This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft File: KVdFdunOo46j9u6ybIMnUooKG_8.mft (raw, json) Hash identifier: 7ATnzTDoc+e49BdPvDpVbEREbTsHInvYTn3m+1wtocs= Subject key identifier: FD:B9:F0:2C:3F:EA:7A:28:BD:2B:F6:EA:A2:55:1C:EB:3E:AC:42:4E Authority key identifier: 29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF Certificate issuer: /CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff Certificate serial: 019AF1D1C22DE0009F326D5BEE8E3EB40159 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft Manifest number: 07B2 Signing time: Sat 06 Dec 2025 04:00:46 +0000 Manifest this update: Sat 06 Dec 2025 04:00:46 +0000 Manifest next update: Sun 07 Dec 2025 04:00:46 +0000 Files and hashes: 1: KVdFdunOo46j9u6ybIMnUooKG_8.crl (hash: 1BVxbLp9oc2S1Rzg5r+/qk1Tf7m/ss7dbR0L4oATb6o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:c2:2d:e0:00:9f:32:6d:5b:ee:8e:3e:b4:01:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff Validity Not Before: Dec 6 04:00:46 2025 GMT Not After : Dec 7 04:00:46 2025 GMT Subject: CN=fdb9f02c3fea7a28bd2bf6eaa2551ceb3eac424e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f3:11:1c:b1:6b:eb:6b:19:af:f5:99:41:5a: f0:59:ae:a4:2d:ca:32:6f:e6:60:89:23:7b:99:b9: e6:4e:33:ae:df:f4:c8:15:2e:e7:ae:59:92:76:dd: 28:f8:ac:d5:ab:ca:77:33:0e:a1:17:a9:99:6f:f2: 24:8f:32:b8:85:96:1b:bd:27:29:11:8f:23:f9:98: 47:66:6b:43:e9:a3:19:db:28:1b:cc:cb:58:2b:b1: 60:97:c2:10:a9:08:3a:d4:d6:af:55:5a:61:85:cb: 2c:2f:32:8b:e2:c2:fc:c6:9e:81:59:b7:ac:bd:92: 13:f3:9b:23:73:b6:54:f7:a8:78:5f:fb:c1:42:cb: 53:0b:f7:7d:f7:af:28:4b:3e:52:94:c5:c0:a7:93: ce:af:bc:43:c3:86:da:a2:e7:06:1f:b8:5f:99:f6: ff:3b:17:63:f1:df:90:53:4c:da:35:7b:9c:c7:1a: 77:0e:d9:bb:00:1f:84:2c:de:ec:64:a1:6f:6e:02: cf:b2:f4:88:89:84:66:f5:82:7d:36:84:f8:54:43: 24:fa:3b:80:e5:3d:6e:6d:e2:23:2e:a3:08:5c:d6: 33:f8:16:f2:87:fb:fa:46:c2:e9:20:c1:5f:7a:92: 88:63:01:5e:61:f7:ed:5b:a5:dd:fd:ac:80:d7:3c: ae:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B9:F0:2C:3F:EA:7A:28:BD:2B:F6:EA:A2:55:1C:EB:3E:AC:42:4E X509v3 Authority Key Identifier: keyid:29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:8a:31:e5:b5:3f:93:d3:3d:d3:9f:a6:f2:61:fb:95:c5:f0: 0b:30:1a:ef:43:5f:d4:b5:48:c8:11:b6:bb:48:22:79:05:1f: 9e:70:33:37:e9:d4:90:31:a5:3b:cd:9e:08:8f:d3:51:cb:2e: 85:d0:c2:da:1b:64:af:d2:49:a9:4c:ac:84:89:12:7c:a8:16: 77:ca:04:6b:22:9e:eb:a2:05:74:37:65:24:bc:70:76:1b:9e: a3:37:56:50:41:74:23:48:6f:0a:0f:55:af:67:8b:b2:df:42: ef:2e:03:9d:4f:c2:d7:6a:1b:de:f2:5f:02:df:55:35:25:f3: fb:88:2a:b3:79:64:aa:dd:ec:18:47:4a:72:e0:50:49:2c:0c: 74:b3:70:55:77:21:34:0a:14:50:3a:9e:7c:42:0b:f2:08:a8: b5:91:cd:ec:e6:f9:0e:a6:f8:34:a6:e0:65:95:34:8c:ae:82: a7:74:5d:55:d9:6d:2a:5a:cb:86:eb:c5:e2:c1:80:8e:53:da: 5c:f0:ea:21:6d:13:e9:34:8c:0d:6c:e3:c1:b8:73:e7:27:5b: be:d8:c7:15:b5:f6:7f:47:a2:85:f3:fa:c1:ee:fd:f4:9e:41: 2f:1e:78:cb:af:df:c1:10:0e:53:d0:bc:7b:b2:c6:57:a0:9a: ab:d2:74:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0cIt4ACfMm1b7o4+tAFZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NTc0NTc2ZTljZWEzOGVhM2Y2ZWViMjZjODMyNzUyOGEw YTFiZmYwHhcNMjUxMjA2MDQwMDQ2WhcNMjUxMjA3MDQwMDQ2WjAzMTEwLwYDVQQD EyhmZGI5ZjAyYzNmZWE3YTI4YmQyYmY2ZWFhMjU1MWNlYjNlYWM0MjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvMRHLFr62sZr/WZQVrwWa6kLcoy b+ZgiSN7mbnmTjOu3/TIFS7nrlmSdt0o+KzVq8p3Mw6hF6mZb/IkjzK4hZYbvScp EY8j+ZhHZmtD6aMZ2ygbzMtYK7Fgl8IQqQg61NavVVphhcssLzKL4sL8xp6BWbes vZIT85sjc7ZU96h4X/vBQstTC/d9968oSz5SlMXAp5POr7xDw4baoucGH7hfmfb/ Oxdj8d+QU0zaNXucxxp3Dtm7AB+ELN7sZKFvbgLPsvSIiYRm9YJ9NoT4VEMk+juA 5T1ubeIjLqMIXNYz+Bbyh/v6RsLpIMFfepKIYwFeYfftW6Xd/ayA1zyupwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP258Cw/6noovSv26qJVHOs+rEJOMB8GA1UdIwQY MBaAFClXRXbpzqOOo/busmyDJ1KKChv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1ZkRmR1bk9vNDZqOXU2eWJJTW5Vb29LR184LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iZDA1NTYtM2YzMy00NmRlLTkyOTEt M2IzNDQyMGQ5MGQyLzEvS1ZkRmR1bk9vNDZqOXU2eWJJTW5Vb29LR184Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9iZDA1NTYtM2YzMy00NmRlLTkyOTEtM2IzNDQyMGQ5MGQy LzEvS1ZkRmR1bk9vNDZqOXU2eWJJTW5Vb29LR184LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfYox5bU/ k9M905+m8mH7lcXwCzAa70Nf1LVIyBG2u0gieQUfnnAzN+nUkDGlO82eCI/TUcsu hdDC2htkr9JJqUyshIkSfKgWd8oEayKe66IFdDdlJLxwdhueozdWUEF0I0hvCg9V r2eLst9C7y4DnU/C12ob3vJfAt9VNSXz+4gqs3lkqt3sGEdKcuBQSSwMdLNwVXch NAoUUDqefEIL8giotZHN7Ob5Dqb4NKbgZZU0jK6Cp3RdVdltKlrLhuvF4sGAjlPa XPDqIW0T6TSMDWzjwbhz5ydbvtjHFbX2f0eihfP6we799J5BLx54y6/fwRAOU9C8 e7LGV6Caq9J0Cg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:05:36 2025 by rpki-client