This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft File: KfzfdinE4A6QbxQ19EndEJ9BC2w.mft (raw, json) Hash identifier: aozu3ZEzBhGJgzlQHdX5gSZUtEB5E7k4B8J3LNRv9Qc= Subject key identifier: 34:B2:99:F6:44:B3:75:50:85:74:C6:6B:83:DC:AF:59:41:16:C3:D4 Authority key identifier: 29:FC:DF:76:29:C4:E0:0E:90:6F:14:35:F4:49:DD:10:9F:41:0B:6C Certificate issuer: /CN=29fcdf7629c4e00e906f1435f449dd109f410b6c Certificate serial: 019B612F848F0FEC80A858D495EAF1C8C21C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfzfdinE4A6QbxQ19EndEJ9BC2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft Manifest number: 1478 Signing time: Sat 27 Dec 2025 19:01:02 +0000 Manifest this update: Sat 27 Dec 2025 19:01:02 +0000 Manifest next update: Sun 28 Dec 2025 19:01:02 +0000 Files and hashes: 1: KfzfdinE4A6QbxQ19EndEJ9BC2w.crl (hash: FD21F7OMUM/cyw9BCSnUGId/Iphz5w1Y7tW9KQXDdJE=) 2: lKv_MpftntPeWIBfQDo4EvQnOCE.roa (hash: v96JNz5ZiqAWk2kEUzYU+IVtwUC39vYGpp2p54BaFZ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft rsync://rpki.ripe.net/repository/DEFAULT/KfzfdinE4A6QbxQ19EndEJ9BC2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 15:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:2f:84:8f:0f:ec:80:a8:58:d4:95:ea:f1:c8:c2:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29fcdf7629c4e00e906f1435f449dd109f410b6c Validity Not Before: Dec 27 19:01:02 2025 GMT Not After : Dec 28 19:01:02 2025 GMT Subject: CN=34b299f644b375508574c66b83dcaf594116c3d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:41:d0:00:2c:82:88:76:b5:9b:ea:10:44:6e: b8:ee:40:cd:0c:2d:83:2f:a1:12:c9:fb:5b:f0:62: fe:8f:2f:c4:d8:c6:bf:3e:5b:89:5b:db:b0:e9:a9: 29:e3:73:ac:c1:67:5e:5a:38:3e:de:ae:bb:a2:76: e4:e4:b0:59:fd:e9:a0:54:d3:9a:60:fb:f0:2d:95: cb:5b:5f:84:e1:b6:32:5d:e7:86:bd:ef:1d:77:b2: f4:34:1f:4d:7e:0c:1a:a1:b1:33:85:ed:f3:44:81: df:6d:d6:44:d6:c4:ba:43:6c:69:8d:05:31:ab:2c: 60:4b:3e:a6:65:6f:f1:6f:ad:c9:be:6f:f0:cb:b8: e9:bc:0f:86:70:f3:16:7d:8a:d1:25:06:10:c8:80: 8b:83:08:4a:1c:50:77:c3:01:2b:85:ee:04:02:4f: 57:05:9b:82:9e:1a:6c:ad:64:87:ab:3f:b3:d0:b7: a3:20:5f:90:53:b2:91:45:49:26:35:58:7d:84:fb: d7:3f:e9:c3:ef:40:30:75:4a:14:a4:27:3a:7c:6e: 08:d9:57:a3:95:52:0b:6e:1f:d0:8e:3d:51:da:c7: 76:b6:fc:29:a8:38:66:fc:e1:42:6a:7a:ca:bd:76: 96:6e:81:cf:57:88:f2:fe:c8:e3:35:84:6d:9e:45: 0c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:B2:99:F6:44:B3:75:50:85:74:C6:6B:83:DC:AF:59:41:16:C3:D4 X509v3 Authority Key Identifier: keyid:29:FC:DF:76:29:C4:E0:0E:90:6F:14:35:F4:49:DD:10:9F:41:0B:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfzfdinE4A6QbxQ19EndEJ9BC2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:f5:99:6e:9f:c2:09:8a:ae:0f:e5:8b:04:4e:fc:69:6d:f4: 38:a5:73:12:d0:fc:d8:f7:9f:e7:ad:49:72:ee:35:0a:8a:20: 2f:09:c6:8b:c2:90:2d:90:0a:22:d3:74:7c:78:a9:c9:4e:a9: c3:fa:db:48:af:f4:1d:3d:d9:d9:fd:df:0a:07:75:39:25:bf: 92:6a:32:03:0f:01:4d:fd:57:17:27:33:ab:c5:fd:3f:e2:79: 33:1f:5e:ec:7a:5a:60:33:12:55:af:96:a8:c0:ef:7c:fa:f0: 64:54:ae:80:2b:6e:4a:83:48:e8:29:ef:c8:46:b1:ff:83:64: ca:f1:c2:e6:66:21:ae:01:60:63:e4:96:4e:bc:e4:ff:42:bc: 23:0a:d2:e2:6d:8f:72:80:a1:64:c8:b5:08:d4:1f:63:a7:cb: 13:00:26:dc:79:bc:bb:ae:64:16:86:b0:46:f1:49:cb:c5:d1: a3:04:3a:f8:ba:bf:2b:2c:de:02:7b:91:d4:00:1d:c4:d4:c6: 60:df:4c:36:54:ca:af:c4:ab:c9:0c:85:8e:99:2f:cb:c0:4d: c7:cb:c7:93:5a:05:b1:5c:43:42:cf:61:6f:1f:a6:59:e4:0a: f7:a7:a6:8a:4d:cf:1a:7f:c1:cc:ab:a6:ed:f0:64:fa:2e:df: 4f:39:e7:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZthL4SPD+yAqFjUlerxyMIcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZmNkZjc2MjljNGUwMGU5MDZmMTQzNWY0NDlkZDEwOWY0 MTBiNmMwHhcNMjUxMjI3MTkwMTAyWhcNMjUxMjI4MTkwMTAyWjAzMTEwLwYDVQQD EygzNGIyOTlmNjQ0YjM3NTUwODU3NGM2NmI4M2RjYWY1OTQxMTZjM2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EHQACyCiHa1m+oQRG647kDNDC2D L6ESyftb8GL+jy/E2Ma/PluJW9uw6akp43OswWdeWjg+3q67onbk5LBZ/emgVNOa YPvwLZXLW1+E4bYyXeeGve8dd7L0NB9NfgwaobEzhe3zRIHfbdZE1sS6Q2xpjQUx qyxgSz6mZW/xb63Jvm/wy7jpvA+GcPMWfYrRJQYQyICLgwhKHFB3wwErhe4EAk9X BZuCnhpsrWSHqz+z0LejIF+QU7KRRUkmNVh9hPvXP+nD70AwdUoUpCc6fG4I2Vej lVILbh/Qjj1R2sd2tvwpqDhm/OFCanrKvXaWboHPV4jy/sjjNYRtnkUMWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDSymfZEs3VQhXTGa4Pcr1lBFsPUMB8GA1UdIwQY MBaAFCn833YpxOAOkG8UNfRJ3RCfQQtsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2Z6ZmRpbkU0QTZRYnhRMTlFbmRFSjlCQzJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9kNDdiZTgtMmZmMC00YzkzLWI5MTIt OTA1ZTc2M2YwNDhkLzEvS2Z6ZmRpbkU0QTZRYnhRMTlFbmRFSjlCQzJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9kNDdiZTgtMmZmMC00YzkzLWI5MTItOTA1ZTc2M2YwNDhk LzEvS2Z6ZmRpbkU0QTZRYnhRMTlFbmRFSjlCQzJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArPWZbp/C CYquD+WLBE78aW30OKVzEtD82Pef561Jcu41CoogLwnGi8KQLZAKItN0fHipyU6p w/rbSK/0HT3Z2f3fCgd1OSW/kmoyAw8BTf1XFyczq8X9P+J5Mx9e7HpaYDMSVa+W qMDvfPrwZFSugCtuSoNI6CnvyEax/4NkyvHC5mYhrgFgY+SWTrzk/0K8IwrS4m2P coChZMi1CNQfY6fLEwAm3Hm8u65kFoawRvFJy8XRowQ6+Lq/KyzeAnuR1AAdxNTG YN9MNlTKr8SryQyFjpkvy8BNx8vHk1oFsVxDQs9hbx+mWeQK96emik3PGn/BzKum 7fBk+i7fTznn5w== -----END CERTIFICATE-----Generated at Sat Dec 27 21:02:35 2025 by rpki-client