This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft File: Kt1DinzjyzefKM-gUc9j1a2P48o.mft (raw, json) Hash identifier: dzU/QDXhnHtnVsP85Cqj2c41x9JVZZ75dRvH87vGzrk= Subject key identifier: 44:8A:9B:B2:D2:0C:E6:AD:BE:2D:2E:B9:D5:FA:9A:7F:F9:9C:F4:14 Authority key identifier: 2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA Certificate issuer: /CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca Certificate serial: 019B0BFF4BC1A6486E13E04C7F608BDB2B7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft Manifest number: 0FBD Signing time: Thu 11 Dec 2025 06:00:38 +0000 Manifest this update: Thu 11 Dec 2025 06:00:38 +0000 Manifest next update: Fri 12 Dec 2025 06:00:38 +0000 Files and hashes: 1: 8eg_ozUgN0LwPpJGepVjL-X5qgI.roa (hash: Z8orduaXF7DXrYWOscVyHgXJkUsoFlq7AQocFZQpdOs=) 2: BTmSI3bKDyEio_o8HAFd3DpA8rw.roa (hash: 3z5V5nlo98dCHrSvU7v+ci/JP55YJA4F6NU227fMQdg=) 3: Kt1DinzjyzefKM-gUc9j1a2P48o.crl (hash: +gEJe7Wyh2x49v5u5vTgOg9+YvpW1F9KLTg9iH6RLnI=) 4: Vl-BUyW_4i4W1Wnxmf0KDGW6dVM.roa (hash: qrkRzr8LSzDpFIdLrS23zNSmVx5+NOPtSLZdcnXxt68=) 5: kq56qkz3yFyhTWTclWQs9GofbW8.roa (hash: U2ETgi9N1vdCcSaDvEYZmHRu6NYMtvbYpcr6l8+r5Rg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 06:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0b:ff:4b:c1:a6:48:6e:13:e0:4c:7f:60:8b:db:2b:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca Validity Not Before: Dec 11 06:00:38 2025 GMT Not After : Dec 12 06:00:38 2025 GMT Subject: CN=448a9bb2d20ce6adbe2d2eb9d5fa9a7ff99cf414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:fa:17:64:41:b7:34:cc:46:1d:35:4d:71:4e: 5b:bd:27:2e:3d:bf:cc:a5:36:8d:6c:a1:16:bc:50: 72:2d:45:86:30:c8:42:8f:f9:88:95:f2:c2:bf:f4: 5c:3c:c8:5d:66:07:4a:a6:78:eb:56:e2:cc:6d:df: d9:2e:4a:1f:4d:96:08:9c:49:12:0c:06:6b:c3:9f: d5:b0:fe:88:39:2c:8b:e2:7c:f2:f0:5f:c0:59:0e: 88:52:f9:fe:87:41:f5:74:53:2f:4a:33:9f:7a:ad: 15:21:38:32:46:ae:7a:7b:34:aa:4c:19:d0:ce:9d: 04:b1:06:9f:c9:10:26:28:0a:0d:b6:01:b2:c4:dd: a4:aa:44:2b:b9:ef:ed:91:40:86:61:8a:51:50:56: 3b:e8:6d:b4:6b:76:50:c9:d2:ec:13:02:35:a2:11: 7c:05:8a:6a:b4:f9:2f:b1:3f:78:a7:7f:c1:13:cb: c3:3e:27:c2:49:1e:73:95:ea:c9:8c:ff:cb:8d:a8: 1f:1a:f3:a1:90:69:1d:89:58:86:40:ca:47:f8:61: 52:e2:97:0f:59:ac:fc:d8:3e:86:18:e5:8c:dd:a7: 40:18:ce:70:96:fa:8f:57:57:dc:70:b0:59:89:5f: 06:dd:ff:19:41:d0:6d:65:c1:d3:99:85:2e:d2:78: 25:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:8A:9B:B2:D2:0C:E6:AD:BE:2D:2E:B9:D5:FA:9A:7F:F9:9C:F4:14 X509v3 Authority Key Identifier: keyid:2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:1d:47:99:15:94:e7:83:4f:c1:08:77:fd:98:88:6a:12:06: 01:f5:df:11:41:8c:a8:46:4c:64:4b:bc:34:fe:f4:e5:82:4c: 2e:fc:5f:ae:8c:d4:6b:d7:d4:02:93:35:2e:05:b4:4c:0b:98: 0e:18:20:b0:97:cf:44:a5:58:7b:98:20:fd:7c:fb:d9:fa:89: 10:b4:30:52:5d:cd:02:7e:1b:16:ea:8e:7c:07:e5:4f:3e:d9: d1:1b:4b:ca:ab:7d:30:15:cc:07:13:c5:72:d1:1a:59:06:8a: 7a:66:41:14:ae:3a:f3:a0:fe:4f:72:8f:cc:f5:8a:94:c7:9e: e3:c7:41:c0:9c:a3:81:dc:8b:23:5c:5f:e9:f9:a7:37:2b:a7: 33:2e:46:cd:80:c7:6e:8c:69:fa:a5:b2:84:ab:4b:1a:79:73: d7:ff:a9:04:92:32:8e:f5:cf:54:81:96:ef:79:4f:47:e6:1e: 47:56:ab:32:4f:4b:ad:16:57:df:0b:1d:b9:43:9e:05:b8:64: 58:a8:5b:7d:b4:64:60:7b:0d:e1:4c:e9:83:e4:15:72:e8:3f: 21:b8:9b:2a:bf:ee:64:c9:7e:d6:cc:66:25:0c:1b:2f:5b:1f: 77:cc:e4:c5:f5:77:a4:7a:43:92:10:8a:f8:eb:fe:cc:51:5f: 2c:54:fe:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsL/0vBpkhuE+BMf2CL2yt8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhZGQ0MzhhN2NlM2NiMzc5ZjI4Y2ZhMDUxY2Y2M2Q1YWQ4 ZmUzY2EwHhcNMjUxMjExMDYwMDM4WhcNMjUxMjEyMDYwMDM4WjAzMTEwLwYDVQQD Eyg0NDhhOWJiMmQyMGNlNmFkYmUyZDJlYjlkNWZhOWE3ZmY5OWNmNDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/oXZEG3NMxGHTVNcU5bvScuPb/M pTaNbKEWvFByLUWGMMhCj/mIlfLCv/RcPMhdZgdKpnjrVuLMbd/ZLkofTZYInEkS DAZrw5/VsP6IOSyL4nzy8F/AWQ6IUvn+h0H1dFMvSjOfeq0VITgyRq56ezSqTBnQ zp0EsQafyRAmKAoNtgGyxN2kqkQrue/tkUCGYYpRUFY76G20a3ZQydLsEwI1ohF8 BYpqtPkvsT94p3/BE8vDPifCSR5zlerJjP/LjagfGvOhkGkdiViGQMpH+GFS4pcP Waz82D6GGOWM3adAGM5wlvqPV1fccLBZiV8G3f8ZQdBtZcHTmYUu0ngltQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFESKm7LSDOatvi0uudX6mn/5nPQUMB8GA1UdIwQY MBaAFCrdQ4p848s3nyjPoFHPY9Wtj+PKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3QxRGluemp5emVmS00tZ1VjOWoxYTJQNDhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8wYjYxY2YtODBiYS00ZThlLWEyZTUt MjBhMGQxMzBjNDU2LzEvS3QxRGluemp5emVmS00tZ1VjOWoxYTJQNDhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8wYjYxY2YtODBiYS00ZThlLWEyZTUtMjBhMGQxMzBjNDU2 LzEvS3QxRGluemp5emVmS00tZ1VjOWoxYTJQNDhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADh1HmRWU 54NPwQh3/ZiIahIGAfXfEUGMqEZMZEu8NP705YJMLvxfrozUa9fUApM1LgW0TAuY DhggsJfPRKVYe5gg/Xz72fqJELQwUl3NAn4bFuqOfAflTz7Z0RtLyqt9MBXMBxPF ctEaWQaKemZBFK4686D+T3KPzPWKlMee48dBwJyjgdyLI1xf6fmnNyunMy5GzYDH boxp+qWyhKtLGnlz1/+pBJIyjvXPVIGW73lPR+YeR1arMk9LrRZX3wsduUOeBbhk WKhbfbRkYHsN4Uzpg+QVcug/IbibKr/uZMl+1sxmJQwbL1sfd8zkxfV3pHpDkhCK +Ov+zFFfLFT+/A== -----END CERTIFICATE-----Generated at Thu Dec 11 15:07:24 2025 by rpki-client