This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft File: KVkHdOd6iZSkKDEow1kh0DewbyE.mft (raw, json) Hash identifier: /cEs6RC05dJun1y7Me6o67Z1fBOBdz9sPchahIWDero= Subject key identifier: C1:97:83:DF:EC:3D:52:75:FD:86:76:07:D1:82:A3:18:26:97:89:69 Authority key identifier: 29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21 Certificate issuer: /CN=29590774e77a8994a4283128c35921d037b06f21 Certificate serial: 019B40FFFD5EB180EEB07EC8C064765307C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft Manifest number: 1788 Signing time: Sun 21 Dec 2025 13:01:16 +0000 Manifest this update: Sun 21 Dec 2025 13:01:16 +0000 Manifest next update: Mon 22 Dec 2025 13:01:16 +0000 Files and hashes: 1: KVkHdOd6iZSkKDEow1kh0DewbyE.crl (hash: jT+7tb4r9ib3rShv6BHouUjly1p/jr0dQzBdawSGQeg=) 2: gxGfsBx6lLiLQDxOb4KsEBJPPD4.roa (hash: D/Hy5r+AT898TQXYisKdolhcFtwKf/D8Em+z0xE13iQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:fd:5e:b1:80:ee:b0:7e:c8:c0:64:76:53:07:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29590774e77a8994a4283128c35921d037b06f21 Validity Not Before: Dec 21 13:01:16 2025 GMT Not After : Dec 22 13:01:16 2025 GMT Subject: CN=c19783dfec3d5275fd867607d182a31826978969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5a:c4:57:18:56:de:b7:bd:54:7d:5f:87:21: 9c:98:93:01:46:ee:80:8d:17:4d:80:1b:98:4b:0a: 17:79:3c:a1:53:42:a5:45:da:34:a2:98:84:fb:74: 6c:b7:30:37:1e:83:6a:21:bf:69:f1:03:43:f7:d0: ef:4e:63:9f:1a:61:7b:40:c5:76:d5:ef:2e:1d:3c: 0f:3e:66:39:cf:f7:25:3d:df:25:35:11:12:31:98: 9e:63:2f:4a:27:09:cd:e5:c2:27:05:bc:d0:68:72: 2f:64:d8:ee:45:64:55:22:c1:e8:e9:be:fb:23:20: 43:aa:44:d2:6f:c5:c2:30:db:c9:ce:42:5b:2f:2a: 87:36:ad:8d:c5:2b:38:d8:71:ca:8c:d1:a8:56:96: 48:67:08:ff:1f:37:5f:46:37:84:36:7e:ef:c4:74: 9c:61:8f:3b:94:dd:7d:66:d6:9e:ee:18:08:4e:d5: 98:07:c6:a8:65:11:c3:f3:7d:96:01:88:ed:46:6e: 38:b0:18:7b:81:7e:c1:44:b5:33:0a:cb:ee:21:2d: 42:9a:96:c1:5e:1d:30:72:a4:c0:d3:d9:d8:fb:30: ca:0e:65:28:4b:35:30:20:75:bf:ad:64:a9:df:0d: 1d:a5:a7:60:15:de:5a:0a:8b:ad:9c:80:8d:b2:84: dd:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:97:83:DF:EC:3D:52:75:FD:86:76:07:D1:82:A3:18:26:97:89:69 X509v3 Authority Key Identifier: keyid:29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:eb:a5:1e:42:df:64:6a:fa:47:0e:30:24:78:2b:9b:ab:9b: 71:71:85:9f:31:56:0f:56:ed:e7:c3:70:96:f2:7c:47:ad:c9: 06:c1:9d:2c:1d:16:8d:06:ea:06:36:69:23:72:47:36:f1:aa: 7f:97:4b:58:14:f6:ad:dd:f0:33:56:cb:67:e6:bd:49:2e:35: 9e:ea:a5:59:6d:5c:fb:e6:e2:31:ce:c7:d4:30:cb:04:86:b5: 4c:c2:40:82:2a:6f:04:66:9f:b0:c2:0e:2b:54:62:6d:05:0f: c7:bf:b9:e0:86:ec:9f:36:14:2e:fb:30:30:fd:88:df:85:af: 97:cf:7d:b8:98:44:0c:60:97:aa:ec:54:c2:6f:5b:86:5b:cc: 0b:8f:b5:ab:b2:5a:ba:09:4b:ad:38:f4:32:44:d1:86:59:27: 93:b2:b9:fe:80:ca:bd:ef:0f:a0:5d:e6:f3:e7:1e:b8:f3:0b: 7d:1d:79:78:35:b1:a0:ce:ce:f1:5e:39:d6:13:20:aa:23:e2: ac:84:52:8a:76:54:b0:3c:1d:22:eb:32:e4:5a:9b:96:c5:e2: 75:4e:d0:f7:c0:52:eb:63:9c:c3:74:cc:48:11:f7:fe:b6:72: ad:61:6b:3d:6e:3e:d8:42:d5:e8:be:b1:a9:da:97:e5:6a:53: 69:c1:f5:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA//1esYDusH7IwGR2UwfGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NTkwNzc0ZTc3YTg5OTRhNDI4MzEyOGMzNTkyMWQwMzdi MDZmMjEwHhcNMjUxMjIxMTMwMTE2WhcNMjUxMjIyMTMwMTE2WjAzMTEwLwYDVQQD EyhjMTk3ODNkZmVjM2Q1Mjc1ZmQ4Njc2MDdkMTgyYTMxODI2OTc4OTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VrEVxhW3re9VH1fhyGcmJMBRu6A jRdNgBuYSwoXeTyhU0KlRdo0opiE+3RstzA3HoNqIb9p8QND99DvTmOfGmF7QMV2 1e8uHTwPPmY5z/clPd8lNRESMZieYy9KJwnN5cInBbzQaHIvZNjuRWRVIsHo6b77 IyBDqkTSb8XCMNvJzkJbLyqHNq2NxSs42HHKjNGoVpZIZwj/HzdfRjeENn7vxHSc YY87lN19Ztae7hgITtWYB8aoZRHD832WAYjtRm44sBh7gX7BRLUzCsvuIS1CmpbB Xh0wcqTA09nY+zDKDmUoSzUwIHW/rWSp3w0dpadgFd5aCoutnICNsoTdqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMGXg9/sPVJ1/YZ2B9GCoxgml4lpMB8GA1UdIwQY MBaAFClZB3TneomUpCgxKMNZIdA3sG8hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1ZrSGRPZDZpWlNrS0RFb3cxa2gwRGV3YnlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni82NzQ1ZmUtZTQ3NS00YzU4LWEzMWUt ZjJjMGRhNjFhYzEzLzEvS1ZrSGRPZDZpWlNrS0RFb3cxa2gwRGV3YnlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni82NzQ1ZmUtZTQ3NS00YzU4LWEzMWUtZjJjMGRhNjFhYzEz LzEvS1ZrSGRPZDZpWlNrS0RFb3cxa2gwRGV3YnlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMuulHkLf ZGr6Rw4wJHgrm6ubcXGFnzFWD1bt58NwlvJ8R63JBsGdLB0WjQbqBjZpI3JHNvGq f5dLWBT2rd3wM1bLZ+a9SS41nuqlWW1c++biMc7H1DDLBIa1TMJAgipvBGafsMIO K1RibQUPx7+54IbsnzYULvswMP2I34Wvl899uJhEDGCXquxUwm9bhlvMC4+1q7Ja uglLrTj0MkTRhlknk7K5/oDKve8PoF3m8+ceuPMLfR15eDWxoM7O8V451hMgqiPi rIRSinZUsDwdIusy5FqblsXidU7Q98BS62Ocw3TMSBH3/rZyrWFrPW4+2ELV6L6x qdqX5WpTacH17A== -----END CERTIFICATE-----Generated at Sun Dec 21 19:47:56 2025 by rpki-client