This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft File: KVkHdOd6iZSkKDEow1kh0DewbyE.mft (raw, json) Hash identifier: o+6TMxhylSYy5gzoK+SY/6NqgT0Ozbf96a6CXwpLsV0= Subject key identifier: 0C:28:82:47:53:56:14:C9:FC:E2:C9:B4:C5:20:14:00:2B:9C:17:0C Authority key identifier: 29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21 Certificate issuer: /CN=29590774e77a8994a4283128c35921d037b06f21 Certificate serial: 019AF5AEDAE3887735D9CED0861A45FF8355 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 22:01:08 +0000 Manifest this update: Sat 06 Dec 2025 22:01:08 +0000 Manifest next update: Sun 07 Dec 2025 22:01:08 +0000 Files and hashes: 1: KVkHdOd6iZSkKDEow1kh0DewbyE.crl (hash: IWanyfcg1f/+Z+Fmr/WqtxvpB9u7HffHRZ/N6TQjKKo=) 2: gxGfsBx6lLiLQDxOb4KsEBJPPD4.roa (hash: D/Hy5r+AT898TQXYisKdolhcFtwKf/D8Em+z0xE13iQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:da:e3:88:77:35:d9:ce:d0:86:1a:45:ff:83:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29590774e77a8994a4283128c35921d037b06f21 Validity Not Before: Dec 6 22:01:08 2025 GMT Not After : Dec 7 22:01:08 2025 GMT Subject: CN=0c288247535614c9fce2c9b4c52014002b9c170c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:80:52:16:3b:c5:1a:10:7b:43:dd:1c:72:da: 32:10:dc:99:8c:89:cf:f2:c4:51:4a:77:8d:f3:b5: 42:03:27:4c:9f:58:99:99:fe:ea:77:cb:44:dd:fc: 34:84:31:0f:38:fd:c2:57:33:0e:61:86:9c:75:6b: a4:21:f8:80:38:65:5e:59:a1:c0:42:41:87:b2:4c: 38:bc:cb:f0:06:06:18:b7:37:5f:e3:24:56:94:fe: 8d:0c:01:ad:d9:4b:2e:2a:fa:32:b4:2e:10:9f:58: af:6d:6f:1a:9f:1d:06:5b:2d:77:69:82:2f:99:0b: 0f:19:83:6b:1f:d7:41:a7:62:bf:bc:e2:f8:ef:20: 0c:ad:80:78:1d:de:76:4e:98:70:f5:20:c7:75:b2: ee:f0:d0:48:9b:b5:bc:a4:8a:0b:46:76:0e:f4:78: 2b:de:27:61:00:b6:be:ab:c3:d0:a4:40:71:65:ae: 04:dc:7c:50:64:cb:7a:fa:dd:e8:c2:61:7b:ef:b9: cc:31:2a:0b:17:60:59:f4:9f:36:7b:24:7d:b5:4b: 18:03:a4:5d:c1:d3:21:b3:e1:90:6c:25:71:a6:66: 2a:97:18:3b:98:f0:07:e9:03:9b:f2:34:49:23:0a: e5:b0:68:fb:cb:42:70:72:98:66:eb:84:49:17:9c: a3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:28:82:47:53:56:14:C9:FC:E2:C9:B4:C5:20:14:00:2B:9C:17:0C X509v3 Authority Key Identifier: keyid:29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:c1:08:b4:80:35:10:1f:df:8f:68:72:8f:9b:d6:26:42:fb: 49:2d:8d:78:b3:2c:0b:6c:ab:83:6b:7c:75:6e:5a:78:f9:65: 63:52:58:37:7a:93:99:63:fa:f0:e9:7a:29:75:47:09:f7:58: d4:c1:c7:8c:46:d9:89:7a:da:7c:3e:42:5e:e8:f0:44:8b:2d: d0:ac:7f:9c:e5:58:4c:19:2e:71:e0:18:60:88:3d:d8:a3:8e: 3e:49:7e:93:78:f8:74:fd:b6:8c:79:98:9b:f8:5b:05:76:3c: ba:fd:74:53:a5:d1:5f:e2:57:20:17:67:cd:ac:b8:69:a5:d1: 07:80:80:cd:82:04:03:e8:da:c6:e4:aa:8e:85:83:30:2d:6a: 1d:b8:36:ef:6b:f6:1f:fc:7a:43:9f:bb:82:a4:33:fd:db:69: 3a:2a:9b:13:e7:78:cf:6e:74:60:f3:ce:53:eb:e1:47:32:60: 72:a3:e6:d0:e8:51:3d:2f:44:4d:ea:03:ea:4b:50:0b:66:25: a2:d5:71:d7:22:f5:6d:71:6d:29:e0:39:be:fd:dc:4d:1c:1c: b3:78:33:3e:1e:3d:07:3b:fd:62:e1:8b:aa:1b:63:02:88:23: 69:74:53:e3:39:04:61:ac:eb:b1:da:6b:1f:36:e1:72:92:a2: c7:ea:0b:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rtrjiHc12c7QhhpF/4NVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NTkwNzc0ZTc3YTg5OTRhNDI4MzEyOGMzNTkyMWQwMzdi MDZmMjEwHhcNMjUxMjA2MjIwMTA4WhcNMjUxMjA3MjIwMTA4WjAzMTEwLwYDVQQD EygwYzI4ODI0NzUzNTYxNGM5ZmNlMmM5YjRjNTIwMTQwMDJiOWMxNzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4BSFjvFGhB7Q90cctoyENyZjInP 8sRRSneN87VCAydMn1iZmf7qd8tE3fw0hDEPOP3CVzMOYYacdWukIfiAOGVeWaHA QkGHskw4vMvwBgYYtzdf4yRWlP6NDAGt2UsuKvoytC4Qn1ivbW8anx0GWy13aYIv mQsPGYNrH9dBp2K/vOL47yAMrYB4Hd52Tphw9SDHdbLu8NBIm7W8pIoLRnYO9Hgr 3idhALa+q8PQpEBxZa4E3HxQZMt6+t3owmF777nMMSoLF2BZ9J82eyR9tUsYA6Rd wdMhs+GQbCVxpmYqlxg7mPAH6QOb8jRJIwrlsGj7y0Jwcphm64RJF5yjLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAwogkdTVhTJ/OLJtMUgFAArnBcMMB8GA1UdIwQY MBaAFClZB3TneomUpCgxKMNZIdA3sG8hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1ZrSGRPZDZpWlNrS0RFb3cxa2gwRGV3YnlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni82NzQ1ZmUtZTQ3NS00YzU4LWEzMWUt ZjJjMGRhNjFhYzEzLzEvS1ZrSGRPZDZpWlNrS0RFb3cxa2gwRGV3YnlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni82NzQ1ZmUtZTQ3NS00YzU4LWEzMWUtZjJjMGRhNjFhYzEz LzEvS1ZrSGRPZDZpWlNrS0RFb3cxa2gwRGV3YnlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHMEItIA1 EB/fj2hyj5vWJkL7SS2NeLMsC2yrg2t8dW5aePllY1JYN3qTmWP68Ol6KXVHCfdY 1MHHjEbZiXrafD5CXujwRIst0Kx/nOVYTBkuceAYYIg92KOOPkl+k3j4dP22jHmY m/hbBXY8uv10U6XRX+JXIBdnzay4aaXRB4CAzYIEA+jaxuSqjoWDMC1qHbg272v2 H/x6Q5+7gqQz/dtpOiqbE+d4z250YPPOU+vhRzJgcqPm0OhRPS9ETeoD6ktQC2Yl otVx1yL1bXFtKeA5vv3cTRwcs3gzPh49Bzv9YuGLqhtjAogjaXRT4zkEYazrsdpr HzbhcpKix+oLRg== -----END CERTIFICATE-----Generated at Sun Dec 7 00:53:53 2025 by rpki-client