This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft File: KXNk9QJTTodxoMYll5TCbibUvKQ.mft (raw, json) Hash identifier: 82GqfwdOT5KlFOOiPSLMNChCPNU/ngvt8jto1WeWdB0= Subject key identifier: 9A:CA:BD:3A:62:75:72:08:F3:DA:FE:0E:61:57:84:44:EE:16:FC:F3 Authority key identifier: 29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4 Certificate issuer: /CN=297364f502534e8771a0c6259794c26e26d4bca4 Certificate serial: 019B3A91037C385FA010E5C7074F931613D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft Manifest number: 15F2 Signing time: Sat 20 Dec 2025 07:02:20 +0000 Manifest this update: Sat 20 Dec 2025 07:02:20 +0000 Manifest next update: Sun 21 Dec 2025 07:02:20 +0000 Files and hashes: 1: 2Cp_JC-1gSdENPjM_UWn9lNVG7o.roa (hash: +35xjqek9Nhlc/Z0+VDCYx/DAJw10REdvRuvu6t5M3s=) 2: 30p15OIB4xzHle9tD78XYhbRDYI.roa (hash: 9HVb43mRInURyExw74+VWFanW5TCiRHL7zKkRNQfWwc=) 3: 46l3zcDNK_2V63AreaLMsQrAgaE.roa (hash: yY63fb353nPGfB15WkNs5SfqIg+XAt04c2yklxwzqUk=) 4: DrQJgIgCadGbo__38qvLm4f2buQ.roa (hash: Wx23py7fw++y8qecqXEe1C97qUaOVg6INU3OjKvg+YE=) 5: KXNk9QJTTodxoMYll5TCbibUvKQ.crl (hash: r9QKyUFGsBQbsK1xUqDE4Efj1MnT7EidA0c8V9yiLXE=) 6: Kc-1Z4R9k1b9QbprK1lrnIRFuzo.roa (hash: mIf5b4mKVeZgEr7VsdotpcNIdYch/DFkBdwgO8kit9A=) 7: lTAav4yQpZ87qw_zIchzIsq-5gM.roa (hash: 3b9+qDTSwpfJP/SrqHspJoxR/TN3seQEWvBLhEVGMW0=) 8: x8RX4rKBNmZcMpsvt4Nm7APSjAM.roa (hash: zc30VoGi96Z1iHoOnbaFFXszAPpJE3UJpyJWRy15Byo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:91:03:7c:38:5f:a0:10:e5:c7:07:4f:93:16:13:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297364f502534e8771a0c6259794c26e26d4bca4 Validity Not Before: Dec 20 07:02:20 2025 GMT Not After : Dec 21 07:02:20 2025 GMT Subject: CN=9acabd3a62757208f3dafe0e61578444ee16fcf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b8:0b:7c:7b:5a:6a:10:9e:ac:a4:de:bf:90: 6b:90:07:33:a0:2d:ce:6f:71:d6:6c:1e:f7:b7:4e: 71:18:f7:e4:f5:57:bd:c9:52:9c:51:cd:84:d0:10: 07:ae:57:49:11:38:b8:ef:0d:0e:40:bc:77:e9:0f: 63:64:4e:38:17:30:fd:dc:28:43:8b:e0:84:28:04: 6e:30:4a:29:0e:d5:c7:3c:3a:a8:92:4a:e5:c0:f4: 57:c3:fc:21:29:ed:5e:fc:37:7f:65:c1:70:04:ac: 5d:0a:77:33:9d:e6:c1:98:55:70:c5:12:b1:9f:1a: f5:47:46:8e:06:26:70:32:24:93:b9:ac:4f:a4:c8: 91:51:6c:53:d2:f7:fc:04:7d:11:77:b3:93:6e:53: 4f:48:84:84:4b:fd:c6:e2:95:19:5f:7e:f6:47:8f: 35:81:43:ec:25:9c:e5:3b:91:0f:11:dc:f7:bd:6f: 10:8a:52:ff:b9:ae:2c:33:43:58:d4:1d:ed:df:56: 74:e3:fd:4b:90:b6:98:ba:21:de:33:4c:ad:a5:4e: 39:f5:92:80:39:52:bd:81:3c:b9:1c:d5:2a:06:ac: 87:42:4a:03:a4:07:21:a9:2e:a1:8f:27:bd:18:f3: ec:52:99:e7:97:a8:07:b9:26:10:4c:4e:6a:22:77: 1f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:CA:BD:3A:62:75:72:08:F3:DA:FE:0E:61:57:84:44:EE:16:FC:F3 X509v3 Authority Key Identifier: keyid:29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:89:e3:89:b1:53:51:89:8c:ce:7a:ac:8e:59:c2:0f:5d:a4: 22:b1:f9:cc:42:5b:72:5e:76:48:1d:46:d3:fb:01:43:6b:4c: b8:45:f8:d3:17:e4:3c:3e:c3:aa:ec:a3:c0:6a:6d:da:a8:14: 66:de:37:d9:3c:6b:b9:6c:13:e5:d9:be:b7:c9:a5:51:3a:23: 2e:72:6c:25:fb:8e:3f:24:19:51:ba:cd:79:36:e6:f0:1d:ba: d8:15:ee:c2:81:10:37:ed:1b:cf:61:0a:9d:b9:09:f0:b9:21: 39:20:50:12:35:a0:e4:5f:df:d3:e8:94:df:19:a6:39:bb:bf: 44:5f:8d:b5:52:f7:ff:05:cf:ea:66:9c:aa:74:3e:db:3c:c8: fa:54:e0:f3:88:eb:c9:e7:42:e7:ad:c7:7a:d3:f9:40:4f:7d: 2f:f4:d9:0f:de:b9:31:d6:e8:2d:1d:39:72:c9:93:4e:dc:f7: 6e:a9:7f:52:00:55:3e:14:fd:1c:62:b5:19:cc:95:13:d3:e3: e0:69:cf:15:8a:0c:b9:96:c4:ce:a0:e2:82:c7:2e:1f:99:f0: bb:4c:0e:94:0e:b8:3e:81:3a:58:7a:6c:ab:05:be:c9:33:91: 3f:0c:b8:23:ad:3b:95:ee:77:a8:eb:27:79:e2:6a:f1:06:da: 09:f9:f5:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kQN8OF+gEOXHB0+TFhPTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NzM2NGY1MDI1MzRlODc3MWEwYzYyNTk3OTRjMjZlMjZk NGJjYTQwHhcNMjUxMjIwMDcwMjIwWhcNMjUxMjIxMDcwMjIwWjAzMTEwLwYDVQQD Eyg5YWNhYmQzYTYyNzU3MjA4ZjNkYWZlMGU2MTU3ODQ0NGVlMTZmY2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLgLfHtaahCerKTev5BrkAczoC3O b3HWbB73t05xGPfk9Ve9yVKcUc2E0BAHrldJETi47w0OQLx36Q9jZE44FzD93ChD i+CEKARuMEopDtXHPDqokkrlwPRXw/whKe1e/Dd/ZcFwBKxdCncznebBmFVwxRKx nxr1R0aOBiZwMiSTuaxPpMiRUWxT0vf8BH0Rd7OTblNPSISES/3G4pUZX372R481 gUPsJZzlO5EPEdz3vW8QilL/ua4sM0NY1B3t31Z04/1LkLaYuiHeM0ytpU459ZKA OVK9gTy5HNUqBqyHQkoDpAchqS6hjye9GPPsUpnnl6gHuSYQTE5qIncf9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJrKvTpidXII89r+DmFXhETuFvzzMB8GA1UdIwQY MBaAFClzZPUCU06HcaDGJZeUwm4m1LykMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1hOazlRSlRUb2R4b01ZbGw1VENiaWJVdktRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wNDU4MjAtMzU0Ni00MDdjLTgzYTUt MGEwZjNlNzhhNDkzLzEvS1hOazlRSlRUb2R4b01ZbGw1VENiaWJVdktRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8wNDU4MjAtMzU0Ni00MDdjLTgzYTUtMGEwZjNlNzhhNDkz LzEvS1hOazlRSlRUb2R4b01ZbGw1VENiaWJVdktRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEInjibFT UYmMznqsjlnCD12kIrH5zEJbcl52SB1G0/sBQ2tMuEX40xfkPD7DquyjwGpt2qgU Zt432TxruWwT5dm+t8mlUTojLnJsJfuOPyQZUbrNeTbm8B262BXuwoEQN+0bz2EK nbkJ8LkhOSBQEjWg5F/f0+iU3xmmObu/RF+NtVL3/wXP6macqnQ+2zzI+lTg84jr yedC563HetP5QE99L/TZD965MdboLR05csmTTtz3bql/UgBVPhT9HGK1GcyVE9Pj 4GnPFYoMuZbEzqDigscuH5nwu0wOlA64PoE6WHpsqwW+yTORPwy4I607le53qOsn eeJq8QbaCfn1Dw== -----END CERTIFICATE-----Generated at Sat Dec 20 10:38:11 2025 by rpki-client