This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft File: rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft (raw, json) Hash identifier: Ij54j0jvC+K64GL8hsUacRHNNh4mfWGUOftWvDsPr50= Subject key identifier: D4:C8:DA:C1:7D:D3:3B:E7:78:02:D8:4D:8B:DC:2E:E8:95:B9:3D:F5 Authority key identifier: AD:D9:20:79:94:BA:9C:7D:91:EA:7E:47:9F:EF:D1:B8:09:9F:62:CE Certificate issuer: /CN=add9207994ba9c7d91ea7e479fefd1b8099f62ce Certificate serial: 019B6E0F59780531451B03A1AA08D7F23040 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft Manifest number: 17AC Signing time: Tue 30 Dec 2025 07:00:58 +0000 Manifest this update: Tue 30 Dec 2025 07:00:58 +0000 Manifest next update: Wed 31 Dec 2025 07:00:58 +0000 Files and hashes: 1: kFVKcwXQRgJRjkvVE_6RJAsf_ck.roa (hash: 7MBrulcccTfvDlDzgpyHz3EsPyq5/GE8x+EUDDqQIRQ=) 2: rdkgeZS6nH2R6n5Hn-_RuAmfYs4.crl (hash: VpgtGwamnoMXHoZc+LYvwBDlz7mr/z96fovm/MX5P4w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft rsync://rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:0f:59:78:05:31:45:1b:03:a1:aa:08:d7:f2:30:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=add9207994ba9c7d91ea7e479fefd1b8099f62ce Validity Not Before: Dec 30 07:00:58 2025 GMT Not After : Dec 31 07:00:58 2025 GMT Subject: CN=d4c8dac17dd33be77802d84d8bdc2ee895b93df5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:17:b6:3e:be:de:ab:2c:5a:1e:5d:1f:2a:1c: b5:4d:fc:92:ed:65:cb:87:da:10:db:29:98:a5:10: d9:e2:56:7c:80:bf:80:eb:64:a7:6c:60:bd:95:14: 95:cc:e6:f6:e5:d0:61:ee:de:c8:e4:a7:ca:24:7c: ed:b0:f5:2b:a3:a6:f3:e7:77:8c:ef:a6:36:96:3e: 63:8c:6e:fa:10:78:79:0b:8c:fd:d1:e9:e0:18:31: 9d:da:40:c9:78:7b:4f:8c:8f:b8:ee:e4:41:ea:bf: d6:68:8b:15:e4:5b:1b:85:e7:a1:2a:e7:29:22:04: 9a:f3:95:f8:69:a7:1b:4f:d2:7d:e0:bb:46:7e:4b: 7a:3f:2d:cf:6f:12:44:eb:fe:f8:70:c9:c1:ae:24: 74:18:37:8e:af:18:db:be:65:26:40:c3:a1:7d:fc: 9b:be:bc:da:59:d1:0a:9b:d0:2c:73:34:82:c1:6e: 91:49:fb:ae:fa:b1:ce:8b:13:8a:ba:c6:42:22:52: 51:60:2a:07:8e:55:b6:21:a3:d5:60:56:08:8e:12: 88:f8:cf:b9:27:3c:b3:6a:e8:19:ad:f8:0d:80:74: 54:7a:d7:11:5e:45:22:de:08:af:41:45:97:b7:41: b7:12:39:f2:2e:66:e5:01:d8:ec:7d:25:e2:83:db: c8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C8:DA:C1:7D:D3:3B:E7:78:02:D8:4D:8B:DC:2E:E8:95:B9:3D:F5 X509v3 Authority Key Identifier: keyid:AD:D9:20:79:94:BA:9C:7D:91:EA:7E:47:9F:EF:D1:B8:09:9F:62:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:c2:f9:fd:64:ca:f4:93:02:2b:eb:c3:48:a8:c9:81:7f:85: ef:95:12:7c:45:83:52:c4:91:e3:7a:43:0d:d8:4d:08:17:77: c0:9c:05:e2:7a:11:38:02:db:6d:b4:1c:07:98:79:56:f8:59: 7d:25:a7:39:12:33:be:b6:72:b0:ff:9c:21:46:e8:6b:5e:e8: c7:61:7e:de:ef:4f:ce:87:69:aa:ee:a3:da:d5:69:87:36:c8: e8:73:b1:ee:12:88:ca:b3:cd:ec:a9:09:4b:35:34:bf:21:d1: 7c:dd:df:78:83:a2:63:8b:c9:fe:76:54:35:cd:54:ac:f4:1b: 0e:28:b6:5e:4a:75:af:86:70:04:86:81:1d:79:2b:2e:46:2f: ba:c8:03:2e:58:d0:8b:ca:a3:ae:5b:54:5d:c1:1c:41:bb:31: 82:c1:ca:f3:c9:6e:af:e9:c4:57:ff:f0:ad:aa:43:14:b8:c6: ef:04:2d:25:7e:19:8d:80:10:be:ef:4f:76:98:df:94:19:4d: 17:cc:a8:ea:62:0f:31:fd:a9:b7:4c:35:55:6a:06:19:30:53: dc:8f:9f:b3:95:10:9e:58:ae:0c:21:9d:b5:d2:c5:fe:bf:e4: 29:6c:3c:74:a9:25:78:c7:9e:e2:91:6b:32:7b:a8:6a:16:3e: aa:39:48:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtuD1l4BTFFGwOhqgjX8jBAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZDkyMDc5OTRiYTljN2Q5MWVhN2U0NzlmZWZkMWI4MDk5 ZjYyY2UwHhcNMjUxMjMwMDcwMDU4WhcNMjUxMjMxMDcwMDU4WjAzMTEwLwYDVQQD EyhkNGM4ZGFjMTdkZDMzYmU3NzgwMmQ4NGQ4YmRjMmVlODk1YjkzZGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Re2Pr7eqyxaHl0fKhy1TfyS7WXL h9oQ2ymYpRDZ4lZ8gL+A62SnbGC9lRSVzOb25dBh7t7I5KfKJHztsPUro6bz53eM 76Y2lj5jjG76EHh5C4z90engGDGd2kDJeHtPjI+47uRB6r/WaIsV5FsbheehKucp IgSa85X4aacbT9J94LtGfkt6Py3PbxJE6/74cMnBriR0GDeOrxjbvmUmQMOhffyb vrzaWdEKm9AsczSCwW6RSfuu+rHOixOKusZCIlJRYCoHjlW2IaPVYFYIjhKI+M+5 JzyzaugZrfgNgHRUetcRXkUi3givQUWXt0G3EjnyLmblAdjsfSXig9vI2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNTI2sF90zvneALYTYvcLuiVuT31MB8GA1UdIwQY MBaAFK3ZIHmUupx9kep+R5/v0bgJn2LOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmRrZ2VaUzZuSDJSNm41SG4tX1J1QW1mWXM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80N2E5YzktZDQ1Ny00NTc5LWIyYjAt ZTUyMTI1NzRmOWVjLzEvcmRrZ2VaUzZuSDJSNm41SG4tX1J1QW1mWXM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC80N2E5YzktZDQ1Ny00NTc5LWIyYjAtZTUyMTI1NzRmOWVj LzEvcmRrZ2VaUzZuSDJSNm41SG4tX1J1QW1mWXM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWsL5/WTK 9JMCK+vDSKjJgX+F75USfEWDUsSR43pDDdhNCBd3wJwF4noROALbbbQcB5h5VvhZ fSWnORIzvrZysP+cIUboa17ox2F+3u9Pzodpqu6j2tVphzbI6HOx7hKIyrPN7KkJ SzU0vyHRfN3feIOiY4vJ/nZUNc1UrPQbDii2Xkp1r4ZwBIaBHXkrLkYvusgDLljQ i8qjrltUXcEcQbsxgsHK88lur+nEV//wrapDFLjG7wQtJX4ZjYAQvu9PdpjflBlN F8yo6mIPMf2pt0w1VWoGGTBT3I+fs5UQnliuDCGdtdLF/r/kKWw8dKkleMee4pFr MnuoahY+qjlIng== -----END CERTIFICATE-----Generated at Tue Dec 30 09:53:59 2025 by rpki-client