This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.mft File: kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.mft (raw, json) Hash identifier: nbJxvLX2XUObBlYzP1T/5y0SeNG0g10D7Vd2YlGjn7M= Subject key identifier: AF:78:5E:3E:E9:EA:1F:41:49:56:6A:22:F4:CF:6F:D8:FE:36:84:B3 Authority key identifier: 91:D2:76:7A:A9:10:E9:57:DC:53:58:02:50:26:E6:C3:70:57:0A:2D Certificate issuer: /CN=91d2767aa910e957dc5358025026e6c370570a2d Certificate serial: 019AF276D681FC6C946AF9F2A2AA1095941A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.mft Manifest number: 0183 Signing time: Sat 06 Dec 2025 07:01:05 +0000 Manifest this update: Sat 06 Dec 2025 07:01:05 +0000 Manifest next update: Sun 07 Dec 2025 07:01:05 +0000 Files and hashes: 1: kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.crl (hash: HfhwJbuxCsnULYYSY0UpDxzDW3yrBGvZLCV5vhPhuxg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.mft rsync://rpki.ripe.net/repository/DEFAULT/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:d6:81:fc:6c:94:6a:f9:f2:a2:aa:10:95:94:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91d2767aa910e957dc5358025026e6c370570a2d Validity Not Before: Dec 6 07:01:05 2025 GMT Not After : Dec 7 07:01:05 2025 GMT Subject: CN=af785e3ee9ea1f4149566a22f4cf6fd8fe3684b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:75:1d:f4:37:9f:4a:36:8e:79:b8:cd:25:10: 38:0b:81:48:5f:2c:44:bb:c3:17:3e:a8:8b:93:f1: 71:fa:4c:f2:4b:66:83:fa:d5:f3:3e:ba:23:29:75: 7d:68:82:cc:d4:76:71:d5:93:01:7a:ba:a9:d0:06: 12:6c:a4:67:8e:82:d2:6d:d9:1d:8a:62:b6:c2:b0: 13:31:f3:06:0f:ae:c3:0f:56:d1:10:07:e1:39:19: ef:6f:e4:14:ad:fd:09:73:0d:b6:75:b1:7e:52:22: a2:d3:1b:63:de:12:4d:78:c9:a3:5f:30:40:c3:6c: 0f:2f:09:e6:81:b2:48:1a:d9:35:fc:0f:91:38:0c: 19:87:05:fc:f0:e3:36:33:c6:77:5e:01:70:b7:01: 47:f5:a2:b2:39:30:b3:df:b7:eb:e6:8d:21:a2:5f: 80:8b:a1:fe:0e:b2:57:d8:a8:c0:84:e8:e6:37:4f: a0:e8:84:d0:70:8f:89:60:b9:15:34:47:30:c7:a6: 09:d9:ae:3e:3f:32:16:d4:e5:1e:f5:34:e7:e4:c6: 49:cd:85:a7:97:2d:e0:6e:10:8f:78:d0:54:71:f5: e1:2a:a0:f8:e4:5e:3f:33:e5:69:f6:cf:d0:7b:63: ca:b4:dd:87:a4:7a:05:9e:3b:04:94:ad:c4:fc:41: e4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:78:5E:3E:E9:EA:1F:41:49:56:6A:22:F4:CF:6F:D8:FE:36:84:B3 X509v3 Authority Key Identifier: keyid:91:D2:76:7A:A9:10:E9:57:DC:53:58:02:50:26:E6:C3:70:57:0A:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:94:1e:79:58:19:6c:cb:5c:7a:15:0a:99:f2:b3:ad:dd:48: ba:0e:89:de:b8:d4:df:66:41:d6:3a:b2:ff:f5:cd:eb:d6:89: d9:03:9a:71:8d:99:7c:c8:dc:44:7d:0f:52:a6:10:10:f7:37: 1b:fd:e6:57:e7:9a:a0:7d:8b:32:f3:60:4c:37:ef:e3:d9:02: 46:1a:eb:b9:93:da:13:94:82:88:9c:b2:81:de:28:7a:69:b0: 5b:51:65:5f:e4:91:fe:e3:95:0d:01:af:2d:26:e0:27:28:33: fe:41:72:80:17:93:e8:1f:4c:d8:36:74:14:73:54:5a:a7:75: 68:bb:c9:1f:fe:e4:64:45:05:43:c8:fd:86:a5:18:73:bc:86: 19:67:57:ab:cd:d6:d5:f0:12:ff:27:bd:8b:9c:fe:3b:c6:3a: 48:e1:80:58:04:f8:17:7f:47:59:f7:ca:2a:54:d1:78:24:cb: 3d:35:ce:0f:79:55:bd:48:5f:b2:91:d9:11:63:63:43:fe:2e: c0:70:ae:f1:85:11:f6:22:8f:8a:03:30:31:ba:5f:b6:60:fd: 52:d5:3d:03:21:d3:5b:77:9c:fa:fc:de:73:d1:78:93:a7:48: b8:ac:a0:e6:0b:a6:62:15:e5:7f:63:70:15:7e:8e:67:61:9f: f7:5c:15:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydtaB/GyUavnyoqoQlZQaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZDI3NjdhYTkxMGU5NTdkYzUzNTgwMjUwMjZlNmMzNzA1 NzBhMmQwHhcNMjUxMjA2MDcwMTA1WhcNMjUxMjA3MDcwMTA1WjAzMTEwLwYDVQQD EyhhZjc4NWUzZWU5ZWExZjQxNDk1NjZhMjJmNGNmNmZkOGZlMzY4NGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3Ud9DefSjaOebjNJRA4C4FIXyxE u8MXPqiLk/Fx+kzyS2aD+tXzProjKXV9aILM1HZx1ZMBerqp0AYSbKRnjoLSbdkd imK2wrATMfMGD67DD1bREAfhORnvb+QUrf0Jcw22dbF+UiKi0xtj3hJNeMmjXzBA w2wPLwnmgbJIGtk1/A+ROAwZhwX88OM2M8Z3XgFwtwFH9aKyOTCz37fr5o0hol+A i6H+DrJX2KjAhOjmN0+g6ITQcI+JYLkVNEcwx6YJ2a4+PzIW1OUe9TTn5MZJzYWn ly3gbhCPeNBUcfXhKqD45F4/M+Vp9s/Qe2PKtN2HpHoFnjsElK3E/EHkjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK94Xj7p6h9BSVZqIvTPb9j+NoSzMB8GA1UdIwQY MBaAFJHSdnqpEOlX3FNYAlAm5sNwVwotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2RKMmVxa1E2VmZjVTFnQ1VDYm13M0JYQ2kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC80NGZhYTItNjAzYi00Mzc2LWI4N2Qt YzQ3NTUyNTQ5NzQxLzEva2RKMmVxa1E2VmZjVTFnQ1VDYm13M0JYQ2kwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC80NGZhYTItNjAzYi00Mzc2LWI4N2QtYzQ3NTUyNTQ5NzQx LzEva2RKMmVxa1E2VmZjVTFnQ1VDYm13M0JYQ2kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeZQeeVgZ bMtcehUKmfKzrd1Iug6J3rjU32ZB1jqy//XN69aJ2QOacY2ZfMjcRH0PUqYQEPc3 G/3mV+eaoH2LMvNgTDfv49kCRhrruZPaE5SCiJyygd4oemmwW1FlX+SR/uOVDQGv LSbgJygz/kFygBeT6B9M2DZ0FHNUWqd1aLvJH/7kZEUFQ8j9hqUYc7yGGWdXq83W 1fAS/ye9i5z+O8Y6SOGAWAT4F39HWffKKlTReCTLPTXOD3lVvUhfspHZEWNjQ/4u wHCu8YUR9iKPigMwMbpftmD9UtU9AyHTW3ec+vzec9F4k6dIuKyg5gumYhXlf2Nw FX6OZ2Gf91wVPA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:29:18 2025 by rpki-client