This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft File: R_KdK9FeAku5fnKyEkK1I9yRUYE.mft (raw, json) Hash identifier: NAoY1P5QE0R0NlkD9rEHaSZ2hA1dy4lqhCoqog8Vx64= Subject key identifier: E5:FB:DD:32:F0:83:50:2F:2B:21:BD:00:C9:A1:33:14:61:D7:65:90 Authority key identifier: 47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81 Certificate issuer: /CN=47f29d2bd15e024bb97e72b21242b523dc915181 Certificate serial: 019B10141486F2D5291DABC36C7295947C7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft Manifest number: 1771 Signing time: Fri 12 Dec 2025 01:01:49 +0000 Manifest this update: Fri 12 Dec 2025 01:01:49 +0000 Manifest next update: Sat 13 Dec 2025 01:01:49 +0000 Files and hashes: 1: 2uH1JtbsSh2LEaKnPX8lAgWOEU4.roa (hash: GbQEJijg5o1dTfC76oTK57kNzuLPFqCLUWGp9VxRb9I=) 2: R_KdK9FeAku5fnKyEkK1I9yRUYE.crl (hash: 1Fiq+jVdXgxGr3nlmL6j+lqtYv/FiS9ovvE5nXVdsk0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:14:86:f2:d5:29:1d:ab:c3:6c:72:95:94:7c:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47f29d2bd15e024bb97e72b21242b523dc915181 Validity Not Before: Dec 12 01:01:49 2025 GMT Not After : Dec 13 01:01:49 2025 GMT Subject: CN=e5fbdd32f083502f2b21bd00c9a1331461d76590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:55:73:4a:39:ae:a4:9d:e9:55:20:f1:32:7a: ba:6c:39:f8:89:d6:3b:dc:fd:ee:4f:7c:6b:6b:8d: a7:cb:ce:d4:d4:59:27:68:b8:a3:c6:5f:62:16:30: 84:35:fa:1d:a6:46:82:b6:0c:b5:51:93:03:7c:a5: 4b:68:7d:ad:65:3d:65:3a:35:22:54:cb:29:a0:5d: 4d:d8:d9:c8:7e:1d:75:00:de:50:51:52:1d:5a:c7: 4f:d4:30:b1:c1:70:e8:27:64:f4:2f:b6:95:ea:9e: 91:8a:ed:e7:c4:e0:f0:de:d4:1d:05:55:bf:15:93: f2:b9:d6:32:9f:ed:aa:98:15:27:5e:37:cc:a4:5a: 98:66:d5:98:c6:47:91:f8:b3:17:6c:b2:7a:9e:54: a2:a9:6c:52:c3:bd:f5:75:81:20:0d:84:c2:a7:f3: d9:ea:20:8d:b0:34:03:01:53:43:72:ec:d6:34:9a: 4b:22:a7:54:c1:d9:a8:37:ca:98:d0:25:73:0b:61: 93:32:12:16:50:6c:07:19:bc:8d:21:e4:0a:de:53: a3:25:b8:f3:65:d8:cf:c7:6e:54:e5:7f:22:a4:c3: 78:11:8f:d1:f1:9d:a3:02:c6:df:42:f7:b7:80:c4: 02:c5:ab:fd:28:39:58:40:01:54:b4:a2:6a:b6:58: f6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:FB:DD:32:F0:83:50:2F:2B:21:BD:00:C9:A1:33:14:61:D7:65:90 X509v3 Authority Key Identifier: keyid:47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:89:0f:c5:fc:70:c5:ef:b9:5b:85:b5:6b:7f:dd:7e:c1:51: 2d:8b:f2:06:a6:ae:79:58:bf:f0:f5:3e:90:23:73:7f:c5:2f: 0a:cd:e7:d0:b6:f1:39:87:f8:e1:fd:8d:0f:0b:6d:70:a0:ed: e9:5d:bb:55:07:ac:e7:45:d1:0f:a3:ac:8d:d0:7b:38:f3:c0: 1c:a2:a4:6e:50:52:c2:75:6c:0b:46:78:35:63:88:78:9b:fb: 12:5d:72:9d:22:da:31:9c:0d:13:b9:58:f0:cf:4a:26:f2:dc: 70:ec:08:01:4d:5d:72:07:37:55:2e:ab:fa:17:16:25:90:c4: 4f:72:b3:20:38:ac:d0:30:7b:58:e7:b8:da:3a:ca:f1:6d:07: 88:4d:b4:21:cb:33:f5:2d:be:6c:ee:ee:1e:6a:fc:5d:5b:64: 4f:4e:0b:75:dc:1f:11:d5:c1:23:c9:23:21:0a:c5:9b:df:c3: b4:c5:04:ec:8f:55:67:53:ba:7d:66:18:a4:db:1b:f5:e5:ee: 6d:47:1e:9d:3a:9d:8d:79:a2:d5:a3:16:da:af:1a:5d:3f:39: 74:73:2c:6a:7b:a1:f7:1a:70:5e:42:ad:46:c4:85:0e:b1:9c: ec:a8:33:85:8b:05:e6:86:5e:fc:b1:fd:0f:f9:09:58:fb:2f: 1e:55:6b:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFBSG8tUpHavDbHKVlHx8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3ZjI5ZDJiZDE1ZTAyNGJiOTdlNzJiMjEyNDJiNTIzZGM5 MTUxODEwHhcNMjUxMjEyMDEwMTQ5WhcNMjUxMjEzMDEwMTQ5WjAzMTEwLwYDVQQD EyhlNWZiZGQzMmYwODM1MDJmMmIyMWJkMDBjOWExMzMxNDYxZDc2NTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFVzSjmupJ3pVSDxMnq6bDn4idY7 3P3uT3xra42ny87U1FknaLijxl9iFjCENfodpkaCtgy1UZMDfKVLaH2tZT1lOjUi VMspoF1N2NnIfh11AN5QUVIdWsdP1DCxwXDoJ2T0L7aV6p6Riu3nxODw3tQdBVW/ FZPyudYyn+2qmBUnXjfMpFqYZtWYxkeR+LMXbLJ6nlSiqWxSw731dYEgDYTCp/PZ 6iCNsDQDAVNDcuzWNJpLIqdUwdmoN8qY0CVzC2GTMhIWUGwHGbyNIeQK3lOjJbjz ZdjPx25U5X8ipMN4EY/R8Z2jAsbfQve3gMQCxav9KDlYQAFUtKJqtlj2kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOX73TLwg1AvKyG9AMmhMxRh12WQMB8GA1UdIwQY MBaAFEfynSvRXgJLuX5yshJCtSPckVGBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUl9LZEs5RmVBa3U1Zm5LeUVrSzFJOXlSVVlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9jMzI1OTgtMmE5NS00M2M0LTliNmEt MDE2NjUzMmRhYzU2LzEvUl9LZEs5RmVBa3U1Zm5LeUVrSzFJOXlSVVlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9jMzI1OTgtMmE5NS00M2M0LTliNmEtMDE2NjUzMmRhYzU2 LzEvUl9LZEs5RmVBa3U1Zm5LeUVrSzFJOXlSVVlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYkPxfxw xe+5W4W1a3/dfsFRLYvyBqaueVi/8PU+kCNzf8UvCs3n0LbxOYf44f2NDwttcKDt 6V27VQes50XRD6OsjdB7OPPAHKKkblBSwnVsC0Z4NWOIeJv7El1ynSLaMZwNE7lY 8M9KJvLccOwIAU1dcgc3VS6r+hcWJZDET3KzIDis0DB7WOe42jrK8W0HiE20Icsz 9S2+bO7uHmr8XVtkT04LddwfEdXBI8kjIQrFm9/DtMUE7I9VZ1O6fWYYpNsb9eXu bUcenTqdjXmi1aMW2q8aXT85dHMsanuh9xpwXkKtRsSFDrGc7KgzhYsF5oZe/LH9 D/kJWPsvHlVr0A== -----END CERTIFICATE-----Generated at Fri Dec 12 04:04:19 2025 by rpki-client