This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft File: KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft (raw, json) Hash identifier: GqJkwY16DNVvt1WWVPgAx8sH+hK9S7nUYboptNru9eI= Subject key identifier: BC:AF:97:0C:5A:2B:E0:4B:B7:36:7B:3E:57:AE:F7:B8:F4:3E:1B:C8 Authority key identifier: 29:D5:9E:88:9F:99:AE:FD:DE:5E:94:9F:E8:07:9D:33:7B:57:F4:47 Certificate issuer: /CN=29d59e889f99aefdde5e949fe8079d337b57f447 Certificate serial: 019AF19B826C100BDC6AEA4D84D763270C8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft Manifest number: 134F Signing time: Sat 06 Dec 2025 03:01:31 +0000 Manifest this update: Sat 06 Dec 2025 03:01:31 +0000 Manifest next update: Sun 07 Dec 2025 03:01:31 +0000 Files and hashes: 1: KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.crl (hash: ns10F7gCpNeNR19YEpt+GnLXSk6Ob7tkz05XnsVc3KA=) 2: if3bRvhywq0-AQAvqAMvn9zf2xA.roa (hash: e1PwQotXLXaCqhVV0IcDbX0I5jTk19F7wuKZ3aHr5MQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.crl rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft rsync://rpki.ripe.net/repository/DEFAULT/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:82:6c:10:0b:dc:6a:ea:4d:84:d7:63:27:0c:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d59e889f99aefdde5e949fe8079d337b57f447 Validity Not Before: Dec 6 03:01:31 2025 GMT Not After : Dec 7 03:01:31 2025 GMT Subject: CN=bcaf970c5a2be04bb7367b3e57aef7b8f43e1bc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c6:9c:46:7e:59:d1:b7:d2:21:e0:e9:a7:a3: e2:ad:61:a9:dc:00:1e:bb:b6:b6:fb:12:78:a3:7e: c0:9b:02:0f:26:88:ce:6e:af:d8:23:3c:7a:c5:6c: 11:ea:c4:53:3b:15:66:dc:38:02:8d:bd:29:d8:b5: 79:29:b1:02:d4:16:b7:8d:51:a5:78:a1:23:b0:76: 41:1d:92:7a:ad:30:08:7b:ea:79:1b:1a:59:94:9b: 24:60:73:7d:bb:cb:50:d4:75:d5:ba:40:e6:ba:33: 3f:fa:e2:41:55:45:9b:49:9e:00:0f:41:be:ee:b4: da:77:f2:e7:b9:a2:5a:04:f8:c4:94:d7:bd:c8:5a: 7d:84:bf:d8:89:08:d1:c2:09:89:16:22:dc:03:e3: de:88:fd:48:33:36:50:4b:f1:69:14:ab:17:a0:15: 7c:69:f8:04:0b:98:5d:dc:a2:f3:43:57:85:a5:5c: 0e:4e:d8:88:1d:8e:b0:95:4f:92:2c:7c:5c:2c:8c: 64:5b:fd:7b:4c:db:a0:95:f5:e0:58:9f:d3:90:6b: e5:8d:c9:3c:e7:9d:da:1a:51:28:47:0c:b1:f1:1d: 6d:60:1e:fa:c5:70:52:55:a4:49:dc:25:01:37:2a: 43:ef:b5:b6:09:34:2d:13:32:ee:a7:c5:9c:8d:fb: 75:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:AF:97:0C:5A:2B:E0:4B:B7:36:7B:3E:57:AE:F7:B8:F4:3E:1B:C8 X509v3 Authority Key Identifier: keyid:29:D5:9E:88:9F:99:AE:FD:DE:5E:94:9F:E8:07:9D:33:7B:57:F4:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:c4:ab:7c:72:5d:e3:48:32:c1:47:8e:68:55:c4:31:c5:e3: 05:94:67:22:1b:85:e3:c3:c0:a1:0a:83:15:99:52:2d:19:4e: fa:5e:78:f7:6c:d8:be:75:ab:aa:3f:c3:67:87:93:67:2f:d9: a0:96:85:b8:0f:d1:35:11:65:82:13:82:f7:3b:a6:ce:58:2d: e6:a8:04:22:3e:64:d8:9e:94:5a:5f:24:24:5a:20:d1:57:8d: a8:d7:67:37:10:c8:7f:97:c0:db:ad:e3:1b:b8:6a:b1:3c:36: 8f:ce:fe:e7:f6:91:7a:aa:39:ed:0f:3f:10:0d:57:72:e5:b4: 23:dc:58:91:d3:e8:f7:5c:22:4f:a6:fe:6a:f9:48:6e:89:6c: 95:88:53:f7:18:f3:47:21:d3:bf:e6:b3:57:18:6b:1e:68:1e: 84:53:07:1d:e2:ef:48:9e:7e:a5:f6:43:82:58:6d:ad:f1:6c: 13:21:72:69:39:d9:4f:1a:a7:1a:22:07:9c:ad:bf:30:4c:ee: c7:61:8c:dc:ab:b2:25:e3:bf:41:18:07:7f:80:0b:df:ca:58: 4d:00:dc:80:9d:4a:0d:9f:0a:16:c5:ba:9a:91:91:2d:d1:39: 8a:2e:db:f7:07:f8:2d:b5:0d:cd:38:ae:ba:07:f9:75:1f:e4: 80:de:ae:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm4JsEAvcaupNhNdjJwyPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDU5ZTg4OWY5OWFlZmRkZTVlOTQ5ZmU4MDc5ZDMzN2I1 N2Y0NDcwHhcNMjUxMjA2MDMwMTMxWhcNMjUxMjA3MDMwMTMxWjAzMTEwLwYDVQQD EyhiY2FmOTcwYzVhMmJlMDRiYjczNjdiM2U1N2FlZjdiOGY0M2UxYmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosacRn5Z0bfSIeDpp6PirWGp3AAe u7a2+xJ4o37AmwIPJojObq/YIzx6xWwR6sRTOxVm3DgCjb0p2LV5KbEC1Ba3jVGl eKEjsHZBHZJ6rTAIe+p5GxpZlJskYHN9u8tQ1HXVukDmujM/+uJBVUWbSZ4AD0G+ 7rTad/LnuaJaBPjElNe9yFp9hL/YiQjRwgmJFiLcA+PeiP1IMzZQS/FpFKsXoBV8 afgEC5hd3KLzQ1eFpVwOTtiIHY6wlU+SLHxcLIxkW/17TNuglfXgWJ/TkGvljck8 553aGlEoRwyx8R1tYB76xXBSVaRJ3CUBNypD77W2CTQtEzLup8Wcjft1pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLyvlwxaK+BLtzZ7Pleu97j0PhvIMB8GA1UdIwQY MBaAFCnVnoifma793l6Un+gHnTN7V/RHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RXZWlKLVpydjNlWHBTZjZBZWRNM3RYOUVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9jNGJkYWUtMDlmMC00MzM0LTg1M2Ut MzYyNmI4ZmZkMWU1LzEvS2RXZWlKLVpydjNlWHBTZjZBZWRNM3RYOUVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9jNGJkYWUtMDlmMC00MzM0LTg1M2UtMzYyNmI4ZmZkMWU1 LzEvS2RXZWlKLVpydjNlWHBTZjZBZWRNM3RYOUVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABcSrfHJd 40gywUeOaFXEMcXjBZRnIhuF48PAoQqDFZlSLRlO+l5492zYvnWrqj/DZ4eTZy/Z oJaFuA/RNRFlghOC9zumzlgt5qgEIj5k2J6UWl8kJFog0VeNqNdnNxDIf5fA263j G7hqsTw2j87+5/aReqo57Q8/EA1XcuW0I9xYkdPo91wiT6b+avlIbolslYhT9xjz RyHTv+azVxhrHmgehFMHHeLvSJ5+pfZDglhtrfFsEyFyaTnZTxqnGiIHnK2/MEzu x2GM3KuyJeO/QRgHf4AL38pYTQDcgJ1KDZ8KFsW6mpGRLdE5ii7b9wf4LbUNzTiu ugf5dR/kgN6u8Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:01:04 2025 by rpki-client