This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.mft File: KeieDArUFRV01m8rML0dpKqd8Fs.mft (raw, json) Hash identifier: F5oysct3wm2OaEkfUs/MhZsU7sy0IpLfrL8MpV/QMFQ= Subject key identifier: F9:B6:DC:2C:C2:CA:C2:E3:33:D2:EB:DB:88:67:00:05:D1:6E:EC:05 Authority key identifier: 29:E8:9E:0C:0A:D4:15:15:74:D6:6F:2B:30:BD:1D:A4:AA:9D:F0:5B Certificate issuer: /CN=29e89e0c0ad4151574d66f2b30bd1da4aa9df05b Certificate serial: 019B5976AB999D9F11DABB390629272F2CCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KeieDArUFRV01m8rML0dpKqd8Fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.mft Manifest number: 1463 Signing time: Fri 26 Dec 2025 07:01:47 +0000 Manifest this update: Fri 26 Dec 2025 07:01:47 +0000 Manifest next update: Sat 27 Dec 2025 07:01:47 +0000 Files and hashes: 1: KeieDArUFRV01m8rML0dpKqd8Fs.crl (hash: /hYzxX7d6GgZ/vGraOxMEWi7XaTECro+l8MzhpP+V5w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.crl rsync://rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.mft rsync://rpki.ripe.net/repository/DEFAULT/KeieDArUFRV01m8rML0dpKqd8Fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 07:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:ab:99:9d:9f:11:da:bb:39:06:29:27:2f:2c:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29e89e0c0ad4151574d66f2b30bd1da4aa9df05b Validity Not Before: Dec 26 07:01:47 2025 GMT Not After : Dec 27 07:01:47 2025 GMT Subject: CN=f9b6dc2cc2cac2e333d2ebdb88670005d16eec05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e5:3a:94:b5:da:53:b1:07:ef:a8:52:1f:e1: 90:1d:50:52:4e:1e:f5:08:36:37:f8:77:a9:a4:9d: ad:41:52:63:aa:71:79:4e:11:51:8b:2d:22:21:05: 4e:d6:7a:7c:38:33:86:5b:09:03:b4:2d:77:c8:1d: d0:a4:dd:c1:5c:d4:ae:af:da:4a:17:d0:b8:3d:35: 9a:51:8d:08:af:89:fc:54:aa:29:f6:82:d4:3e:aa: 39:76:00:8e:0e:ae:d8:23:54:d4:7a:5e:8c:13:31: 0a:44:0d:3e:9a:34:ae:03:79:44:c7:d9:c9:92:f9: c1:aa:5f:53:09:7b:36:e9:0a:c6:ff:35:33:bc:9a: 4f:71:17:57:49:a8:59:c6:5d:ba:0e:bd:77:a0:1d: 99:c6:b5:30:2e:48:2e:6c:4b:8c:47:a6:71:c8:05: 4c:85:f4:83:ad:a9:fe:da:39:ad:81:5e:83:f7:d6: 71:4b:92:62:fb:e4:99:28:63:2a:c2:46:a0:15:f0: ac:24:ad:f6:99:16:89:5f:b4:1f:28:32:8a:9b:1d: f0:2f:28:2a:29:73:be:e1:ab:b4:8b:0a:47:0b:50: 03:a3:20:c5:e0:30:1f:eb:5e:1e:f6:0d:e2:fe:b1: dd:b7:09:23:05:f9:15:77:0b:13:c1:36:f2:37:79: ca:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:B6:DC:2C:C2:CA:C2:E3:33:D2:EB:DB:88:67:00:05:D1:6E:EC:05 X509v3 Authority Key Identifier: keyid:29:E8:9E:0C:0A:D4:15:15:74:D6:6F:2B:30:BD:1D:A4:AA:9D:F0:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KeieDArUFRV01m8rML0dpKqd8Fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:76:ee:89:4e:6f:d0:ab:6d:4c:1d:d0:f9:2d:38:f3:1b:a8: 86:62:41:29:f2:6e:62:24:bb:f6:f7:95:85:2d:e7:cf:91:05: 61:79:7c:0c:e8:a9:0d:67:f2:89:53:23:e2:b7:51:5e:d6:e8: 82:ca:f5:ad:c4:18:ac:04:b6:e9:3b:72:a9:d6:0a:fb:28:50: 43:b5:11:eb:ed:12:73:85:02:db:2e:de:e0:3f:6d:44:7e:2d: 8e:a8:6f:21:20:88:36:b3:a8:86:f6:52:8d:8a:67:43:fb:88: 27:c8:b8:69:25:f2:3c:6a:67:84:ec:07:aa:67:38:40:02:47: f1:29:93:47:00:8d:2f:cb:96:ee:ca:0a:4a:58:84:d5:ff:4d: 59:ec:4a:a8:a7:07:e0:79:86:24:4d:5d:36:25:f6:e1:ee:83: 51:1b:c6:fa:8f:ae:13:13:34:91:46:14:e5:98:1d:b4:bf:a3: 4b:19:72:dd:83:ad:47:1b:2d:2e:d9:3f:d8:b8:20:25:a7:5a: 3c:72:99:a8:2e:2a:b4:e3:29:05:bf:22:84:0b:04:3d:0a:b1: d1:74:09:43:40:bf:02:32:7a:16:15:94:3f:2d:bc:90:0a:1e: 22:fb:4f:92:10:39:1e:61:b5:b9:09:da:1c:6e:3a:bc:3d:be: b2:17:2b:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdquZnZ8R2rs5BiknLyzMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZTg5ZTBjMGFkNDE1MTU3NGQ2NmYyYjMwYmQxZGE0YWE5 ZGYwNWIwHhcNMjUxMjI2MDcwMTQ3WhcNMjUxMjI3MDcwMTQ3WjAzMTEwLwYDVQQD EyhmOWI2ZGMyY2MyY2FjMmUzMzNkMmViZGI4ODY3MDAwNWQxNmVlYzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteU6lLXaU7EH76hSH+GQHVBSTh71 CDY3+HeppJ2tQVJjqnF5ThFRiy0iIQVO1np8ODOGWwkDtC13yB3QpN3BXNSur9pK F9C4PTWaUY0Ir4n8VKop9oLUPqo5dgCODq7YI1TUel6MEzEKRA0+mjSuA3lEx9nJ kvnBql9TCXs26QrG/zUzvJpPcRdXSahZxl26Dr13oB2ZxrUwLkgubEuMR6ZxyAVM hfSDran+2jmtgV6D99ZxS5Ji++SZKGMqwkagFfCsJK32mRaJX7QfKDKKmx3wLygq KXO+4au0iwpHC1ADoyDF4DAf614e9g3i/rHdtwkjBfkVdwsTwTbyN3nK7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPm23CzCysLjM9Lr24hnAAXRbuwFMB8GA1UdIwQY MBaAFCnongwK1BUVdNZvKzC9HaSqnfBbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2VpZURBclVGUlYwMW04ck1MMGRwS3FkOEZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9iODdjMmEtY2QwMy00NTM4LTlkYzQt OTkxZmFlNWM5YjA3LzEvS2VpZURBclVGUlYwMW04ck1MMGRwS3FkOEZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9iODdjMmEtY2QwMy00NTM4LTlkYzQtOTkxZmFlNWM5YjA3 LzEvS2VpZURBclVGUlYwMW04ck1MMGRwS3FkOEZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWXbuiU5v 0KttTB3Q+S048xuohmJBKfJuYiS79veVhS3nz5EFYXl8DOipDWfyiVMj4rdRXtbo gsr1rcQYrAS26TtyqdYK+yhQQ7UR6+0Sc4UC2y7e4D9tRH4tjqhvISCINrOohvZS jYpnQ/uIJ8i4aSXyPGpnhOwHqmc4QAJH8SmTRwCNL8uW7soKSliE1f9NWexKqKcH 4HmGJE1dNiX24e6DURvG+o+uExM0kUYU5ZgdtL+jSxly3YOtRxstLtk/2LggJada PHKZqC4qtOMpBb8ihAsEPQqx0XQJQ0C/AjJ6FhWUPy28kAoeIvtPkhA5HmG1uQna HG46vD2+shcrFg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:05:56 2025 by rpki-client