This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft File: kNdTolR-A6Sw0vkccOnOTkRoBBg.mft (raw, json) Hash identifier: dzybiQ6Q3t+wjZmQrxPX9RfnaL5llVjBvQIvByvwjSQ= Subject key identifier: FE:AE:4E:74:7A:5B:5A:64:8E:68:AA:FF:C7:18:A4:45:B5:64:AE:E8 Authority key identifier: 90:D7:53:A2:54:7E:03:A4:B0:D2:F9:1C:70:E9:CE:4E:44:68:04:18 Certificate issuer: /CN=90d753a2547e03a4b0d2f91c70e9ce4e44680418 Certificate serial: 019AF3F75ED0AB8ACF1A9497852807062427 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft Manifest number: 0C06 Signing time: Sat 06 Dec 2025 14:01:06 +0000 Manifest this update: Sat 06 Dec 2025 14:01:06 +0000 Manifest next update: Sun 07 Dec 2025 14:01:06 +0000 Files and hashes: 1: g5z8NV4dmlaKd11s7v3mxc0KYqU.roa (hash: bnZ9DFLSZGC/zi7MlcnpGi6LDIICQO79p3wjfCQfT+E=) 2: kNdTolR-A6Sw0vkccOnOTkRoBBg.crl (hash: 0AhQHuQInZ40jCQDXd/H/GGC7BIKYVV0AoDdAk6xdc0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.crl rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:5e:d0:ab:8a:cf:1a:94:97:85:28:07:06:24:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90d753a2547e03a4b0d2f91c70e9ce4e44680418 Validity Not Before: Dec 6 14:01:06 2025 GMT Not After : Dec 7 14:01:06 2025 GMT Subject: CN=feae4e747a5b5a648e68aaffc718a445b564aee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a4:7e:b1:3a:de:7e:42:be:f0:91:e0:b3:70: 22:3f:9b:64:81:0d:6e:17:c1:9b:c6:0e:1f:81:b5: 63:34:c5:3a:3a:3c:5e:66:61:7b:63:e6:55:8b:cd: 3d:5e:e7:5b:91:06:7f:d5:ce:43:04:fe:e5:cb:48: ed:a6:84:39:a2:d2:ee:a3:ff:e7:62:e4:79:9e:9b: bd:45:6a:7a:61:3d:4d:fc:1b:d2:51:c7:e6:14:16: 5f:2d:06:1f:2e:39:2a:d8:23:a7:4e:0a:bf:bd:46: c0:0a:f3:79:b5:31:e1:37:a6:0f:a0:ef:81:95:9c: d8:98:00:47:e1:2d:a9:77:39:fe:09:6f:1a:55:2b: 41:49:9d:7c:bf:01:7a:84:5e:d7:64:5b:b5:1f:4e: f8:03:af:30:1d:f8:94:f7:82:34:21:8b:8f:6a:db: e3:78:f3:90:7c:5c:33:3a:b9:d5:aa:e8:8e:95:57: e5:9d:1d:39:c8:64:8f:42:fb:f4:8e:ef:dd:8f:d1: 94:31:93:e1:55:2d:1a:ef:61:86:f9:a0:81:54:db: 89:d4:17:71:1b:45:fb:ba:fc:57:72:ac:1b:cc:bf: d1:db:28:2f:a0:a3:81:79:1d:65:4a:ac:ba:6a:95: d5:cc:c7:84:a4:fb:f5:2a:79:d6:84:dd:b8:d1:47: 83:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:AE:4E:74:7A:5B:5A:64:8E:68:AA:FF:C7:18:A4:45:B5:64:AE:E8 X509v3 Authority Key Identifier: keyid:90:D7:53:A2:54:7E:03:A4:B0:D2:F9:1C:70:E9:CE:4E:44:68:04:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:3f:30:cd:16:79:1c:d5:b8:e1:50:91:74:5a:e2:5d:89:58: 0d:a9:9c:1f:bf:82:d1:01:79:4b:22:e0:9a:10:a3:2e:65:91: 7f:89:f4:e2:95:88:1f:c3:77:5a:89:49:ea:74:fe:74:50:60: 70:5c:29:42:75:63:ac:4d:9a:59:21:42:8f:d1:b0:f4:d1:71: 33:e2:14:05:f8:21:73:80:4d:51:42:65:9f:74:a4:db:b9:64: 95:f4:9e:5b:5d:d9:13:87:89:fd:c3:ca:8e:20:31:42:a4:be: 28:94:6c:2a:db:9b:ba:42:45:63:d6:c3:94:22:3d:f8:0a:eb: 98:60:1d:46:f0:6c:c0:ab:59:9a:4d:0c:de:91:80:02:fc:18: d8:97:ce:1b:fb:0c:80:53:d9:9b:eb:ad:52:56:fa:9a:d9:a9: e6:f3:d8:e4:ab:54:8a:a6:1e:62:dc:2e:15:36:58:f8:79:48: 81:31:be:4f:16:96:44:7e:6d:ec:4a:30:d5:63:b0:e7:d6:dc: 64:57:ec:f8:93:60:cd:59:04:96:66:9a:97:11:33:b2:5f:e9: ad:e1:9e:d8:d2:12:b1:40:53:72:f5:4f:dc:bf:da:21:aa:64: af:4b:be:df:eb:be:f1:f0:82:a1:27:03:58:bb:f1:e3:ed:74: d1:d3:cc:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz917Qq4rPGpSXhSgHBiQnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZDc1M2EyNTQ3ZTAzYTRiMGQyZjkxYzcwZTljZTRlNDQ2 ODA0MTgwHhcNMjUxMjA2MTQwMTA2WhcNMjUxMjA3MTQwMTA2WjAzMTEwLwYDVQQD EyhmZWFlNGU3NDdhNWI1YTY0OGU2OGFhZmZjNzE4YTQ0NWI1NjRhZWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKR+sTrefkK+8JHgs3AiP5tkgQ1u F8Gbxg4fgbVjNMU6OjxeZmF7Y+ZVi809XudbkQZ/1c5DBP7ly0jtpoQ5otLuo//n YuR5npu9RWp6YT1N/BvSUcfmFBZfLQYfLjkq2COnTgq/vUbACvN5tTHhN6YPoO+B lZzYmABH4S2pdzn+CW8aVStBSZ18vwF6hF7XZFu1H074A68wHfiU94I0IYuPatvj ePOQfFwzOrnVquiOlVflnR05yGSPQvv0ju/dj9GUMZPhVS0a72GG+aCBVNuJ1Bdx G0X7uvxXcqwbzL/R2ygvoKOBeR1lSqy6apXVzMeEpPv1KnnWhN240UeDoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP6uTnR6W1pkjmiq/8cYpEW1ZK7oMB8GA1UdIwQY MBaAFJDXU6JUfgOksNL5HHDpzk5EaAQYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva05kVG9sUi1BNlN3MHZrY2NPbk9Ua1JvQkJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jYzkwOTktNzEwMS00NzJlLWFlZmMt NWViNjZiY2UzMThkLzEva05kVG9sUi1BNlN3MHZrY2NPbk9Ua1JvQkJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9jYzkwOTktNzEwMS00NzJlLWFlZmMtNWViNjZiY2UzMThk LzEva05kVG9sUi1BNlN3MHZrY2NPbk9Ua1JvQkJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKT8wzRZ5 HNW44VCRdFriXYlYDamcH7+C0QF5SyLgmhCjLmWRf4n04pWIH8N3WolJ6nT+dFBg cFwpQnVjrE2aWSFCj9Gw9NFxM+IUBfghc4BNUUJln3Sk27lklfSeW13ZE4eJ/cPK jiAxQqS+KJRsKtubukJFY9bDlCI9+ArrmGAdRvBswKtZmk0M3pGAAvwY2JfOG/sM gFPZm+utUlb6mtmp5vPY5KtUiqYeYtwuFTZY+HlIgTG+TxaWRH5t7Eow1WOw59bc ZFfs+JNgzVkElmaalxEzsl/preGe2NISsUBTcvVP3L/aIapkr0u+3+u+8fCCoScD WLvx4+100dPMpw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:59:37 2025 by rpki-client