This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft File: Kt1DinzjyzefKM-gUc9j1a2P48o.mft (raw, json) Hash identifier: VCgpNFL4/eVrcQ478yEMOFvddDOm/+PaCybeb4KZViE= Subject key identifier: 4E:06:D7:6F:70:7D:C4:22:AF:47:C7:23:85:53:87:77:91:32:60:D1 Authority key identifier: 2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA Certificate issuer: /CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca Certificate serial: 019AF2E43DB73B087FEC823BA8EA9A2BF594 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft Manifest number: 0FB0 Signing time: Sat 06 Dec 2025 09:00:35 +0000 Manifest this update: Sat 06 Dec 2025 09:00:35 +0000 Manifest next update: Sun 07 Dec 2025 09:00:35 +0000 Files and hashes: 1: 8eg_ozUgN0LwPpJGepVjL-X5qgI.roa (hash: Z8orduaXF7DXrYWOscVyHgXJkUsoFlq7AQocFZQpdOs=) 2: BTmSI3bKDyEio_o8HAFd3DpA8rw.roa (hash: 3z5V5nlo98dCHrSvU7v+ci/JP55YJA4F6NU227fMQdg=) 3: Kt1DinzjyzefKM-gUc9j1a2P48o.crl (hash: LJHkRFUQR+EKDuOG6o8DyqlYV5hwfcnchm77KJnYC0E=) 4: Vl-BUyW_4i4W1Wnxmf0KDGW6dVM.roa (hash: qrkRzr8LSzDpFIdLrS23zNSmVx5+NOPtSLZdcnXxt68=) 5: kq56qkz3yFyhTWTclWQs9GofbW8.roa (hash: U2ETgi9N1vdCcSaDvEYZmHRu6NYMtvbYpcr6l8+r5Rg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:3d:b7:3b:08:7f:ec:82:3b:a8:ea:9a:2b:f5:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca Validity Not Before: Dec 6 09:00:35 2025 GMT Not After : Dec 7 09:00:35 2025 GMT Subject: CN=4e06d76f707dc422af47c72385538777913260d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d4:92:ef:00:f6:18:37:8b:8f:b6:03:95:5c: eb:59:95:06:bf:e2:9c:d7:3b:31:37:d5:d2:93:08: 29:17:6f:9a:51:4e:4c:09:a9:84:e4:fc:f0:02:a2: ff:e8:40:36:7d:db:36:2c:ed:bf:08:8a:9f:11:a3: 5b:5a:e1:54:3a:c5:79:b7:fb:6e:aa:2b:ad:6d:e5: 63:e1:07:43:80:c4:99:d1:84:e5:35:a4:0b:87:7e: 5d:d1:b7:92:05:40:41:51:7b:1f:ee:ce:9c:0f:cb: dc:ac:68:bd:0d:12:8f:49:d1:7d:2a:2b:19:62:8f: 34:06:6d:75:a4:89:ec:cc:01:46:2c:4b:72:11:53: 88:e5:81:a8:97:0f:e6:51:08:6b:c9:5a:47:6e:5c: 1c:0c:e8:8d:23:67:4f:1b:6f:dc:8b:f6:ae:7c:f7: 2f:14:87:c9:fa:d8:c2:b9:a8:a7:77:df:5e:34:36: 33:97:a7:84:68:09:40:c7:5b:60:19:7f:b3:4b:8b: e6:48:d5:a1:24:f4:a9:8a:2c:c2:dc:ed:07:b4:b4: b3:e0:b1:ec:2d:f6:d8:28:78:ab:39:19:bd:75:21: 7d:5d:9d:3a:58:b6:f6:7f:4d:06:d0:10:60:f6:d5: 21:cd:c3:0b:82:ee:3b:8c:81:72:2d:82:2a:c7:44: 10:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:06:D7:6F:70:7D:C4:22:AF:47:C7:23:85:53:87:77:91:32:60:D1 X509v3 Authority Key Identifier: keyid:2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:9c:e8:83:2f:cd:f4:08:54:38:e5:b3:7b:de:c2:c3:e9:ad: 1e:be:9f:e5:0b:07:7a:b5:04:3e:13:34:07:b1:b5:25:7c:23: 5d:05:79:b5:3d:3c:bb:35:3e:6f:90:20:5d:c8:c3:c1:8f:ec: 54:79:39:4b:90:5a:d9:bd:af:fe:e6:8f:06:fb:b2:08:6b:84: ab:42:cc:f7:9c:9c:e1:b5:bf:63:ef:8c:57:7e:31:88:8a:9a: 64:97:6d:59:2a:3a:d5:d9:3c:40:f5:e7:fe:56:4a:13:08:18: e1:71:24:59:0f:0b:77:03:6d:d4:3c:6a:ba:b7:36:c4:a5:a9: 03:69:58:f2:d2:67:20:9e:8e:7d:c1:51:43:80:a5:36:f9:06: ad:a6:e7:da:35:e0:b6:42:0d:a5:9b:bd:e0:9e:96:ac:59:03: 19:98:a4:f8:ba:a1:35:41:92:cc:98:ab:da:26:dd:5e:bb:a5: cc:b4:20:e4:be:cd:df:42:4f:08:df:d9:f6:0d:c9:ee:ab:14: d5:15:7d:c8:af:7d:ce:1e:1c:38:65:57:ad:ab:42:21:06:ed: 96:f0:ea:fe:f8:4a:17:17:9f:9c:ff:51:34:17:1b:38:36:43: 83:dd:c3:6d:8d:2e:60:0a:2f:78:7a:c0:47:fd:0d:06:c7:0c: 9e:0b:cb:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5D23Owh/7II7qOqaK/WUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhZGQ0MzhhN2NlM2NiMzc5ZjI4Y2ZhMDUxY2Y2M2Q1YWQ4 ZmUzY2EwHhcNMjUxMjA2MDkwMDM1WhcNMjUxMjA3MDkwMDM1WjAzMTEwLwYDVQQD Eyg0ZTA2ZDc2ZjcwN2RjNDIyYWY0N2M3MjM4NTUzODc3NzkxMzI2MGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNSS7wD2GDeLj7YDlVzrWZUGv+Kc 1zsxN9XSkwgpF2+aUU5MCamE5PzwAqL/6EA2fds2LO2/CIqfEaNbWuFUOsV5t/tu qiutbeVj4QdDgMSZ0YTlNaQLh35d0beSBUBBUXsf7s6cD8vcrGi9DRKPSdF9KisZ Yo80Bm11pInszAFGLEtyEVOI5YGolw/mUQhryVpHblwcDOiNI2dPG2/ci/aufPcv FIfJ+tjCuaind99eNDYzl6eEaAlAx1tgGX+zS4vmSNWhJPSpiizC3O0HtLSz4LHs LfbYKHirORm9dSF9XZ06WLb2f00G0BBg9tUhzcMLgu47jIFyLYIqx0QQ9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE4G129wfcQir0fHI4VTh3eRMmDRMB8GA1UdIwQY MBaAFCrdQ4p848s3nyjPoFHPY9Wtj+PKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3QxRGluemp5emVmS00tZ1VjOWoxYTJQNDhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8wYjYxY2YtODBiYS00ZThlLWEyZTUt MjBhMGQxMzBjNDU2LzEvS3QxRGluemp5emVmS00tZ1VjOWoxYTJQNDhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8wYjYxY2YtODBiYS00ZThlLWEyZTUtMjBhMGQxMzBjNDU2 LzEvS3QxRGluemp5emVmS00tZ1VjOWoxYTJQNDhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS5zogy/N 9AhUOOWze97Cw+mtHr6f5QsHerUEPhM0B7G1JXwjXQV5tT08uzU+b5AgXcjDwY/s VHk5S5Ba2b2v/uaPBvuyCGuEq0LM95yc4bW/Y++MV34xiIqaZJdtWSo61dk8QPXn /lZKEwgY4XEkWQ8LdwNt1Dxqurc2xKWpA2lY8tJnIJ6OfcFRQ4ClNvkGrabn2jXg tkINpZu94J6WrFkDGZik+LqhNUGSzJir2ibdXrulzLQg5L7N30JPCN/Z9g3J7qsU 1RV9yK99zh4cOGVXratCIQbtlvDq/vhKFxefnP9RNBcbODZDg93DbY0uYAoveHrA R/0NBscMngvLug== -----END CERTIFICATE-----Generated at Sat Dec 6 17:32:52 2025 by rpki-client