This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft File: R_KdK9FeAku5fnKyEkK1I9yRUYE.mft (raw, json) Hash identifier: gnviBby7pwPPYHsSJwXWe0nqMdPyMFrDCnCTEca1OXA= Subject key identifier: 41:C4:A5:19:D1:03:4E:F9:EF:14:74:81:1C:62:D0:13:49:74:76:7C Authority key identifier: 47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81 Certificate issuer: /CN=47f29d2bd15e024bb97e72b21242b523dc915181 Certificate serial: 019B481511295A147EFD4F3EA823A9801C13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft Manifest number: 178E Signing time: Mon 22 Dec 2025 22:01:38 +0000 Manifest this update: Mon 22 Dec 2025 22:01:38 +0000 Manifest next update: Tue 23 Dec 2025 22:01:38 +0000 Files and hashes: 1: 2uH1JtbsSh2LEaKnPX8lAgWOEU4.roa (hash: GbQEJijg5o1dTfC76oTK57kNzuLPFqCLUWGp9VxRb9I=) 2: R_KdK9FeAku5fnKyEkK1I9yRUYE.crl (hash: WiPpWNQqjhLIAfwiveb6CLNk7FdtSMrP0LXwrjZ23q8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:15:11:29:5a:14:7e:fd:4f:3e:a8:23:a9:80:1c:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47f29d2bd15e024bb97e72b21242b523dc915181 Validity Not Before: Dec 22 22:01:38 2025 GMT Not After : Dec 23 22:01:38 2025 GMT Subject: CN=41c4a519d1034ef9ef1474811c62d0134974767c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1b:1e:73:3e:e4:90:03:2e:70:d9:ad:cd:78: ab:66:0f:0f:c4:da:01:16:45:bd:07:ba:ea:11:1a: 27:1a:8c:e2:8e:df:c0:44:bc:ab:fc:51:f6:00:1f: 4d:92:66:6c:a1:05:56:8f:4f:9f:ef:dd:e4:8a:6e: 3f:7e:4a:2f:e5:01:91:1e:2d:8a:09:28:f9:f2:1b: 4b:c7:91:9e:02:57:fb:d4:82:01:8e:97:f4:5a:5f: ee:db:94:e0:47:a8:3b:67:36:d2:77:c2:17:9b:9f: d3:d3:4e:f5:84:29:09:fb:c7:9e:7a:d6:b8:21:63: f0:33:f4:b9:dd:da:be:7e:8d:b7:eb:01:35:a7:dc: 62:59:ec:1e:fb:d5:0a:e7:b6:6e:de:c1:e2:b8:00: a5:16:12:bd:b1:34:2c:0a:c7:a3:6d:87:b6:12:74: e6:24:50:ae:4c:83:ab:00:b9:0a:f7:b0:a6:01:5c: 0e:e3:5d:d4:ce:ec:bd:5a:41:08:9f:f3:2d:00:f5: 14:ea:13:9e:f2:52:c6:9b:c3:67:d1:7b:aa:67:eb: 85:b5:53:d6:ed:74:46:bc:e8:bc:64:84:49:c3:da: 3d:c7:19:61:fa:57:94:d3:ff:dd:80:5b:bf:80:30: e5:bd:42:9e:52:c4:61:82:ec:5b:6b:e7:2f:f7:a1: 57:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C4:A5:19:D1:03:4E:F9:EF:14:74:81:1C:62:D0:13:49:74:76:7C X509v3 Authority Key Identifier: keyid:47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:a2:8e:fa:00:ee:69:5d:9b:34:9e:fc:07:04:d9:ee:90:d3: 56:f6:7e:72:09:5d:d9:5e:d5:45:31:94:58:df:18:20:ca:94: 03:e3:0a:c0:f9:3b:7d:02:ff:0d:f1:42:b3:d6:d2:fc:21:0e: e5:60:d1:39:8d:0f:2e:d3:66:0a:58:e3:ba:81:2c:b2:a0:08: 75:85:2e:53:45:08:4d:49:ef:e3:53:3b:af:39:6d:ec:ed:c7: 33:fe:58:1e:a0:08:8a:64:49:64:98:ea:7b:5c:72:10:03:69: f6:53:89:f1:64:27:7c:e7:c2:54:2d:1f:9c:14:4e:8a:ba:e9: 3c:99:90:b7:62:90:a2:3c:e8:0c:6f:b0:a2:fa:f2:d3:59:e6: 02:fc:f4:b0:5b:8a:83:56:fe:41:a6:4a:cf:5e:ea:9c:bf:ff: 9e:a3:72:68:ae:a9:a4:74:7f:d9:09:df:4d:2c:96:6d:46:72: ca:1a:a5:9b:84:ee:ae:a0:9b:36:72:4b:f7:b3:24:11:9d:a4: dc:19:4d:13:bc:8b:1d:79:9c:88:29:ab:a3:2b:f4:8d:71:a0: 55:d9:30:f6:b5:aa:04:fd:f9:29:92:c3:9d:1f:1c:6c:bb:25: 13:2a:41:72:f9:51:27:d2:b9:cc:04:e0:38:54:b4:17:d2:a2: a5:6d:4b:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFREpWhR+/U8+qCOpgBwTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3ZjI5ZDJiZDE1ZTAyNGJiOTdlNzJiMjEyNDJiNTIzZGM5 MTUxODEwHhcNMjUxMjIyMjIwMTM4WhcNMjUxMjIzMjIwMTM4WjAzMTEwLwYDVQQD Eyg0MWM0YTUxOWQxMDM0ZWY5ZWYxNDc0ODExYzYyZDAxMzQ5NzQ3NjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBsecz7kkAMucNmtzXirZg8PxNoB FkW9B7rqERonGozijt/ARLyr/FH2AB9NkmZsoQVWj0+f793kim4/fkov5QGRHi2K CSj58htLx5GeAlf71IIBjpf0Wl/u25TgR6g7ZzbSd8IXm5/T0071hCkJ+8eeeta4 IWPwM/S53dq+fo236wE1p9xiWewe+9UK57Zu3sHiuAClFhK9sTQsCsejbYe2EnTm JFCuTIOrALkK97CmAVwO413Uzuy9WkEIn/MtAPUU6hOe8lLGm8Nn0XuqZ+uFtVPW 7XRGvOi8ZIRJw9o9xxlh+leU0//dgFu/gDDlvUKeUsRhguxba+cv96FXcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEHEpRnRA0757xR0gRxi0BNJdHZ8MB8GA1UdIwQY MBaAFEfynSvRXgJLuX5yshJCtSPckVGBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUl9LZEs5RmVBa3U1Zm5LeUVrSzFJOXlSVVlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9jMzI1OTgtMmE5NS00M2M0LTliNmEt MDE2NjUzMmRhYzU2LzEvUl9LZEs5RmVBa3U1Zm5LeUVrSzFJOXlSVVlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9jMzI1OTgtMmE5NS00M2M0LTliNmEtMDE2NjUzMmRhYzU2 LzEvUl9LZEs5RmVBa3U1Zm5LeUVrSzFJOXlSVVlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX6KO+gDu aV2bNJ78BwTZ7pDTVvZ+cgld2V7VRTGUWN8YIMqUA+MKwPk7fQL/DfFCs9bS/CEO 5WDROY0PLtNmCljjuoEssqAIdYUuU0UITUnv41M7rzlt7O3HM/5YHqAIimRJZJjq e1xyEANp9lOJ8WQnfOfCVC0fnBROirrpPJmQt2KQojzoDG+wovry01nmAvz0sFuK g1b+QaZKz17qnL//nqNyaK6ppHR/2QnfTSyWbUZyyhqlm4TurqCbNnJL97MkEZ2k 3BlNE7yLHXmciCmroyv0jXGgVdkw9rWqBP35KZLDnR8cbLslEypBcvlRJ9K5zATg OFS0F9KipW1L1g== -----END CERTIFICATE-----Generated at Tue Dec 23 05:52:10 2025 by rpki-client