This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft File: KIVYUqS80b8eyBPzwTsPHzcvOXE.mft (raw, json) Hash identifier: qzHzOY/gy0YvSNr5kr3yuWyJ0cUIOSsDN/GXNkSyUfM= Subject key identifier: CC:29:B0:C2:11:04:FA:A4:A5:E1:36:92:B9:3D:DF:32:AC:4D:7A:C5 Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Certificate serial: 019B3C105EEA87286827CBEF0B5F18381AFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft Manifest number: 17A5 Signing time: Sat 20 Dec 2025 14:01:04 +0000 Manifest this update: Sat 20 Dec 2025 14:01:04 +0000 Manifest next update: Sun 21 Dec 2025 14:01:04 +0000 Files and hashes: 1: 0QJCOt-53tnbei-BBNpPRqd93lA.roa (hash: SxpfZus2XMCNBzDteZgXEjPeCC02JP1wgshR4fmnE74=) 2: KIVYUqS80b8eyBPzwTsPHzcvOXE.crl (hash: h03jBkJz8vc+BYBjElWxWh/e8O9vzJHexZuoZDd3Hmw=) 3: PQE-MW_ft7NOulI3nuA3Ttqd9zM.roa (hash: tS26IQNDjX0XuEf3rRKTOSs366e2zvh7MCyAP+zqiiA=) 4: S87F6thVxwCZscy_VovEDJcB8HM.roa (hash: E4K0X+XV1CxBX46EYMwd+oDIHEvCmqQAB6iKbCet77s=) 5: Y8SRLYUIdW_joHTz3PksrXah_rw.roa (hash: VwC43mv96BdBo/MF0MD6doZlRHk6o8P7NRY9bJBrem0=) 6: aer8a26VEmmy2Cy7_8hze3JY1ak.roa (hash: 7q3S2TY/+jxhv9AP9xHCanK4ZXfND8pGXb4R0LjZhXM=) 7: eeBJ8THWmjzQcGoaeafXUKnM3oI.roa (hash: sKx/pHZQstUAOq64IcMsxEnWLROmY7DGo9QHgBCkTRM=) 8: haVl-IddpVIOhoadpyJZ_a5CgAY.roa (hash: xEVD5o+b6swUkv0iGkz/lglqYHWH3tPCrwBEj8vxyI4=) 9: kgTLGOsUBsYOKbWXNc3cqPzwgb4.roa (hash: ST4s4BtTU2rODHYfq5kax5E8/vHW7595/W9otyGkb80=) 10: pL_tDJmTdtKmoEEnGB3Z5Sqfoww.roa (hash: H1JfkznIuDny5RXJezYE6vZGSTmymf6VReWBmSqQlss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:5e:ea:87:28:68:27:cb:ef:0b:5f:18:38:1a:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Validity Not Before: Dec 20 14:01:04 2025 GMT Not After : Dec 21 14:01:04 2025 GMT Subject: CN=cc29b0c21104faa4a5e13692b93ddf32ac4d7ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a1:b7:22:c4:73:07:cf:1e:1e:63:4b:7b:51: d4:cd:51:30:55:e7:b0:c1:e0:62:97:85:7b:e2:df: 0a:15:7b:02:2e:55:9d:13:28:16:81:a9:9d:a8:99: 85:64:d2:08:38:c3:b7:17:5b:9b:ba:04:c8:85:b6: 90:35:68:81:98:3e:21:61:8b:c6:d3:39:8c:12:87: 73:73:ba:b1:ef:8e:54:54:ea:bf:bf:1f:cb:d2:0e: b2:11:20:ab:b7:4e:f3:19:a9:0f:f2:bc:7b:36:1f: a6:0d:f3:f1:d6:75:99:10:88:2a:17:47:d6:8a:80: 79:1c:20:73:a2:b2:b6:49:d2:95:eb:33:a2:2d:aa: 6f:77:bd:b5:9b:c9:92:c9:2f:64:dd:7c:bf:8b:f1: f3:bc:b1:9a:37:58:1b:15:ed:b9:ab:2c:0b:43:a7: 1b:b5:6a:9e:04:a1:f2:d2:73:20:75:2e:83:8e:34: 6f:d5:cf:c3:25:f9:90:87:01:ff:11:4f:64:63:84: fe:ea:23:46:52:a1:11:7f:8e:eb:8c:c7:f0:10:e5: 74:cc:2a:0e:47:37:06:fe:64:2d:0c:ad:9f:ae:e2: 5e:7d:49:93:5b:00:c2:ec:95:8c:57:b4:6c:93:bf: ef:5f:2d:b5:ac:36:d0:29:a4:5c:39:25:74:0b:b0: 44:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:29:B0:C2:11:04:FA:A4:A5:E1:36:92:B9:3D:DF:32:AC:4D:7A:C5 X509v3 Authority Key Identifier: keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:2b:d7:2d:36:d4:75:d2:4c:9a:c0:01:bd:20:90:c0:40:72: 0f:63:ff:45:15:90:5d:83:83:df:cd:fb:19:a4:2a:c5:5b:ce: 8a:30:27:5f:42:e0:34:04:bd:fc:90:74:ab:2e:be:c4:36:14: a7:da:86:a7:90:ee:8a:70:ed:5d:cd:76:fc:60:85:c9:c8:0a: 4c:aa:c6:91:96:ae:6a:9b:f7:82:62:62:09:27:21:4a:f3:a2: e3:cd:41:cb:9c:00:7e:40:32:ec:5f:31:53:cd:55:7f:fd:e1: 83:ad:fd:6f:39:ed:84:c9:e1:ce:48:d5:d5:4f:12:ed:f6:80: 31:f0:d3:b4:ee:d5:34:91:31:cf:1a:6b:b0:40:a4:f5:c9:6a: d9:c5:23:d4:cb:b9:0e:73:9e:d4:fa:d1:07:22:ed:a7:e3:bc: 5a:23:a7:f7:bd:5f:fd:0f:f0:55:41:f7:f0:30:ae:4e:24:ae: fe:b3:fc:69:7a:60:aa:9d:00:65:cf:15:57:5f:64:4b:1f:71: d2:3a:74:60:8f:85:d6:bf:93:23:54:d5:b9:a8:96:ac:38:8e: 86:dd:f1:d4:e5:80:a6:d2:58:1d:18:13:34:4b:d7:ef:29:5f: 31:cf:06:58:d6:fe:e0:72:ee:a4:5c:18:06:de:0f:2d:14:f8: 1d:06:fc:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EF7qhyhoJ8vvC18YOBr+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ODU1ODUyYTRiY2QxYmYxZWM4MTNmM2MxM2IwZjFmMzcy ZjM5NzEwHhcNMjUxMjIwMTQwMTA0WhcNMjUxMjIxMTQwMTA0WjAzMTEwLwYDVQQD EyhjYzI5YjBjMjExMDRmYWE0YTVlMTM2OTJiOTNkZGYzMmFjNGQ3YWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKG3IsRzB88eHmNLe1HUzVEwVeew weBil4V74t8KFXsCLlWdEygWgamdqJmFZNIIOMO3F1ubugTIhbaQNWiBmD4hYYvG 0zmMEodzc7qx745UVOq/vx/L0g6yESCrt07zGakP8rx7Nh+mDfPx1nWZEIgqF0fW ioB5HCBzorK2SdKV6zOiLapvd721m8mSyS9k3Xy/i/HzvLGaN1gbFe25qywLQ6cb tWqeBKHy0nMgdS6DjjRv1c/DJfmQhwH/EU9kY4T+6iNGUqERf47rjMfwEOV0zCoO RzcG/mQtDK2fruJefUmTWwDC7JWMV7Rsk7/vXy21rDbQKaRcOSV0C7BESwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMwpsMIRBPqkpeE2krk93zKsTXrFMB8GA1UdIwQY MBaAFCiFWFKkvNG/HsgT88E7Dx83LzlxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEt NzA0NDYzZWJhZDM2LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEtNzA0NDYzZWJhZDM2 LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxyvXLTbU ddJMmsABvSCQwEByD2P/RRWQXYOD3837GaQqxVvOijAnX0LgNAS9/JB0qy6+xDYU p9qGp5DuinDtXc12/GCFycgKTKrGkZauapv3gmJiCSchSvOi481By5wAfkAy7F8x U81Vf/3hg639bznthMnhzkjV1U8S7faAMfDTtO7VNJExzxprsECk9clq2cUj1Mu5 DnOe1PrRByLtp+O8WiOn971f/Q/wVUH38DCuTiSu/rP8aXpgqp0AZc8VV19kSx9x 0jp0YI+F1r+TI1TVuaiWrDiOht3x1OWAptJYHRgTNEvX7ylfMc8GWNb+4HLupFwY Bt4PLRT4HQb8fg== -----END CERTIFICATE-----Generated at Sat Dec 20 19:57:13 2025 by rpki-client