This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.mft File: kd3H2eAtRMa_jGNcHQcV9uicEBI.mft (raw, json) Hash identifier: EZbcNdBgxNH/4UJEhmoY2zBq1mT+OTVLQwdLWpu/Who= Subject key identifier: CA:63:32:44:30:2F:45:1E:D2:FD:B6:57:48:89:67:56:96:17:57:E0 Authority key identifier: 91:DD:C7:D9:E0:2D:44:C6:BF:8C:63:5C:1D:07:15:F6:E8:9C:10:12 Certificate issuer: /CN=91ddc7d9e02d44c6bf8c635c1d0715f6e89c1012 Certificate serial: 019AF352856BB3FC36AE49A9A9331D1BBE4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kd3H2eAtRMa_jGNcHQcV9uicEBI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.mft Manifest number: 011D Signing time: Sat 06 Dec 2025 11:01:02 +0000 Manifest this update: Sat 06 Dec 2025 11:01:02 +0000 Manifest next update: Sun 07 Dec 2025 11:01:02 +0000 Files and hashes: 1: kd3H2eAtRMa_jGNcHQcV9uicEBI.crl (hash: 0IXyvFntco/pnfbR7/SLxxg8mIj7hrfBhMDdK9oNEac=) 2: s5q2oTWE63BKKJHezuXxV23_1ao.roa (hash: kxGqoLV/rWB0wj/sYCOZiA+1BQk6TjqEiRvVL8/Fnps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.crl rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.mft rsync://rpki.ripe.net/repository/DEFAULT/kd3H2eAtRMa_jGNcHQcV9uicEBI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:85:6b:b3:fc:36:ae:49:a9:a9:33:1d:1b:be:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91ddc7d9e02d44c6bf8c635c1d0715f6e89c1012 Validity Not Before: Dec 6 11:01:02 2025 GMT Not After : Dec 7 11:01:02 2025 GMT Subject: CN=ca633244302f451ed2fdb65748896756961757e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cd:00:6f:c7:0d:b4:7f:79:fb:74:7d:ce:ac: 8c:05:79:ef:22:6c:b3:c1:1c:58:b2:02:f9:b9:d0: 07:5b:2e:2a:61:7c:91:00:24:4c:5f:15:0f:26:d6: 6b:2c:d7:4c:8a:db:2d:0a:d7:75:f5:c8:0a:53:07: ef:82:e8:42:54:9b:11:d5:54:68:12:06:60:18:0d: d5:b7:22:41:46:61:a5:df:be:a8:95:75:81:db:0b: 89:87:2b:03:bf:ba:b9:32:7a:48:01:53:76:dd:d6: 42:57:ca:21:8c:b6:d7:e7:e0:f9:f3:63:fa:4d:b0: 84:06:ce:e6:4e:0a:ee:c7:3b:f3:cc:87:86:81:1e: fc:8d:24:09:5c:b7:f3:d9:15:de:61:d1:9a:00:e2: f3:40:91:76:fe:d5:b5:56:d3:db:61:c6:82:35:1f: 22:f1:6f:80:53:1a:5c:62:fd:29:96:dd:26:2e:3e: aa:b9:c2:71:2e:73:72:8f:1f:45:f3:a7:45:da:85: d1:28:08:06:38:d3:0f:9e:15:7a:de:81:d8:45:9c: ff:8f:e5:5a:82:53:c2:8d:b6:c2:6a:a6:d8:8e:60: cf:d5:1f:be:4e:d7:23:0f:33:93:b6:36:a4:c9:67: 41:00:4e:8c:61:42:80:8d:2f:85:aa:e4:18:1f:8b: 28:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:63:32:44:30:2F:45:1E:D2:FD:B6:57:48:89:67:56:96:17:57:E0 X509v3 Authority Key Identifier: keyid:91:DD:C7:D9:E0:2D:44:C6:BF:8C:63:5C:1D:07:15:F6:E8:9C:10:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kd3H2eAtRMa_jGNcHQcV9uicEBI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:52:08:ca:70:09:94:15:94:b1:71:be:aa:ef:65:c9:98:7f: f4:35:7f:c9:f8:46:0f:70:44:35:4f:4e:bd:cd:16:0c:d7:a2: 67:f5:32:42:2f:79:e5:c0:a0:92:4b:c6:67:79:e1:5b:91:00: ef:77:be:e0:d5:18:4b:2b:65:2e:05:f8:6d:bb:f6:1d:0b:02: 2c:d9:e2:c5:d9:a0:1a:9e:13:ce:0b:45:5f:39:82:55:bf:5d: b3:2f:9e:2a:d3:dc:55:ef:e6:94:58:6e:bd:09:e1:1d:aa:2f: b7:41:49:73:a2:05:98:dd:5b:0c:07:da:53:fe:ca:98:9a:0a: 5c:c5:a3:3e:18:b0:18:57:7d:91:cb:69:98:93:6b:9d:d2:5a: 93:ce:55:db:16:ee:62:64:74:b1:ea:ef:99:ec:51:63:88:c9: 14:5e:79:c5:c3:00:b3:c8:3f:b5:72:c8:41:e5:66:b9:e0:8a: 8e:cb:b9:74:40:af:25:01:7f:c4:21:16:32:f1:35:89:1a:ca: 1b:6b:4b:2f:1c:0c:8d:82:ae:f9:d0:79:11:e8:03:e1:6e:5e: dc:f8:10:bf:5e:b0:57:06:74:8c:8a:79:22:26:73:e5:95:1e: 94:f4:3c:dd:ba:5f:3f:b1:90:43:52:5d:eb:8f:60:04:4f:2b: d9:79:aa:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUoVrs/w2rkmpqTMdG75PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZGRjN2Q5ZTAyZDQ0YzZiZjhjNjM1YzFkMDcxNWY2ZTg5 YzEwMTIwHhcNMjUxMjA2MTEwMTAyWhcNMjUxMjA3MTEwMTAyWjAzMTEwLwYDVQQD EyhjYTYzMzI0NDMwMmY0NTFlZDJmZGI2NTc0ODg5Njc1Njk2MTc1N2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt80Ab8cNtH95+3R9zqyMBXnvImyz wRxYsgL5udAHWy4qYXyRACRMXxUPJtZrLNdMitstCtd19cgKUwfvguhCVJsR1VRo EgZgGA3VtyJBRmGl376olXWB2wuJhysDv7q5MnpIAVN23dZCV8ohjLbX5+D582P6 TbCEBs7mTgruxzvzzIeGgR78jSQJXLfz2RXeYdGaAOLzQJF2/tW1VtPbYcaCNR8i 8W+AUxpcYv0plt0mLj6qucJxLnNyjx9F86dF2oXRKAgGONMPnhV63oHYRZz/j+Va glPCjbbCaqbYjmDP1R++TtcjDzOTtjakyWdBAE6MYUKAjS+FquQYH4soZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMpjMkQwL0Ue0v22V0iJZ1aWF1fgMB8GA1UdIwQY MBaAFJHdx9ngLUTGv4xjXB0HFfbonBASMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2QzSDJlQXRSTWFfakdOY0hRY1Y5dWljRUJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9jN2FmYmMtYjg4NS00NzU1LThkMTUt ODkzYjhkZDJkMmIwLzEva2QzSDJlQXRSTWFfakdOY0hRY1Y5dWljRUJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9jN2FmYmMtYjg4NS00NzU1LThkMTUtODkzYjhkZDJkMmIw LzEva2QzSDJlQXRSTWFfakdOY0hRY1Y5dWljRUJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO1IIynAJ lBWUsXG+qu9lyZh/9DV/yfhGD3BENU9Ovc0WDNeiZ/UyQi955cCgkkvGZ3nhW5EA 73e+4NUYSytlLgX4bbv2HQsCLNnixdmgGp4TzgtFXzmCVb9dsy+eKtPcVe/mlFhu vQnhHaovt0FJc6IFmN1bDAfaU/7KmJoKXMWjPhiwGFd9kctpmJNrndJak85V2xbu YmR0servmexRY4jJFF55xcMAs8g/tXLIQeVmueCKjsu5dECvJQF/xCEWMvE1iRrK G2tLLxwMjYKu+dB5EegD4W5e3PgQv16wVwZ0jIp5IiZz5ZUelPQ83bpfP7GQQ1Jd 649gBE8r2Xmqeg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:56:40 2025 by rpki-client