This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft File: KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft (raw, json) Hash identifier: nQ7Z7lxvxDTjWnHOwWcNFeBna2oKI+92a2pRQWrcKDc= Subject key identifier: F8:D9:06:A2:95:98:96:3E:8C:7E:8A:43:F4:42:B1:23:71:AA:5B:07 Authority key identifier: 28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE Certificate issuer: /CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae Certificate serial: 019B3A9177E8CA73CE2ED2DAA88B0738EDC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft Manifest number: 0BEC Signing time: Sat 20 Dec 2025 07:02:50 +0000 Manifest this update: Sat 20 Dec 2025 07:02:50 +0000 Manifest next update: Sun 21 Dec 2025 07:02:50 +0000 Files and hashes: 1: 4Dd_oz2TtpOXQBrGavmGYMPXNlw.roa (hash: lEaJsZdsULkNE5Gu41TR5VUrs6XkOuSkB/MqNMbSRqE=) 2: 9CKQGKCQI-bIMlSOn18EkSByP_c.roa (hash: fUEwlGorb/53MsJAC9arcQFk2OY9saq26gPtLezc70o=) 3: Ehx_bk8hfbPb2wCCkbIFutyAoiQ.roa (hash: +HKiRGiNwcMbHRNsEOcJQScZZXduQOT3b8IfA7DUH+8=) 4: KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl (hash: ezkob7Wy+2UlvHLEI1OiCv9Kaqhd691haCQr5NOyjZM=) 5: Zpf_5cQ4FG3XJD2pSNgqdO6RL64.roa (hash: lCypfh+z48AhXuHBOYJSvWYoFHxYmD6jZDOJXXouuHI=) 6: fawo1EoqRqBJwHjBpTPTmcGb0cM.roa (hash: F6clH7PVg2lpM3y/mX4Zj9CRymDOfHXzUQhjxqzwyxg=) 7: o9r3uR2f73He5KEKu4BwYPFzrZs.roa (hash: di2c5UqcUyXblOdBvGL8kM199QqPxFbroxHSs6c/vq8=) 8: qF7Yer0u7ziOGGwDeljcv2iin4k.roa (hash: ahTinSaOPP9oVbrP+xhco0U3iDA/GD0BuDeaOSksTIc=) 9: sd0jlwypX7mTRSVDcmbA2KcPRVw.roa (hash: YbZCCfMPY850ehWHI89VOAxoC5oI9QnHcBkGCUColGw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:91:77:e8:ca:73:ce:2e:d2:da:a8:8b:07:38:ed:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae Validity Not Before: Dec 20 07:02:50 2025 GMT Not After : Dec 21 07:02:50 2025 GMT Subject: CN=f8d906a29598963e8c7e8a43f442b12371aa5b07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a8:2d:16:0f:56:4c:e0:04:4f:1b:25:e2:66: 94:ad:e5:a4:19:c3:78:60:3e:0a:f0:53:b9:ba:2b: 0f:c4:a6:65:fb:d2:a6:36:d2:b7:83:78:cd:fe:fb: ca:21:20:dd:01:03:5d:36:b1:bb:b2:0b:57:21:86: 2c:8a:ee:51:04:e4:4c:c4:4a:6a:c4:21:b3:e9:0e: 9d:54:06:ef:b6:f3:21:a0:b3:39:c0:d7:f7:a4:68: 4a:fc:44:f2:5a:44:d4:6f:bf:b1:bf:8f:a2:81:bb: d2:3e:c9:fd:e1:82:c5:f4:1e:ca:3c:74:ae:55:28: 78:cd:e3:1b:f3:af:cb:cb:0a:55:89:44:40:a7:9b: 7c:13:4b:6d:1f:eb:68:b7:96:b5:be:4a:11:3f:73: 3f:83:8f:db:c7:d3:bf:41:2b:e3:2d:b6:e0:12:4c: ab:4c:25:6d:b9:f2:e4:bd:a2:21:b4:2e:1e:ff:87: 88:a6:90:e3:fe:8e:5c:0e:ba:00:07:49:f7:78:c1: 3a:da:1e:26:34:50:b8:2e:97:ec:b0:36:b5:10:cf: 3d:ee:f3:4d:a7:5a:3a:84:b1:93:1f:a9:04:8e:0a: 78:da:3a:ec:21:99:66:21:d5:e3:c6:86:7f:0d:b7: 23:03:0c:e1:14:f9:8b:d5:af:bc:d2:27:12:71:9f: bc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D9:06:A2:95:98:96:3E:8C:7E:8A:43:F4:42:B1:23:71:AA:5B:07 X509v3 Authority Key Identifier: keyid:28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:8a:db:20:37:fe:93:72:48:2c:00:55:74:1a:c9:d0:61:3c: 0d:97:4e:4f:cc:ed:e1:42:b3:d7:7e:a4:61:37:87:1b:13:48: d4:ff:7f:f5:05:bd:26:7b:69:c9:32:4e:d8:fa:67:94:52:12: 54:53:2e:cc:11:c1:db:c1:1a:c2:2e:66:2f:84:44:1c:96:b5: d4:0f:fb:bc:d2:09:6c:ee:8d:f6:86:8b:cd:e7:5e:79:91:bc: b4:9b:db:da:73:14:76:30:be:d3:46:d9:6d:09:46:84:f8:6b: a0:02:ef:10:07:fc:23:6f:98:82:b9:88:c4:aa:c8:a8:c4:1d: 1b:07:17:36:a0:0a:05:11:30:66:33:5d:e0:8d:83:a7:db:de: 1b:44:4f:a9:be:6a:1d:11:03:b2:2a:25:32:4a:98:f9:03:e8: 46:b1:0f:6b:86:1c:90:f4:19:d9:28:8d:d0:76:75:ec:d5:fb: 24:6e:12:4b:ec:d2:80:72:ec:3a:84:3c:de:8e:93:81:86:d2: f2:a8:4f:4c:0c:fd:76:20:05:2b:aa:31:25:44:31:df:02:74: bd:58:26:72:67:24:27:c7:b3:64:db:24:ac:21:cd:a8:6b:5c: ca:3c:3a:cf:9b:32:c3:2d:51:7b:9a:01:9f:74:30:7d:2f:37: 94:fc:9c:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kXfoynPOLtLaqIsHOO3DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ZmQ2NmU0M2ExMDQ2MzNiMjdiYWM1MzliOThiZGY4ZWJm YWM5YWUwHhcNMjUxMjIwMDcwMjUwWhcNMjUxMjIxMDcwMjUwWjAzMTEwLwYDVQQD EyhmOGQ5MDZhMjk1OTg5NjNlOGM3ZThhNDNmNDQyYjEyMzcxYWE1YjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6gtFg9WTOAETxsl4maUreWkGcN4 YD4K8FO5uisPxKZl+9KmNtK3g3jN/vvKISDdAQNdNrG7sgtXIYYsiu5RBORMxEpq xCGz6Q6dVAbvtvMhoLM5wNf3pGhK/ETyWkTUb7+xv4+igbvSPsn94YLF9B7KPHSu VSh4zeMb86/LywpViURAp5t8E0ttH+tot5a1vkoRP3M/g4/bx9O/QSvjLbbgEkyr TCVtufLkvaIhtC4e/4eIppDj/o5cDroAB0n3eME62h4mNFC4LpfssDa1EM897vNN p1o6hLGTH6kEjgp42jrsIZlmIdXjxoZ/DbcjAwzhFPmL1a+80icScZ+8rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPjZBqKVmJY+jH6KQ/RCsSNxqlsHMB8GA1UdIwQY MBaAFCj9ZuQ6EEYzsnusU5uYvfjr+smuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1AxbTVEb1FSak95ZTZ4VG01aTktT3Y2eWE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84ZWQzYjctYmIyZC00ZjRkLTlkYjYt MjY3NjY5ZjM1NjQ4LzEvS1AxbTVEb1FSak95ZTZ4VG01aTktT3Y2eWE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi84ZWQzYjctYmIyZC00ZjRkLTlkYjYtMjY3NjY5ZjM1NjQ4 LzEvS1AxbTVEb1FSak95ZTZ4VG01aTktT3Y2eWE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoYrbIDf+ k3JILABVdBrJ0GE8DZdOT8zt4UKz136kYTeHGxNI1P9/9QW9JntpyTJO2PpnlFIS VFMuzBHB28Eawi5mL4REHJa11A/7vNIJbO6N9oaLzedeeZG8tJvb2nMUdjC+00bZ bQlGhPhroALvEAf8I2+YgrmIxKrIqMQdGwcXNqAKBREwZjNd4I2Dp9veG0RPqb5q HREDsiolMkqY+QPoRrEPa4YckPQZ2SiN0HZ17NX7JG4SS+zSgHLsOoQ83o6TgYbS 8qhPTAz9diAFK6oxJUQx3wJ0vVgmcmckJ8ezZNskrCHNqGtcyjw6z5sywy1Re5oB n3QwfS83lPyc0g== -----END CERTIFICATE-----Generated at Sat Dec 20 15:12:10 2025 by rpki-client