This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft File: KJDadlqZn3GYdcUe7PTH1hSKG9k.mft (raw, json) Hash identifier: nPD+scEqOKi3oWVeodr917MR6oC2hPY0JerzGXEUCQw= Subject key identifier: 85:5A:B9:4B:7F:DB:22:A2:BB:DD:80:4E:DD:BD:C7:67:8C:44:E4:86 Authority key identifier: 28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9 Certificate issuer: /CN=2890da765a999f719875c51eecf4c7d6148a1bd9 Certificate serial: 019AF0BEED6F040B9931C7CA6E9E22C2F7F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft Manifest number: 0E89 Signing time: Fri 05 Dec 2025 23:00:35 +0000 Manifest this update: Fri 05 Dec 2025 23:00:35 +0000 Manifest next update: Sat 06 Dec 2025 23:00:35 +0000 Files and hashes: 1: HMBy97dklkxPQBrLpsbW-ZNRc7U.roa (hash: lqft+CvpsJy14zKD+aRqKJHCgA+Rv0wI4PijqNi8qGo=) 2: IYTFbsH2zrYimow5PfBhyISAXgE.roa (hash: 3Ol+0d4dyS1miwyxB+aBgXHbVV5ki9Vv7rh4KQYX/5Y=) 3: KJDadlqZn3GYdcUe7PTH1hSKG9k.crl (hash: gSGdAA9Bax7OQ3SogKKzmw+lRCDiQmmWMyg7V4Rh80g=) 4: ruoDX0K9VhdXmRyoyMx7Kq-ps0U.roa (hash: zYFHs9Pc2fRsxf2yR98ieoabL4bJzJtKnSudDrvjoY4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:ed:6f:04:0b:99:31:c7:ca:6e:9e:22:c2:f7:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2890da765a999f719875c51eecf4c7d6148a1bd9 Validity Not Before: Dec 5 23:00:35 2025 GMT Not After : Dec 6 23:00:35 2025 GMT Subject: CN=855ab94b7fdb22a2bbdd804eddbdc7678c44e486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c6:c2:0e:05:33:17:2f:29:78:ef:29:0f:e8: 0d:88:35:3e:8b:07:84:18:4b:45:2c:61:62:51:da: 68:60:2a:10:5e:83:3a:cb:83:b5:a0:fd:ce:f0:37: ef:07:d5:ef:9b:4f:26:4c:ab:4c:0a:0c:55:03:9e: 68:99:bc:a7:3c:37:46:86:a3:5a:e5:25:08:6f:49: 4c:a2:e6:43:b1:c4:43:33:f3:66:e3:74:7c:5b:8d: 63:40:72:01:65:53:8b:48:ee:88:9f:ad:b2:57:dc: 06:94:8f:45:f7:e6:35:fe:6b:1e:38:d7:f4:00:bf: 60:68:5a:9d:e3:0a:7f:fa:f9:be:2c:e7:03:28:85: 78:cd:98:78:5d:14:04:d6:ff:33:54:b9:42:2a:8c: a5:02:25:ff:9b:5e:2f:a8:af:76:37:84:da:61:67: 80:80:5d:2a:fb:4e:c6:18:37:23:c8:88:93:1c:f3: 53:4f:b5:b5:08:c6:6f:b3:56:30:d8:fa:46:ed:a4: 8e:d4:09:34:a6:4b:0e:d8:ef:4b:5c:72:89:6a:45: 59:31:99:53:92:da:0d:45:b9:b2:57:8c:45:1c:76: de:fa:e7:c4:c9:d0:e7:cf:74:a1:07:fd:c6:89:24: c9:e6:81:17:75:c4:a6:ed:80:bc:c7:17:87:3e:6d: 65:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:5A:B9:4B:7F:DB:22:A2:BB:DD:80:4E:DD:BD:C7:67:8C:44:E4:86 X509v3 Authority Key Identifier: keyid:28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:73:c2:d4:c8:20:bd:84:49:0b:cc:2e:b7:6a:3e:69:0b:89: e3:0c:36:59:39:f1:ed:6b:3b:8e:00:64:f4:89:f4:19:02:b0: a3:93:9a:41:d3:02:f4:b1:dc:2f:fd:2e:65:37:ca:00:b5:fa: 6e:42:aa:56:5b:c1:5a:83:4e:01:04:e0:54:de:a4:c1:e9:20: c2:12:de:24:8c:9a:0a:0c:e6:f0:70:ab:2d:78:71:9f:65:29: 2f:21:f9:b5:e5:a7:0d:14:02:ce:02:75:27:44:47:27:20:9e: bc:57:d8:f7:07:66:37:ed:36:4a:e5:7d:f0:56:fe:9d:33:7f: 91:af:bc:94:e8:2b:c5:e4:1f:5e:6e:62:99:32:7c:18:16:34: b7:fa:3a:28:b0:78:df:c5:a9:01:dc:06:6f:25:f3:57:a0:fc: 6e:1a:80:5b:73:c1:54:4d:fd:d3:05:84:a6:56:60:1d:89:e4: 70:fe:0d:c3:b8:de:68:3f:36:f3:db:4a:8f:ad:92:01:6e:69: 80:29:cd:db:7c:70:90:d8:d3:7e:2f:07:a9:b0:dc:a5:36:17: c1:c7:79:85:fd:c2:98:19:e2:14:71:74:53:10:ed:fc:65:59: 71:64:f3:49:b0:bd:01:99:f3:b6:be:8b:97:ab:ed:49:cf:75: ec:d2:d6:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvu1vBAuZMcfKbp4iwvfxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4OTBkYTc2NWE5OTlmNzE5ODc1YzUxZWVjZjRjN2Q2MTQ4 YTFiZDkwHhcNMjUxMjA1MjMwMDM1WhcNMjUxMjA2MjMwMDM1WjAzMTEwLwYDVQQD Eyg4NTVhYjk0YjdmZGIyMmEyYmJkZDgwNGVkZGJkYzc2NzhjNDRlNDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMbCDgUzFy8peO8pD+gNiDU+iweE GEtFLGFiUdpoYCoQXoM6y4O1oP3O8DfvB9Xvm08mTKtMCgxVA55ombynPDdGhqNa 5SUIb0lMouZDscRDM/Nm43R8W41jQHIBZVOLSO6In62yV9wGlI9F9+Y1/mseONf0 AL9gaFqd4wp/+vm+LOcDKIV4zZh4XRQE1v8zVLlCKoylAiX/m14vqK92N4TaYWeA gF0q+07GGDcjyIiTHPNTT7W1CMZvs1Yw2PpG7aSO1Ak0pksO2O9LXHKJakVZMZlT ktoNRbmyV4xFHHbe+ufEydDnz3ShB/3GiSTJ5oEXdcSm7YC8xxeHPm1laQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVauUt/2yKiu92ATt29x2eMROSGMB8GA1UdIwQY MBaAFCiQ2nZamZ9xmHXFHuz0x9YUihvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0pEYWRscVpuM0dZZGNVZTdQVEgxaFNLRzlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yYmJjZDQtZWRhYi00OGVlLWE0MTEt MjhmYzcwNjNkOTUyLzEvS0pEYWRscVpuM0dZZGNVZTdQVEgxaFNLRzlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8yYmJjZDQtZWRhYi00OGVlLWE0MTEtMjhmYzcwNjNkOTUy LzEvS0pEYWRscVpuM0dZZGNVZTdQVEgxaFNLRzlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApHPC1Mgg vYRJC8wut2o+aQuJ4ww2WTnx7Ws7jgBk9In0GQKwo5OaQdMC9LHcL/0uZTfKALX6 bkKqVlvBWoNOAQTgVN6kwekgwhLeJIyaCgzm8HCrLXhxn2UpLyH5teWnDRQCzgJ1 J0RHJyCevFfY9wdmN+02SuV98Fb+nTN/ka+8lOgrxeQfXm5imTJ8GBY0t/o6KLB4 38WpAdwGbyXzV6D8bhqAW3PBVE390wWEplZgHYnkcP4Nw7jeaD8289tKj62SAW5p gCnN23xwkNjTfi8HqbDcpTYXwcd5hf3CmBniFHF0UxDt/GVZcWTzSbC9AZnztr6L l6vtSc917NLWRQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:16 2025 by rpki-client