This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft File: KJVkfZ_RahaU-AJuvod2DLUx6w4.mft (raw, json) Hash identifier: 4gzzisoSAngfTzRFy64UVxhxdqGRZhjn/mMtfh/Nptc= Subject key identifier: 57:B8:09:9C:5C:31:89:07:87:17:97:87:FC:4C:1C:F0:B7:10:36:DF Authority key identifier: 28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E Certificate issuer: /CN=2895647d9fd16a1694f8026ebe87760cb531eb0e Certificate serial: 019B6FFDA7C3F79D9BDBB5C90ABD05801883 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft Manifest number: 17A2 Signing time: Tue 30 Dec 2025 16:00:53 +0000 Manifest this update: Tue 30 Dec 2025 16:00:53 +0000 Manifest next update: Wed 31 Dec 2025 16:00:53 +0000 Files and hashes: 1: 0HbGWRHIhLcfmf6kLXAQdepQymA.roa (hash: RFLCzQy5MXPE72eUiDWdR8f6HUuF1oAdf92PY+ZrIEU=) 2: KJVkfZ_RahaU-AJuvod2DLUx6w4.crl (hash: sDA9g5l7cvk+ihP/nUvfrAfXSkKt0CX+jNCkLoe/2HI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 16:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:fd:a7:c3:f7:9d:9b:db:b5:c9:0a:bd:05:80:18:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2895647d9fd16a1694f8026ebe87760cb531eb0e Validity Not Before: Dec 30 16:00:53 2025 GMT Not After : Dec 31 16:00:53 2025 GMT Subject: CN=57b8099c5c31890787179787fc4c1cf0b71036df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:be:34:3c:1e:d0:10:1e:d8:f3:88:69:7d:ed: 4f:c4:fe:51:e8:95:38:27:81:60:27:da:b9:a7:d6: df:0c:f5:31:1f:0d:11:24:be:ec:b7:17:d6:a4:6a: 16:2d:ad:4e:6a:e9:ad:44:7d:9a:29:4b:44:75:d1: e8:31:b1:32:f5:dc:ba:9f:14:7a:6f:59:69:2a:88: 51:b0:2e:b9:50:91:20:33:44:f6:a4:ff:ba:8d:8e: 92:a8:99:40:63:95:05:89:54:a4:6a:76:9d:bf:a6: 98:17:ab:21:44:88:24:d1:4e:f0:4c:d2:0a:56:eb: 2e:ff:43:65:0c:6b:51:02:b8:2a:31:5b:11:2f:fd: ab:67:59:12:28:7b:70:88:71:a6:44:73:14:4c:a5: a8:28:d8:d1:c6:0a:d3:ea:ca:5f:9f:ce:8a:14:ce: ed:31:aa:65:85:66:44:af:10:91:e6:7f:7a:37:2a: a9:f7:47:52:89:f9:c8:75:d9:0a:7f:a5:70:ff:15: 5f:b3:e6:5a:7f:42:8c:0d:8f:0c:b0:c0:d6:1d:ec: 4b:9f:6a:2d:89:85:d7:1a:61:2f:8a:90:0a:31:39: 35:89:4d:1e:94:03:ce:99:42:23:e9:6e:43:9d:1b: a9:1f:16:c1:cc:df:db:4c:43:9a:15:4a:db:28:5d: 0e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B8:09:9C:5C:31:89:07:87:17:97:87:FC:4C:1C:F0:B7:10:36:DF X509v3 Authority Key Identifier: keyid:28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:dc:9d:77:ff:99:11:3d:45:6d:a8:31:6a:2b:83:a7:ff:8d: 66:82:b6:f2:86:84:1c:ef:67:8e:ca:63:1c:9c:fe:73:fa:a3: f6:11:12:c9:3c:29:6f:4c:54:35:2c:68:8a:45:eb:2e:f1:0a: 51:01:96:f3:46:8f:7e:1a:02:bc:64:75:89:a0:f9:4a:85:80: 2b:e0:57:45:e8:8a:7b:e9:f0:49:93:cb:96:58:d7:ab:6a:b1: 52:e2:5d:6a:e4:63:4b:2a:c2:b9:f4:ad:62:fa:79:6e:2c:03: cc:8a:00:22:f0:ff:d2:db:16:f0:23:2a:a6:6e:da:e4:35:49: 44:81:75:86:e1:6b:4f:37:c1:12:3c:ef:4c:bc:02:02:39:8c: f1:bd:42:37:f9:ef:42:48:4e:c9:46:5d:0c:79:87:48:99:89: 90:de:a1:c2:b0:e2:37:8a:25:82:f7:1e:36:5a:fd:c8:1b:d9: 90:09:7c:9e:46:2d:5e:80:94:4c:90:da:60:fa:54:af:f1:2e: 64:f6:c8:ec:6d:0d:60:d9:a8:c5:01:a2:a5:02:5a:c7:59:e2: 7e:95:bc:fc:88:31:a7:b4:ae:8c:40:d5:06:15:c7:a4:7c:51: 31:e4:01:dc:f8:49:13:08:96:a3:78:bc:96:31:9f:e1:a6:2e: 03:69:01:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtv/afD952b27XJCr0FgBiDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4OTU2NDdkOWZkMTZhMTY5NGY4MDI2ZWJlODc3NjBjYjUz MWViMGUwHhcNMjUxMjMwMTYwMDUzWhcNMjUxMjMxMTYwMDUzWjAzMTEwLwYDVQQD Eyg1N2I4MDk5YzVjMzE4OTA3ODcxNzk3ODdmYzRjMWNmMGI3MTAzNmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyb40PB7QEB7Y84hpfe1PxP5R6JU4 J4FgJ9q5p9bfDPUxHw0RJL7stxfWpGoWLa1OaumtRH2aKUtEddHoMbEy9dy6nxR6 b1lpKohRsC65UJEgM0T2pP+6jY6SqJlAY5UFiVSkanadv6aYF6shRIgk0U7wTNIK Vusu/0NlDGtRArgqMVsRL/2rZ1kSKHtwiHGmRHMUTKWoKNjRxgrT6spfn86KFM7t MaplhWZErxCR5n96Nyqp90dSifnIddkKf6Vw/xVfs+Zaf0KMDY8MsMDWHexLn2ot iYXXGmEvipAKMTk1iU0elAPOmUIj6W5DnRupHxbBzN/bTEOaFUrbKF0ODwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFe4CZxcMYkHhxeXh/xMHPC3EDbfMB8GA1UdIwQY MBaAFCiVZH2f0WoWlPgCbr6Hdgy1MesOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0pWa2ZaX1JhaGFVLUFKdXZvZDJETFV4Nnc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80ODk1NzYtNGRmYi00YTAzLWIwYTMt ZWNjZGMwY2U3ZDE0LzEvS0pWa2ZaX1JhaGFVLUFKdXZvZDJETFV4Nnc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy80ODk1NzYtNGRmYi00YTAzLWIwYTMtZWNjZGMwY2U3ZDE0 LzEvS0pWa2ZaX1JhaGFVLUFKdXZvZDJETFV4Nnc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhNydd/+Z ET1FbagxaiuDp/+NZoK28oaEHO9njspjHJz+c/qj9hESyTwpb0xUNSxoikXrLvEK UQGW80aPfhoCvGR1iaD5SoWAK+BXReiKe+nwSZPLlljXq2qxUuJdauRjSyrCufSt Yvp5biwDzIoAIvD/0tsW8CMqpm7a5DVJRIF1huFrTzfBEjzvTLwCAjmM8b1CN/nv QkhOyUZdDHmHSJmJkN6hwrDiN4olgvceNlr9yBvZkAl8nkYtXoCUTJDaYPpUr/Eu ZPbI7G0NYNmoxQGipQJax1nifpW8/Igxp7SujEDVBhXHpHxRMeQB3PhJEwiWo3i8 ljGf4aYuA2kB7A== -----END CERTIFICATE-----Generated at Wed Dec 31 01:59:23 2025 by rpki-client