This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/KdlQvBhFV79QTPK3yUp9zsCHbWY.mft File: KdlQvBhFV79QTPK3yUp9zsCHbWY.mft (raw, json) Hash identifier: SXBqjQUOaWKacqLRCkKWQhw5hoZtS+StgtyfIJPNP+4= Subject key identifier: 3D:BB:D7:4A:02:E5:CA:E2:E9:5B:A6:28:E5:2D:29:9F:19:4D:47:9B Authority key identifier: 29:D9:50:BC:18:45:57:BF:50:4C:F2:B7:C9:4A:7D:CE:C0:87:6D:66 Certificate issuer: /CN=29d950bc184557bf504cf2b7c94a7dcec0876d66 Certificate serial: 019B21753128540BC853212808D86FFBA99F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdlQvBhFV79QTPK3yUp9zsCHbWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/KdlQvBhFV79QTPK3yUp9zsCHbWY.mft Manifest number: 1779 Signing time: Mon 15 Dec 2025 10:01:26 +0000 Manifest this update: Mon 15 Dec 2025 10:01:26 +0000 Manifest next update: Tue 16 Dec 2025 10:01:26 +0000 Files and hashes: 1: KdlQvBhFV79QTPK3yUp9zsCHbWY.crl (hash: X+HY4cn2piiyAnOGqN8dWFwUXWwWA2q5arNADDXUS4U=) 2: zbr28h6G65Bn1Q6ZX_BmInmSKTE.roa (hash: ETLOFsK2osYgbAep7Hus0i1EKEQGmJzxLIzfnOkM508=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/KdlQvBhFV79QTPK3yUp9zsCHbWY.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/KdlQvBhFV79QTPK3yUp9zsCHbWY.mft rsync://rpki.ripe.net/repository/DEFAULT/KdlQvBhFV79QTPK3yUp9zsCHbWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:31:28:54:0b:c8:53:21:28:08:d8:6f:fb:a9:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d950bc184557bf504cf2b7c94a7dcec0876d66 Validity Not Before: Dec 15 10:01:26 2025 GMT Not After : Dec 16 10:01:26 2025 GMT Subject: CN=3dbbd74a02e5cae2e95ba628e52d299f194d479b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:91:99:ea:cc:02:15:4e:96:8f:c4:5a:ee:de: db:b0:07:1d:ae:1d:d0:16:77:a6:99:b1:b5:27:58: 6a:9a:94:43:8b:62:50:ac:88:5b:4c:b4:81:9f:b4: 30:76:d5:82:2f:42:95:fe:3e:e4:c9:4d:c1:73:fb: ae:ba:39:d6:3e:70:b6:61:90:6b:75:9f:d9:11:e5: dc:f5:5e:99:fa:74:37:0d:9e:84:5b:bb:af:d2:d6: 90:a3:be:3d:bd:5b:29:84:b0:3a:aa:5a:1f:b0:2f: bd:7b:b1:9b:43:2d:3a:fb:6a:dc:eb:2b:94:97:77: fa:ef:2b:ed:ba:32:4c:01:19:4a:c5:4b:08:c4:08: 30:10:18:47:07:47:3f:d1:4e:7f:5a:12:be:3e:1f: 42:fa:69:a0:78:a7:aa:ac:08:a7:50:ba:63:7d:56: ba:a7:e8:01:b7:c8:a1:81:80:94:80:e2:cb:cc:25: e8:7f:6a:fb:dc:36:48:9f:b3:b6:24:66:e5:1e:52: 20:1c:47:15:75:d1:38:a6:c8:c4:d9:a9:61:78:7b: 03:23:11:dd:95:b0:36:8c:b1:93:fc:9d:18:ac:11: 0d:f0:e2:20:a5:3f:18:0b:a4:96:fc:b1:a3:2e:f0: 54:7d:c1:bb:7b:1b:ab:0c:61:87:e2:fa:bd:19:80: 7d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:BB:D7:4A:02:E5:CA:E2:E9:5B:A6:28:E5:2D:29:9F:19:4D:47:9B X509v3 Authority Key Identifier: keyid:29:D9:50:BC:18:45:57:BF:50:4C:F2:B7:C9:4A:7D:CE:C0:87:6D:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdlQvBhFV79QTPK3yUp9zsCHbWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/KdlQvBhFV79QTPK3yUp9zsCHbWY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/KdlQvBhFV79QTPK3yUp9zsCHbWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:c5:69:f6:ad:dd:fb:a5:6c:c3:7b:91:77:a3:e1:4a:1f:35: 33:7a:69:b3:89:f8:8d:f5:5d:c9:ef:c9:07:16:fe:e7:b6:7c: 3e:52:33:92:73:83:68:b6:b7:0a:2b:0d:b3:77:21:bc:d4:11: 6e:c3:89:4e:82:5e:3a:8d:c5:c7:99:11:aa:81:a9:2f:dd:ea: fd:51:59:90:c0:c7:dd:5f:ff:ec:f5:a4:47:9c:9a:ea:ca:9a: b9:7d:27:d8:0d:36:50:75:7e:56:88:0c:7f:49:ad:d7:f7:02: ea:11:9b:d1:89:55:11:25:21:1e:46:58:5c:c8:69:68:97:e1: d6:4f:94:87:48:cd:70:48:ed:7f:fa:b4:16:13:f0:cf:0e:bd: 35:a7:8b:47:c2:fb:ea:6d:87:d9:06:15:c9:78:c4:d6:1e:da: 95:1e:ce:33:27:27:a7:71:61:38:68:ee:c6:02:b3:fd:af:c9: 27:6f:5b:af:c8:fd:2d:b2:15:00:8c:83:4d:9f:5e:af:93:86: 4b:02:6b:39:90:91:eb:fa:7f:2f:54:c3:49:b2:a0:62:ed:42: 2b:4f:d7:02:08:0a:c4:dd:4b:d5:b5:23:d7:74:e4:38:4a:a2: 35:e2:ed:c6:d1:22:88:6d:c5:fb:80:88:e5:f2:fa:ac:7d:b4: e4:0d:6d:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdTEoVAvIUyEoCNhv+6mfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDk1MGJjMTg0NTU3YmY1MDRjZjJiN2M5NGE3ZGNlYzA4 NzZkNjYwHhcNMjUxMjE1MTAwMTI2WhcNMjUxMjE2MTAwMTI2WjAzMTEwLwYDVQQD EygzZGJiZDc0YTAyZTVjYWUyZTk1YmE2MjhlNTJkMjk5ZjE5NGQ0NzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJGZ6swCFU6Wj8Ra7t7bsAcdrh3Q FnemmbG1J1hqmpRDi2JQrIhbTLSBn7QwdtWCL0KV/j7kyU3Bc/uuujnWPnC2YZBr dZ/ZEeXc9V6Z+nQ3DZ6EW7uv0taQo749vVsphLA6qlofsC+9e7GbQy06+2rc6yuU l3f67yvtujJMARlKxUsIxAgwEBhHB0c/0U5/WhK+Ph9C+mmgeKeqrAinULpjfVa6 p+gBt8ihgYCUgOLLzCXof2r73DZIn7O2JGblHlIgHEcVddE4psjE2alheHsDIxHd lbA2jLGT/J0YrBEN8OIgpT8YC6SW/LGjLvBUfcG7exurDGGH4vq9GYB9aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2710oC5cri6VumKOUtKZ8ZTUebMB8GA1UdIwQY MBaAFCnZULwYRVe/UEzyt8lKfc7Ah21mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RsUXZCaEZWNzlRVFBLM3lVcDl6c0NIYldZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi83NzJmZWEtNDcxNS00MDEwLThjMWUt ZGVlNjZhMzU1MDZjLzEvS2RsUXZCaEZWNzlRVFBLM3lVcDl6c0NIYldZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi83NzJmZWEtNDcxNS00MDEwLThjMWUtZGVlNjZhMzU1MDZj LzEvS2RsUXZCaEZWNzlRVFBLM3lVcDl6c0NIYldZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAssVp9q3d +6Vsw3uRd6PhSh81M3pps4n4jfVdye/JBxb+57Z8PlIzknODaLa3CisNs3chvNQR bsOJToJeOo3Fx5kRqoGpL93q/VFZkMDH3V//7PWkR5ya6sqauX0n2A02UHV+VogM f0mt1/cC6hGb0YlVESUhHkZYXMhpaJfh1k+Uh0jNcEjtf/q0FhPwzw69NaeLR8L7 6m2H2QYVyXjE1h7alR7OMycnp3FhOGjuxgKz/a/JJ29br8j9LbIVAIyDTZ9er5OG SwJrOZCR6/p/L1TDSbKgYu1CK0/XAggKxN1L1bUj13TkOEqiNeLtxtEiiG3F+4CI 5fL6rH205A1tCg== -----END CERTIFICATE-----Generated at Mon Dec 15 16:47:44 2025 by rpki-client