This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft File: Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft (raw, json) Hash identifier: SuojcAnyPGan1sGCZqPPkJ58Uv/onp7ZCvxMCHGyNw4= Subject key identifier: E8:0C:30:10:DF:95:28:D1:F4:95:B4:47:3D:E3:95:BD:2A:90:C2:69 Authority key identifier: 29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE Certificate issuer: /CN=29db7ca4eee1e453d26fab99c8201adf894612be Certificate serial: 019AF208F2F9D1183400A7203B5B6E883A35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft Manifest number: 1424 Signing time: Sat 06 Dec 2025 05:01:04 +0000 Manifest this update: Sat 06 Dec 2025 05:01:04 +0000 Manifest next update: Sun 07 Dec 2025 05:01:04 +0000 Files and hashes: 1: 7RH8q326KlHuJPjQMSVa_xv9mM8.roa (hash: jYAaBPFexodAbG01790lRYCRx2XbFPYuT6Kt3pZUZ84=) 2: 86BJ0tf44AvFSPojuuBVHQjlnBU.roa (hash: a0d0fyTctB2pb4UQURZCBOpZA1JPgrlTVV7wSAI3T8Q=) 3: Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl (hash: p2zuefy5FsnzWddrMFpGoD20d32AHgB3sGj3lLLxY3k=) 4: c6ZD9P3H30o78749ZEWyxOqABSU.roa (hash: cprASPGCBwZQZqsXiJOC/24dbl0p4JtT0bpDH9Sk/a4=) 5: idwzkQBauFhn5yVkIjeQVtz5mZE.roa (hash: 44TjgVB7J3xRAwnTMWxvN7AZUFhxeYggq97H4Mjz/Lw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:f2:f9:d1:18:34:00:a7:20:3b:5b:6e:88:3a:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29db7ca4eee1e453d26fab99c8201adf894612be Validity Not Before: Dec 6 05:01:04 2025 GMT Not After : Dec 7 05:01:04 2025 GMT Subject: CN=e80c3010df9528d1f495b4473de395bd2a90c269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:dd:82:06:e0:85:b0:c1:4c:2e:28:c5:69:88: dd:28:84:f0:c2:17:cc:e3:7b:b7:f2:71:a3:85:2a: 49:b3:3f:db:a0:5a:5f:61:f7:8f:6b:87:24:c2:a3: 78:a3:0b:db:33:5a:1c:33:4b:e2:ed:0c:4b:f6:9b: bd:07:f5:e5:2f:ad:41:f9:b8:b7:f0:b7:fb:86:a1: ad:9c:22:9b:42:b8:da:65:1a:5e:3a:83:ae:aa:2a: fe:93:9d:5b:e3:7a:06:69:e5:ce:a4:0b:7c:d9:9b: 55:89:d0:12:03:c6:a1:9a:bc:8d:06:02:f9:89:01: 10:19:bf:7e:8a:92:28:8f:02:42:eb:09:3e:ad:04: 6f:29:68:25:da:e7:e0:87:d8:fd:46:b4:c4:db:ae: 85:7c:e3:0c:6e:58:c8:18:77:75:ac:ba:ab:fa:a0: 52:c0:ec:4f:05:a1:81:1f:1d:87:bd:67:c0:ae:77: 96:e4:7f:aa:00:58:2e:d8:b5:c8:03:97:22:6e:e5: d5:4b:48:34:b5:dd:49:93:2d:84:a8:8f:7e:d9:eb: 05:ff:d9:cf:5b:52:59:66:f1:82:f7:24:15:7c:05: 18:7b:e6:26:56:6c:f3:38:eb:4a:ac:37:87:66:d5: 29:32:29:5a:89:77:2c:5a:8e:e7:8a:4c:35:65:d4: 1c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:0C:30:10:DF:95:28:D1:F4:95:B4:47:3D:E3:95:BD:2A:90:C2:69 X509v3 Authority Key Identifier: keyid:29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:18:04:69:66:40:4e:ef:db:b1:1a:d9:08:88:89:8b:8a:ec: 69:68:97:b6:16:90:18:a8:d3:c6:df:87:7a:49:e9:ce:11:56: 92:9e:fa:ca:11:c8:09:9e:3f:29:6e:74:d5:6e:cd:aa:dd:0a: 0c:f3:c9:20:83:e3:f7:21:b1:6b:0e:19:e5:b0:a1:2b:a5:1d: e8:ec:31:7a:46:b4:fe:07:7a:95:d8:43:5c:e8:4b:18:34:20: cf:4f:a5:3e:83:3d:1f:84:8d:16:c7:2d:9e:41:0c:84:80:45: 96:04:82:a2:4b:7a:35:a0:a6:58:28:13:0b:f2:04:2d:2f:36: e2:55:6d:82:b6:9d:e9:4f:4f:7f:e3:5b:ac:03:80:41:14:80: 68:95:62:f3:8c:69:1f:71:d5:d8:0e:7b:eb:3f:3a:9a:4d:b7: 9d:18:ab:fa:5d:56:48:a8:32:1e:be:c5:a5:94:9e:2c:3f:ce: d6:ff:5c:7d:dd:93:f4:36:32:a0:b9:26:9f:75:59:7b:ee:13: 39:2a:fe:96:a8:2f:24:d9:d2:1c:3a:52:da:36:da:52:9b:09: 29:53:c7:5c:2d:10:50:62:88:f9:3a:d0:97:ab:f3:e6:c2:29: 94:99:6d:90:f3:7e:8b:15:68:c1:c3:fe:a8:ac:1e:db:22:48: d6:50:13:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCPL50Rg0AKcgO1tuiDo1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZGI3Y2E0ZWVlMWU0NTNkMjZmYWI5OWM4MjAxYWRmODk0 NjEyYmUwHhcNMjUxMjA2MDUwMTA0WhcNMjUxMjA3MDUwMTA0WjAzMTEwLwYDVQQD EyhlODBjMzAxMGRmOTUyOGQxZjQ5NWI0NDczZGUzOTViZDJhOTBjMjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw92CBuCFsMFMLijFaYjdKITwwhfM 43u38nGjhSpJsz/boFpfYfePa4ckwqN4owvbM1ocM0vi7QxL9pu9B/XlL61B+bi3 8Lf7hqGtnCKbQrjaZRpeOoOuqir+k51b43oGaeXOpAt82ZtVidASA8ahmryNBgL5 iQEQGb9+ipIojwJC6wk+rQRvKWgl2ufgh9j9RrTE266FfOMMbljIGHd1rLqr+qBS wOxPBaGBHx2HvWfArneW5H+qAFgu2LXIA5cibuXVS0g0td1Jky2EqI9+2esF/9nP W1JZZvGC9yQVfAUYe+YmVmzzOOtKrDeHZtUpMilaiXcsWo7nikw1ZdQcDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOgMMBDflSjR9JW0Rz3jlb0qkMJpMB8GA1UdIwQY MBaAFCnbfKTu4eRT0m+rmcggGt+JRhK+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2R0OHBPN2g1RlBTYjZ1WnlDQWEzNGxHRXI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy83ZjI5MGItODFjNy00MmI3LTk0N2Yt ZDMzZmExNjA1YWUxLzEvS2R0OHBPN2g1RlBTYjZ1WnlDQWEzNGxHRXI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy83ZjI5MGItODFjNy00MmI3LTk0N2YtZDMzZmExNjA1YWUx LzEvS2R0OHBPN2g1RlBTYjZ1WnlDQWEzNGxHRXI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVRgEaWZA Tu/bsRrZCIiJi4rsaWiXthaQGKjTxt+HeknpzhFWkp76yhHICZ4/KW501W7Nqt0K DPPJIIPj9yGxaw4Z5bChK6Ud6Owxeka0/gd6ldhDXOhLGDQgz0+lPoM9H4SNFsct nkEMhIBFlgSCokt6NaCmWCgTC/IELS824lVtgrad6U9Pf+NbrAOAQRSAaJVi84xp H3HV2A576z86mk23nRir+l1WSKgyHr7FpZSeLD/O1v9cfd2T9DYyoLkmn3VZe+4T OSr+lqgvJNnSHDpS2jbaUpsJKVPHXC0QUGKI+TrQl6vz5sIplJltkPN+ixVowcP+ qKwe2yJI1lATFg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:14:54 2025 by rpki-client