This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft File: Kt1DinzjyzefKM-gUc9j1a2P48o.mft (raw, json) Hash identifier: TpgNAgZo2qWhadOMMlwyKDwILjmK9dA7sG6utOJ1yoI= Subject key identifier: 44:6E:F1:80:3F:D3:1A:7C:66:16:47:51:38:D3:E0:A5:94:82:4E:31 Authority key identifier: 2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA Certificate issuer: /CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca Certificate serial: 019B3E35627A9F19E64F5916F15537BD8BDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft Manifest number: 0FD7 Signing time: Sun 21 Dec 2025 00:00:44 +0000 Manifest this update: Sun 21 Dec 2025 00:00:44 +0000 Manifest next update: Mon 22 Dec 2025 00:00:44 +0000 Files and hashes: 1: 8eg_ozUgN0LwPpJGepVjL-X5qgI.roa (hash: Z8orduaXF7DXrYWOscVyHgXJkUsoFlq7AQocFZQpdOs=) 2: BTmSI3bKDyEio_o8HAFd3DpA8rw.roa (hash: 3z5V5nlo98dCHrSvU7v+ci/JP55YJA4F6NU227fMQdg=) 3: Kt1DinzjyzefKM-gUc9j1a2P48o.crl (hash: Yblv6x6U0EcJ+GZCv/bO/Jm+NI3OvOMHrP6a8Zynqds=) 4: Vl-BUyW_4i4W1Wnxmf0KDGW6dVM.roa (hash: qrkRzr8LSzDpFIdLrS23zNSmVx5+NOPtSLZdcnXxt68=) 5: kq56qkz3yFyhTWTclWQs9GofbW8.roa (hash: U2ETgi9N1vdCcSaDvEYZmHRu6NYMtvbYpcr6l8+r5Rg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:35:62:7a:9f:19:e6:4f:59:16:f1:55:37:bd:8b:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca Validity Not Before: Dec 21 00:00:44 2025 GMT Not After : Dec 22 00:00:44 2025 GMT Subject: CN=446ef1803fd31a7c6616475138d3e0a594824e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e5:65:6d:18:67:b0:dc:6a:4d:5d:76:fd:91: b4:72:98:6c:37:35:c6:b2:27:97:77:11:0c:a1:9c: 2c:61:6f:00:be:34:d6:0c:d6:0b:e5:74:36:93:db: 5d:f9:30:ef:ea:e6:e8:d5:d4:6e:1d:3a:07:6a:f9: 2c:93:05:5a:29:83:ed:4f:2a:76:cf:c8:df:59:ba: 37:2a:1e:f9:a0:80:8b:5f:9e:b5:cf:38:aa:cd:1d: 3e:31:cf:b9:74:51:fb:4a:93:d8:bc:bb:f1:62:5d: f1:80:d9:c5:de:42:41:0c:38:81:94:8d:94:c7:46: e3:fd:d2:78:40:7a:36:5f:ba:e3:c6:59:74:45:f7: 8c:f8:9a:4a:a5:89:e5:0a:af:8d:08:76:a4:b9:2d: d6:b7:dc:72:b1:80:26:2c:9e:8d:98:81:66:5a:0d: 62:3b:2c:93:2b:07:d6:66:54:b2:1e:02:cd:6b:0b: 34:df:ee:5d:cd:12:ca:68:3d:b7:e6:db:a8:f4:b4: 95:ef:98:cf:ef:9f:ed:2c:8b:1c:1d:a5:67:c8:20: 22:33:a5:85:02:1f:b4:07:7f:1d:12:33:3c:e5:c1: e9:bc:c4:6d:7c:89:6c:ab:ba:1f:a3:cd:b2:48:d4: 51:3f:17:19:47:68:f0:f6:ee:a5:19:b4:f0:46:14: 80:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:6E:F1:80:3F:D3:1A:7C:66:16:47:51:38:D3:E0:A5:94:82:4E:31 X509v3 Authority Key Identifier: keyid:2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:8f:ea:71:32:b4:b2:85:af:b9:79:87:20:e2:23:60:ea:56: cc:6f:98:45:89:86:78:02:43:03:2c:56:28:09:2a:71:0e:d8: da:4c:60:fe:99:fa:b3:65:60:e1:c4:f9:c7:fa:98:3b:61:5b: 11:b4:96:d3:53:d2:78:34:15:71:30:16:f0:7d:c8:e8:e0:32: ef:86:7d:aa:46:d2:de:3d:1b:f4:59:da:b5:f4:99:55:dd:33: f1:df:6f:8f:c0:30:03:b3:e4:7a:e2:8d:c0:85:df:ef:4c:12: 7b:da:61:26:4b:83:f6:71:10:04:ba:e6:4c:1b:76:60:b0:4d: c6:40:aa:2d:d4:45:1e:fd:0a:5f:c4:f0:61:b1:e1:f2:05:7e: ad:b3:0c:da:49:e9:cf:4e:e6:73:0e:47:48:da:dc:a5:2b:79: 03:db:cf:73:e8:28:b2:f4:d0:56:6a:2f:dd:d1:02:23:35:91: a8:5c:a9:8b:3e:83:7a:ee:c4:b3:b7:a4:62:bf:a7:4c:9d:ac: 69:77:63:e0:8c:47:ad:09:81:84:83:13:ff:74:c4:a9:78:94: 9c:86:3e:b3:33:95:27:9e:33:77:df:38:49:f3:4c:e0:be:6f: d0:e7:eb:3b:c3:b3:7e:ea:da:3f:c6:5c:dd:89:41:16:46:74: 32:67:45:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+NWJ6nxnmT1kW8VU3vYveMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhZGQ0MzhhN2NlM2NiMzc5ZjI4Y2ZhMDUxY2Y2M2Q1YWQ4 ZmUzY2EwHhcNMjUxMjIxMDAwMDQ0WhcNMjUxMjIyMDAwMDQ0WjAzMTEwLwYDVQQD Eyg0NDZlZjE4MDNmZDMxYTdjNjYxNjQ3NTEzOGQzZTBhNTk0ODI0ZTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuVlbRhnsNxqTV12/ZG0cphsNzXG sieXdxEMoZwsYW8AvjTWDNYL5XQ2k9td+TDv6ubo1dRuHToHavkskwVaKYPtTyp2 z8jfWbo3Kh75oICLX561zziqzR0+Mc+5dFH7SpPYvLvxYl3xgNnF3kJBDDiBlI2U x0bj/dJ4QHo2X7rjxll0RfeM+JpKpYnlCq+NCHakuS3Wt9xysYAmLJ6NmIFmWg1i OyyTKwfWZlSyHgLNaws03+5dzRLKaD235tuo9LSV75jP75/tLIscHaVnyCAiM6WF Ah+0B38dEjM85cHpvMRtfIlsq7ofo82ySNRRPxcZR2jw9u6lGbTwRhSAdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFERu8YA/0xp8ZhZHUTjT4KWUgk4xMB8GA1UdIwQY MBaAFCrdQ4p848s3nyjPoFHPY9Wtj+PKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3QxRGluemp5emVmS00tZ1VjOWoxYTJQNDhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8wYjYxY2YtODBiYS00ZThlLWEyZTUt MjBhMGQxMzBjNDU2LzEvS3QxRGluemp5emVmS00tZ1VjOWoxYTJQNDhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8wYjYxY2YtODBiYS00ZThlLWEyZTUtMjBhMGQxMzBjNDU2 LzEvS3QxRGluemp5emVmS00tZ1VjOWoxYTJQNDhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUo/qcTK0 soWvuXmHIOIjYOpWzG+YRYmGeAJDAyxWKAkqcQ7Y2kxg/pn6s2Vg4cT5x/qYO2Fb EbSW01PSeDQVcTAW8H3I6OAy74Z9qkbS3j0b9FnatfSZVd0z8d9vj8AwA7PkeuKN wIXf70wSe9phJkuD9nEQBLrmTBt2YLBNxkCqLdRFHv0KX8TwYbHh8gV+rbMM2knp z07mcw5HSNrcpSt5A9vPc+gosvTQVmov3dECIzWRqFypiz6Deu7Es7ekYr+nTJ2s aXdj4IxHrQmBhIMT/3TEqXiUnIY+szOVJ54zd984SfNM4L5v0OfrO8OzfuraP8Zc 3YlBFkZ0MmdFyg== -----END CERTIFICATE-----Generated at Sun Dec 21 06:28:20 2025 by rpki-client