This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft File: R_KdK9FeAku5fnKyEkK1I9yRUYE.mft (raw, json) Hash identifier: tzLBG6aM65pVuMz+/S0dUgWYqIIzYePa6yGHUIY2jAs= Subject key identifier: 0B:1C:24:25:F7:00:EE:02:2A:28:94:36:6F:ED:4C:A9:16:50:02:F0 Authority key identifier: 47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81 Certificate issuer: /CN=47f29d2bd15e024bb97e72b21242b523dc915181 Certificate serial: 019AF12EFA1633364708A006D61A61A091D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:02:58 +0000 Manifest this update: Sat 06 Dec 2025 01:02:58 +0000 Manifest next update: Sun 07 Dec 2025 01:02:58 +0000 Files and hashes: 1: 2uH1JtbsSh2LEaKnPX8lAgWOEU4.roa (hash: GbQEJijg5o1dTfC76oTK57kNzuLPFqCLUWGp9VxRb9I=) 2: R_KdK9FeAku5fnKyEkK1I9yRUYE.crl (hash: 1fzOhMClm6FhHB/JqLsXTVJCy4DhBq7C9VHArKzmS2Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:fa:16:33:36:47:08:a0:06:d6:1a:61:a0:91:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47f29d2bd15e024bb97e72b21242b523dc915181 Validity Not Before: Dec 6 01:02:58 2025 GMT Not After : Dec 7 01:02:58 2025 GMT Subject: CN=0b1c2425f700ee022a2894366fed4ca9165002f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e4:01:b0:1f:03:f3:9c:e6:d3:68:69:56:e4: 60:64:01:20:be:30:17:aa:37:13:4d:4a:b8:42:4f: 6a:db:3a:a5:28:75:f3:db:cb:23:bb:ac:25:5f:5c: f5:88:2a:46:24:4e:b6:e8:a2:66:dd:69:5c:7e:55: 9a:dd:b0:76:7b:cd:13:76:fc:9c:4d:16:96:e8:ce: b7:b7:5c:88:77:57:be:ef:22:16:52:35:a2:ad:be: 1d:c4:a9:fd:14:ed:c9:71:9e:1a:27:89:ee:97:06: 4b:be:ac:ee:33:86:13:30:7e:06:c9:54:a9:83:3b: fb:7b:c7:30:cb:89:50:26:e0:6c:61:5a:22:ff:db: 7e:ca:71:69:47:e1:32:3e:d9:f0:1d:89:99:28:c6: 0e:a6:50:de:06:5e:42:9a:19:40:36:3f:1d:a9:9e: 0e:ed:d4:6b:20:03:28:ae:aa:eb:ff:59:43:28:9c: ea:f1:68:f3:0a:10:13:9b:ab:e1:3c:cb:a1:3a:ad: 83:fe:39:fb:b5:1e:e9:0c:7e:4d:f6:dc:60:37:9b: 01:e5:8c:cb:9b:94:eb:1f:cb:3b:e2:8f:1e:d0:8f: eb:67:de:9b:b4:d0:b9:27:50:e5:ad:1d:8c:79:1e: 48:7f:a0:ca:6b:a7:9c:fb:9d:ff:a5:1b:3d:ea:17: ff:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:1C:24:25:F7:00:EE:02:2A:28:94:36:6F:ED:4C:A9:16:50:02:F0 X509v3 Authority Key Identifier: keyid:47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:9f:fb:e2:8a:a5:d5:43:c4:cc:8d:01:0b:78:c2:c9:8b:27: eb:25:4f:33:4c:bd:d0:1e:8b:35:c1:3f:b4:9c:b7:3f:79:3b: 35:90:e8:7f:d6:ea:56:ae:3c:00:e7:6b:fc:6d:8b:39:7d:56: 8e:f1:7a:31:e1:6d:04:31:b0:ff:a6:41:a3:c5:44:b0:a5:c7: ec:ed:19:c4:d0:ef:6f:f3:c7:90:e9:7f:bd:d0:62:84:e7:42: bf:b3:40:d3:b3:30:cc:84:78:a0:14:17:11:9a:48:7e:37:d3: 19:0c:f9:02:28:30:4f:30:4d:1d:16:16:d3:ec:c4:08:16:b8: a9:b7:30:f2:71:ee:42:f8:2d:b4:6c:d8:fc:83:fd:31:51:3d: a8:c7:ed:a3:dc:dc:22:3d:31:fa:3b:d5:17:98:e7:6b:21:cb: 87:dc:da:52:31:ef:15:b2:d5:ea:e5:59:bf:db:ba:34:17:aa: c3:c9:23:06:73:65:c7:5a:83:5a:73:d9:47:a0:02:2d:0c:c2: b9:76:a4:ca:fe:4a:23:66:9f:7d:57:83:6e:11:ab:93:69:88: 5d:43:47:17:38:d3:ac:e0:3f:5a:2e:9e:16:58:91:de:12:7d: 64:9c:a0:98:00:ac:85:eb:85:0d:d4:d2:3d:49:2b:87:90:1d: 09:f3:52:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLvoWMzZHCKAG1hphoJHVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3ZjI5ZDJiZDE1ZTAyNGJiOTdlNzJiMjEyNDJiNTIzZGM5 MTUxODEwHhcNMjUxMjA2MDEwMjU4WhcNMjUxMjA3MDEwMjU4WjAzMTEwLwYDVQQD EygwYjFjMjQyNWY3MDBlZTAyMmEyODk0MzY2ZmVkNGNhOTE2NTAwMmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOQBsB8D85zm02hpVuRgZAEgvjAX qjcTTUq4Qk9q2zqlKHXz28sju6wlX1z1iCpGJE626KJm3WlcflWa3bB2e80Tdvyc TRaW6M63t1yId1e+7yIWUjWirb4dxKn9FO3JcZ4aJ4nulwZLvqzuM4YTMH4GyVSp gzv7e8cwy4lQJuBsYVoi/9t+ynFpR+EyPtnwHYmZKMYOplDeBl5CmhlANj8dqZ4O 7dRrIAMorqrr/1lDKJzq8WjzChATm6vhPMuhOq2D/jn7tR7pDH5N9txgN5sB5YzL m5TrH8s74o8e0I/rZ96btNC5J1DlrR2MeR5If6DKa6ec+53/pRs96hf/WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAscJCX3AO4CKiiUNm/tTKkWUALwMB8GA1UdIwQY MBaAFEfynSvRXgJLuX5yshJCtSPckVGBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUl9LZEs5RmVBa3U1Zm5LeUVrSzFJOXlSVVlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9jMzI1OTgtMmE5NS00M2M0LTliNmEt MDE2NjUzMmRhYzU2LzEvUl9LZEs5RmVBa3U1Zm5LeUVrSzFJOXlSVVlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9jMzI1OTgtMmE5NS00M2M0LTliNmEtMDE2NjUzMmRhYzU2 LzEvUl9LZEs5RmVBa3U1Zm5LeUVrSzFJOXlSVVlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXp/74oql 1UPEzI0BC3jCyYsn6yVPM0y90B6LNcE/tJy3P3k7NZDof9bqVq48AOdr/G2LOX1W jvF6MeFtBDGw/6ZBo8VEsKXH7O0ZxNDvb/PHkOl/vdBihOdCv7NA07MwzIR4oBQX EZpIfjfTGQz5AigwTzBNHRYW0+zECBa4qbcw8nHuQvgttGzY/IP9MVE9qMfto9zc Ij0x+jvVF5jnayHLh9zaUjHvFbLV6uVZv9u6NBeqw8kjBnNlx1qDWnPZR6ACLQzC uXakyv5KI2affVeDbhGrk2mIXUNHFzjTrOA/Wi6eFliR3hJ9ZJygmACsheuFDdTS PUkrh5AdCfNSQQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:08:42 2025 by rpki-client