This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft File: kvSxwL-61GuBHu5Wihj7qhSp1oc.mft (raw, json) Hash identifier: wIF/57gZ4Np/FEFGB7GbmH93ZpRbKxgD8i6V4tZs4es= Subject key identifier: F7:FA:88:E5:39:4C:1A:BC:BF:78:84:29:90:85:BD:60:53:B6:C1:9B Authority key identifier: 92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87 Certificate issuer: /CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687 Certificate serial: 019B33E91AFFE9886E007FE6CC623C1F1F11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 00:01:13 +0000 Manifest this update: Fri 19 Dec 2025 00:01:13 +0000 Manifest next update: Sat 20 Dec 2025 00:01:13 +0000 Files and hashes: 1: 0BEzsazQz-3-fzZOXUBzFR9-SEA.roa (hash: xJdvyBzFJCzDNWN1w4SpJl++kA85g2jY9KiUG4fQa2E=) 2: 1-Oq1-4hF4yCcXZpsJGDusj_hVz4.roa (hash: OUB6/BRumx2Zsh75d5vBwXiCTv8Msk13LqoxzZruX1k=) 3: 8tP5koea75iLq4fzJTwOilUzRew.roa (hash: nuWcmB+t6L5mbRuVr1gjXyaKkJjO2CWP61eKOZ9j5qA=) 4: Q39EicWKCAbcPFSCPOWxVuicNBs.roa (hash: xkLxxvpElKUg8h/PAkiiPnxY3jd1NXP1Ti2bF3eI0Qw=) 5: YTyyNdEqtE7TLFnb5kSYtSXQ6C0.roa (hash: 5KsxEGAO2miZS2qYCAKx62LCPIMduhWMuoqvvhKuiRU=) 6: d8pyP86Y6uwqz1d9ZUqrw3D4VrQ.roa (hash: rdq5z21gij6clSNE/4yKomwJ24Ycc5gYpA5zAtS7MBw=) 7: hLpPT363pnl477GGqc5nq4BfcT0.roa (hash: BX64RFEmiS7zTWdQnQw6dnEj3jYNCJBQmKLpW7F/EpQ=) 8: jNmr_uA5Ik1ev1kitS3H0XRfSs0.roa (hash: MWQMJNqYJOs+qGkZcyXQIyfm7wzm6V1fSmAClA7kRpk=) 9: kvSxwL-61GuBHu5Wihj7qhSp1oc.crl (hash: AjllSnyKZNfV9fwgvnaYiaUZUk5jdVJAOGRIYbDoN88=) 10: o53Asxejm11sb8YF2NlsCql1ybY.roa (hash: F+bQ4Enys65hQ07aHbKIp+uPwSt+gBE59SdxChGuPUY=) 11: tCAzKxpLrkmFMZR4RRCQd9p1ADo.roa (hash: SCXqn9Sk4hWHzAcns5LvAAZM9YZ7kblGiEWX7nVj190=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 00:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e9:1a:ff:e9:88:6e:00:7f:e6:cc:62:3c:1f:1f:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687 Validity Not Before: Dec 19 00:01:13 2025 GMT Not After : Dec 20 00:01:13 2025 GMT Subject: CN=f7fa88e5394c1abcbf7884299085bd6053b6c19b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:60:01:3e:d5:5d:a9:87:75:cd:70:3a:91:58: d9:63:e1:ab:f1:5b:ba:f1:f3:f7:20:69:25:de:53: 60:6f:5d:e7:0f:0e:ec:92:f6:14:e1:14:1f:ba:51: 67:c9:61:ca:3a:bc:36:8e:7c:d0:b1:2d:96:64:c8: 59:b4:07:a3:06:34:98:98:12:70:26:50:9b:af:fc: 7c:17:8f:d0:0f:bd:f7:6c:da:ae:14:15:be:7d:37: 85:71:6c:e0:5e:ea:2a:14:49:e6:26:51:24:12:ce: ca:58:ee:e3:21:04:27:48:7b:89:41:f7:fd:9a:c8: 4f:fb:6e:ac:b9:f2:48:36:ae:ed:d6:9f:ee:0c:03: 5c:a8:51:8d:bf:89:23:18:e8:5a:be:88:e6:cf:ff: b3:36:b9:6a:37:06:dd:f7:33:b0:3e:43:e8:db:a2: 72:62:20:ae:2b:73:de:0b:7d:1e:85:cd:b4:ff:9d: f6:24:b8:05:3b:3a:d8:04:09:cf:18:7e:ba:32:3b: b5:6a:bd:28:3b:7b:08:3d:2d:6b:50:7f:43:fd:98: ce:1e:c5:aa:67:77:43:d6:b1:d3:78:a3:b9:04:d7: 31:13:d0:f9:09:a8:cb:d2:21:73:06:b3:a1:f1:a5: a3:43:cf:ee:a7:25:b9:90:a6:83:11:59:ab:4a:f2: 28:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:FA:88:E5:39:4C:1A:BC:BF:78:84:29:90:85:BD:60:53:B6:C1:9B X509v3 Authority Key Identifier: keyid:92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:ae:18:16:29:e8:1d:99:9b:f0:36:cd:69:9f:26:31:1c:02: ba:84:a1:cc:1e:06:f8:6b:e6:3d:d0:6c:29:5b:87:ab:59:92: 6f:f7:bb:b5:71:b6:88:03:d1:89:43:9c:8e:0d:b7:bd:ee:a3: 07:fb:e3:ab:79:99:4d:42:ad:b6:15:0d:b3:13:8f:6f:36:e1: e5:80:55:cc:57:c2:35:7f:fe:1d:01:3c:9d:f5:95:8e:e9:63: d6:49:50:16:b5:df:a8:96:63:0b:02:5c:fb:88:78:ec:72:1c: 64:d1:5e:53:60:21:07:ab:0f:d5:ee:ea:74:19:c2:4d:ba:64: 70:11:87:93:7b:57:29:28:26:dc:fc:fb:57:ca:6e:4d:86:22: 8b:2a:84:e6:c7:34:07:d9:89:a5:01:c4:22:87:81:59:83:1d: 03:2b:e7:87:ee:9b:ec:7c:8c:13:6d:0a:03:c2:1f:aa:6a:7a: 2c:3a:c9:23:5c:10:80:67:e5:30:84:f1:bb:8b:97:e8:20:bd: c7:b8:69:48:30:7f:69:b5:19:16:1c:61:21:09:b1:bb:0e:83: bd:b4:53:0d:83:b0:25:50:6d:a7:b0:18:6d:80:a7:77:46:9c: a6:24:5e:34:e1:59:eb:64:24:71:f2:a9:49:f8:05:e0:64:7f: 4c:35:2a:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6Rr/6YhuAH/mzGI8Hx8RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZjRiMWMwYmZiYWQ0NmI4MTFlZWU1NjhhMThmYmFhMTRh OWQ2ODcwHhcNMjUxMjE5MDAwMTEzWhcNMjUxMjIwMDAwMTEzWjAzMTEwLwYDVQQD EyhmN2ZhODhlNTM5NGMxYWJjYmY3ODg0Mjk5MDg1YmQ2MDUzYjZjMTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumABPtVdqYd1zXA6kVjZY+Gr8Vu6 8fP3IGkl3lNgb13nDw7skvYU4RQfulFnyWHKOrw2jnzQsS2WZMhZtAejBjSYmBJw JlCbr/x8F4/QD733bNquFBW+fTeFcWzgXuoqFEnmJlEkEs7KWO7jIQQnSHuJQff9 mshP+26sufJINq7t1p/uDANcqFGNv4kjGOhavojmz/+zNrlqNwbd9zOwPkPo26Jy YiCuK3PeC30ehc20/532JLgFOzrYBAnPGH66Mju1ar0oO3sIPS1rUH9D/ZjOHsWq Z3dD1rHTeKO5BNcxE9D5CajL0iFzBrOh8aWjQ8/upyW5kKaDEVmrSvIoNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPf6iOU5TBq8v3iEKZCFvWBTtsGbMB8GA1UdIwQY MBaAFJL0scC/utRrgR7uVooY+6oUqdaHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi80Zjg1MTQtMmUyMC00OTM1LTk5NWMt YTA4NGY3NmM4ZTJiLzEva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi80Zjg1MTQtMmUyMC00OTM1LTk5NWMtYTA4NGY3NmM4ZTJi LzEva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuK4YFino HZmb8DbNaZ8mMRwCuoShzB4G+GvmPdBsKVuHq1mSb/e7tXG2iAPRiUOcjg23ve6j B/vjq3mZTUKtthUNsxOPbzbh5YBVzFfCNX/+HQE8nfWVjulj1klQFrXfqJZjCwJc +4h47HIcZNFeU2AhB6sP1e7qdBnCTbpkcBGHk3tXKSgm3Pz7V8puTYYiiyqE5sc0 B9mJpQHEIoeBWYMdAyvnh+6b7HyME20KA8Ifqmp6LDrJI1wQgGflMITxu4uX6CC9 x7hpSDB/abUZFhxhIQmxuw6DvbRTDYOwJVBtp7AYbYCnd0acpiReNOFZ62QkcfKp SfgF4GR/TDUqkA== -----END CERTIFICATE-----Generated at Fri Dec 19 10:05:14 2025 by rpki-client