This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft File: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft (raw, json) Hash identifier: xzNOQ8rJkvrgiWmL0FyjgTX0v3P+b1/7eURgam2OiWo= Subject key identifier: DD:C3:89:E1:A9:D6:4E:A8:1F:B5:C1:A8:12:A2:40:C2:59:1A:72:54 Authority key identifier: 29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9 Certificate issuer: /CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9 Certificate serial: 019B3E6E24ED15C37790434D950161491EBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft Manifest number: 137F Signing time: Sun 21 Dec 2025 01:02:44 +0000 Manifest this update: Sun 21 Dec 2025 01:02:44 +0000 Manifest next update: Mon 22 Dec 2025 01:02:44 +0000 Files and hashes: 1: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl (hash: SfL+ygO/8t30TAvAUvkprt6zbLJN5MDZJ8HiakGB+og=) 2: wWu_mnG1mF1XhVWaW0DZDLRaMZA.roa (hash: OxlFGiJEt7spgwhfyEKbeiDTLip5JYbp9FNAPkL6rNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6e:24:ed:15:c3:77:90:43:4d:95:01:61:49:1e:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9 Validity Not Before: Dec 21 01:02:44 2025 GMT Not After : Dec 22 01:02:44 2025 GMT Subject: CN=ddc389e1a9d64ea81fb5c1a812a240c2591a7254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0e:69:69:85:cd:cd:ca:81:25:8a:77:72:b2: 07:68:c9:ed:1b:b5:9c:b2:d7:cc:da:77:d6:e9:17: 8a:69:b8:e2:53:a0:b6:0e:83:a7:e6:cc:62:19:55: 23:2d:c9:1d:c7:e7:12:c9:50:13:c9:ab:39:95:ad: 23:4c:15:14:76:41:ff:b6:68:68:ce:63:ea:be:d7: f2:89:90:6d:b7:60:5e:f3:0d:61:52:6f:cf:d6:97: 58:7b:5f:e1:31:5d:4b:e1:e6:43:cb:a3:d2:5c:76: 23:c3:84:ab:63:5e:de:1a:67:b8:79:07:cc:71:15: fb:5d:41:d8:db:45:e3:5b:18:d2:55:f7:21:62:e2: a1:b1:d3:95:58:e7:ad:27:3f:e8:d8:41:e2:cb:5d: ac:44:f8:1c:55:f8:49:02:ed:c6:df:45:5c:dd:6f: e8:33:4f:f2:3b:94:ba:d0:08:78:21:8e:80:2f:6c: a8:68:2a:f4:32:4a:3a:8a:55:b9:18:3e:5e:e1:80: 1d:a9:43:56:df:69:05:38:9a:d5:a9:f6:b4:17:c9: dd:88:16:61:5b:8a:62:b0:58:e7:f8:b9:a6:7f:5c: 5e:f2:bc:8b:00:07:e0:2f:d0:29:38:2c:38:1d:d6: 3a:7a:57:8c:76:27:03:03:64:0d:52:9a:3b:12:68: 93:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C3:89:E1:A9:D6:4E:A8:1F:B5:C1:A8:12:A2:40:C2:59:1A:72:54 X509v3 Authority Key Identifier: keyid:29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:26:cb:03:c4:7a:8c:15:cc:e0:7d:93:29:d6:d9:8a:a4:30: df:67:04:4e:4f:0a:54:b3:1c:bf:10:9c:6a:aa:4c:ab:4a:17: 04:19:c2:28:be:aa:ec:f8:2d:32:a0:28:b1:1f:b7:6f:e0:89: 42:82:be:d3:56:93:5f:a6:24:b6:7a:64:99:cb:d5:41:c8:7f: d2:5c:d5:7a:fc:4e:4c:58:ff:b7:00:6c:69:d0:a2:8e:1c:62: e7:d5:82:b2:b1:6d:2d:88:84:9c:d8:4a:71:b3:82:65:3f:53: 56:88:d8:b3:26:d3:65:58:b5:a1:8d:19:6c:05:98:ab:4b:b1: cd:3c:04:47:a8:88:27:49:85:a8:14:cf:34:c0:c0:b8:84:60: 29:9d:61:8c:7f:d0:2f:21:4b:4b:03:b8:23:6c:ed:1d:d1:27: 04:7a:ac:7e:9d:32:17:d6:3c:58:32:9d:ad:8d:1a:7c:4a:55: 20:b2:c5:1f:e9:ed:cb:08:f5:11:cf:24:52:4c:06:8d:56:c6: fe:de:2a:01:a7:91:4f:d4:14:cf:34:0a:5d:85:84:ea:6a:e5: fc:b5:b3:db:c1:40:40:96:1f:92:87:30:40:ad:25:9c:8e:dd: 05:e0:d5:20:66:f5:be:b4:0b:6a:92:52:84:3a:b9:37:b8:e5: a5:8a:68:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+biTtFcN3kENNlQFhSR69MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZmI3ZGEzYjQ0ZTQxYjMyMzY5ZTRhNWM3OTBkMzA4MWZj NjlhYTkwHhcNMjUxMjIxMDEwMjQ0WhcNMjUxMjIyMDEwMjQ0WjAzMTEwLwYDVQQD EyhkZGMzODllMWE5ZDY0ZWE4MWZiNWMxYTgxMmEyNDBjMjU5MWE3MjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyA5paYXNzcqBJYp3crIHaMntG7Wc stfM2nfW6ReKabjiU6C2DoOn5sxiGVUjLckdx+cSyVATyas5la0jTBUUdkH/tmho zmPqvtfyiZBtt2Be8w1hUm/P1pdYe1/hMV1L4eZDy6PSXHYjw4SrY17eGme4eQfM cRX7XUHY20XjWxjSVfchYuKhsdOVWOetJz/o2EHiy12sRPgcVfhJAu3G30Vc3W/o M0/yO5S60Ah4IY6AL2yoaCr0Mko6ilW5GD5e4YAdqUNW32kFOJrVqfa0F8ndiBZh W4pisFjn+Lmmf1xe8ryLAAfgL9ApOCw4HdY6eleMdicDA2QNUpo7EmiTBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN3DieGp1k6oH7XBqBKiQMJZGnJUMB8GA1UdIwQY MBaAFCn7faO0TkGzI2nkpceQ0wgfxpqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2Z0OW83Uk9RYk1qYWVTbHg1RFRDQl9HbXFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8xN2EwMTYtMjZjNy00MjRjLTg2MmYt YmNhYzhiNTUyYTlhLzEvS2Z0OW83Uk9RYk1qYWVTbHg1RFRDQl9HbXFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8xN2EwMTYtMjZjNy00MjRjLTg2MmYtYmNhYzhiNTUyYTlh LzEvS2Z0OW83Uk9RYk1qYWVTbHg1RFRDQl9HbXFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkibLA8R6 jBXM4H2TKdbZiqQw32cETk8KVLMcvxCcaqpMq0oXBBnCKL6q7PgtMqAosR+3b+CJ QoK+01aTX6YktnpkmcvVQch/0lzVevxOTFj/twBsadCijhxi59WCsrFtLYiEnNhK cbOCZT9TVojYsybTZVi1oY0ZbAWYq0uxzTwER6iIJ0mFqBTPNMDAuIRgKZ1hjH/Q LyFLSwO4I2ztHdEnBHqsfp0yF9Y8WDKdrY0afEpVILLFH+ntywj1Ec8kUkwGjVbG /t4qAaeRT9QUzzQKXYWE6mrl/LWz28FAQJYfkocwQK0lnI7dBeDVIGb1vrQLapJS hDq5N7jlpYpoUA== -----END CERTIFICATE-----Generated at Sun Dec 21 02:56:57 2025 by rpki-client