This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft File: kdjDKnA5cqrqCToB-N7fV_lnVXU.mft (raw, json) Hash identifier: ycnM+WZ/kxDBBKUOKHMnesHEiavvspazQErhm6NTtWE= Subject key identifier: 37:81:CF:75:5F:3D:77:C0:D5:7B:10:09:0D:CA:2A:09:9D:54:0B:41 Authority key identifier: 91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75 Certificate issuer: /CN=91d8c32a703972aaea093a01f8dedf57f9675575 Certificate serial: 019AF5E5667FC84CDA11E8457497F09D520B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 23:00:43 +0000 Manifest this update: Sat 06 Dec 2025 23:00:43 +0000 Manifest next update: Sun 07 Dec 2025 23:00:43 +0000 Files and hashes: 1: aJJ-YdVMN1blRA6zgwpwFOSytEA.roa (hash: 18Fas5Pt/vlUe10SXqZ/nCZNIMF4HTl3m3WAOZlwA4Y=) 2: kdjDKnA5cqrqCToB-N7fV_lnVXU.crl (hash: b2zbYvnvbDpTGNaHD4ZbXBY+jvvT0vl+1IiMowFIO9o=) 3: tAP5YUU5DttldDjJZneQqbjMnns.roa (hash: Wr2DWhImWg05UEtM87fECNOHzZETG/9GHlcwfpi8dUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:66:7f:c8:4c:da:11:e8:45:74:97:f0:9d:52:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91d8c32a703972aaea093a01f8dedf57f9675575 Validity Not Before: Dec 6 23:00:43 2025 GMT Not After : Dec 7 23:00:43 2025 GMT Subject: CN=3781cf755f3d77c0d57b10090dca2a099d540b41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8c:7b:00:3d:2b:db:75:c7:4b:8c:28:ea:0e: c1:5d:56:1a:b2:b2:42:f6:0d:75:20:78:6d:45:2f: 14:e5:2b:40:2d:a1:57:d3:f7:11:03:38:23:dc:f2: b9:df:e3:af:c2:88:c8:74:b6:55:ed:f1:fc:95:3f: 9e:02:1c:b5:0a:bb:12:f9:92:2c:6f:d5:fc:97:df: 56:83:fc:46:6d:b9:91:e3:e5:f1:08:1e:0c:89:c1: 4f:42:26:0c:02:91:9c:2a:94:0d:72:22:c3:64:3b: ec:16:f6:9c:7b:e3:bb:f6:1a:19:ea:58:00:89:84: 99:9b:0c:e4:33:46:17:ff:e4:0a:e6:be:c1:a9:5c: 7e:10:fc:5b:84:16:86:ee:5b:c8:d4:99:b6:d5:18: bf:7d:10:b2:78:35:dc:8a:94:72:a8:32:8e:71:72: b1:45:c5:6b:fb:c9:79:5c:5b:a5:61:a1:ef:63:d0: 6e:2b:67:9f:1c:5e:37:1a:ca:e9:66:1b:dc:01:96: e7:bf:6e:7a:f3:d0:0a:45:23:4c:40:5c:35:a0:6b: 43:4e:f2:3b:59:5c:21:2d:4c:95:81:d8:ee:c5:ec: d7:d4:19:09:49:ec:73:52:5d:5d:c4:82:24:95:b3: c0:74:38:b5:e3:35:2a:82:ee:b5:42:b0:41:77:87: c3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:81:CF:75:5F:3D:77:C0:D5:7B:10:09:0D:CA:2A:09:9D:54:0B:41 X509v3 Authority Key Identifier: keyid:91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:68:98:52:01:4d:64:65:f0:4d:92:1b:51:c9:7c:07:b6:6b: 63:24:a7:9f:8a:35:98:df:54:f2:6d:3a:69:4c:32:cc:b9:8e: f3:3f:5b:ac:3c:2d:32:fe:ad:97:cc:4c:32:9f:e7:06:ce:f2: 9c:1f:f6:39:6f:7f:d7:6f:39:cb:f4:b7:69:37:d5:19:96:dd: 98:f5:f3:b8:68:de:a7:58:84:b6:9e:01:14:14:9a:6f:21:fe: 31:e4:c8:18:39:bb:29:fb:39:cf:a8:4c:4b:2a:25:21:11:ea: 5a:b7:a9:9f:d6:c6:ee:1e:fd:23:0b:0a:b5:2a:7f:b9:cf:cc: 22:16:af:9f:97:83:a0:fb:c6:5f:dc:75:22:ed:a1:c1:10:46: a9:90:1a:61:1a:3c:83:3a:1a:33:2a:7d:2c:10:81:3f:38:60: 71:1f:a0:3c:29:7a:6f:e2:fd:c5:86:75:95:fd:f2:0b:71:aa: 3a:32:f9:33:e7:b0:89:f6:eb:f7:22:39:5d:8b:8e:c0:72:73: f9:c9:41:e3:c0:4c:7a:2d:aa:78:cc:79:93:ea:de:b2:06:68: 21:4d:63:29:b1:b9:79:b1:73:cc:b9:85:e0:dc:15:0f:e7:21: 30:2f:87:48:55:8f:b5:08:ec:b8:25:d3:27:72:a5:6f:e7:c1: 0f:6f:3c:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15WZ/yEzaEehFdJfwnVILMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZDhjMzJhNzAzOTcyYWFlYTA5M2EwMWY4ZGVkZjU3Zjk2 NzU1NzUwHhcNMjUxMjA2MjMwMDQzWhcNMjUxMjA3MjMwMDQzWjAzMTEwLwYDVQQD EygzNzgxY2Y3NTVmM2Q3N2MwZDU3YjEwMDkwZGNhMmEwOTlkNTQwYjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwox7AD0r23XHS4wo6g7BXVYasrJC 9g11IHhtRS8U5StALaFX0/cRAzgj3PK53+OvwojIdLZV7fH8lT+eAhy1CrsS+ZIs b9X8l99Wg/xGbbmR4+XxCB4MicFPQiYMApGcKpQNciLDZDvsFvace+O79hoZ6lgA iYSZmwzkM0YX/+QK5r7BqVx+EPxbhBaG7lvI1Jm21Ri/fRCyeDXcipRyqDKOcXKx RcVr+8l5XFulYaHvY9BuK2efHF43GsrpZhvcAZbnv25689AKRSNMQFw1oGtDTvI7 WVwhLUyVgdjuxezX1BkJSexzUl1dxIIklbPAdDi14zUqgu61QrBBd4fDbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDeBz3VfPXfA1XsQCQ3KKgmdVAtBMB8GA1UdIwQY MBaAFJHYwypwOXKq6gk6Afje31f5Z1V1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2RqREtuQTVjcXJxQ1RvQi1ON2ZWX2xuVlhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC80ZTgxNmQtZDhlYy00MzdjLTk4NmEt M2MxMjc4MWUyMDJkLzEva2RqREtuQTVjcXJxQ1RvQi1ON2ZWX2xuVlhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC80ZTgxNmQtZDhlYy00MzdjLTk4NmEtM2MxMjc4MWUyMDJk LzEva2RqREtuQTVjcXJxQ1RvQi1ON2ZWX2xuVlhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPGiYUgFN ZGXwTZIbUcl8B7ZrYySnn4o1mN9U8m06aUwyzLmO8z9brDwtMv6tl8xMMp/nBs7y nB/2OW9/1285y/S3aTfVGZbdmPXzuGjep1iEtp4BFBSabyH+MeTIGDm7Kfs5z6hM SyolIRHqWrepn9bG7h79IwsKtSp/uc/MIhavn5eDoPvGX9x1Iu2hwRBGqZAaYRo8 gzoaMyp9LBCBPzhgcR+gPCl6b+L9xYZ1lf3yC3GqOjL5M+ewifbr9yI5XYuOwHJz +clB48BMei2qeMx5k+resgZoIU1jKbG5ebFzzLmF4NwVD+chMC+HSFWPtQjsuCXT J3Klb+fBD288kA== -----END CERTIFICATE-----Generated at Sun Dec 7 04:44:54 2025 by rpki-client