This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft File: KTdcnACxUp1VHufijGBwq0Oi_nY.mft (raw, json) Hash identifier: OH2lHohsuZhd0N/Re1+JhB6RT35pQV2Mbe9Te41lGlg= Subject key identifier: 28:94:94:33:3F:E2:DA:EE:7B:C2:C7:32:1F:2D:40:0B:7A:83:A7:F5 Authority key identifier: 29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76 Certificate issuer: /CN=29375c9c00b1529d551ee7e28c6070ab43a2fe76 Certificate serial: 019B0E24AAB8633DABAC7B16C683C5D0FACA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft Manifest number: 0F36 Signing time: Thu 11 Dec 2025 16:00:42 +0000 Manifest this update: Thu 11 Dec 2025 16:00:42 +0000 Manifest next update: Fri 12 Dec 2025 16:00:42 +0000 Files and hashes: 1: 2muVnH1_oI_9ztpeyJIqq88lM1c.roa (hash: UznFOVn685h5ihMi8FItxWdR/wWRBKXy+8YPxE2cn9c=) 2: KTdcnACxUp1VHufijGBwq0Oi_nY.crl (hash: HuVCJe53RSFk0PtgonzadSYYxtGHb0027QQkcX28KBY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 16:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:24:aa:b8:63:3d:ab:ac:7b:16:c6:83:c5:d0:fa:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29375c9c00b1529d551ee7e28c6070ab43a2fe76 Validity Not Before: Dec 11 16:00:42 2025 GMT Not After : Dec 12 16:00:42 2025 GMT Subject: CN=289494333fe2daee7bc2c7321f2d400b7a83a7f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8c:85:0c:a3:c4:fa:a4:ca:bb:54:f3:77:ca: 9c:60:52:c0:78:7c:f8:b8:99:5a:da:da:d9:8f:05: 07:31:63:3b:95:5e:d5:55:ec:63:09:b2:eb:fc:d8: d4:b8:8a:03:62:60:19:13:a6:b7:dd:1a:6b:31:b9: a0:7d:5a:b4:a9:54:8d:8a:f9:d6:c2:23:74:00:b7: 43:84:fd:25:eb:41:e2:09:b7:bf:78:0c:26:60:59: 34:08:e7:3f:4d:05:9e:db:35:7c:5b:f4:e8:45:22: e0:ae:9e:f3:86:11:ef:26:25:f1:f5:9d:7c:b2:a1: 9b:ea:f4:9a:f2:c4:70:2b:93:d7:8f:e3:59:18:1b: e5:3a:03:f7:35:44:eb:94:74:ba:e3:89:ad:9c:78: 82:76:f8:d9:3e:2d:03:3e:66:62:3a:04:5b:7c:06: 89:40:7a:90:6a:81:11:5a:fa:be:f8:45:dc:e2:d8: 99:4b:cc:b3:ce:b6:55:17:b0:71:dd:13:2d:6e:50: 7e:48:f2:19:3f:1f:e8:cf:9c:d2:57:5e:32:ed:6b: 84:90:bd:99:93:3a:b2:3d:66:77:4a:12:8a:2c:36: 1f:b2:37:86:2e:bd:5f:36:4f:4d:02:5a:84:29:a4: 6c:73:ad:2f:e3:c0:76:13:c0:db:ff:eb:0e:93:60: fd:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:94:94:33:3F:E2:DA:EE:7B:C2:C7:32:1F:2D:40:0B:7A:83:A7:F5 X509v3 Authority Key Identifier: keyid:29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:69:74:38:23:1e:86:e2:02:f2:75:09:97:a7:17:6f:4a:be: 6c:8e:4e:ec:f9:17:95:0c:ce:0b:a4:fb:9f:3b:71:89:72:70: 4a:40:6a:27:06:9a:2e:e7:85:04:c0:05:5c:15:59:f3:d9:d5: 7e:59:ce:b9:b5:2b:de:58:d4:eb:83:ac:45:44:ed:6c:ab:bd: a0:6a:9e:d8:01:4f:7f:90:e0:48:30:eb:4a:74:57:d8:33:df: 7a:82:01:a1:d6:fa:a7:12:88:00:75:78:34:ad:2e:3f:7e:d5: cb:44:eb:a0:cb:91:f0:1c:10:33:4c:4e:74:b1:c3:2b:d5:dd: 67:5e:06:09:6c:42:0f:70:b7:55:84:7b:f4:50:52:8c:ec:ac: 44:f3:1a:3f:7f:74:30:18:43:1d:da:7d:d1:6d:cb:05:7e:89: 20:23:80:0d:cc:08:62:91:b1:01:d5:24:c5:c6:36:9f:01:e0: 44:a1:e1:93:6c:09:ad:1b:88:39:f4:64:aa:38:b7:fc:d7:87: 26:40:c0:ab:e4:ea:03:f4:c6:6e:8a:05:78:01:89:1d:e8:f4: e7:b1:5c:08:95:16:ef:b7:36:f8:f7:4a:e9:ec:28:da:a6:40: 84:00:1d:93:f9:83:63:c4:5b:f6:eb:1c:df:50:d8:e2:c1:e1: d0:17:1f:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJKq4Yz2rrHsWxoPF0PrKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5Mzc1YzljMDBiMTUyOWQ1NTFlZTdlMjhjNjA3MGFiNDNh MmZlNzYwHhcNMjUxMjExMTYwMDQyWhcNMjUxMjEyMTYwMDQyWjAzMTEwLwYDVQQD EygyODk0OTQzMzNmZTJkYWVlN2JjMmM3MzIxZjJkNDAwYjdhODNhN2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoyFDKPE+qTKu1Tzd8qcYFLAeHz4 uJla2trZjwUHMWM7lV7VVexjCbLr/NjUuIoDYmAZE6a33RprMbmgfVq0qVSNivnW wiN0ALdDhP0l60HiCbe/eAwmYFk0COc/TQWe2zV8W/ToRSLgrp7zhhHvJiXx9Z18 sqGb6vSa8sRwK5PXj+NZGBvlOgP3NUTrlHS644mtnHiCdvjZPi0DPmZiOgRbfAaJ QHqQaoERWvq++EXc4tiZS8yzzrZVF7Bx3RMtblB+SPIZPx/oz5zSV14y7WuEkL2Z kzqyPWZ3ShKKLDYfsjeGLr1fNk9NAlqEKaRsc60v48B2E8Db/+sOk2D93wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCiUlDM/4true8LHMh8tQAt6g6f1MB8GA1UdIwQY MBaAFCk3XJwAsVKdVR7n4oxgcKtDov52MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1RkY25BQ3hVcDFWSHVmaWpHQndxME9pX25ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy83N2Y5NzctMDE1Yi00Y2FmLTg5M2Yt MDUwNGUxMTFhM2I4LzEvS1RkY25BQ3hVcDFWSHVmaWpHQndxME9pX25ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy83N2Y5NzctMDE1Yi00Y2FmLTg5M2YtMDUwNGUxMTFhM2I4 LzEvS1RkY25BQ3hVcDFWSHVmaWpHQndxME9pX25ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf2l0OCMe huIC8nUJl6cXb0q+bI5O7PkXlQzOC6T7nztxiXJwSkBqJwaaLueFBMAFXBVZ89nV flnOubUr3ljU64OsRUTtbKu9oGqe2AFPf5DgSDDrSnRX2DPfeoIBodb6pxKIAHV4 NK0uP37Vy0TroMuR8BwQM0xOdLHDK9XdZ14GCWxCD3C3VYR79FBSjOysRPMaP390 MBhDHdp90W3LBX6JICOADcwIYpGxAdUkxcY2nwHgRKHhk2wJrRuIOfRkqji3/NeH JkDAq+TqA/TGbooFeAGJHej057FcCJUW77c2+PdK6ewo2qZAhAAdk/mDY8Rb9usc 31DY4sHh0BcfHA== -----END CERTIFICATE-----Generated at Fri Dec 12 00:59:04 2025 by rpki-client