This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft File: kvSxwL-61GuBHu5Wihj7qhSp1oc.mft (raw, json) Hash identifier: T560bIVLXfo10NdRTCYcbkNzhsvmLxvk88xkrtPYqw8= Subject key identifier: AB:5F:7C:A8:65:3C:4A:54:CE:D9:4A:1F:25:4D:39:4D:B3:51:02:36 Authority key identifier: 92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87 Certificate issuer: /CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687 Certificate serial: 019B2C2FA6CBAA8F115A88C64A9851C26136 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft Manifest number: 1783 Signing time: Wed 17 Dec 2025 12:01:18 +0000 Manifest this update: Wed 17 Dec 2025 12:01:18 +0000 Manifest next update: Thu 18 Dec 2025 12:01:18 +0000 Files and hashes: 1: 0BEzsazQz-3-fzZOXUBzFR9-SEA.roa (hash: xJdvyBzFJCzDNWN1w4SpJl++kA85g2jY9KiUG4fQa2E=) 2: 1-Oq1-4hF4yCcXZpsJGDusj_hVz4.roa (hash: OUB6/BRumx2Zsh75d5vBwXiCTv8Msk13LqoxzZruX1k=) 3: 8tP5koea75iLq4fzJTwOilUzRew.roa (hash: nuWcmB+t6L5mbRuVr1gjXyaKkJjO2CWP61eKOZ9j5qA=) 4: Q39EicWKCAbcPFSCPOWxVuicNBs.roa (hash: xkLxxvpElKUg8h/PAkiiPnxY3jd1NXP1Ti2bF3eI0Qw=) 5: YTyyNdEqtE7TLFnb5kSYtSXQ6C0.roa (hash: 5KsxEGAO2miZS2qYCAKx62LCPIMduhWMuoqvvhKuiRU=) 6: d8pyP86Y6uwqz1d9ZUqrw3D4VrQ.roa (hash: rdq5z21gij6clSNE/4yKomwJ24Ycc5gYpA5zAtS7MBw=) 7: hLpPT363pnl477GGqc5nq4BfcT0.roa (hash: BX64RFEmiS7zTWdQnQw6dnEj3jYNCJBQmKLpW7F/EpQ=) 8: jNmr_uA5Ik1ev1kitS3H0XRfSs0.roa (hash: MWQMJNqYJOs+qGkZcyXQIyfm7wzm6V1fSmAClA7kRpk=) 9: kvSxwL-61GuBHu5Wihj7qhSp1oc.crl (hash: UciKGYKMe0OPe+gxzAv3lpskkRXkaBZmJBaL/ynjpHI=) 10: o53Asxejm11sb8YF2NlsCql1ybY.roa (hash: F+bQ4Enys65hQ07aHbKIp+uPwSt+gBE59SdxChGuPUY=) 11: tCAzKxpLrkmFMZR4RRCQd9p1ADo.roa (hash: SCXqn9Sk4hWHzAcns5LvAAZM9YZ7kblGiEWX7nVj190=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:a6:cb:aa:8f:11:5a:88:c6:4a:98:51:c2:61:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687 Validity Not Before: Dec 17 12:01:18 2025 GMT Not After : Dec 18 12:01:18 2025 GMT Subject: CN=ab5f7ca8653c4a54ced94a1f254d394db3510236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d4:3b:fc:85:85:76:94:8b:06:70:ca:ea:b8: 4d:76:f5:a6:65:0d:52:46:7d:1b:d5:f8:b1:59:27: 2f:e8:53:a3:ee:d6:0c:8d:ab:7c:3a:5c:f1:f3:a2: 50:77:bb:39:26:2e:ae:36:88:3b:3c:e9:88:d5:c5: c8:a6:03:d6:45:1a:92:a5:de:e5:a6:c4:2c:6f:a7: 04:3b:7b:6c:02:15:ad:80:fd:9f:d3:2c:12:15:4f: 85:5a:10:c9:bd:84:b1:bb:b4:46:2d:1d:a2:2d:9f: b3:d6:60:50:05:cd:9a:6c:1b:9d:d5:a0:55:3f:6c: 08:37:84:d0:d4:29:b3:23:d8:23:9a:c8:5c:01:8d: 18:d3:fc:fa:d6:a0:94:cb:0a:f3:86:62:15:82:96: 3c:62:f6:61:25:d3:61:a7:ed:58:04:0f:17:4a:0f: 34:20:e9:16:d6:05:7a:11:d2:19:27:8a:31:64:89: 34:4a:3d:75:ad:92:dc:53:be:e8:cf:4b:11:66:27: e1:da:60:ff:39:e1:4f:27:4e:63:c5:1d:fd:72:e8: 40:3a:74:72:5e:b2:d6:28:14:02:6a:41:61:46:bb: 99:7b:a1:3e:4c:4a:78:d3:3c:4f:8b:73:eb:e5:9c: b6:03:ae:c6:c3:1c:b3:ed:eb:f9:fe:cf:83:02:d9: 03:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:5F:7C:A8:65:3C:4A:54:CE:D9:4A:1F:25:4D:39:4D:B3:51:02:36 X509v3 Authority Key Identifier: keyid:92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:57:91:bc:b7:52:c7:75:ca:19:24:11:a9:40:a2:7c:a6:d5: 28:a8:60:1f:e0:34:a9:f0:9c:e8:c2:9c:3f:c7:f6:de:a5:f7: 07:2e:7f:9b:0b:46:8d:b7:21:bf:c5:cb:f0:95:bf:3d:e6:34: 55:ee:09:a8:3c:96:e4:17:66:75:67:7c:62:fd:b9:08:af:86: 1f:c5:1a:3b:84:4a:86:53:d5:39:7a:46:a4:dc:b3:1b:3a:2f: 40:a2:7c:c4:81:dd:44:87:e7:27:6b:b1:93:dd:63:ab:e5:f1: f3:c7:12:59:92:fa:0b:43:e9:ce:f6:21:2d:2f:44:48:f3:21: 6d:e1:56:42:44:6e:0a:04:30:7a:a0:2f:42:a3:ac:76:4d:69: 0d:c1:37:64:81:b9:ae:df:74:d9:c7:a0:5a:7f:f3:9a:b8:ad: de:14:db:4f:a9:f7:93:b0:a3:fa:44:78:82:95:ff:23:f1:52: b1:1c:d6:05:22:10:85:d0:70:10:bf:52:6b:6b:fb:0f:10:97: 0b:32:db:d8:6a:55:31:5e:72:03:0d:71:79:32:b0:6f:28:d0: fd:49:d3:e8:e6:93:7d:ac:9c:71:8c:68:7b:db:91:98:be:90: f0:05:91:fc:7c:87:94:54:2c:79:c3:d4:1b:35:2b:af:68:8e: 2c:c5:da:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssL6bLqo8RWojGSphRwmE2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZjRiMWMwYmZiYWQ0NmI4MTFlZWU1NjhhMThmYmFhMTRh OWQ2ODcwHhcNMjUxMjE3MTIwMTE4WhcNMjUxMjE4MTIwMTE4WjAzMTEwLwYDVQQD EyhhYjVmN2NhODY1M2M0YTU0Y2VkOTRhMWYyNTRkMzk0ZGIzNTEwMjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptQ7/IWFdpSLBnDK6rhNdvWmZQ1S Rn0b1fixWScv6FOj7tYMjat8Olzx86JQd7s5Ji6uNog7POmI1cXIpgPWRRqSpd7l psQsb6cEO3tsAhWtgP2f0ywSFU+FWhDJvYSxu7RGLR2iLZ+z1mBQBc2abBud1aBV P2wIN4TQ1CmzI9gjmshcAY0Y0/z61qCUywrzhmIVgpY8YvZhJdNhp+1YBA8XSg80 IOkW1gV6EdIZJ4oxZIk0Sj11rZLcU77oz0sRZifh2mD/OeFPJ05jxR39cuhAOnRy XrLWKBQCakFhRruZe6E+TEp40zxPi3Pr5Zy2A67Gwxyz7ev5/s+DAtkDSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKtffKhlPEpUztlKHyVNOU2zUQI2MB8GA1UdIwQY MBaAFJL0scC/utRrgR7uVooY+6oUqdaHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi80Zjg1MTQtMmUyMC00OTM1LTk5NWMt YTA4NGY3NmM4ZTJiLzEva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi80Zjg1MTQtMmUyMC00OTM1LTk5NWMtYTA4NGY3NmM4ZTJi LzEva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADFeRvLdS x3XKGSQRqUCifKbVKKhgH+A0qfCc6MKcP8f23qX3By5/mwtGjbchv8XL8JW/PeY0 Ve4JqDyW5BdmdWd8Yv25CK+GH8UaO4RKhlPVOXpGpNyzGzovQKJ8xIHdRIfnJ2ux k91jq+Xx88cSWZL6C0PpzvYhLS9ESPMhbeFWQkRuCgQweqAvQqOsdk1pDcE3ZIG5 rt902cegWn/zmrit3hTbT6n3k7Cj+kR4gpX/I/FSsRzWBSIQhdBwEL9Sa2v7DxCX CzLb2GpVMV5yAw1xeTKwbyjQ/UnT6OaTfayccYxoe9uRmL6Q8AWR/HyHlFQsecPU GzUrr2iOLMXapQ== -----END CERTIFICATE-----Generated at Wed Dec 17 20:14:03 2025 by rpki-client