This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft File: Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft (raw, json) Hash identifier: 9MwunJen4Xp4Esf2MGOpiMN8lV6A+xBWI9BVjjfzS0w= Subject key identifier: FB:2F:78:7D:96:C4:3A:BE:40:3C:FE:39:6A:A7:2D:5D:96:A1:EF:EE Authority key identifier: 29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE Certificate issuer: /CN=29db7ca4eee1e453d26fab99c8201adf894612be Certificate serial: 019B5A518E1134AD363632231C436B660CC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft Manifest number: 145A Signing time: Fri 26 Dec 2025 11:00:52 +0000 Manifest this update: Fri 26 Dec 2025 11:00:52 +0000 Manifest next update: Sat 27 Dec 2025 11:00:52 +0000 Files and hashes: 1: 7RH8q326KlHuJPjQMSVa_xv9mM8.roa (hash: jYAaBPFexodAbG01790lRYCRx2XbFPYuT6Kt3pZUZ84=) 2: 86BJ0tf44AvFSPojuuBVHQjlnBU.roa (hash: a0d0fyTctB2pb4UQURZCBOpZA1JPgrlTVV7wSAI3T8Q=) 3: Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl (hash: d0dLM8T+MzruOS/DQYtDlfh9QTtpcK8Af0jqJNV0Yls=) 4: c6ZD9P3H30o78749ZEWyxOqABSU.roa (hash: cprASPGCBwZQZqsXiJOC/24dbl0p4JtT0bpDH9Sk/a4=) 5: idwzkQBauFhn5yVkIjeQVtz5mZE.roa (hash: 44TjgVB7J3xRAwnTMWxvN7AZUFhxeYggq97H4Mjz/Lw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:8e:11:34:ad:36:36:32:23:1c:43:6b:66:0c:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29db7ca4eee1e453d26fab99c8201adf894612be Validity Not Before: Dec 26 11:00:52 2025 GMT Not After : Dec 27 11:00:52 2025 GMT Subject: CN=fb2f787d96c43abe403cfe396aa72d5d96a1efee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ac:7d:6c:45:07:af:79:36:a8:dc:52:43:38: 32:13:a4:0d:a8:3e:79:2e:c2:30:3a:92:d4:18:3b: 6e:1e:84:6b:ae:64:82:ab:a3:a4:89:8e:af:d8:f1: 9a:7d:46:cf:bf:a0:b0:6a:45:fa:3f:00:1e:d9:59: 92:3a:8f:23:e7:e3:0b:8c:3c:68:6d:8a:14:88:c7: 0e:b4:48:8f:e6:72:7b:90:66:02:9f:87:1c:de:b6: 69:30:ee:5b:d5:d7:d9:c7:f4:91:bb:d6:ef:a7:34: b8:de:2d:a5:4a:9d:e1:d9:b7:4e:bd:2d:08:2d:29: e3:dd:d1:5c:75:ff:28:2c:f9:c7:3b:3f:eb:8a:05: c2:96:66:05:0a:fc:38:e6:e5:81:d1:38:b9:77:d2: d9:a3:01:c1:9d:3e:53:26:38:64:39:6a:fc:4b:2b: aa:28:c5:fc:40:28:4f:8a:3b:75:3d:21:8f:36:4e: 53:f2:6c:bc:01:fc:6f:d5:18:fd:0c:31:2b:8c:7e: 8a:9b:b0:28:b4:e7:2d:37:bf:cc:f8:d6:4d:c7:0e: c7:63:3b:da:93:c3:3d:ab:a1:33:1f:f2:8f:27:b6: ef:76:ba:66:cb:23:2a:db:2e:fd:40:51:b3:3a:73: be:47:13:b1:87:c4:93:1d:d5:02:3c:af:32:d8:91: 83:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:2F:78:7D:96:C4:3A:BE:40:3C:FE:39:6A:A7:2D:5D:96:A1:EF:EE X509v3 Authority Key Identifier: keyid:29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:33:0f:28:42:af:c7:d5:fb:fd:96:06:63:95:d7:a1:ce:94: 0b:9c:01:16:08:8d:06:8c:6f:a2:08:ec:46:92:2a:36:7f:1d: 04:0f:df:5d:80:88:48:f3:0a:5f:1a:60:54:94:09:1e:5f:41: c1:cb:b1:28:e9:4f:8b:4b:7a:5c:ea:de:aa:2e:75:0d:e0:2b: 24:88:de:10:65:32:19:d8:95:9c:bb:94:15:5e:da:ee:de:7a: 3a:01:26:a5:e5:39:83:5a:54:45:f4:d5:30:a7:6d:3f:03:e6: ca:e2:6f:97:38:6c:b3:f9:c1:60:a5:d5:f4:85:eb:a7:97:36: 35:e4:20:4f:0e:62:f2:31:f6:c7:1b:fd:15:0b:af:d7:72:f4: 66:66:98:c5:ee:99:25:78:41:36:f2:f6:6f:70:9f:a3:c0:54: c1:12:98:e1:17:d4:e9:c4:6d:b9:bb:7f:14:9a:3e:06:64:a6: 2b:b3:dc:44:1e:6b:1d:3d:59:99:f3:ba:6f:41:7d:9a:4c:8f: 48:2d:0b:6b:63:86:ef:d9:64:d7:a4:08:cf:a7:0e:d2:98:df: 98:8e:5f:2d:ff:78:97:ac:36:2e:75:42:cd:d8:40:35:f1:29: 38:b5:ad:fe:11:00:22:0b:4a:60:6d:d5:4c:25:47:c2:8a:b5: d9:e1:47:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUY4RNK02NjIjHENrZgzIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZGI3Y2E0ZWVlMWU0NTNkMjZmYWI5OWM4MjAxYWRmODk0 NjEyYmUwHhcNMjUxMjI2MTEwMDUyWhcNMjUxMjI3MTEwMDUyWjAzMTEwLwYDVQQD EyhmYjJmNzg3ZDk2YzQzYWJlNDAzY2ZlMzk2YWE3MmQ1ZDk2YTFlZmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA86x9bEUHr3k2qNxSQzgyE6QNqD55 LsIwOpLUGDtuHoRrrmSCq6OkiY6v2PGafUbPv6CwakX6PwAe2VmSOo8j5+MLjDxo bYoUiMcOtEiP5nJ7kGYCn4cc3rZpMO5b1dfZx/SRu9bvpzS43i2lSp3h2bdOvS0I LSnj3dFcdf8oLPnHOz/rigXClmYFCvw45uWB0Ti5d9LZowHBnT5TJjhkOWr8Syuq KMX8QChPijt1PSGPNk5T8my8Afxv1Rj9DDErjH6Km7AotOctN7/M+NZNxw7HYzva k8M9q6EzH/KPJ7bvdrpmyyMq2y79QFGzOnO+RxOxh8STHdUCPK8y2JGDBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPsveH2WxDq+QDz+OWqnLV2Woe/uMB8GA1UdIwQY MBaAFCnbfKTu4eRT0m+rmcggGt+JRhK+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2R0OHBPN2g1RlBTYjZ1WnlDQWEzNGxHRXI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy83ZjI5MGItODFjNy00MmI3LTk0N2Yt ZDMzZmExNjA1YWUxLzEvS2R0OHBPN2g1RlBTYjZ1WnlDQWEzNGxHRXI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy83ZjI5MGItODFjNy00MmI3LTk0N2YtZDMzZmExNjA1YWUx LzEvS2R0OHBPN2g1RlBTYjZ1WnlDQWEzNGxHRXI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqzMPKEKv x9X7/ZYGY5XXoc6UC5wBFgiNBoxvogjsRpIqNn8dBA/fXYCISPMKXxpgVJQJHl9B wcuxKOlPi0t6XOreqi51DeArJIjeEGUyGdiVnLuUFV7a7t56OgEmpeU5g1pURfTV MKdtPwPmyuJvlzhss/nBYKXV9IXrp5c2NeQgTw5i8jH2xxv9FQuv13L0ZmaYxe6Z JXhBNvL2b3Cfo8BUwRKY4RfU6cRtubt/FJo+BmSmK7PcRB5rHT1ZmfO6b0F9mkyP SC0La2OG79lk16QIz6cO0pjfmI5fLf94l6w2LnVCzdhANfEpOLWt/hEAIgtKYG3V TCVHwoq12eFHWg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:20 2025 by rpki-client