This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft File: kvSxwL-61GuBHu5Wihj7qhSp1oc.mft (raw, json) Hash identifier: zmo452275ZomHKRyUIsDzG9+aumYnj0jPxCOoLr86r8= Subject key identifier: A2:FF:4B:34:D0:AD:5F:6E:DD:27:45:A8:A0:AA:71:1B:94:CB:0F:42 Authority key identifier: 92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87 Certificate issuer: /CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687 Certificate serial: 019B3BA296215919046436B8594B69E3661F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 12:01:09 +0000 Manifest this update: Sat 20 Dec 2025 12:01:09 +0000 Manifest next update: Sun 21 Dec 2025 12:01:09 +0000 Files and hashes: 1: 0BEzsazQz-3-fzZOXUBzFR9-SEA.roa (hash: xJdvyBzFJCzDNWN1w4SpJl++kA85g2jY9KiUG4fQa2E=) 2: 1-Oq1-4hF4yCcXZpsJGDusj_hVz4.roa (hash: OUB6/BRumx2Zsh75d5vBwXiCTv8Msk13LqoxzZruX1k=) 3: 8tP5koea75iLq4fzJTwOilUzRew.roa (hash: nuWcmB+t6L5mbRuVr1gjXyaKkJjO2CWP61eKOZ9j5qA=) 4: Q39EicWKCAbcPFSCPOWxVuicNBs.roa (hash: xkLxxvpElKUg8h/PAkiiPnxY3jd1NXP1Ti2bF3eI0Qw=) 5: YTyyNdEqtE7TLFnb5kSYtSXQ6C0.roa (hash: 5KsxEGAO2miZS2qYCAKx62LCPIMduhWMuoqvvhKuiRU=) 6: d8pyP86Y6uwqz1d9ZUqrw3D4VrQ.roa (hash: rdq5z21gij6clSNE/4yKomwJ24Ycc5gYpA5zAtS7MBw=) 7: hLpPT363pnl477GGqc5nq4BfcT0.roa (hash: BX64RFEmiS7zTWdQnQw6dnEj3jYNCJBQmKLpW7F/EpQ=) 8: jNmr_uA5Ik1ev1kitS3H0XRfSs0.roa (hash: MWQMJNqYJOs+qGkZcyXQIyfm7wzm6V1fSmAClA7kRpk=) 9: kvSxwL-61GuBHu5Wihj7qhSp1oc.crl (hash: yofxLifVnHpQ9FPvRwJorfqst5L+EHCE7PZY3h3KDwU=) 10: o53Asxejm11sb8YF2NlsCql1ybY.roa (hash: F+bQ4Enys65hQ07aHbKIp+uPwSt+gBE59SdxChGuPUY=) 11: tCAzKxpLrkmFMZR4RRCQd9p1ADo.roa (hash: SCXqn9Sk4hWHzAcns5LvAAZM9YZ7kblGiEWX7nVj190=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:96:21:59:19:04:64:36:b8:59:4b:69:e3:66:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687 Validity Not Before: Dec 20 12:01:09 2025 GMT Not After : Dec 21 12:01:09 2025 GMT Subject: CN=a2ff4b34d0ad5f6edd2745a8a0aa711b94cb0f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:be:fc:b7:77:5f:0f:9a:41:04:56:10:b0:4c: 78:f1:f1:db:20:d9:74:6b:1b:26:83:08:31:cf:48: e0:c3:43:f0:c1:0c:99:46:79:3b:68:dc:b6:14:c8: 50:33:49:b8:87:1b:96:f8:c0:87:78:48:ae:20:d7: dd:47:59:ae:9b:92:d2:e5:6e:4c:8f:6b:06:c9:b2: 87:12:2e:a8:75:93:fd:5c:ca:5e:10:45:59:fb:ee: d8:97:64:1b:05:5d:0a:0a:92:f4:cc:bc:29:c9:b6: 12:39:f7:18:75:73:2c:0b:ac:78:f1:f8:f3:3b:4c: fd:83:a1:bd:23:4f:84:8c:94:88:f0:fe:c0:95:c7: 75:41:66:24:32:47:49:88:18:39:d8:e7:af:4b:5a: c8:56:71:aa:00:ae:af:b3:30:2b:f9:a9:0c:9e:79: fb:a2:5e:8b:e7:b6:29:98:00:ea:0c:4f:07:cc:fb: 8b:a7:c6:c1:e5:c2:37:2d:79:9b:35:e1:4f:f7:54: c0:c8:2b:1c:6c:e4:f9:77:9e:4a:8f:7d:f6:b4:ed: c1:47:ca:c7:eb:e7:f8:ce:94:f5:41:61:8c:6b:51: 8b:6b:66:39:92:86:5c:16:78:b7:0c:f8:ce:b9:2f: 51:8b:1e:62:1e:7b:da:c0:69:a3:bb:fd:fa:d9:71: e8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:FF:4B:34:D0:AD:5F:6E:DD:27:45:A8:A0:AA:71:1B:94:CB:0F:42 X509v3 Authority Key Identifier: keyid:92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:c7:7d:a9:0e:3d:8d:3e:98:38:61:10:36:c9:41:91:57:4e: f7:b6:b7:77:2f:60:fa:18:aa:0c:78:78:be:3b:16:ae:54:04: 5e:db:d5:24:09:2c:63:77:e7:18:11:00:d2:6a:79:9e:40:93: e2:c2:5b:d5:74:e2:e1:f1:84:ba:33:7c:2c:cf:3a:a0:6b:e0: 08:6a:0e:b4:9d:62:f6:62:00:75:d0:cf:93:46:39:18:2b:64: 0d:bd:70:64:96:ef:90:57:18:96:4c:12:90:14:09:2f:19:8e: 8a:d5:82:64:3e:e1:44:ec:d7:a8:49:23:5f:6c:53:e0:01:68: fe:9f:08:0b:af:a1:12:07:37:f8:65:04:d1:ea:ca:d3:08:33: 86:1b:c2:ea:c2:95:db:d4:ef:3d:7f:f7:4c:6b:37:02:e4:ff: d8:15:42:11:62:39:f2:47:23:30:a0:1b:bf:dc:40:28:33:f7: 6a:9f:c2:fe:5a:36:26:55:95:bc:c0:da:85:2d:c8:ca:a8:04: bf:8c:b6:10:ba:91:76:c5:d5:a8:62:56:ed:4b:0d:fa:66:3e: f8:30:d2:7b:bf:61:9c:7b:d3:f5:9f:3e:56:db:f4:8c:e5:78: 33:ca:77:5f:ea:61:a4:0d:5c:9c:55:1c:18:3a:23:75:18:49: fb:58:18:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7opYhWRkEZDa4WUtp42YfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZjRiMWMwYmZiYWQ0NmI4MTFlZWU1NjhhMThmYmFhMTRh OWQ2ODcwHhcNMjUxMjIwMTIwMTA5WhcNMjUxMjIxMTIwMTA5WjAzMTEwLwYDVQQD EyhhMmZmNGIzNGQwYWQ1ZjZlZGQyNzQ1YThhMGFhNzExYjk0Y2IwZjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt778t3dfD5pBBFYQsEx48fHbINl0 axsmgwgxz0jgw0PwwQyZRnk7aNy2FMhQM0m4hxuW+MCHeEiuINfdR1mum5LS5W5M j2sGybKHEi6odZP9XMpeEEVZ++7Yl2QbBV0KCpL0zLwpybYSOfcYdXMsC6x48fjz O0z9g6G9I0+EjJSI8P7Alcd1QWYkMkdJiBg52OevS1rIVnGqAK6vszAr+akMnnn7 ol6L57YpmADqDE8HzPuLp8bB5cI3LXmbNeFP91TAyCscbOT5d55Kj332tO3BR8rH 6+f4zpT1QWGMa1GLa2Y5koZcFni3DPjOuS9Rix5iHnvawGmju/362XHoeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKL/SzTQrV9u3SdFqKCqcRuUyw9CMB8GA1UdIwQY MBaAFJL0scC/utRrgR7uVooY+6oUqdaHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi80Zjg1MTQtMmUyMC00OTM1LTk5NWMt YTA4NGY3NmM4ZTJiLzEva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi80Zjg1MTQtMmUyMC00OTM1LTk5NWMtYTA4NGY3NmM4ZTJi LzEva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbcd9qQ49 jT6YOGEQNslBkVdO97a3dy9g+hiqDHh4vjsWrlQEXtvVJAksY3fnGBEA0mp5nkCT 4sJb1XTi4fGEujN8LM86oGvgCGoOtJ1i9mIAddDPk0Y5GCtkDb1wZJbvkFcYlkwS kBQJLxmOitWCZD7hROzXqEkjX2xT4AFo/p8IC6+hEgc3+GUE0erK0wgzhhvC6sKV 29TvPX/3TGs3AuT/2BVCEWI58kcjMKAbv9xAKDP3ap/C/lo2JlWVvMDahS3IyqgE v4y2ELqRdsXVqGJW7UsN+mY++DDSe79hnHvT9Z8+Vtv0jOV4M8p3X+phpA1cnFUc GDojdRhJ+1gYUw== -----END CERTIFICATE-----Generated at Sat Dec 20 18:39:15 2025 by rpki-client