This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft File: KVdFdunOo46j9u6ybIMnUooKG_8.mft (raw, json) Hash identifier: rc87/3WgK/2FxPTMKrpg3XXaprHHQenzlPnVF+guw0M= Subject key identifier: 7C:FF:9B:59:76:0A:8A:6E:DE:6E:6B:50:E0:4C:62:E1:21:28:9C:61 Authority key identifier: 29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF Certificate issuer: /CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff Certificate serial: 019B337B41655F23B2C1C7A8165405D9F245 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft Manifest number: 07D4 Signing time: Thu 18 Dec 2025 22:01:14 +0000 Manifest this update: Thu 18 Dec 2025 22:01:14 +0000 Manifest next update: Fri 19 Dec 2025 22:01:14 +0000 Files and hashes: 1: KVdFdunOo46j9u6ybIMnUooKG_8.crl (hash: nRrMqkwZFZn8Q7YzYTL3Tn6gbQeQrLiXkG09hAzPVJE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:41:65:5f:23:b2:c1:c7:a8:16:54:05:d9:f2:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff Validity Not Before: Dec 18 22:01:14 2025 GMT Not After : Dec 19 22:01:14 2025 GMT Subject: CN=7cff9b59760a8a6ede6e6b50e04c62e121289c61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:71:fc:af:06:ca:56:29:ac:67:b0:51:70:b9: 65:5f:03:8e:73:e7:e1:ae:c0:e9:10:47:1a:2c:b7: 42:85:79:29:05:7e:a3:13:20:11:20:39:55:9a:30: 2b:22:d0:cf:2c:fd:b1:a3:9d:bb:c1:db:b8:56:1c: e4:a7:6d:73:e8:70:e1:b1:53:1d:e3:19:b9:f8:36: 12:05:99:2b:d4:5b:55:8b:f0:be:3f:6d:c1:43:2d: 95:b7:3c:f5:a5:b3:fc:7b:b7:7a:cf:6e:ec:0e:18: 05:21:24:36:c1:1e:1f:1a:f8:88:f0:73:56:17:00: 1a:ca:37:5b:c3:11:47:ff:8e:2e:09:c9:c2:1c:9c: 43:08:cc:41:86:23:7c:e3:5b:00:69:cc:cc:92:e6: cc:21:20:e9:f6:d4:8c:81:20:5e:f8:44:41:27:36: 1c:60:f3:ec:bb:00:81:d5:34:af:f7:79:06:d4:15: c6:0c:22:b7:6c:3b:e1:06:e9:26:e2:9e:75:37:c4: 50:03:83:d0:1b:a2:9b:58:61:7c:48:b4:83:d9:e3: a8:2a:8a:80:2a:d9:33:f5:59:4f:dc:d4:cb:66:25: 99:1a:d7:09:c9:a6:c6:95:93:4e:ec:43:eb:a1:51: 63:4f:a4:47:2d:59:ed:48:35:d2:a5:67:19:cb:80: 39:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:FF:9B:59:76:0A:8A:6E:DE:6E:6B:50:E0:4C:62:E1:21:28:9C:61 X509v3 Authority Key Identifier: keyid:29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:59:6a:9c:1a:32:0f:da:08:92:93:fa:ba:93:7c:80:ce:da: 3b:99:29:1b:f0:f9:5e:08:67:d0:06:28:90:85:35:df:8a:83: bf:c2:1a:f0:be:50:95:87:76:91:ee:d8:9e:5d:0c:cc:1d:db: 4e:97:30:88:8e:a2:51:19:df:30:35:6f:48:76:87:12:a3:41: 53:1f:c2:56:99:f3:67:d8:3c:03:62:43:ef:42:b3:d4:19:35: d0:fb:40:be:b5:14:09:24:ef:38:67:68:1d:e7:b4:4c:8a:3c: b2:08:4a:10:f2:d8:d4:30:a1:22:f6:70:81:c4:c0:03:43:30: 03:37:3a:d1:8c:14:b9:b5:2f:3d:08:64:af:ca:3d:5e:38:e6: 22:80:e9:fe:13:9f:52:12:78:bb:ba:4b:14:12:43:6b:18:c2: d6:cf:24:4b:45:d0:cb:8b:fc:9d:68:de:cd:c9:79:45:ba:76: e0:66:87:20:6a:33:c8:f5:25:b3:f7:9a:e1:70:9e:83:14:aa: 1a:92:51:05:b1:69:ad:10:92:c6:ce:11:46:46:a7:06:d6:c3: e4:8c:10:ef:ef:a0:06:6d:b3:94:d2:fb:9c:74:40:31:58:34: 96:11:48:7f:d0:09:54:48:e2:2d:ee:bb:36:07:3e:43:7a:87: e2:9c:af:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsze0FlXyOywceoFlQF2fJFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NTc0NTc2ZTljZWEzOGVhM2Y2ZWViMjZjODMyNzUyOGEw YTFiZmYwHhcNMjUxMjE4MjIwMTE0WhcNMjUxMjE5MjIwMTE0WjAzMTEwLwYDVQQD Eyg3Y2ZmOWI1OTc2MGE4YTZlZGU2ZTZiNTBlMDRjNjJlMTIxMjg5YzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9nH8rwbKVimsZ7BRcLllXwOOc+fh rsDpEEcaLLdChXkpBX6jEyARIDlVmjArItDPLP2xo527wdu4Vhzkp21z6HDhsVMd 4xm5+DYSBZkr1FtVi/C+P23BQy2Vtzz1pbP8e7d6z27sDhgFISQ2wR4fGviI8HNW FwAayjdbwxFH/44uCcnCHJxDCMxBhiN841sAaczMkubMISDp9tSMgSBe+ERBJzYc YPPsuwCB1TSv93kG1BXGDCK3bDvhBukm4p51N8RQA4PQG6KbWGF8SLSD2eOoKoqA Ktkz9VlP3NTLZiWZGtcJyabGlZNO7EProVFjT6RHLVntSDXSpWcZy4A5+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHz/m1l2Copu3m5rUOBMYuEhKJxhMB8GA1UdIwQY MBaAFClXRXbpzqOOo/busmyDJ1KKChv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1ZkRmR1bk9vNDZqOXU2eWJJTW5Vb29LR184LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iZDA1NTYtM2YzMy00NmRlLTkyOTEt M2IzNDQyMGQ5MGQyLzEvS1ZkRmR1bk9vNDZqOXU2eWJJTW5Vb29LR184Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9iZDA1NTYtM2YzMy00NmRlLTkyOTEtM2IzNDQyMGQ5MGQy LzEvS1ZkRmR1bk9vNDZqOXU2eWJJTW5Vb29LR184LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIVlqnBoy D9oIkpP6upN8gM7aO5kpG/D5Xghn0AYokIU134qDv8Ia8L5QlYd2ke7Ynl0MzB3b TpcwiI6iURnfMDVvSHaHEqNBUx/CVpnzZ9g8A2JD70Kz1Bk10PtAvrUUCSTvOGdo Hee0TIo8sghKEPLY1DChIvZwgcTAA0MwAzc60YwUubUvPQhkr8o9XjjmIoDp/hOf UhJ4u7pLFBJDaxjC1s8kS0XQy4v8nWjezcl5Rbp24GaHIGozyPUls/ea4XCegxSq GpJRBbFprRCSxs4RRkanBtbD5IwQ7++gBm2zlNL7nHRAMVg0lhFIf9AJVEjiLe67 Ngc+Q3qH4pyvUg== -----END CERTIFICATE-----Generated at Fri Dec 19 00:51:36 2025 by rpki-client