This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft File: KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft (raw, json) Hash identifier: VPmZnt6IVzK2wpZT49WQdWN0Db7/IQrvq7RFCS5j3cQ= Subject key identifier: 0B:E2:BC:13:B5:3B:E4:58:DD:E7:25:46:3C:22:69:B1:A7:B1:99:F1 Authority key identifier: 29:DA:64:11:A1:32:64:DC:6D:E0:F1:01:10:85:40:EF:74:1E:D1:9A Certificate issuer: /CN=29da6411a13264dc6de0f101108540ef741ed19a Certificate serial: 019B2D0B3297C93DF6730DD0AED79591F63A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft Manifest number: 139D Signing time: Wed 17 Dec 2025 16:01:07 +0000 Manifest this update: Wed 17 Dec 2025 16:01:07 +0000 Manifest next update: Thu 18 Dec 2025 16:01:07 +0000 Files and hashes: 1: KdpkEaEyZNxt4PEBEIVA73Qe0Zo.crl (hash: ZmeS6ScxlC6sILYejxs/yqx35zXeQ02Oak1RNrVt6a8=) 2: ofG1VLRjjYIcZfzAaNigWWgyFxw.roa (hash: ZHICR+Axb4b3KRXOcmZzuP26q8FUw656ivJ0mJFMsoE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft rsync://rpki.ripe.net/repository/DEFAULT/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 16:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:32:97:c9:3d:f6:73:0d:d0:ae:d7:95:91:f6:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29da6411a13264dc6de0f101108540ef741ed19a Validity Not Before: Dec 17 16:01:07 2025 GMT Not After : Dec 18 16:01:07 2025 GMT Subject: CN=0be2bc13b53be458dde725463c2269b1a7b199f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8e:eb:e3:09:e5:b1:3f:5d:cc:30:64:de:49: e8:2b:e8:62:ba:b7:e0:77:c0:e9:c1:f6:02:9d:01: 5d:5f:5a:1d:97:89:d5:93:47:0c:c1:41:a2:33:28: bb:74:54:5e:a4:7a:cd:30:c5:62:b6:9e:65:9a:eb: 04:62:53:35:43:92:61:cb:ca:19:77:47:7c:b3:0b: 13:06:21:93:0c:82:9d:e1:41:c0:a4:7f:02:9c:22: 91:87:02:6c:a0:34:b4:bc:21:9c:e3:e5:8c:63:b1: 11:8c:10:54:91:10:8f:67:d2:1e:5f:37:0c:ea:45: 0b:c5:72:5d:0a:9b:1b:67:38:fd:6c:7e:ee:fb:3c: 77:03:93:ef:6a:02:38:ea:ee:d0:23:dd:64:6a:c6: 50:90:c7:34:c8:d8:6e:38:4c:e6:7a:e4:6d:e6:17: 94:71:d3:1f:ed:d2:5b:7d:90:df:6f:48:19:3f:e7: 1b:22:fa:b5:27:41:e9:19:e3:80:d5:2e:7d:7c:25: b8:16:81:32:e0:09:09:79:46:2c:0a:be:b2:59:4e: f0:08:94:a6:c9:87:15:e6:99:cb:9d:ab:ed:ac:2e: be:34:8a:7b:22:c9:1a:2b:d9:0c:c5:44:ea:f5:df: 7e:68:a7:e5:a9:ad:c6:77:73:1a:c8:11:a2:bf:7e: 69:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:E2:BC:13:B5:3B:E4:58:DD:E7:25:46:3C:22:69:B1:A7:B1:99:F1 X509v3 Authority Key Identifier: keyid:29:DA:64:11:A1:32:64:DC:6D:E0:F1:01:10:85:40:EF:74:1E:D1:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:16:aa:f9:4e:bf:4e:0e:ce:d3:32:df:c2:7d:24:2f:b5:4f: 63:91:68:01:e5:d7:66:aa:ef:17:ce:02:a7:20:21:ef:f0:d1: 43:25:bf:09:f8:a7:9e:b3:63:fb:45:a2:8b:0e:61:45:72:87: d3:a2:70:09:57:8f:0d:9c:e9:dd:ac:f3:2a:6a:3b:c7:f5:ec: 93:88:1a:a3:fd:d6:b1:4f:a5:6e:ca:8c:44:d3:1d:76:89:4f: 33:50:30:83:27:ce:ce:11:0c:08:23:6a:9e:17:dd:9d:41:37: 09:f3:0b:a8:70:cf:f5:e7:03:f0:9d:98:22:bd:65:23:c5:74: 59:6d:1c:0d:f5:5e:cc:ed:f6:b0:81:30:c2:78:1f:17:8c:93: 69:df:0a:55:95:fc:60:d4:d7:7d:1f:22:f8:45:aa:08:59:32: 95:eb:e7:ce:7e:0d:eb:3e:4f:79:25:b3:70:2b:19:39:a2:2a: 66:b8:2e:ac:4d:12:5d:a1:c9:fb:ef:97:63:44:f4:0e:48:0a: df:29:f4:89:9f:bb:70:2f:0d:12:b0:00:06:bd:df:e9:70:bd: 51:d5:d2:e3:9a:9e:76:93:a3:5a:9d:95:d6:86:6e:19:3a:f1: 86:27:27:cb:7f:aa:62:10:a1:e2:66:06:f7:df:23:8c:e7:b2: ae:4d:87:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstCzKXyT32cw3QrteVkfY6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZGE2NDExYTEzMjY0ZGM2ZGUwZjEwMTEwODU0MGVmNzQx ZWQxOWEwHhcNMjUxMjE3MTYwMTA3WhcNMjUxMjE4MTYwMTA3WjAzMTEwLwYDVQQD EygwYmUyYmMxM2I1M2JlNDU4ZGRlNzI1NDYzYzIyNjliMWE3YjE5OWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlY7r4wnlsT9dzDBk3knoK+hiurfg d8DpwfYCnQFdX1odl4nVk0cMwUGiMyi7dFRepHrNMMVitp5lmusEYlM1Q5Jhy8oZ d0d8swsTBiGTDIKd4UHApH8CnCKRhwJsoDS0vCGc4+WMY7ERjBBUkRCPZ9IeXzcM 6kULxXJdCpsbZzj9bH7u+zx3A5PvagI46u7QI91kasZQkMc0yNhuOEzmeuRt5heU cdMf7dJbfZDfb0gZP+cbIvq1J0HpGeOA1S59fCW4FoEy4AkJeUYsCr6yWU7wCJSm yYcV5pnLnavtrC6+NIp7IskaK9kMxUTq9d9+aKflqa3Gd3MayBGiv35p/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAvivBO1O+RY3eclRjwiabGnsZnxMB8GA1UdIwQY MBaAFCnaZBGhMmTcbeDxARCFQO90HtGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2Rwa0VhRXlaTnh0NFBFQkVJVkE3M1FlMFpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hNTZjMTItZGI3YS00MjIwLTliMTUt MWMyYjg0MmQyMmJlLzEvS2Rwa0VhRXlaTnh0NFBFQkVJVkE3M1FlMFpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9hNTZjMTItZGI3YS00MjIwLTliMTUtMWMyYjg0MmQyMmJl LzEvS2Rwa0VhRXlaTnh0NFBFQkVJVkE3M1FlMFpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXhaq+U6/ Tg7O0zLfwn0kL7VPY5FoAeXXZqrvF84CpyAh7/DRQyW/CfinnrNj+0Wiiw5hRXKH 06JwCVePDZzp3azzKmo7x/Xsk4gao/3WsU+lbsqMRNMddolPM1AwgyfOzhEMCCNq nhfdnUE3CfMLqHDP9ecD8J2YIr1lI8V0WW0cDfVezO32sIEwwngfF4yTad8KVZX8 YNTXfR8i+EWqCFkylevnzn4N6z5PeSWzcCsZOaIqZrgurE0SXaHJ+++XY0T0DkgK 3yn0iZ+7cC8NErAABr3f6XC9UdXS45qedpOjWp2V1oZuGTrxhicny3+qYhCh4mYG 998jjOeyrk2Hng== -----END CERTIFICATE-----Generated at Wed Dec 17 20:45:47 2025 by rpki-client