This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft File: Kt1DinzjyzefKM-gUc9j1a2P48o.mft (raw, json) Hash identifier: yMbWjeY7FdLJlOQJXoUURYH27nV6T26YpMB/T4LTVo0= Subject key identifier: 12:60:0F:13:F6:A3:84:27:1E:17:64:AF:62:69:F1:F3:E3:78:83:37 Authority key identifier: 2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA Certificate issuer: /CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca Certificate serial: 019B4023DC27CC48F6B435A6418AE4954613 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft Manifest number: 0FD8 Signing time: Sun 21 Dec 2025 09:00:50 +0000 Manifest this update: Sun 21 Dec 2025 09:00:50 +0000 Manifest next update: Mon 22 Dec 2025 09:00:50 +0000 Files and hashes: 1: 8eg_ozUgN0LwPpJGepVjL-X5qgI.roa (hash: Z8orduaXF7DXrYWOscVyHgXJkUsoFlq7AQocFZQpdOs=) 2: BTmSI3bKDyEio_o8HAFd3DpA8rw.roa (hash: 3z5V5nlo98dCHrSvU7v+ci/JP55YJA4F6NU227fMQdg=) 3: Kt1DinzjyzefKM-gUc9j1a2P48o.crl (hash: xcKzwZdEnQR53GeTuA7oVa9+e3dIreQD7D6nnfkSHCY=) 4: Vl-BUyW_4i4W1Wnxmf0KDGW6dVM.roa (hash: qrkRzr8LSzDpFIdLrS23zNSmVx5+NOPtSLZdcnXxt68=) 5: kq56qkz3yFyhTWTclWQs9GofbW8.roa (hash: U2ETgi9N1vdCcSaDvEYZmHRu6NYMtvbYpcr6l8+r5Rg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:23:dc:27:cc:48:f6:b4:35:a6:41:8a:e4:95:46:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca Validity Not Before: Dec 21 09:00:50 2025 GMT Not After : Dec 22 09:00:50 2025 GMT Subject: CN=12600f13f6a384271e1764af6269f1f3e3788337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:67:58:f5:43:5e:b0:86:f1:09:f1:df:84:ce: 30:8e:7e:7d:55:fb:cf:11:5a:4c:5c:f9:db:42:eb: 37:c6:76:e3:0e:00:ee:5b:33:67:16:f7:c9:0a:5b: de:04:b5:98:59:c9:5c:f2:43:a1:2e:a9:36:ff:d7: ac:45:16:27:ee:ec:11:89:0b:f9:0c:4f:85:25:b0: bd:45:cc:27:7c:65:07:2c:71:b9:74:74:9d:eb:94: e3:73:ea:51:90:5e:8d:6f:08:ad:0a:3a:0e:65:db: e2:ba:99:44:18:a3:bf:06:bc:5d:47:82:ac:31:4a: dd:d6:84:c7:0d:c8:cf:3b:cd:9a:aa:4a:3d:9b:6b: 56:f9:21:0b:72:30:a0:ab:95:d9:45:09:fa:bf:e7: 0e:8b:dc:e9:ba:35:7c:87:65:04:59:c8:70:3e:fe: 2a:12:2a:3b:ef:23:1a:83:ab:06:8b:e0:02:ef:50: ef:1e:fe:e4:fd:ba:38:7b:1b:f9:51:cf:02:e5:cb: e9:16:9f:7c:7c:08:3b:ff:6e:12:94:dd:1b:57:e5: 00:8c:16:d0:63:c8:c7:f3:be:a4:45:88:c6:0b:2b: c7:e1:d8:ba:79:64:a0:88:fc:e9:ae:2b:0c:fc:76: 94:29:60:4f:7b:b4:41:90:8e:78:b9:cb:77:b9:07: a0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:60:0F:13:F6:A3:84:27:1E:17:64:AF:62:69:F1:F3:E3:78:83:37 X509v3 Authority Key Identifier: keyid:2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:9e:ce:bc:e7:45:62:78:80:72:bc:21:3b:55:a1:ae:90:7b: 15:2f:a3:98:8e:9d:37:e7:50:7e:f4:33:73:f4:24:1e:53:0a: 38:11:99:08:70:5b:5c:76:90:0e:1b:8d:22:2c:39:44:ed:80: 50:8f:99:9c:1e:60:24:bf:45:84:ff:bb:cb:1c:7b:90:a5:fe: 59:ff:14:fc:50:d2:6f:88:4c:09:6b:e6:fc:5a:f7:ea:a5:d9: a7:51:bd:39:75:c1:73:87:19:14:f9:a8:d8:79:3a:61:97:25: 1c:80:83:c2:3c:0a:35:b8:f0:79:ad:8b:e8:2b:b5:e0:27:8c: ad:c7:19:54:43:6d:06:e9:5e:60:c3:f0:88:0d:c9:b5:86:78: e4:79:b5:09:cb:a0:e7:c4:bf:17:91:c7:f2:c0:d2:b8:c4:af: cf:dc:3b:57:13:d3:c3:d7:5c:ad:59:c1:08:1f:9c:f0:29:f5: 8c:74:04:26:55:25:ba:5f:f6:c5:98:bc:2a:07:e5:1b:68:72: 6f:67:46:10:98:05:fa:59:1b:87:75:99:a8:e9:10:ef:0e:7c: d2:a9:eb:01:32:fd:e3:51:da:e2:a0:56:30:0c:67:bf:33:8e: fa:54:6a:33:cc:99:e0:4a:56:18:7e:4d:fe:d6:b5:e4:53:37: 34:a7:33:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAI9wnzEj2tDWmQYrklUYTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhZGQ0MzhhN2NlM2NiMzc5ZjI4Y2ZhMDUxY2Y2M2Q1YWQ4 ZmUzY2EwHhcNMjUxMjIxMDkwMDUwWhcNMjUxMjIyMDkwMDUwWjAzMTEwLwYDVQQD EygxMjYwMGYxM2Y2YTM4NDI3MWUxNzY0YWY2MjY5ZjFmM2UzNzg4MzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWdY9UNesIbxCfHfhM4wjn59VfvP EVpMXPnbQus3xnbjDgDuWzNnFvfJClveBLWYWclc8kOhLqk2/9esRRYn7uwRiQv5 DE+FJbC9RcwnfGUHLHG5dHSd65Tjc+pRkF6NbwitCjoOZdviuplEGKO/BrxdR4Ks MUrd1oTHDcjPO82aqko9m2tW+SELcjCgq5XZRQn6v+cOi9zpujV8h2UEWchwPv4q Eio77yMag6sGi+AC71DvHv7k/bo4exv5Uc8C5cvpFp98fAg7/24SlN0bV+UAjBbQ Y8jH876kRYjGCyvH4di6eWSgiPzprisM/HaUKWBPe7RBkI54uct3uQeg3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBJgDxP2o4QnHhdkr2Jp8fPjeIM3MB8GA1UdIwQY MBaAFCrdQ4p848s3nyjPoFHPY9Wtj+PKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3QxRGluemp5emVmS00tZ1VjOWoxYTJQNDhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8wYjYxY2YtODBiYS00ZThlLWEyZTUt MjBhMGQxMzBjNDU2LzEvS3QxRGluemp5emVmS00tZ1VjOWoxYTJQNDhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8wYjYxY2YtODBiYS00ZThlLWEyZTUtMjBhMGQxMzBjNDU2 LzEvS3QxRGluemp5emVmS00tZ1VjOWoxYTJQNDhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgJ7OvOdF YniAcrwhO1WhrpB7FS+jmI6dN+dQfvQzc/QkHlMKOBGZCHBbXHaQDhuNIiw5RO2A UI+ZnB5gJL9FhP+7yxx7kKX+Wf8U/FDSb4hMCWvm/Fr36qXZp1G9OXXBc4cZFPmo 2Hk6YZclHICDwjwKNbjwea2L6Cu14CeMrccZVENtBuleYMPwiA3JtYZ45Hm1Ccug 58S/F5HH8sDSuMSvz9w7VxPTw9dcrVnBCB+c8Cn1jHQEJlUlul/2xZi8KgflG2hy b2dGEJgF+lkbh3WZqOkQ7w580qnrATL941Ha4qBWMAxnvzOO+lRqM8yZ4EpWGH5N /ta15FM3NKczVQ== -----END CERTIFICATE-----Generated at Sun Dec 21 11:05:16 2025 by rpki-client