This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft File: rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft (raw, json) Hash identifier: kzq4RyYJEsgS7UfI6sLmtVv+53WoWnCVP0OlJcAJiMo= Subject key identifier: FF:CC:78:89:3A:A7:D8:3B:4E:4C:C9:54:B7:7C:1C:70:89:36:8D:F2 Authority key identifier: AD:D9:20:79:94:BA:9C:7D:91:EA:7E:47:9F:EF:D1:B8:09:9F:62:CE Certificate issuer: /CN=add9207994ba9c7d91ea7e479fefd1b8099f62ce Certificate serial: 019B71EC1E961D268A5BE0A4190AF3F8AC2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft Manifest number: 17AE Signing time: Wed 31 Dec 2025 01:00:58 +0000 Manifest this update: Wed 31 Dec 2025 01:00:58 +0000 Manifest next update: Thu 01 Jan 2026 01:00:58 +0000 Files and hashes: 1: kFVKcwXQRgJRjkvVE_6RJAsf_ck.roa (hash: 7MBrulcccTfvDlDzgpyHz3EsPyq5/GE8x+EUDDqQIRQ=) 2: rdkgeZS6nH2R6n5Hn-_RuAmfYs4.crl (hash: 9QbamFU1IOgf4366WOLfMvdtmEQlxZMJLgqlKxpZY+k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft rsync://rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:ec:1e:96:1d:26:8a:5b:e0:a4:19:0a:f3:f8:ac:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=add9207994ba9c7d91ea7e479fefd1b8099f62ce Validity Not Before: Dec 31 01:00:58 2025 GMT Not After : Jan 1 01:00:58 2026 GMT Subject: CN=ffcc78893aa7d83b4e4cc954b77c1c7089368df2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7f:c0:1f:19:1d:de:43:60:79:dc:89:75:29: c8:a7:43:08:2c:5f:90:59:ac:47:b3:97:64:77:ed: 5a:80:05:03:40:1d:d3:13:6d:c0:fa:e4:a3:98:0e: bf:20:12:65:0d:57:fc:55:ad:12:0d:81:0b:a1:e2: 2b:5b:d5:2e:b3:a3:a6:97:bd:d8:66:af:a3:7a:4c: fb:db:64:7d:23:5f:e1:03:c4:7e:a3:4e:6b:2c:08: 98:34:e6:a5:ea:15:67:7c:ae:b6:94:f5:54:d3:d8: f8:d5:98:1b:fc:ef:70:df:8e:fe:f8:4c:9e:f5:bd: 1a:68:7e:03:4b:d5:26:f2:85:eb:b2:40:46:ef:a5: c7:b8:a0:68:49:6a:59:73:81:21:19:d6:3d:4a:ed: 4d:b4:e3:2c:83:8a:49:0c:ab:eb:87:72:ef:21:c1: c0:e3:52:1c:0c:ff:3f:c7:e2:52:6e:5d:3d:65:35: f0:b0:6f:54:f3:ac:22:b0:f5:cf:dc:9f:93:97:5e: 35:01:f9:27:6d:32:cb:3e:c8:c2:2f:f0:3f:a1:85: ec:b5:eb:d9:4b:c0:09:9a:e4:c8:89:59:ae:8a:43: 29:3e:a9:26:2a:65:44:44:a6:cf:3f:4b:1c:e6:9a: 7d:c7:9d:c9:52:3d:11:19:97:c7:bc:a4:e0:44:cd: 21:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:CC:78:89:3A:A7:D8:3B:4E:4C:C9:54:B7:7C:1C:70:89:36:8D:F2 X509v3 Authority Key Identifier: keyid:AD:D9:20:79:94:BA:9C:7D:91:EA:7E:47:9F:EF:D1:B8:09:9F:62:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:eb:c2:56:b6:6c:60:ba:e5:0a:9a:5b:1c:22:b3:a4:df:c0: 7e:7f:7a:31:09:41:00:53:f0:ff:a6:4f:1d:cf:c2:7f:f1:5f: a7:07:5d:2f:e7:16:07:52:7e:e9:0f:37:53:cc:3b:f4:30:bb: f9:d8:5f:18:b5:ac:55:83:d4:d4:e3:12:6d:39:53:17:ad:bf: db:4f:5b:83:da:b0:67:35:08:86:16:dc:2a:96:fa:27:12:25: 63:a6:00:6b:7c:cd:02:95:8d:6d:32:a2:52:ea:ae:85:5d:f2: 17:63:46:f9:f3:32:5e:08:e5:7c:cc:cc:b4:b3:3c:4b:fc:ba: 04:c4:a7:06:f6:7b:b7:b0:d1:79:51:ec:7b:24:75:79:b7:be: f8:6d:06:03:e6:31:a2:ca:b8:ab:51:93:0b:53:18:66:c1:db: 87:5b:9c:7c:6c:47:d0:0c:b9:15:0f:a8:be:af:a6:8f:57:9c: 73:f7:90:e2:07:98:12:a2:2f:36:e0:bd:b9:b3:86:ad:54:57: bc:74:29:74:4d:c7:a9:e8:4c:a6:d9:2c:fc:6c:37:5a:81:75: f4:5f:24:d3:18:4f:dd:0a:1c:30:ad:ea:96:b8:78:8b:a3:0d: 82:f5:a7:84:f1:5a:bd:e6:43:dd:ea:d5:6c:e8:54:a7:ce:fe: d3:41:c9:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtx7B6WHSaKW+CkGQrz+KwqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZDkyMDc5OTRiYTljN2Q5MWVhN2U0NzlmZWZkMWI4MDk5 ZjYyY2UwHhcNMjUxMjMxMDEwMDU4WhcNMjYwMTAxMDEwMDU4WjAzMTEwLwYDVQQD EyhmZmNjNzg4OTNhYTdkODNiNGU0Y2M5NTRiNzdjMWM3MDg5MzY4ZGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqH/AHxkd3kNgedyJdSnIp0MILF+Q WaxHs5dkd+1agAUDQB3TE23A+uSjmA6/IBJlDVf8Va0SDYELoeIrW9Uus6Oml73Y Zq+jekz722R9I1/hA8R+o05rLAiYNOal6hVnfK62lPVU09j41Zgb/O9w347++Eye 9b0aaH4DS9Um8oXrskBG76XHuKBoSWpZc4EhGdY9Su1NtOMsg4pJDKvrh3LvIcHA 41IcDP8/x+JSbl09ZTXwsG9U86wisPXP3J+Tl141AfknbTLLPsjCL/A/oYXstevZ S8AJmuTIiVmuikMpPqkmKmVERKbPP0sc5pp9x53JUj0RGZfHvKTgRM0hhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/MeIk6p9g7TkzJVLd8HHCJNo3yMB8GA1UdIwQY MBaAFK3ZIHmUupx9kep+R5/v0bgJn2LOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmRrZ2VaUzZuSDJSNm41SG4tX1J1QW1mWXM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80N2E5YzktZDQ1Ny00NTc5LWIyYjAt ZTUyMTI1NzRmOWVjLzEvcmRrZ2VaUzZuSDJSNm41SG4tX1J1QW1mWXM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC80N2E5YzktZDQ1Ny00NTc5LWIyYjAtZTUyMTI1NzRmOWVj LzEvcmRrZ2VaUzZuSDJSNm41SG4tX1J1QW1mWXM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeuvCVrZs YLrlCppbHCKzpN/Afn96MQlBAFPw/6ZPHc/Cf/FfpwddL+cWB1J+6Q83U8w79DC7 +dhfGLWsVYPU1OMSbTlTF62/209bg9qwZzUIhhbcKpb6JxIlY6YAa3zNApWNbTKi UuquhV3yF2NG+fMyXgjlfMzMtLM8S/y6BMSnBvZ7t7DReVHseyR1ebe++G0GA+Yx osq4q1GTC1MYZsHbh1ucfGxH0Ay5FQ+ovq+mj1ecc/eQ4geYEqIvNuC9ubOGrVRX vHQpdE3HqehMptks/Gw3WoF19F8k0xhP3QocMK3qlrh4i6MNgvWnhPFaveZD3erV bOhUp87+00HJig== -----END CERTIFICATE-----Generated at Wed Dec 31 05:54:28 2025 by rpki-client