This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft File: KJDadlqZn3GYdcUe7PTH1hSKG9k.mft (raw, json) Hash identifier: XpzgR8WWvrE07kfenanE9RyDizPtlKVCxkAAm71fwqI= Subject key identifier: 85:DA:8F:29:F7:7D:31:F3:A4:29:56:1D:AE:EB:56:1F:6A:BA:6D:F8 Authority key identifier: 28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9 Certificate issuer: /CN=2890da765a999f719875c51eecf4c7d6148a1bd9 Certificate serial: 019B1B3BF5577086ADBE68AD698164EE6806 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft Manifest number: 0E9F Signing time: Sun 14 Dec 2025 05:01:12 +0000 Manifest this update: Sun 14 Dec 2025 05:01:12 +0000 Manifest next update: Mon 15 Dec 2025 05:01:12 +0000 Files and hashes: 1: HMBy97dklkxPQBrLpsbW-ZNRc7U.roa (hash: lqft+CvpsJy14zKD+aRqKJHCgA+Rv0wI4PijqNi8qGo=) 2: IYTFbsH2zrYimow5PfBhyISAXgE.roa (hash: 3Ol+0d4dyS1miwyxB+aBgXHbVV5ki9Vv7rh4KQYX/5Y=) 3: KJDadlqZn3GYdcUe7PTH1hSKG9k.crl (hash: NM9fpgpDshJYqEM3aT7wrz/Z2ngXBclECxvKqFRy4L0=) 4: ruoDX0K9VhdXmRyoyMx7Kq-ps0U.roa (hash: zYFHs9Pc2fRsxf2yR98ieoabL4bJzJtKnSudDrvjoY4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:3b:f5:57:70:86:ad:be:68:ad:69:81:64:ee:68:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2890da765a999f719875c51eecf4c7d6148a1bd9 Validity Not Before: Dec 14 05:01:12 2025 GMT Not After : Dec 15 05:01:12 2025 GMT Subject: CN=85da8f29f77d31f3a429561daeeb561f6aba6df8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:66:0f:d8:1f:37:d8:2b:fd:e4:b7:80:88:f0: d0:9e:7c:70:5c:f0:a9:21:7b:56:80:0e:b5:c9:2d: 2f:cc:02:77:04:f3:b3:82:e0:7f:f9:86:3f:a3:79: 6e:2d:ef:94:30:65:1f:26:9b:67:ce:38:da:bd:8f: 12:41:0c:bf:2c:87:bc:41:1a:90:b2:0b:2d:39:72: 79:01:f9:5a:22:e9:4d:bc:44:e1:02:07:c7:06:bb: 29:a0:31:db:42:f1:3c:3c:29:4c:2f:45:8a:1c:1f: b5:01:c4:be:2e:39:71:d2:82:2c:ce:50:cd:0c:fc: 5c:79:06:bd:03:62:bb:7b:c4:cc:59:97:83:4c:90: 21:fa:44:7a:ea:60:01:89:1f:c4:dd:2c:88:7d:c2: 06:e1:89:07:67:20:41:e7:95:94:44:f3:5e:75:1a: 89:b0:59:1a:c4:80:2d:b6:f7:73:76:54:2f:07:dc: 76:b0:76:d9:5c:55:69:a5:98:20:8b:01:e9:e7:56: 83:af:88:61:bb:06:96:d2:9e:10:88:71:53:1a:b2: e7:d3:b8:9f:dc:2b:4c:40:70:bb:e8:e0:da:9e:0f: 13:df:7e:01:3d:4d:d3:03:44:9e:56:92:80:e5:94: fa:08:0a:4c:f0:fb:68:8d:12:83:c5:6b:7b:7f:f6: a4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:DA:8F:29:F7:7D:31:F3:A4:29:56:1D:AE:EB:56:1F:6A:BA:6D:F8 X509v3 Authority Key Identifier: keyid:28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:81:67:f1:e8:4b:f5:a2:da:fb:2b:a3:e7:a1:f0:27:88:de: 05:27:9d:91:b8:9c:59:ef:0b:c9:76:1a:69:0c:36:2f:9b:cd: 3f:9a:a7:b5:7f:93:db:8e:18:9f:13:e3:50:31:e3:c8:ad:22: f3:7a:ef:85:0a:c7:35:9f:fc:d0:74:6b:33:0b:6c:38:8a:1b: 5e:66:bd:2c:b2:c4:53:f5:85:73:30:70:7f:e2:08:3d:88:19: e1:31:a8:e1:7c:3f:fe:fe:cc:c0:23:7f:db:d2:1b:19:61:d4: 2b:0e:dc:bd:08:22:08:c1:ba:44:b1:91:60:eb:cd:f6:c6:90: 5d:1f:93:69:bc:23:4a:7a:48:91:41:7c:9a:84:d8:ac:0a:4e: 90:a4:70:dc:d0:e6:ec:4c:d6:4a:b2:d0:70:72:88:24:69:af: e3:dd:42:ba:c9:80:6a:ed:b1:e9:60:22:98:1f:42:f9:8a:b6: 9d:93:db:d0:09:89:4f:e0:93:63:ff:84:90:d8:35:ef:ab:3b: f4:83:46:ce:64:2e:8a:75:af:51:be:9a:40:63:86:3e:5d:8a: ad:15:bf:91:58:bc:11:14:12:69:2f:60:f0:86:85:e8:fc:41: 0b:a2:f0:c0:09:22:ce:20:88:e0:57:ee:6d:60:db:44:be:dc: 94:06:8d:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbO/VXcIatvmitaYFk7mgGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4OTBkYTc2NWE5OTlmNzE5ODc1YzUxZWVjZjRjN2Q2MTQ4 YTFiZDkwHhcNMjUxMjE0MDUwMTEyWhcNMjUxMjE1MDUwMTEyWjAzMTEwLwYDVQQD Eyg4NWRhOGYyOWY3N2QzMWYzYTQyOTU2MWRhZWViNTYxZjZhYmE2ZGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGYP2B832Cv95LeAiPDQnnxwXPCp IXtWgA61yS0vzAJ3BPOzguB/+YY/o3luLe+UMGUfJptnzjjavY8SQQy/LIe8QRqQ sgstOXJ5AflaIulNvEThAgfHBrspoDHbQvE8PClML0WKHB+1AcS+Ljlx0oIszlDN DPxceQa9A2K7e8TMWZeDTJAh+kR66mABiR/E3SyIfcIG4YkHZyBB55WURPNedRqJ sFkaxIAttvdzdlQvB9x2sHbZXFVppZggiwHp51aDr4hhuwaW0p4QiHFTGrLn07if 3CtMQHC76ODang8T334BPU3TA0SeVpKA5ZT6CApM8PtojRKDxWt7f/ak+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIXajyn3fTHzpClWHa7rVh9qum34MB8GA1UdIwQY MBaAFCiQ2nZamZ9xmHXFHuz0x9YUihvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0pEYWRscVpuM0dZZGNVZTdQVEgxaFNLRzlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yYmJjZDQtZWRhYi00OGVlLWE0MTEt MjhmYzcwNjNkOTUyLzEvS0pEYWRscVpuM0dZZGNVZTdQVEgxaFNLRzlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8yYmJjZDQtZWRhYi00OGVlLWE0MTEtMjhmYzcwNjNkOTUy LzEvS0pEYWRscVpuM0dZZGNVZTdQVEgxaFNLRzlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJoFn8ehL 9aLa+yuj56HwJ4jeBSedkbicWe8LyXYaaQw2L5vNP5qntX+T244YnxPjUDHjyK0i 83rvhQrHNZ/80HRrMwtsOIobXma9LLLEU/WFczBwf+IIPYgZ4TGo4Xw//v7MwCN/ 29IbGWHUKw7cvQgiCMG6RLGRYOvN9saQXR+TabwjSnpIkUF8moTYrApOkKRw3NDm 7EzWSrLQcHKIJGmv491CusmAau2x6WAimB9C+Yq2nZPb0AmJT+CTY/+EkNg176s7 9INGzmQuinWvUb6aQGOGPl2KrRW/kVi8ERQSaS9g8IaF6PxBC6LwwAkiziCI4Ffu bWDbRL7clAaNfg== -----END CERTIFICATE-----Generated at Sun Dec 14 07:48:43 2025 by rpki-client