This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft File: kdjDKnA5cqrqCToB-N7fV_lnVXU.mft (raw, json) Hash identifier: mpGLFhEBIPl43Ucxc6Ziq0/DxAPQjymbxvju+Vujax4= Subject key identifier: 85:14:45:B3:18:42:A3:C2:40:F3:2C:BC:7C:3E:14:B4:79:5F:83:A5 Authority key identifier: 91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75 Certificate issuer: /CN=91d8c32a703972aaea093a01f8dedf57f9675575 Certificate serial: 019B4324B5721808315C1612DD54F3B267CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 23:00:37 +0000 Manifest this update: Sun 21 Dec 2025 23:00:37 +0000 Manifest next update: Mon 22 Dec 2025 23:00:37 +0000 Files and hashes: 1: aJJ-YdVMN1blRA6zgwpwFOSytEA.roa (hash: 18Fas5Pt/vlUe10SXqZ/nCZNIMF4HTl3m3WAOZlwA4Y=) 2: kdjDKnA5cqrqCToB-N7fV_lnVXU.crl (hash: KVw4MY+fFvIvTntCf9atSgMDQELtJ/IgsYp0onaQowA=) 3: tAP5YUU5DttldDjJZneQqbjMnns.roa (hash: Wr2DWhImWg05UEtM87fECNOHzZETG/9GHlcwfpi8dUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:24:b5:72:18:08:31:5c:16:12:dd:54:f3:b2:67:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91d8c32a703972aaea093a01f8dedf57f9675575 Validity Not Before: Dec 21 23:00:37 2025 GMT Not After : Dec 22 23:00:37 2025 GMT Subject: CN=851445b31842a3c240f32cbc7c3e14b4795f83a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7e:da:91:43:7e:76:55:94:03:82:71:b6:8f: 8c:4f:f2:dc:5f:cd:ee:e4:65:12:8d:9f:73:bd:9b: f4:08:8a:98:85:07:18:ce:d8:a5:29:ca:74:da:fb: fe:0a:ee:02:8e:97:79:ae:6b:b0:16:69:2f:c7:85: 2a:18:24:dd:f0:e1:4e:2f:29:53:50:45:de:10:38: bd:a0:9e:6c:a9:be:8d:c4:15:1a:d5:cd:ba:6b:e1: 6b:f7:2b:7c:93:9c:bc:9c:a8:76:7f:b5:01:eb:d8: 25:7d:83:2d:2c:7c:14:cd:26:62:f5:15:9d:91:1c: da:6c:b8:d7:8f:16:4a:c6:78:d4:ea:7a:8a:37:0b: 91:e2:ce:90:2b:f4:78:0a:4b:a5:48:00:17:41:96: b4:0a:31:78:e7:bd:69:8a:6a:0d:59:bd:95:20:f2: a3:71:b7:4c:69:88:11:0c:fc:3b:a1:c6:9a:27:50: 24:03:6b:4d:06:16:11:84:00:34:c8:22:95:d3:84: 89:61:9e:80:19:31:ae:3f:31:3c:a8:86:ae:44:66: f5:fb:d2:cd:af:97:e6:1a:d9:3e:af:49:f0:9c:3f: 30:a5:49:75:53:6c:bc:7d:53:e3:b3:1b:67:6f:88: 35:90:0c:f3:58:cc:d9:dc:85:02:9e:c7:98:05:8a: 5c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:14:45:B3:18:42:A3:C2:40:F3:2C:BC:7C:3E:14:B4:79:5F:83:A5 X509v3 Authority Key Identifier: keyid:91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:26:be:c5:21:2d:76:57:a7:2f:2b:19:af:7d:4f:26:0b:bf: ef:f6:6b:78:47:ae:b7:49:cf:47:b3:29:e4:11:9c:53:25:fc: e8:8b:0f:6b:94:f8:62:a5:4e:f8:27:58:9f:b8:d0:e9:47:a4: 45:75:b6:3c:e1:c9:8f:f8:48:15:d2:e8:3b:be:ed:1d:77:0a: 15:bc:af:5a:3c:3c:38:12:91:3c:42:29:fc:49:07:47:f2:6c: a3:64:41:02:f7:c5:6b:22:42:92:14:ab:bd:42:3f:01:41:5e: 50:45:c3:2f:bf:b4:ba:46:d0:bc:9d:c2:ba:02:ba:ef:ab:51: 04:44:bf:04:89:fc:4d:48:f2:ce:e9:3a:b4:a0:fa:e7:23:23: f4:c4:71:6f:0b:40:e6:b0:d5:1b:27:d7:c1:f0:d5:14:93:e5: 87:22:97:af:b1:57:a0:3c:fd:24:6c:49:b9:26:59:36:b1:fa: bd:79:ba:21:22:6d:3e:89:88:9f:0e:76:2e:01:30:72:94:b8: 73:f9:85:dc:03:51:b5:cf:a0:f2:d3:d2:ff:0e:50:a2:f1:33: 4b:a9:06:de:2d:5f:d2:a3:44:e9:9f:f5:3e:71:ab:bd:c9:be: 71:f2:c4:22:17:16:02:ad:c4:6f:0d:cc:c5:6f:de:20:68:3b: e7:36:58:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJLVyGAgxXBYS3VTzsmfOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZDhjMzJhNzAzOTcyYWFlYTA5M2EwMWY4ZGVkZjU3Zjk2 NzU1NzUwHhcNMjUxMjIxMjMwMDM3WhcNMjUxMjIyMjMwMDM3WjAzMTEwLwYDVQQD Eyg4NTE0NDViMzE4NDJhM2MyNDBmMzJjYmM3YzNlMTRiNDc5NWY4M2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX7akUN+dlWUA4Jxto+MT/LcX83u 5GUSjZ9zvZv0CIqYhQcYztilKcp02vv+Cu4Cjpd5rmuwFmkvx4UqGCTd8OFOLylT UEXeEDi9oJ5sqb6NxBUa1c26a+Fr9yt8k5y8nKh2f7UB69glfYMtLHwUzSZi9RWd kRzabLjXjxZKxnjU6nqKNwuR4s6QK/R4CkulSAAXQZa0CjF4571pimoNWb2VIPKj cbdMaYgRDPw7ocaaJ1AkA2tNBhYRhAA0yCKV04SJYZ6AGTGuPzE8qIauRGb1+9LN r5fmGtk+r0nwnD8wpUl1U2y8fVPjsxtnb4g1kAzzWMzZ3IUCnseYBYpc1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIUURbMYQqPCQPMsvHw+FLR5X4OlMB8GA1UdIwQY MBaAFJHYwypwOXKq6gk6Afje31f5Z1V1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2RqREtuQTVjcXJxQ1RvQi1ON2ZWX2xuVlhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC80ZTgxNmQtZDhlYy00MzdjLTk4NmEt M2MxMjc4MWUyMDJkLzEva2RqREtuQTVjcXJxQ1RvQi1ON2ZWX2xuVlhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC80ZTgxNmQtZDhlYy00MzdjLTk4NmEtM2MxMjc4MWUyMDJk LzEva2RqREtuQTVjcXJxQ1RvQi1ON2ZWX2xuVlhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgia+xSEt dlenLysZr31PJgu/7/ZreEeut0nPR7Mp5BGcUyX86IsPa5T4YqVO+CdYn7jQ6Uek RXW2POHJj/hIFdLoO77tHXcKFbyvWjw8OBKRPEIp/EkHR/Jso2RBAvfFayJCkhSr vUI/AUFeUEXDL7+0ukbQvJ3CugK676tRBES/BIn8TUjyzuk6tKD65yMj9MRxbwtA 5rDVGyfXwfDVFJPlhyKXr7FXoDz9JGxJuSZZNrH6vXm6ISJtPomInw52LgEwcpS4 c/mF3ANRtc+g8tPS/w5QovEzS6kG3i1f0qNE6Z/1PnGrvcm+cfLEIhcWAq3Ebw3M xW/eIGg75zZY8w== -----END CERTIFICATE-----Generated at Mon Dec 22 06:49:20 2025 by rpki-client