This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft File: KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft (raw, json) Hash identifier: lD0ag4G73AVMve+hGc10mD5ypYudc5Kffu7CGwvXEh4= Subject key identifier: BE:DE:88:AA:28:B1:0E:6C:DE:C2:17:85:61:7E:0B:5C:0E:52:90:B7 Authority key identifier: 29:77:44:67:CC:9F:1E:D9:D9:57:B8:3A:A1:7A:09:0B:1D:F7:69:46 Certificate issuer: /CN=29774467cc9f1ed9d957b83aa17a090b1df76946 Certificate serial: 019B3C7DCC3861B39B9D22AB03EDE58AFD23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft Manifest number: 1024 Signing time: Sat 20 Dec 2025 16:00:35 +0000 Manifest this update: Sat 20 Dec 2025 16:00:35 +0000 Manifest next update: Sun 21 Dec 2025 16:00:35 +0000 Files and hashes: 1: KXdEZ8yfHtnZV7g6oXoJCx33aUY.crl (hash: 51xyT/xZEs8+w+RDYUvWlTFb0Xj71FEWdLCPn0bFtGE=) 2: b64Uii9JYXCMSIcDqVfd-guKolk.roa (hash: zu1QMl+md4/UwiMRhp2koQ5VJ3r3EhScu5BVA2+NzSc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:cc:38:61:b3:9b:9d:22:ab:03:ed:e5:8a:fd:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29774467cc9f1ed9d957b83aa17a090b1df76946 Validity Not Before: Dec 20 16:00:35 2025 GMT Not After : Dec 21 16:00:35 2025 GMT Subject: CN=bede88aa28b10e6cdec21785617e0b5c0e5290b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:93:19:80:5e:d4:fa:e5:4c:67:49:a4:62:85: b4:a0:86:4f:f3:01:f9:e8:2b:50:77:16:38:0b:87: a3:07:07:07:84:99:cd:c6:bd:e2:ea:f3:0d:de:98: ef:2d:da:e1:f7:3b:c7:10:63:09:55:6d:b4:cf:99: fd:bd:ab:04:ba:3e:d4:ec:ba:f3:21:8d:c1:0c:db: a2:3a:59:0d:50:29:52:1f:6c:09:73:8a:b1:27:b7: 59:57:b4:f9:d1:57:b6:3c:bc:de:79:e0:09:ea:29: 63:81:a9:94:2a:44:b9:d8:30:ae:27:e8:11:35:44: 55:cc:bd:9f:eb:b3:3d:e5:de:fb:0f:c9:24:df:81: 78:d2:ca:76:88:6e:00:b2:a2:24:fd:9a:87:b3:a6: 32:8a:71:6b:ea:ae:ce:bd:45:65:b3:be:04:e7:04: 34:43:9f:96:24:33:b5:3c:ca:4b:97:de:1c:be:db: fa:1d:1e:67:c4:fa:63:ee:de:89:45:9a:1c:b6:09: 57:13:e4:9e:7c:89:ae:e2:74:ee:cc:59:55:78:00: 7e:a1:6d:4e:71:b6:04:e1:63:28:6f:e1:84:bd:91: cc:65:2d:8b:61:d1:85:e8:1f:87:c8:2b:f3:ab:43: 8d:0f:dc:1e:43:61:d7:12:10:6b:de:ce:03:eb:45: 51:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:DE:88:AA:28:B1:0E:6C:DE:C2:17:85:61:7E:0B:5C:0E:52:90:B7 X509v3 Authority Key Identifier: keyid:29:77:44:67:CC:9F:1E:D9:D9:57:B8:3A:A1:7A:09:0B:1D:F7:69:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:be:b9:5e:87:69:83:ad:9c:3a:78:2c:70:33:eb:40:7e:b1: e3:2f:5c:39:59:d1:55:cc:6f:d0:b3:84:60:c1:70:b7:21:39: 12:e3:b3:61:1c:3c:4e:6e:36:4d:1a:87:28:05:ca:16:31:43: b0:65:04:ce:c1:c6:e4:cc:b4:b7:bf:a9:3e:d3:cd:dc:d8:ba: 35:9b:28:22:8e:c5:98:08:83:5c:0c:d5:02:4d:4f:2b:ef:48: 69:21:7b:bb:68:e4:84:3b:fa:10:24:ba:e9:aa:ee:67:ad:d3: 74:c0:8a:07:d1:f3:34:8f:db:2f:b2:5a:ae:a1:7b:cd:29:03: 60:ff:8f:27:53:ab:c5:d8:bc:2b:ba:15:6b:73:ce:4c:28:b5: 07:8a:d5:68:4c:c3:09:dc:c4:b6:7f:01:bd:b1:df:03:d1:e0: b1:df:c7:67:7f:17:82:e2:d2:ce:2d:35:df:c9:83:85:c7:ea: 0a:1c:c5:bf:01:ec:ed:9b:35:48:97:2d:5c:f6:38:98:ee:7a: 4a:fb:10:d2:87:50:3e:1a:15:f6:49:d2:68:3b:6d:ab:ef:34: 5b:83:80:10:f0:78:c2:f5:ca:01:30:f1:ea:dc:f1:59:7f:40: 41:f9:9a:f1:e4:17:54:e3:9e:c0:16:56:ed:ba:21:b1:c9:bf: 67:ea:f5:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fcw4YbObnSKrA+3liv0jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5Nzc0NDY3Y2M5ZjFlZDlkOTU3YjgzYWExN2EwOTBiMWRm NzY5NDYwHhcNMjUxMjIwMTYwMDM1WhcNMjUxMjIxMTYwMDM1WjAzMTEwLwYDVQQD EyhiZWRlODhhYTI4YjEwZTZjZGVjMjE3ODU2MTdlMGI1YzBlNTI5MGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpMZgF7U+uVMZ0mkYoW0oIZP8wH5 6CtQdxY4C4ejBwcHhJnNxr3i6vMN3pjvLdrh9zvHEGMJVW20z5n9vasEuj7U7Lrz IY3BDNuiOlkNUClSH2wJc4qxJ7dZV7T50Ve2PLzeeeAJ6iljgamUKkS52DCuJ+gR NURVzL2f67M95d77D8kk34F40sp2iG4AsqIk/ZqHs6YyinFr6q7OvUVls74E5wQ0 Q5+WJDO1PMpLl94cvtv6HR5nxPpj7t6JRZoctglXE+SefImu4nTuzFlVeAB+oW1O cbYE4WMob+GEvZHMZS2LYdGF6B+HyCvzq0OND9weQ2HXEhBr3s4D60VRcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL7eiKoosQ5s3sIXhWF+C1wOUpC3MB8GA1UdIwQY MBaAFCl3RGfMnx7Z2Ve4OqF6CQsd92lGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1hkRVo4eWZIdG5aVjdnNm9Yb0pDeDMzYVVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC85ZGMwOGMtZTFiNi00MjU5LWE1ZGIt ZDU1ZTM4ODY4YTUyLzEvS1hkRVo4eWZIdG5aVjdnNm9Yb0pDeDMzYVVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC85ZGMwOGMtZTFiNi00MjU5LWE1ZGItZDU1ZTM4ODY4YTUy LzEvS1hkRVo4eWZIdG5aVjdnNm9Yb0pDeDMzYVVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQL65Xodp g62cOngscDPrQH6x4y9cOVnRVcxv0LOEYMFwtyE5EuOzYRw8Tm42TRqHKAXKFjFD sGUEzsHG5My0t7+pPtPN3Ni6NZsoIo7FmAiDXAzVAk1PK+9IaSF7u2jkhDv6ECS6 6aruZ63TdMCKB9HzNI/bL7JarqF7zSkDYP+PJ1Orxdi8K7oVa3POTCi1B4rVaEzD CdzEtn8BvbHfA9Hgsd/HZ38XguLSzi0138mDhcfqChzFvwHs7Zs1SJctXPY4mO56 SvsQ0odQPhoV9knSaDttq+80W4OAEPB4wvXKATDx6tzxWX9AQfma8eQXVOOewBZW 7bohscm/Z+r1FQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:19:27 2025 by rpki-client