This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.mft File: KeRudYZejUoIHktd2kbTyUADZ5s.mft (raw, json) Hash identifier: gFgEmE12ZmQYLX1ySMEJQD798yk0x6nKIBYXXP4oFT0= Subject key identifier: 23:6A:32:0F:F9:4B:E8:E3:52:03:BF:D2:D8:30:BA:F1:18:C8:1D:BB Authority key identifier: 29:E4:6E:75:86:5E:8D:4A:08:1E:4B:5D:DA:46:D3:C9:40:03:67:9B Certificate issuer: /CN=29e46e75865e8d4a081e4b5dda46d3c94003679b Certificate serial: 019AF3F75CE12DCA8B096F7A5F280E79FFD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KeRudYZejUoIHktd2kbTyUADZ5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.mft Manifest number: 1641 Signing time: Sat 06 Dec 2025 14:01:05 +0000 Manifest this update: Sat 06 Dec 2025 14:01:05 +0000 Manifest next update: Sun 07 Dec 2025 14:01:05 +0000 Files and hashes: 1: KeRudYZejUoIHktd2kbTyUADZ5s.crl (hash: 0mEzF0ikAFO7Lb0OavdFWOr9bHmBqAxMDK6M3RRKEuU=) 2: sYwqpJAH6xt25FV658_Z0b8PqQ4.roa (hash: nTc7YSWaucHsViUALBoDYtryVR1AkC4pCCvnaDdeVwQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.mft rsync://rpki.ripe.net/repository/DEFAULT/KeRudYZejUoIHktd2kbTyUADZ5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:5c:e1:2d:ca:8b:09:6f:7a:5f:28:0e:79:ff:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29e46e75865e8d4a081e4b5dda46d3c94003679b Validity Not Before: Dec 6 14:01:05 2025 GMT Not After : Dec 7 14:01:05 2025 GMT Subject: CN=236a320ff94be8e35203bfd2d830baf118c81dbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6b:54:e6:0a:ac:aa:e4:83:70:ac:79:70:91: 15:e3:91:0f:95:5e:3c:2d:7c:50:8a:e1:e2:ce:67: 0f:4a:ec:bb:a1:ea:03:67:b5:9f:0f:f1:cf:db:1b: e9:de:d7:89:16:be:ce:e3:00:7f:11:d5:aa:5f:5b: 64:ec:92:ab:68:fc:d5:9e:e7:d0:e9:44:3f:cd:99: 89:c9:41:ec:d8:09:25:75:f6:4b:5d:73:a2:d7:09: 17:88:a7:31:71:bd:84:58:22:52:a2:23:0c:94:1d: 06:66:18:a9:2b:63:6d:04:89:d5:33:9b:2f:78:78: 8d:7d:9a:91:d4:01:d9:ac:1f:bc:e4:a1:56:2a:7b: 08:7a:50:3c:30:d2:1a:46:f1:d1:b0:f3:59:79:c2: 12:c2:24:50:7b:37:c4:c3:ea:d8:ab:6f:3a:aa:bf: f7:22:f6:c5:87:93:1c:24:cb:dd:71:23:4f:05:14: 82:49:1f:dd:9b:99:b0:1a:20:39:df:51:8d:8e:d0: 12:5c:d3:e5:48:51:76:59:43:bf:b1:73:25:c6:b3: 5f:ca:1b:4b:22:89:f9:10:73:e0:3c:ba:71:7f:f3: e2:5e:51:15:86:23:60:18:fb:a4:bf:09:e5:af:42: 8e:07:21:c0:d5:e6:e3:70:39:bd:5e:d4:7e:84:17: 64:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:6A:32:0F:F9:4B:E8:E3:52:03:BF:D2:D8:30:BA:F1:18:C8:1D:BB X509v3 Authority Key Identifier: keyid:29:E4:6E:75:86:5E:8D:4A:08:1E:4B:5D:DA:46:D3:C9:40:03:67:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KeRudYZejUoIHktd2kbTyUADZ5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:0b:06:b2:33:6d:b3:c1:23:5c:f5:4a:e4:be:ee:2a:18:5c: 36:84:9f:f5:7f:58:14:c9:94:9b:b7:be:ed:e6:21:7b:48:96: f8:9a:0c:74:a0:c1:f0:c5:c7:06:7e:b4:f2:79:f1:98:a4:c9: fe:7b:54:4a:25:0a:c7:30:f4:b7:2a:86:3d:89:79:8f:83:e1: 9c:32:e6:1c:b3:29:c0:2c:b9:bc:29:92:3a:25:ca:8c:5e:7c: ca:b1:de:96:df:c6:bd:00:b4:29:fc:cb:f5:77:26:9f:2a:99: d8:ad:86:39:31:2a:1e:21:83:44:b5:3a:f8:e2:7e:2b:28:e2: d0:5c:dd:8b:16:0c:c9:a5:e0:17:39:66:43:ce:49:f0:59:5b: 3e:63:c9:e4:36:aa:79:96:1d:b5:a6:08:d0:15:fd:b2:18:ae: 45:a3:4f:63:42:f6:3e:9c:8c:dc:54:3e:f4:37:62:d5:11:45: 00:d3:cd:b1:72:80:eb:88:c8:67:a1:83:d4:e2:e9:22:3d:19: c2:98:8e:63:40:e0:ce:47:eb:35:ba:8e:e2:7a:d3:f0:e7:68: 88:f0:f5:92:dc:3d:58:59:ef:c3:56:ec:79:76:8a:8c:84:2c: d7:a3:f9:63:db:77:b3:bd:2a:85:20:7b:18:44:15:5b:ae:54: a9:ee:32:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz91zhLcqLCW96XygOef/YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZTQ2ZTc1ODY1ZThkNGEwODFlNGI1ZGRhNDZkM2M5NDAw MzY3OWIwHhcNMjUxMjA2MTQwMTA1WhcNMjUxMjA3MTQwMTA1WjAzMTEwLwYDVQQD EygyMzZhMzIwZmY5NGJlOGUzNTIwM2JmZDJkODMwYmFmMTE4YzgxZGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWtU5gqsquSDcKx5cJEV45EPlV48 LXxQiuHizmcPSuy7oeoDZ7WfD/HP2xvp3teJFr7O4wB/EdWqX1tk7JKraPzVnufQ 6UQ/zZmJyUHs2AkldfZLXXOi1wkXiKcxcb2EWCJSoiMMlB0GZhipK2NtBInVM5sv eHiNfZqR1AHZrB+85KFWKnsIelA8MNIaRvHRsPNZecISwiRQezfEw+rYq286qr/3 IvbFh5McJMvdcSNPBRSCSR/dm5mwGiA531GNjtASXNPlSFF2WUO/sXMlxrNfyhtL Ion5EHPgPLpxf/PiXlEVhiNgGPukvwnlr0KOByHA1ebjcDm9XtR+hBdknQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCNqMg/5S+jjUgO/0tgwuvEYyB27MB8GA1UdIwQY MBaAFCnkbnWGXo1KCB5LXdpG08lAA2ebMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2VSdWRZWmVqVW9JSGt0ZDJrYlR5VUFEWjVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9kMjM1NGEtZjNjMi00MWQ1LWIyOTIt YTlkMjY3YWNmNjY0LzEvS2VSdWRZWmVqVW9JSGt0ZDJrYlR5VUFEWjVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9kMjM1NGEtZjNjMi00MWQ1LWIyOTItYTlkMjY3YWNmNjY0 LzEvS2VSdWRZWmVqVW9JSGt0ZDJrYlR5VUFEWjVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACgsGsjNt s8EjXPVK5L7uKhhcNoSf9X9YFMmUm7e+7eYhe0iW+JoMdKDB8MXHBn608nnxmKTJ /ntUSiUKxzD0tyqGPYl5j4PhnDLmHLMpwCy5vCmSOiXKjF58yrHelt/GvQC0KfzL 9XcmnyqZ2K2GOTEqHiGDRLU6+OJ+Kyji0FzdixYMyaXgFzlmQ85J8FlbPmPJ5Daq eZYdtaYI0BX9shiuRaNPY0L2PpyM3FQ+9Ddi1RFFANPNsXKA64jIZ6GD1OLpIj0Z wpiOY0DgzkfrNbqO4nrT8OdoiPD1ktw9WFnvw1bseXaKjIQs16P5Y9t3s70qhSB7 GEQVW65Uqe4ysQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:43:00 2025 by rpki-client