This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft File: KXnMQ8JGn_pc-LesY5sB86dorFU.mft (raw, json) Hash identifier: gfnXBACiE9ixpCoyX5qOQig9aFnm7gatZ40TjszurDI= Subject key identifier: 6B:19:97:7B:38:32:3E:79:B2:5B:9D:EF:06:69:4F:F2:07:71:8A:CE Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55 Certificate issuer: /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55 Certificate serial: 019B39466222C2DDEB60CD9B59CA450B9C5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft Manifest number: 0926 Signing time: Sat 20 Dec 2025 01:01:12 +0000 Manifest this update: Sat 20 Dec 2025 01:01:12 +0000 Manifest next update: Sun 21 Dec 2025 01:01:12 +0000 Files and hashes: 1: EI7dYlJh6LhMXB8o9nb3T4Z5aSU.roa (hash: MmSw3Gp5lTTxkK0eiPx+eF3FQfljG+ipyig54PF6DUw=) 2: KXnMQ8JGn_pc-LesY5sB86dorFU.crl (hash: ATiNitw6ZNLIdP/JwyHk/XmXY7m4Db6GLrO89Qtjt0Q=) 3: RnDsNDAUOmfocBcXgLTcHPDDhKQ.roa (hash: yyfreslJl3l+RdMxXIwzsT6k7E7HMN8jhFZGTbEdlJI=) 4: Y8zzieez_mdBu3g9ytJW3F1qtcM.roa (hash: IBQYnJmIJpRbjM/GjJNvEs/gT4e0NBRUv4AwTGSAB8I=) 5: _eEka1D2F9svheD7_1S50A6jg0c.roa (hash: FY3lzS47CrifHw8hxi2Yq9gCSugm8bX/KQaXGUUplkU=) 6: jTf4hu8p-YdeMkBcAMreST3RURY.roa (hash: IZtRwQReOQuA1Z4S5nLNVFRKIJVo5gpQ/QND37UUm9g=) 7: qV0bi1f4xUUogQC2jTvfOlCFNsY.roa (hash: JeZIDT/pHiJyZCYpNCof5wbSJ0INX3sJ+QZbs083uM0=) 8: tW9K0gmr3gNJNZi6H4Oj8e3Jn10.roa (hash: bWzKXJxMql9A44/Gmu3Ld5HFcp9B6Ivj+R3Ym/3BJEA=) 9: ueIl5HLpFqn43HBQc7-Q4ZVn06k.roa (hash: fzhg7jHCYT5oIQ824HH1vwjcqcxosVhT8YpZmbw8K50=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:62:22:c2:dd:eb:60:cd:9b:59:ca:45:0b:9c:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55 Validity Not Before: Dec 20 01:01:12 2025 GMT Not After : Dec 21 01:01:12 2025 GMT Subject: CN=6b19977b38323e79b25b9def06694ff207718ace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2f:9a:81:d6:71:eb:99:e0:c0:46:99:33:66: 43:45:05:e0:88:20:32:a6:a7:af:41:b1:3c:58:44: 4e:21:b5:e1:4a:77:72:fc:7e:e1:60:01:2d:07:a1: ae:3e:7f:98:89:eb:d0:95:ad:89:29:37:31:b3:29: d1:2f:5c:2a:28:f5:6c:7c:c8:75:16:ee:18:21:dd: d1:1a:09:ce:6b:ba:e7:65:ac:03:8b:f1:c6:1c:50: d4:d3:55:17:af:4a:20:88:ca:f0:91:ff:c9:ab:7d: 61:e9:d0:32:c7:1a:52:e4:2b:48:57:53:ee:b9:76: 6e:65:08:20:3e:f7:69:69:f9:49:91:8e:26:65:fb: ef:27:de:c5:e4:6a:11:01:c6:61:e9:06:a0:24:a6: 07:ca:af:1a:6c:28:50:ea:48:b9:26:29:1b:e7:96: 1c:c0:82:3c:6c:34:2a:3c:4b:da:19:95:53:bf:cb: 37:c4:82:cb:7c:2b:b7:f5:30:bf:f3:e7:0e:aa:45: 94:b0:53:f5:95:30:ff:06:38:fc:b2:b7:33:7c:48: 53:9c:32:cc:a2:7d:cc:b8:fc:28:94:cd:63:62:1d: cb:03:65:16:a9:a3:33:6c:df:b1:b7:6b:f4:02:b8: 23:2c:9c:db:d6:47:be:fb:27:34:cc:25:dd:3f:96: f1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:19:97:7B:38:32:3E:79:B2:5B:9D:EF:06:69:4F:F2:07:71:8A:CE X509v3 Authority Key Identifier: keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:d9:71:e1:b5:c7:8a:8f:01:25:3b:db:4a:c7:58:6b:9b:71: c9:8a:b8:8a:13:18:8a:b9:95:16:fe:07:60:92:a8:e3:1d:9d: f3:c5:54:3e:9e:00:2b:c9:ae:b8:77:bb:8b:da:a5:1b:56:0b: c5:95:84:25:c5:a5:47:e4:fb:1f:6f:01:34:28:38:67:a3:6e: 28:59:7e:73:be:79:95:71:b9:e4:67:00:fb:44:d3:e1:47:bb: 52:93:36:6a:98:27:d2:f0:dd:ff:e3:24:06:e1:7a:2a:fb:cb: 6a:05:2d:86:64:09:a5:a1:13:5e:03:64:03:08:3f:52:65:36: 92:9c:c8:6e:b6:cb:5d:75:d2:39:dc:88:3c:f3:1d:ec:77:51: c4:65:65:bc:65:0d:dc:7f:63:d9:32:84:ac:c3:07:4b:b8:d9: f9:05:51:38:ca:ad:21:26:75:dc:b3:9a:ad:a5:45:0c:5b:d4: a2:e8:b2:cb:e7:ec:3f:e3:29:21:07:e9:5d:75:ad:6d:46:a9: d9:4a:e8:78:72:1d:b5:fa:af:f3:77:d0:91:c1:31:c3:1c:b3: 8f:d8:26:7e:4d:ba:35:77:03:82:cf:41:d1:f4:8d:1c:ea:8f: 3f:96:ec:e2:24:a1:37:73:0b:33:f8:a6:d8:0a:dc:b2:d9:f0: 0b:8b:9e:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RmIiwt3rYM2bWcpFC5xcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NzljYzQzYzI0NjlmZmE1Y2Y4YjdhYzYzOWIwMWYzYTc2 OGFjNTUwHhcNMjUxMjIwMDEwMTEyWhcNMjUxMjIxMDEwMTEyWjAzMTEwLwYDVQQD Eyg2YjE5OTc3YjM4MzIzZTc5YjI1YjlkZWYwNjY5NGZmMjA3NzE4YWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyy+agdZx65ngwEaZM2ZDRQXgiCAy pqevQbE8WEROIbXhSndy/H7hYAEtB6GuPn+YievQla2JKTcxsynRL1wqKPVsfMh1 Fu4YId3RGgnOa7rnZawDi/HGHFDU01UXr0ogiMrwkf/Jq31h6dAyxxpS5CtIV1Pu uXZuZQggPvdpaflJkY4mZfvvJ97F5GoRAcZh6QagJKYHyq8abChQ6ki5Jikb55Yc wII8bDQqPEvaGZVTv8s3xILLfCu39TC/8+cOqkWUsFP1lTD/Bjj8srczfEhTnDLM on3MuPwolM1jYh3LA2UWqaMzbN+xt2v0ArgjLJzb1ke++yc0zCXdP5bxLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGsZl3s4Mj55slud7wZpT/IHcYrOMB8GA1UdIwQY MBaAFCl5zEPCRp/6XPi3rGObAfOnaKxVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1huTVE4SkduX3BjLUxlc1k1c0I4NmRvckZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9lNDBmOWQtMDBmNC00MGQ5LThiOGQt NDBlYWViYzFjNDdlLzEvS1huTVE4SkduX3BjLUxlc1k1c0I4NmRvckZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9lNDBmOWQtMDBmNC00MGQ5LThiOGQtNDBlYWViYzFjNDdl LzEvS1huTVE4SkduX3BjLUxlc1k1c0I4NmRvckZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmtlx4bXH io8BJTvbSsdYa5txyYq4ihMYirmVFv4HYJKo4x2d88VUPp4AK8muuHe7i9qlG1YL xZWEJcWlR+T7H28BNCg4Z6NuKFl+c755lXG55GcA+0TT4Ue7UpM2apgn0vDd/+Mk BuF6KvvLagUthmQJpaETXgNkAwg/UmU2kpzIbrbLXXXSOdyIPPMd7HdRxGVlvGUN 3H9j2TKErMMHS7jZ+QVROMqtISZ13LOaraVFDFvUouiyy+fsP+MpIQfpXXWtbUap 2UroeHIdtfqv83fQkcExwxyzj9gmfk26NXcDgs9B0fSNHOqPP5bs4iShN3MLM/im 2ArcstnwC4ueTg== -----END CERTIFICATE-----Generated at Sat Dec 20 08:39:31 2025 by rpki-client