This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft File: Kf49-nfrAgHIVtHh6_AyvMixJNg.mft (raw, json) Hash identifier: /9z+1GQPruyiZk6G7zHX08yNuETludJIIfKy3NAESbQ= Subject key identifier: 4B:3E:38:51:D3:F6:53:FB:80:E4:EB:B7:62:87:7A:69:F3:52:D8:5F Authority key identifier: 29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8 Certificate issuer: /CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8 Certificate serial: 019B597775D17BD75C8995DABB8E395B77FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft Manifest number: 1729 Signing time: Fri 26 Dec 2025 07:02:39 +0000 Manifest this update: Fri 26 Dec 2025 07:02:39 +0000 Manifest next update: Sat 27 Dec 2025 07:02:39 +0000 Files and hashes: 1: Kf49-nfrAgHIVtHh6_AyvMixJNg.crl (hash: Y74DcWORdyekC80FEKwlj9SHHC/CGKHZuWb/ui4D6Cs=) 2: m11OWXhefXzJ44FLBlsWKfsOtOo.roa (hash: djUPPyQWxYPvFQMatObPciTtNbLwqpNgMtWLRjYVwc0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:75:d1:7b:d7:5c:89:95:da:bb:8e:39:5b:77:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8 Validity Not Before: Dec 26 07:02:39 2025 GMT Not After : Dec 27 07:02:39 2025 GMT Subject: CN=4b3e3851d3f653fb80e4ebb762877a69f352d85f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:5b:ea:1a:25:c0:5f:2c:59:bb:e6:3f:44:54: 6b:5f:37:8c:c3:01:3c:00:ee:ca:c9:dd:ba:ff:96: 04:d5:28:f5:95:3f:15:f3:99:6a:60:07:37:b0:ea: 1c:22:47:36:7a:6b:2a:80:f8:58:50:24:4c:56:99: 2a:61:97:bf:a6:98:a5:e8:71:46:17:3a:7d:47:b0: a0:94:d2:6a:36:17:a1:fc:92:92:11:55:ac:16:ea: 93:7e:8f:73:c7:6a:44:8e:ea:a3:ec:55:72:36:65: 7c:95:25:ed:5e:00:12:c4:2a:84:f3:f4:2a:7e:19: 44:f5:0e:5f:30:12:33:46:ac:dc:17:af:8a:d7:69: fd:57:b1:c0:fc:02:28:ee:c9:70:1b:63:0e:7b:00: 74:7f:e7:70:50:48:ce:1a:0e:00:bf:40:4d:97:20: 0f:4c:d3:89:3f:59:d6:9e:4b:f1:b9:1a:d5:b1:8b: 88:49:2a:f4:d0:99:c8:37:d0:c9:8c:2e:45:25:16: 61:d3:7f:81:1e:19:c6:c6:0c:e6:f4:3e:b6:b2:4c: 57:c5:a4:59:05:3b:c1:a7:4f:45:d1:1e:6f:17:06: e7:89:08:f7:15:30:b4:bd:93:ba:a0:47:8c:4a:eb: d7:62:db:78:66:00:31:0d:93:b7:b6:8a:5e:a1:0b: c5:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:3E:38:51:D3:F6:53:FB:80:E4:EB:B7:62:87:7A:69:F3:52:D8:5F X509v3 Authority Key Identifier: keyid:29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:94:77:34:1a:16:61:03:da:3f:1d:e9:3f:fb:e4:49:67:51: f3:7f:12:15:e9:e3:cc:39:ed:0b:8e:71:62:c6:74:7b:6a:0e: 81:0b:e3:3a:5a:76:21:ad:6f:d5:0b:c3:40:d1:08:e4:74:54: d5:37:35:46:28:e4:77:e7:3f:92:b2:76:bc:ba:98:ac:f4:57: bd:dc:e3:41:97:ad:ed:00:f3:d2:e4:7b:ab:a9:0d:b1:c4:dc: 4d:a3:31:79:1c:bb:48:d9:61:cc:e1:73:37:18:d6:be:94:30: 02:5f:2e:8d:17:75:4b:1c:f3:65:52:b3:ed:28:58:d5:8c:86: af:6e:7e:8e:43:a1:27:ba:9f:97:f1:1a:b8:ab:a0:d4:98:4a: 93:ff:8a:45:d1:96:a4:6d:12:6a:44:b3:d6:7d:00:ad:05:f6: bd:d3:03:9a:8a:54:c6:f4:8f:c1:5c:00:19:cd:27:2d:52:74: 3f:63:c1:2e:8d:3b:fd:d8:dc:81:ae:a4:f2:da:95:dc:25:d4: 61:4d:ee:ee:80:f5:f5:f0:1d:b0:d6:9a:6b:98:ba:c9:31:65: 80:09:c5:c4:de:0d:26:9a:db:82:e3:63:79:e5:4b:26:23:7b: 5d:55:b2:79:e7:14:3b:d4:d7:88:6f:a3:c8:67:7d:c7:6e:f9: 98:44:92:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd3XRe9dciZXau445W3f6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZmUzZGZhNzdlYjAyMDFjODU2ZDFlMWViZjAzMmJjYzhi MTI0ZDgwHhcNMjUxMjI2MDcwMjM5WhcNMjUxMjI3MDcwMjM5WjAzMTEwLwYDVQQD Eyg0YjNlMzg1MWQzZjY1M2ZiODBlNGViYjc2Mjg3N2E2OWYzNTJkODVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglvqGiXAXyxZu+Y/RFRrXzeMwwE8 AO7Kyd26/5YE1Sj1lT8V85lqYAc3sOocIkc2emsqgPhYUCRMVpkqYZe/ppil6HFG Fzp9R7CglNJqNheh/JKSEVWsFuqTfo9zx2pEjuqj7FVyNmV8lSXtXgASxCqE8/Qq fhlE9Q5fMBIzRqzcF6+K12n9V7HA/AIo7slwG2MOewB0f+dwUEjOGg4Av0BNlyAP TNOJP1nWnkvxuRrVsYuISSr00JnIN9DJjC5FJRZh03+BHhnGxgzm9D62skxXxaRZ BTvBp09F0R5vFwbniQj3FTC0vZO6oEeMSuvXYtt4ZgAxDZO3topeoQvFBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEs+OFHT9lP7gOTrt2KHemnzUthfMB8GA1UdIwQY MBaAFCn+Pfp36wIByFbR4evwMrzIsSTYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2Y0OS1uZnJBZ0hJVnRIaDZfQXl2TWl4Sk5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9iZjI0MzAtMzJiMC00OTNjLWFjYmUt YmViZWMyMzM2ZDQ4LzEvS2Y0OS1uZnJBZ0hJVnRIaDZfQXl2TWl4Sk5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9iZjI0MzAtMzJiMC00OTNjLWFjYmUtYmViZWMyMzM2ZDQ4 LzEvS2Y0OS1uZnJBZ0hJVnRIaDZfQXl2TWl4Sk5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFJR3NBoW YQPaPx3pP/vkSWdR838SFenjzDntC45xYsZ0e2oOgQvjOlp2Ia1v1QvDQNEI5HRU 1Tc1Rijkd+c/krJ2vLqYrPRXvdzjQZet7QDz0uR7q6kNscTcTaMxeRy7SNlhzOFz NxjWvpQwAl8ujRd1SxzzZVKz7ShY1YyGr25+jkOhJ7qfl/EauKug1JhKk/+KRdGW pG0SakSz1n0ArQX2vdMDmopUxvSPwVwAGc0nLVJ0P2PBLo07/djcga6k8tqV3CXU YU3u7oD19fAdsNaaa5i6yTFlgAnFxN4NJprbguNjeeVLJiN7XVWyeecUO9TXiG+j yGd9x275mESScw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:19 2025 by rpki-client