This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft File: KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft (raw, json) Hash identifier: BHZuo4aiSjzRRoEOemZLF6vOXg4a/IIUQNwrzxZ9GPo= Subject key identifier: 44:75:C0:57:31:F1:43:D7:7B:96:E4:7D:E5:88:19:77:F9:09:E2:2F Authority key identifier: 29:D5:9E:88:9F:99:AE:FD:DE:5E:94:9F:E8:07:9D:33:7B:57:F4:47 Certificate issuer: /CN=29d59e889f99aefdde5e949fe8079d337b57f447 Certificate serial: 019B145E2040DFB734FAA31A8E1B1BBFF6D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft Manifest number: 1361 Signing time: Fri 12 Dec 2025 21:01:11 +0000 Manifest this update: Fri 12 Dec 2025 21:01:11 +0000 Manifest next update: Sat 13 Dec 2025 21:01:11 +0000 Files and hashes: 1: KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.crl (hash: xfSMWUgWhdzc4+OWGR+CfEGHk5ASmLJ0jdCMLkvS1gI=) 2: if3bRvhywq0-AQAvqAMvn9zf2xA.roa (hash: e1PwQotXLXaCqhVV0IcDbX0I5jTk19F7wuKZ3aHr5MQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.crl rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft rsync://rpki.ripe.net/repository/DEFAULT/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:14:5e:20:40:df:b7:34:fa:a3:1a:8e:1b:1b:bf:f6:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d59e889f99aefdde5e949fe8079d337b57f447 Validity Not Before: Dec 12 21:01:11 2025 GMT Not After : Dec 13 21:01:11 2025 GMT Subject: CN=4475c05731f143d77b96e47de5881977f909e22f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c1:14:1f:6d:f1:d5:9d:0c:d8:43:ae:63:b0: c1:52:af:eb:9f:69:ed:0a:2c:72:31:e7:fd:81:90: 76:20:ce:e5:bf:e3:ad:c9:33:b7:0c:b0:eb:52:84: ea:49:8f:82:ff:2c:69:3a:64:9a:c9:78:b5:b1:12: 0e:76:db:b7:23:84:11:6a:66:49:81:8f:ac:e4:c5: 95:d7:51:00:8d:c0:29:5f:12:9a:b8:89:0d:a8:40: 74:85:e6:a0:76:82:40:3f:34:18:7d:7f:ce:dc:86: e4:8d:1e:b8:0f:36:45:72:0b:ca:14:5b:99:b6:06: 31:82:6e:e5:2e:51:7e:4b:31:b1:b8:e5:d3:ad:29: d4:bd:3d:5c:70:db:66:4a:cd:01:b1:92:4f:27:d4: d9:11:66:8d:17:02:d3:29:a3:0e:39:1e:82:03:25: dc:84:c4:fe:27:f3:ff:4a:e9:93:22:57:55:f7:e3: 8e:75:6d:3f:80:a7:d6:68:62:f6:d9:84:29:a2:c7: b2:b1:6c:d7:bd:da:e3:95:c8:2e:83:8d:4d:7f:0c: f5:0d:a0:87:2d:7d:89:75:00:b3:b5:f6:bb:d5:3a: d4:e6:eb:38:6b:5a:1d:2a:1b:15:9c:ca:51:c7:0c: d7:57:8e:20:dc:e2:fd:ca:58:27:cc:dd:d8:c4:45: 72:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:75:C0:57:31:F1:43:D7:7B:96:E4:7D:E5:88:19:77:F9:09:E2:2F X509v3 Authority Key Identifier: keyid:29:D5:9E:88:9F:99:AE:FD:DE:5E:94:9F:E8:07:9D:33:7B:57:F4:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:9e:ef:a1:29:30:1d:62:b3:37:8f:84:ae:4c:6e:85:3e:4c: af:5f:41:af:df:c6:d2:db:93:27:e1:4a:fb:4b:18:ba:99:8f: 71:4c:3d:fa:5f:3b:53:a2:33:e7:79:06:2f:1e:92:fb:79:69: 5c:04:89:dc:d5:23:46:b1:73:86:3a:77:ae:a6:bf:79:cf:f3: 29:c1:a2:f6:3a:bd:49:86:7f:5d:8e:a0:0d:8f:97:18:61:75: 9e:be:e5:3c:03:51:12:aa:54:33:7b:e3:d0:d9:03:d1:a5:61: e5:32:b6:fb:4a:82:21:a4:58:cf:38:13:e6:ef:6d:f7:71:e9: 32:69:55:ac:7e:92:c5:ed:86:5e:87:90:70:33:4d:f3:1f:f8: 6e:e2:27:66:a3:1f:96:81:e6:47:53:f4:51:9d:f4:cb:4a:fe: a5:2b:32:a5:f0:e4:8b:90:2b:96:c1:1a:91:0b:8e:f7:e3:85: 3d:ef:93:f0:01:cf:df:99:26:3b:a5:47:a6:00:3a:e0:29:29: 56:06:e6:5f:0d:94:de:d4:5e:36:54:3c:d8:f1:bb:69:be:55: 69:d3:e6:01:d7:14:e6:4c:93:57:e9:e7:dd:0a:a1:e0:98:50: 5a:c7:2a:47:64:96:0e:89:b2:de:f4:d4:d9:9c:0d:14:80:7b: 39:19:be:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsUXiBA37c0+qMajhsbv/bZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDU5ZTg4OWY5OWFlZmRkZTVlOTQ5ZmU4MDc5ZDMzN2I1 N2Y0NDcwHhcNMjUxMjEyMjEwMTExWhcNMjUxMjEzMjEwMTExWjAzMTEwLwYDVQQD Eyg0NDc1YzA1NzMxZjE0M2Q3N2I5NmU0N2RlNTg4MTk3N2Y5MDllMjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcEUH23x1Z0M2EOuY7DBUq/rn2nt CixyMef9gZB2IM7lv+OtyTO3DLDrUoTqSY+C/yxpOmSayXi1sRIOdtu3I4QRamZJ gY+s5MWV11EAjcApXxKauIkNqEB0heagdoJAPzQYfX/O3IbkjR64DzZFcgvKFFuZ tgYxgm7lLlF+SzGxuOXTrSnUvT1ccNtmSs0BsZJPJ9TZEWaNFwLTKaMOOR6CAyXc hMT+J/P/SumTIldV9+OOdW0/gKfWaGL22YQposeysWzXvdrjlcgug41Nfwz1DaCH LX2JdQCztfa71TrU5us4a1odKhsVnMpRxwzXV44g3OL9ylgnzN3YxEVy3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFER1wFcx8UPXe5bkfeWIGXf5CeIvMB8GA1UdIwQY MBaAFCnVnoifma793l6Un+gHnTN7V/RHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RXZWlKLVpydjNlWHBTZjZBZWRNM3RYOUVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9jNGJkYWUtMDlmMC00MzM0LTg1M2Ut MzYyNmI4ZmZkMWU1LzEvS2RXZWlKLVpydjNlWHBTZjZBZWRNM3RYOUVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9jNGJkYWUtMDlmMC00MzM0LTg1M2UtMzYyNmI4ZmZkMWU1 LzEvS2RXZWlKLVpydjNlWHBTZjZBZWRNM3RYOUVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASp7voSkw HWKzN4+ErkxuhT5Mr19Br9/G0tuTJ+FK+0sYupmPcUw9+l87U6Iz53kGLx6S+3lp XASJ3NUjRrFzhjp3rqa/ec/zKcGi9jq9SYZ/XY6gDY+XGGF1nr7lPANREqpUM3vj 0NkD0aVh5TK2+0qCIaRYzzgT5u9t93HpMmlVrH6Sxe2GXoeQcDNN8x/4buInZqMf loHmR1P0UZ30y0r+pSsypfDki5ArlsEakQuO9+OFPe+T8AHP35kmO6VHpgA64Ckp VgbmXw2U3tReNlQ82PG7ab5VadPmAdcU5kyTV+nn3Qqh4JhQWscqR2SWDomy3vTU 2ZwNFIB7ORm+Fw== -----END CERTIFICATE-----Generated at Sat Dec 13 02:17:06 2025 by rpki-client