This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.mft File: kdfs8XFCs7CTX443uPfZwlPw7hk.mft (raw, json) Hash identifier: gEioL7AUbrWjHznUZvOT9ERyZW1FLtJT3cjjSfUFXPM= Subject key identifier: 46:90:53:7B:CB:49:05:26:54:25:D9:10:CD:D8:B7:78:F0:A9:BA:42 Authority key identifier: 91:D7:EC:F1:71:42:B3:B0:93:5F:8E:37:B8:F7:D9:C2:53:F0:EE:19 Certificate issuer: /CN=91d7ecf17142b3b0935f8e37b8f7d9c253f0ee19 Certificate serial: 019AF1D1F4713133AE1C0462021EB27675B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdfs8XFCs7CTX443uPfZwlPw7hk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 04:00:59 +0000 Manifest this update: Sat 06 Dec 2025 04:00:59 +0000 Manifest next update: Sun 07 Dec 2025 04:00:59 +0000 Files and hashes: 1: kdfs8XFCs7CTX443uPfZwlPw7hk.crl (hash: Mgkou170rPB+OTdiDUlorpZxxX0r7qbjWK1Wks64yP0=) 2: yaNI0_QU-og_a5wIKL7nblpP3wo.roa (hash: mocSKnatPWu2K5HO5VSBkHGD9dsGk50fbeHRajNzTSQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.mft rsync://rpki.ripe.net/repository/DEFAULT/kdfs8XFCs7CTX443uPfZwlPw7hk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:f4:71:31:33:ae:1c:04:62:02:1e:b2:76:75:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91d7ecf17142b3b0935f8e37b8f7d9c253f0ee19 Validity Not Before: Dec 6 04:00:59 2025 GMT Not After : Dec 7 04:00:59 2025 GMT Subject: CN=4690537bcb4905265425d910cdd8b778f0a9ba42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c0:9a:41:9b:55:b8:63:61:81:e5:56:b8:27: b0:22:b8:b8:95:a0:0c:6c:2f:96:c7:82:bb:0b:4d: 6e:77:d1:4e:ef:ec:c1:d2:43:d3:ce:a6:6f:9a:7b: 50:de:50:2c:4e:87:09:d4:27:fe:0e:a3:3a:85:8a: 0f:99:9e:3b:88:6b:7f:c1:b1:51:62:c1:e2:8d:a1: 90:d4:f0:32:1b:e5:96:13:14:36:ef:e2:7a:37:46: e8:83:b7:99:ae:91:67:0a:2a:39:b5:3b:23:88:31: 3a:40:d9:a3:3e:4d:87:62:1b:51:98:13:49:1c:37: 5a:97:72:63:62:b7:e6:eb:ff:dd:04:c0:1b:0c:bb: b8:79:77:63:08:86:dd:2d:c1:18:a1:40:de:48:4f: 59:69:93:88:9d:7d:e5:34:e5:d2:1d:43:f2:f4:d6: 54:48:4d:23:98:aa:c5:2c:26:68:50:57:53:d4:6d: 51:f4:12:f6:8d:63:a7:30:58:07:4b:15:ba:a3:91: 40:72:f9:ce:4c:d1:8b:88:8a:ad:a0:7b:ed:e4:a2: 03:bc:17:aa:c8:65:fa:89:b0:d2:15:69:7d:57:26: fa:ae:db:35:74:20:85:24:7a:86:7b:f9:ee:aa:1c: bb:67:1d:b0:a0:8a:e4:7d:38:39:fe:4b:03:94:04: f4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:90:53:7B:CB:49:05:26:54:25:D9:10:CD:D8:B7:78:F0:A9:BA:42 X509v3 Authority Key Identifier: keyid:91:D7:EC:F1:71:42:B3:B0:93:5F:8E:37:B8:F7:D9:C2:53:F0:EE:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdfs8XFCs7CTX443uPfZwlPw7hk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:02:e2:95:05:bd:2c:a6:be:1a:4e:59:7b:02:12:fe:a3:fb: 0a:58:b8:9e:e6:25:82:3b:57:52:cb:8f:7c:12:f2:94:a9:17: fd:9a:45:8e:eb:0f:8f:34:b8:bd:62:19:a3:11:05:e0:6c:3b: 10:ba:62:10:e9:89:1d:9b:53:20:c7:48:d2:c5:98:84:9c:a6: 8c:c9:9c:23:41:da:39:3b:99:19:f6:c2:69:b2:f7:2d:8d:21: 1e:82:51:e9:fe:e0:d7:02:32:e6:ac:f0:e7:38:6e:23:7b:91: 20:8b:37:65:8b:ee:b5:70:5b:73:b5:73:c0:18:a2:1e:57:96: 72:2c:e6:10:e9:0c:f5:07:b9:54:9b:96:32:e0:69:41:5f:b8: 51:49:bf:46:68:51:f6:61:15:0f:f8:59:98:ef:dc:86:61:8a: 7f:09:f4:ac:c0:d8:4f:a6:98:de:d3:71:25:57:08:a2:54:46: b3:de:66:7a:d2:d6:61:7b:47:2a:db:52:d1:90:cd:b7:f8:34: da:ac:98:21:91:48:83:91:3f:46:e3:d2:4b:a0:bf:bf:d9:ba: 72:4a:1f:df:2a:bf:9d:3f:82:d8:3d:a5:bb:fb:22:4c:59:6d: 45:e2:b7:5f:80:bb:57:ec:a1:9d:ec:05:b8:50:5b:09:1a:74: 94:26:d8:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fRxMTOuHARiAh6ydnW3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZDdlY2YxNzE0MmIzYjA5MzVmOGUzN2I4ZjdkOWMyNTNm MGVlMTkwHhcNMjUxMjA2MDQwMDU5WhcNMjUxMjA3MDQwMDU5WjAzMTEwLwYDVQQD Eyg0NjkwNTM3YmNiNDkwNTI2NTQyNWQ5MTBjZGQ4Yjc3OGYwYTliYTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMCaQZtVuGNhgeVWuCewIri4laAM bC+Wx4K7C01ud9FO7+zB0kPTzqZvmntQ3lAsTocJ1Cf+DqM6hYoPmZ47iGt/wbFR YsHijaGQ1PAyG+WWExQ27+J6N0bog7eZrpFnCio5tTsjiDE6QNmjPk2HYhtRmBNJ HDdal3JjYrfm6//dBMAbDLu4eXdjCIbdLcEYoUDeSE9ZaZOInX3lNOXSHUPy9NZU SE0jmKrFLCZoUFdT1G1R9BL2jWOnMFgHSxW6o5FAcvnOTNGLiIqtoHvt5KIDvBeq yGX6ibDSFWl9Vyb6rts1dCCFJHqGe/nuqhy7Zx2woIrkfTg5/ksDlAT0VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEaQU3vLSQUmVCXZEM3Yt3jwqbpCMB8GA1UdIwQY MBaAFJHX7PFxQrOwk1+ON7j32cJT8O4ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2RmczhYRkNzN0NUWDQ0M3VQZlp3bFB3N2hrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9iMDhlNmUtMDgyMi00MjI0LTk1NGIt YTZiMWFkMzRlMDhjLzEva2RmczhYRkNzN0NUWDQ0M3VQZlp3bFB3N2hrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9iMDhlNmUtMDgyMi00MjI0LTk1NGItYTZiMWFkMzRlMDhj LzEva2RmczhYRkNzN0NUWDQ0M3VQZlp3bFB3N2hrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlwLilQW9 LKa+Gk5ZewIS/qP7Cli4nuYlgjtXUsuPfBLylKkX/ZpFjusPjzS4vWIZoxEF4Gw7 ELpiEOmJHZtTIMdI0sWYhJymjMmcI0HaOTuZGfbCabL3LY0hHoJR6f7g1wIy5qzw 5zhuI3uRIIs3ZYvutXBbc7VzwBiiHleWcizmEOkM9Qe5VJuWMuBpQV+4UUm/RmhR 9mEVD/hZmO/chmGKfwn0rMDYT6aY3tNxJVcIolRGs95metLWYXtHKttS0ZDNt/g0 2qyYIZFIg5E/RuPSS6C/v9m6ckof3yq/nT+C2D2lu/siTFltReK3X4C7V+yhnewF uFBbCRp0lCbYsw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:49 2025 by rpki-client