This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft File: kdjDKnA5cqrqCToB-N7fV_lnVXU.mft (raw, json) Hash identifier: eoL0/INbvzIoF/oNXQiszdcsTLmVhqS0vNA6veukk00= Subject key identifier: A0:A5:97:10:54:9B:35:7D:97:2A:14:00:6A:AD:73:9D:96:AC:A3:88 Authority key identifier: 91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75 Certificate issuer: /CN=91d8c32a703972aaea093a01f8dedf57f9675575 Certificate serial: 019B397CFB29818CE9B1F88F16E28AE434BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 02:00:50 +0000 Manifest this update: Sat 20 Dec 2025 02:00:50 +0000 Manifest next update: Sun 21 Dec 2025 02:00:50 +0000 Files and hashes: 1: aJJ-YdVMN1blRA6zgwpwFOSytEA.roa (hash: 18Fas5Pt/vlUe10SXqZ/nCZNIMF4HTl3m3WAOZlwA4Y=) 2: kdjDKnA5cqrqCToB-N7fV_lnVXU.crl (hash: aP1l+/D9wRf//OdA/6w4VkxW+VORXhWDG7uaNg8pqrg=) 3: tAP5YUU5DttldDjJZneQqbjMnns.roa (hash: Wr2DWhImWg05UEtM87fECNOHzZETG/9GHlcwfpi8dUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7c:fb:29:81:8c:e9:b1:f8:8f:16:e2:8a:e4:34:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91d8c32a703972aaea093a01f8dedf57f9675575 Validity Not Before: Dec 20 02:00:50 2025 GMT Not After : Dec 21 02:00:50 2025 GMT Subject: CN=a0a59710549b357d972a14006aad739d96aca388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d4:96:0d:a0:31:68:36:f6:35:51:c2:56:3b: b5:46:c2:95:60:06:25:be:24:95:c4:e3:9f:48:df: 66:f2:f6:49:a9:e9:c5:cc:97:42:00:53:de:0e:4c: f5:90:aa:d9:61:3a:03:bd:e8:a8:f8:b2:4e:7d:b5: 69:99:d6:7b:2a:c1:de:eb:5b:ac:9d:c0:3d:83:92: f9:18:4b:a1:fc:12:7f:51:b5:0b:c5:cf:ef:f0:c4: c1:5c:bc:2e:67:3a:1f:5b:0e:9f:89:62:4a:7c:6b: f6:b5:e9:26:76:88:de:5a:5b:2f:6b:5c:df:14:13: 43:4e:29:34:59:e8:70:cc:15:6b:64:e2:31:13:fb: b9:8b:2c:f5:33:70:d3:04:ca:21:1d:cf:7c:dd:eb: 6c:70:60:69:d9:fb:42:8f:f9:fb:49:4b:65:3a:31: 88:f4:9d:4a:50:c6:4f:88:78:a9:60:04:8d:f7:90: 0f:3d:76:10:7a:e1:a9:33:6d:5a:b9:53:84:9e:ef: c5:c7:44:8f:42:c2:93:84:a6:00:29:32:62:d2:3f: e3:6f:bb:e1:1c:f8:fb:11:99:d7:c0:88:86:03:6e: e0:91:71:87:32:77:53:38:d8:5e:24:05:9b:ab:61: 94:17:2e:ef:9c:50:42:3f:d4:b0:03:63:76:34:43: f3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A5:97:10:54:9B:35:7D:97:2A:14:00:6A:AD:73:9D:96:AC:A3:88 X509v3 Authority Key Identifier: keyid:91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:48:95:c7:ee:fe:68:1b:be:ef:e7:64:22:40:22:f4:27:70: 4e:72:20:7b:dc:66:60:16:8b:61:12:43:00:fc:04:e4:5a:b8: f2:07:35:56:7e:53:fe:5a:55:56:54:98:35:16:75:f1:41:91: b7:b2:9b:8d:82:ea:59:c9:47:d1:03:de:24:49:87:96:3a:4d: af:7a:38:af:bd:6c:13:7a:89:80:04:fd:45:39:2a:bf:c7:eb: cd:15:ec:5b:86:1d:78:1f:4a:bd:35:8b:29:25:27:ee:a1:44: df:61:36:84:0e:27:e4:64:79:66:49:53:7f:2e:c1:89:39:55: 79:2e:c3:e9:ba:d2:43:90:11:e0:06:c8:f3:d8:fe:25:e5:06: 19:dc:49:06:94:c6:db:16:df:05:70:4a:4c:b8:3d:8b:3c:84: 25:7e:df:31:9e:f7:b4:3c:fe:f2:32:76:3f:fb:d2:fd:4b:87: 4b:6c:d4:c4:68:8b:d0:9a:82:ad:d9:47:97:8e:3d:23:10:2a: 16:2f:1f:31:c5:66:8a:b8:de:e7:4d:c2:22:f7:7c:11:c0:e4: e9:b7:d2:db:46:16:7d:62:ea:fb:bf:72:89:68:62:d2:bd:f8: 2a:ef:a7:39:20:9f:b5:e8:b6:b0:82:98:fe:ed:5a:d9:d3:6a: f4:84:21:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fPspgYzpsfiPFuKK5DS8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZDhjMzJhNzAzOTcyYWFlYTA5M2EwMWY4ZGVkZjU3Zjk2 NzU1NzUwHhcNMjUxMjIwMDIwMDUwWhcNMjUxMjIxMDIwMDUwWjAzMTEwLwYDVQQD EyhhMGE1OTcxMDU0OWIzNTdkOTcyYTE0MDA2YWFkNzM5ZDk2YWNhMzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNSWDaAxaDb2NVHCVju1RsKVYAYl viSVxOOfSN9m8vZJqenFzJdCAFPeDkz1kKrZYToDveio+LJOfbVpmdZ7KsHe61us ncA9g5L5GEuh/BJ/UbULxc/v8MTBXLwuZzofWw6fiWJKfGv2tekmdojeWlsva1zf FBNDTik0WehwzBVrZOIxE/u5iyz1M3DTBMohHc983etscGBp2ftCj/n7SUtlOjGI 9J1KUMZPiHipYASN95APPXYQeuGpM21auVOEnu/Fx0SPQsKThKYAKTJi0j/jb7vh HPj7EZnXwIiGA27gkXGHMndTONheJAWbq2GUFy7vnFBCP9SwA2N2NEPz1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCllxBUmzV9lyoUAGqtc52WrKOIMB8GA1UdIwQY MBaAFJHYwypwOXKq6gk6Afje31f5Z1V1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2RqREtuQTVjcXJxQ1RvQi1ON2ZWX2xuVlhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC80ZTgxNmQtZDhlYy00MzdjLTk4NmEt M2MxMjc4MWUyMDJkLzEva2RqREtuQTVjcXJxQ1RvQi1ON2ZWX2xuVlhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC80ZTgxNmQtZDhlYy00MzdjLTk4NmEtM2MxMjc4MWUyMDJk LzEva2RqREtuQTVjcXJxQ1RvQi1ON2ZWX2xuVlhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARkiVx+7+ aBu+7+dkIkAi9CdwTnIge9xmYBaLYRJDAPwE5Fq48gc1Vn5T/lpVVlSYNRZ18UGR t7KbjYLqWclH0QPeJEmHljpNr3o4r71sE3qJgAT9RTkqv8frzRXsW4YdeB9KvTWL KSUn7qFE32E2hA4n5GR5ZklTfy7BiTlVeS7D6brSQ5AR4AbI89j+JeUGGdxJBpTG 2xbfBXBKTLg9izyEJX7fMZ73tDz+8jJ2P/vS/UuHS2zUxGiL0JqCrdlHl449IxAq Fi8fMcVmirje503CIvd8EcDk6bfS20YWfWLq+79yiWhi0r34Ku+nOSCftei2sIKY /u1a2dNq9IQh1w== -----END CERTIFICATE-----Generated at Sat Dec 20 05:32:38 2025 by rpki-client