This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/b0711a-542f-4105-8045-54256917be5e/1/Kd3WR8vMRQ4z-RAZr72pe76e4qM.mft File: Kd3WR8vMRQ4z-RAZr72pe76e4qM.mft (raw, json) Hash identifier: S3pj/BDQnXuiUlRRJNLTS8wrcZB76ueQBQXkjXyYr04= Subject key identifier: E9:FB:E1:C8:CE:9D:BD:F4:20:71:06:C1:82:41:89:D2:B7:05:8F:DB Authority key identifier: 29:DD:D6:47:CB:CC:45:0E:33:F9:10:19:AF:BD:A9:7B:BE:9E:E2:A3 Certificate issuer: /CN=29ddd647cbcc450e33f91019afbda97bbe9ee2a3 Certificate serial: 019B5A51D0EF1DE0A649DC98ABB83D68995D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kd3WR8vMRQ4z-RAZr72pe76e4qM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/b0711a-542f-4105-8045-54256917be5e/1/Kd3WR8vMRQ4z-RAZr72pe76e4qM.mft Manifest number: 7A Signing time: Fri 26 Dec 2025 11:01:09 +0000 Manifest this update: Fri 26 Dec 2025 11:01:09 +0000 Manifest next update: Sat 27 Dec 2025 11:01:09 +0000 Files and hashes: 1: IkjuUSYVhFqB9c8Ve3qoP2frrQM.roa (hash: hiOleuwYxV5y1oByuoMj+j6p9k2DJmAa7Esj/bnUiHY=) 2: Kd3WR8vMRQ4z-RAZr72pe76e4qM.crl (hash: 6m7Qu2bvJyM2jQ/ZF7FrSUUIQU0S/dzdCVzneWl5YXM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/b0711a-542f-4105-8045-54256917be5e/1/Kd3WR8vMRQ4z-RAZr72pe76e4qM.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/b0711a-542f-4105-8045-54256917be5e/1/Kd3WR8vMRQ4z-RAZr72pe76e4qM.mft rsync://rpki.ripe.net/repository/DEFAULT/Kd3WR8vMRQ4z-RAZr72pe76e4qM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:d0:ef:1d:e0:a6:49:dc:98:ab:b8:3d:68:99:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29ddd647cbcc450e33f91019afbda97bbe9ee2a3 Validity Not Before: Dec 26 11:01:09 2025 GMT Not After : Dec 27 11:01:09 2025 GMT Subject: CN=e9fbe1c8ce9dbdf4207106c1824189d2b7058fdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1a:50:7a:6d:dc:07:e1:a8:24:54:57:a8:4a: e8:a0:ff:f6:02:c6:ab:84:2d:0f:41:5c:71:7e:46: fe:59:15:39:7c:b2:da:49:d0:09:ea:ff:29:55:f2: 44:a7:ee:8e:84:d5:1e:30:97:3c:77:65:fb:1f:4e: a8:69:b1:12:d9:2e:c7:01:bc:e4:85:46:3e:6e:d6: be:f7:78:22:6c:f8:d8:10:0a:0a:0b:63:4a:ff:ef: 5c:4a:07:8f:4a:ba:c3:b7:d9:2b:33:0c:0a:22:66: 36:38:1d:23:ac:f2:63:6a:fe:62:fb:8b:5f:b4:73: b5:04:38:a3:54:5f:73:48:e6:21:32:73:84:23:cb: 39:c3:fb:1d:88:ea:dc:12:57:c5:51:a2:bf:b3:58: fc:99:15:a1:61:62:8d:fe:3a:3b:aa:28:5a:b8:c4: c4:c3:18:26:09:d6:46:1c:e0:26:b9:74:c9:b1:e1: 4d:0d:6f:94:64:db:0d:a0:03:16:c2:43:f6:40:28: 29:51:de:03:b4:45:13:c1:73:42:ff:8f:29:fc:26: e2:c4:b6:d1:67:e9:50:f6:c9:86:e2:6c:8a:ab:30: 94:43:25:fc:60:17:e7:f7:25:0b:aa:b7:db:ef:23: e2:87:ab:b2:3a:f0:35:44:f3:66:b6:26:9c:35:e6: c3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:FB:E1:C8:CE:9D:BD:F4:20:71:06:C1:82:41:89:D2:B7:05:8F:DB X509v3 Authority Key Identifier: keyid:29:DD:D6:47:CB:CC:45:0E:33:F9:10:19:AF:BD:A9:7B:BE:9E:E2:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kd3WR8vMRQ4z-RAZr72pe76e4qM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b0711a-542f-4105-8045-54256917be5e/1/Kd3WR8vMRQ4z-RAZr72pe76e4qM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b0711a-542f-4105-8045-54256917be5e/1/Kd3WR8vMRQ4z-RAZr72pe76e4qM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:e3:4f:4f:e5:ea:42:7f:14:e4:8f:45:8c:00:52:02:07:36: 29:67:1a:ce:e2:36:61:06:98:45:f8:45:cf:9f:53:fa:91:30: 6a:d2:93:03:92:65:35:44:bf:0f:d7:7e:c5:f6:9e:96:73:b2: 0a:31:f1:a7:4a:f0:c0:a8:2e:7b:ae:95:7d:73:ad:5e:63:f4: 9a:02:2e:92:5b:19:fa:45:00:f0:df:b3:5a:4c:a1:23:31:74: 15:04:e5:65:2a:3a:9a:6d:d1:c9:8a:b2:2f:65:a6:ff:af:dd: ce:c8:bf:38:11:be:8d:f2:5a:1e:f9:19:e3:8e:32:61:64:10: 04:dc:59:35:0f:d0:52:33:95:35:b4:55:ee:22:ff:86:b4:53: 81:11:08:fd:fa:d7:4a:75:af:77:34:22:13:36:44:9a:d4:bb: c1:c4:53:46:be:24:5e:13:1f:18:78:6e:27:72:ad:62:37:80: ec:28:46:98:a5:cf:af:3c:0e:37:b0:fc:a4:f1:77:58:11:9b: f5:5b:69:0b:49:43:22:e8:bc:23:e2:54:fe:c1:62:c9:79:4b: a7:86:98:d5:88:3d:ef:af:1c:91:3e:dc:30:1f:35:ea:43:ff: 78:5d:25:01:66:1e:fc:c5:cf:cb:81:a1:4d:73:22:9b:9a:74: 54:a7:97:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUdDvHeCmSdyYq7g9aJldMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZGRkNjQ3Y2JjYzQ1MGUzM2Y5MTAxOWFmYmRhOTdiYmU5 ZWUyYTMwHhcNMjUxMjI2MTEwMTA5WhcNMjUxMjI3MTEwMTA5WjAzMTEwLwYDVQQD EyhlOWZiZTFjOGNlOWRiZGY0MjA3MTA2YzE4MjQxODlkMmI3MDU4ZmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxpQem3cB+GoJFRXqErooP/2Asar hC0PQVxxfkb+WRU5fLLaSdAJ6v8pVfJEp+6OhNUeMJc8d2X7H06oabES2S7HAbzk hUY+bta+93gibPjYEAoKC2NK/+9cSgePSrrDt9krMwwKImY2OB0jrPJjav5i+4tf tHO1BDijVF9zSOYhMnOEI8s5w/sdiOrcElfFUaK/s1j8mRWhYWKN/jo7qihauMTE wxgmCdZGHOAmuXTJseFNDW+UZNsNoAMWwkP2QCgpUd4DtEUTwXNC/48p/CbixLbR Z+lQ9smG4myKqzCUQyX8YBfn9yULqrfb7yPih6uyOvA1RPNmtiacNebDfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOn74cjOnb30IHEGwYJBidK3BY/bMB8GA1UdIwQY MBaAFCnd1kfLzEUOM/kQGa+9qXu+nuKjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2QzV1I4dk1SUTR6LVJBWnI3MnBlNzZlNHFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9iMDcxMWEtNTQyZi00MTA1LTgwNDUt NTQyNTY5MTdiZTVlLzEvS2QzV1I4dk1SUTR6LVJBWnI3MnBlNzZlNHFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9iMDcxMWEtNTQyZi00MTA1LTgwNDUtNTQyNTY5MTdiZTVl LzEvS2QzV1I4dk1SUTR6LVJBWnI3MnBlNzZlNHFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUuNPT+Xq Qn8U5I9FjABSAgc2KWcazuI2YQaYRfhFz59T+pEwatKTA5JlNUS/D9d+xfaelnOy CjHxp0rwwKgue66VfXOtXmP0mgIuklsZ+kUA8N+zWkyhIzF0FQTlZSo6mm3RyYqy L2Wm/6/dzsi/OBG+jfJaHvkZ444yYWQQBNxZNQ/QUjOVNbRV7iL/hrRTgREI/frX SnWvdzQiEzZEmtS7wcRTRr4kXhMfGHhuJ3KtYjeA7ChGmKXPrzwON7D8pPF3WBGb 9VtpC0lDIui8I+JU/sFiyXlLp4aY1Yg9768ckT7cMB816kP/eF0lAWYe/MXPy4Gh TXMim5p0VKeX0g== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:14 2025 by rpki-client