This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft File: KXxQjSOzgxW79FtybSIFCkYSe4w.mft (raw, json) Hash identifier: U+gBUE0pFWSlwD9RrtT8HYNimpzraIRab3tvNpm/m9c= Subject key identifier: 0D:DA:DA:6E:49:95:6A:29:D6:43:39:85:14:9A:D7:2F:3A:9B:27:A2 Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c Certificate serial: 019B3D59D42786F7EA4DF29358D1D83B50E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft Manifest number: 17A0 Signing time: Sat 20 Dec 2025 20:00:55 +0000 Manifest this update: Sat 20 Dec 2025 20:00:55 +0000 Manifest next update: Sun 21 Dec 2025 20:00:55 +0000 Files and hashes: 1: 6DiazTfSLwiU3nHVXB2_ipX3pSI.roa (hash: GgVQ0c2h8QmAuSALS7AfweuOCzU4KJ/qThY066+SiL8=) 2: 8vBgPIPGmSaFUWOlpF2CMGdNQQc.roa (hash: /PWcEdJnMn2bKRLWHgFiLBb1+zXw/blECB/hDNGzIwY=) 3: FM0AOR7qs5ReYOYfvDzPvyeOFF4.roa (hash: pyPxYA6UMvNM4UkCYSW/CeHul7I1PWvfOpcPGXbUI7A=) 4: KXxQjSOzgxW79FtybSIFCkYSe4w.crl (hash: 8H2kSOXoPX7oEXmb2ns8ikdhWcKkwucPkV8cJOVhsgE=) 5: LWD4-OU95_FRda-NCOb6W7qqhlk.roa (hash: /68MHjyM7YGgptvnqCHIzlmysaHHp9CA6NYAUfenFig=) 6: OPHuyxpO9PisbasiiAKtaHkvxVA.roa (hash: x3Qa5U665mgT3yS3jj1UddNty1CV91Oaf8NDM/bZhaM=) 7: kgi8mKAM2yCVgRH4L9W1E0GBctE.roa (hash: /x/rSNiAHNpL5ZxR6vbLMgxwW3ubNoY4GIMOdVAovVA=) 8: wN-88kHsfZoIQbMbBeQSvFTLUAA.roa (hash: TZn5hV31aDddpb82jvBnOx8ugm4e4LbJg3sHA8zL+QM=) 9: xDp3K5cwdwo-amBn4Z3yMMAdo3Y.roa (hash: eoBx0TZUtOUgkA8rEPSl3wkXkZ2dgXNZBSrXrhwvq14=) 10: zYd_cPkM9NVsX7bTQ07hSv4bWMk.roa (hash: 7m24y9mQHGr+u8/2znCaziY9Qt7M+iB4zeF7KEcBtdg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:d4:27:86:f7:ea:4d:f2:93:58:d1:d8:3b:50:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c Validity Not Before: Dec 20 20:00:55 2025 GMT Not After : Dec 21 20:00:55 2025 GMT Subject: CN=0ddada6e49956a29d6433985149ad72f3a9b27a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7e:8c:08:84:74:a8:71:f4:98:70:b1:b3:7c: 5c:6d:b9:3c:03:80:e2:39:80:c4:5e:30:52:ab:cc: d2:ab:f4:5b:2a:53:ff:3b:ba:26:96:88:52:1c:c1: d9:64:30:dc:4a:74:91:13:fc:5a:5b:a7:11:61:62: fc:9b:60:d2:8a:56:6f:3a:2b:d2:bd:42:bd:72:e3: b3:1d:ac:27:f3:7d:ba:4f:d1:13:b1:a2:79:17:12: 8b:8b:38:3c:09:1e:a8:90:b0:19:c7:a2:67:2a:fd: a7:a5:af:a1:1e:eb:d2:47:8b:8d:97:4a:52:d9:63: 36:77:06:4e:50:39:38:86:c5:55:6b:ed:0c:b3:7c: 97:bd:54:ec:20:c0:90:b7:40:ab:b0:71:1a:bf:33: 0b:bc:f0:99:a0:06:32:c7:c5:e4:d2:9c:74:a1:1e: 72:15:93:a0:9c:d7:a1:bd:6e:01:a2:52:92:2a:03: 36:38:34:a7:7a:c8:86:dd:d0:30:69:68:ab:f5:cf: da:9f:b7:8c:0a:b6:18:eb:b7:bb:bb:a4:44:09:9c: 26:f2:34:af:5b:8c:4e:cf:b7:1e:33:ed:c2:da:a5: 40:3d:a9:fd:55:c0:81:43:6a:50:48:a9:cf:f3:85: 77:ad:2f:20:b0:48:fa:ad:70:f1:cf:83:bb:5f:fc: c5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:DA:DA:6E:49:95:6A:29:D6:43:39:85:14:9A:D7:2F:3A:9B:27:A2 X509v3 Authority Key Identifier: keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:48:f0:38:68:1f:39:09:29:ef:0a:a0:20:42:97:64:a7:b0: e2:4d:ce:75:61:a5:2a:a3:0b:28:79:3a:89:1a:0c:56:ec:f8: f2:04:e6:61:67:42:1d:b2:fb:95:47:80:3d:99:d4:91:8f:cb: 3a:9f:77:96:e6:63:ff:90:d5:f2:63:03:ca:f9:ce:6f:01:9f: dc:c5:0c:61:3a:05:20:32:d9:97:25:23:7e:10:9c:31:48:3d: 5c:9d:b5:90:15:d7:a1:a9:f1:24:3c:50:f5:ba:8c:4b:1c:6d: 2c:e5:16:94:13:86:8d:f9:bc:3a:64:93:0c:07:27:9e:68:6a: c5:a0:c8:d7:ca:d3:ba:e7:68:df:67:9d:4c:c8:40:61:e6:a3: ad:9b:eb:46:b8:7b:0b:eb:3f:48:9e:18:73:69:f8:77:d9:fe: fd:9d:02:00:2e:5b:0a:63:85:a9:4c:03:15:33:7e:91:0a:23: 73:3f:51:71:59:51:fb:94:58:f2:e6:c0:e3:c7:3c:cb:da:3f: e2:07:7f:8a:40:b2:ff:aa:fa:5f:ae:0f:91:dc:06:ef:15:dc: 05:f8:f5:f5:88:a0:e2:e9:fd:3f:63:4a:fa:1f:fb:1b:7f:57: 09:56:bc:a9:64:18:a4:d9:45:16:04:d6:38:37:c7:0d:6d:e8: c1:b8:dc:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WdQnhvfqTfKTWNHYO1DgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2M1MDhkMjNiMzgzMTViYmY0NWI3MjZkMjIwNTBhNDYx MjdiOGMwHhcNMjUxMjIwMjAwMDU1WhcNMjUxMjIxMjAwMDU1WjAzMTEwLwYDVQQD EygwZGRhZGE2ZTQ5OTU2YTI5ZDY0MzM5ODUxNDlhZDcyZjNhOWIyN2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX6MCIR0qHH0mHCxs3xcbbk8A4Di OYDEXjBSq8zSq/RbKlP/O7omlohSHMHZZDDcSnSRE/xaW6cRYWL8m2DSilZvOivS vUK9cuOzHawn8326T9ETsaJ5FxKLizg8CR6okLAZx6JnKv2npa+hHuvSR4uNl0pS 2WM2dwZOUDk4hsVVa+0Ms3yXvVTsIMCQt0CrsHEavzMLvPCZoAYyx8Xk0px0oR5y FZOgnNehvW4BolKSKgM2ODSnesiG3dAwaWir9c/an7eMCrYY67e7u6RECZwm8jSv W4xOz7ceM+3C2qVAPan9VcCBQ2pQSKnP84V3rS8gsEj6rXDxz4O7X/zFwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA3a2m5JlWop1kM5hRSa1y86myeiMB8GA1UdIwQY MBaAFCl8UI0js4MVu/Rbcm0iBQpGEnuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTIt MzZlOWE3OWJkOTUwLzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTItMzZlOWE3OWJkOTUw LzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGkjwOGgf OQkp7wqgIEKXZKew4k3OdWGlKqMLKHk6iRoMVuz48gTmYWdCHbL7lUeAPZnUkY/L Op93luZj/5DV8mMDyvnObwGf3MUMYToFIDLZlyUjfhCcMUg9XJ21kBXXoanxJDxQ 9bqMSxxtLOUWlBOGjfm8OmSTDAcnnmhqxaDI18rTuudo32edTMhAYeajrZvrRrh7 C+s/SJ4Yc2n4d9n+/Z0CAC5bCmOFqUwDFTN+kQojcz9RcVlR+5RY8ubA48c8y9o/ 4gd/ikCy/6r6X64PkdwG7xXcBfj19Yig4un9P2NK+h/7G39XCVa8qWQYpNlFFgTW ODfHDW3owbjccA== -----END CERTIFICATE-----Generated at Sat Dec 20 22:42:37 2025 by rpki-client