b:3b:70:a9:1a:6c:dd:d1:1c:1a:ab:83:45: 79:a9:b6:0e:30:db:3b:e0:84:5d:07:d4:ed:c3:6b: 62:39:d8:ac:7c:ba:8b:34:aa:c6:39:67:e7:49:1b: 93:3e:55:ca:34:98:6b:ce:86:59:4b:71:ad:1d:f4: 0a:ad:f8:b1:df:1f:10:50:96:96:1c:a2:2a:4f:15: e0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A6:20:1A:77:AA:D3:93:A6:50:F0:D8:38:78:AE:FD:36:A1:3E:30 X509v3 Authority Key Identifier: keyid:29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:91:34:b2:87:ec:0d:40:9e:be:3a:06:4e:fc:57:f7:9b:53: 35:27:82:c7:05:2d:c7:3f:63:d3:b1:74:77:d1:e0:18:85:6b: cc:61:9c:ce:b2:17:5b:3d:d9:52:5b:21:34:87:09:e4:9d:2a: 57:2f:9c:bb:a5:ae:a2:99:b3:b3:11:ee:0d:c5:41:df:e5:b2: 31:ef:5d:23:13:9f:ad:d4:5b:dd:e2:c9:d4:68:cd:1b:73:b3: 2d:b8:64:5f:f4:c5:0a:15:9f:fb:11:f8:7d:4e:86:b7:24:ee: 40:b7:68:54:d2:ef:2e:16:f9:76:15:37:c5:42:36:ae:12:f0: d8:09:8d:6d:28:56:b5:65:bd:bb:2c:3c:cf:81:91:d8:8d:0c: b0:25:cd:93:e0:b2:e5:dd:b0:c7:ef:3a:17:05:88:36:a5:fb: f9:9e:35:4e:5a:b2:fd:d2:bc:1e:0e:f6:f6:b6:a5:26:ce:94: eb:95:ba:92:a6:ce:70:7f:d4:81:63:4c:f3:e7:19:57:0b:3c: 38:7e:bb:01:11:62:85:ca:72:84:50:c2:d5:49:8b:0f:f4:c3: bc:9d:2d:cb:10:59:cd:19:13:3c:5c:c5:4a:94:d2:86:07:f6: 34:84:1b:16:b5:70:74:72:48:d8:e3:39:93:12:38:9e:19:fc: 2b:fd:ae:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SCzEOnwF1QNf6ibJ6facMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZGI3Y2E0ZWVlMWU0NTNkMjZmYWI5OWM4MjAxYWRmODk0 NjEyYmUwHhcNMjUxMjIxMDUwMDUzWhcNMjUxMjIyMDUwMDUzWjAzMTEwLwYDVQQD EyhlY2E2MjAxYTc3YWFkMzkzYTY1MGYwZDgzODc4YWVmZDM2YTEzZTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9UpFGS8yvA2TLu/03E8MUi8DY3w otiiDlBnqJNwjCkCJ8O+ra0ZKD711cAypZxdb+nWS9j5FK7n2Ze3ASxQooLhcN0N Ui6/ls5MYyohKfOoss7wthRir1WOOuyR8+PecpBD/pPUrIGpcswpylW0vwTBCOV8 V1HOa2tISOWNu0nRjxEDQLwe+PLEW497Nrqn7HNZmnbZlYZUx4+ygZNuVkbFPEkl 7YJyk9P2AjM8q9YSpJHZ4Rs7cKkabN3RHBqrg0V5qbYOMNs74IRdB9Ttw2tiOdis fLqLNKrGOWfnSRuTPlXKNJhrzoZZS3GtHfQKrfix3x8QUJaWHKIqTxXgPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOymIBp3qtOTplDw2Dh4rv02oT4wMB8GA1UdIwQY MBaAFCnbfKTu4eRT0m+rmcggGt+JRhK+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2R0OHBPN2g1RlBTYjZ1WnlDQWEzNGxHRXI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy83ZjI5MGItODFjNy00MmI3LTk0N2Yt ZDMzZmExNjA1YWUxLzEvS2R0OHBPN2g1RlBTYjZ1WnlDQWEzNGxHRXI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy83ZjI5MGItODFjNy00MmI3LTk0N2YtZDMzZmExNjA1YWUx LzEvS2R0OHBPN2g1RlBTYjZ1WnlDQWEzNGxHRXI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi5E0sofs DUCevjoGTvxX95tTNSeCxwUtxz9j07F0d9HgGIVrzGGczrIXWz3ZUlshNIcJ5J0q Vy+cu6WuopmzsxHuDcVB3+WyMe9dIxOfrdRb3eLJ1GjNG3OzLbhkX/TFChWf+xH4 fU6GtyTuQLdoVNLvLhb5dhU3xUI2rhLw2AmNbShWtWW9uyw8z4GR2I0MsCXNk+Cy 5d2wx+86FwWINqX7+Z41Tlqy/dK8Hg729ralJs6U65W6kqbOcH/UgWNM8+cZVws8 OH67ARFihcpyhFDC1UmLD/TDvJ0tyxBZzRkTPFzFSpTShgf2NIQbFrVwdHJI2OM5 kxI4nhn8K/2u/A== -----END CERTIFICATE-----Generated at Sun Dec 21 13:54:27 2025 by rpki-client