This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft File: kfX87b24TdUvxncNfM_T_GaE-kE.mft (raw, json) Hash identifier: ZIXY2g36Nsba/V77JTnFSguq6UZRys37zGceViCOIEY= Subject key identifier: A2:A3:7B:A3:1F:53:19:01:28:2B:FC:E4:66:A8:1F:4D:D3:67:CF:08 Authority key identifier: 91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41 Certificate issuer: /CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41 Certificate serial: 019B38A209419B70A779E887F7E4C9551781 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft Manifest number: 178D Signing time: Fri 19 Dec 2025 22:01:41 +0000 Manifest this update: Fri 19 Dec 2025 22:01:41 +0000 Manifest next update: Sat 20 Dec 2025 22:01:41 +0000 Files and hashes: 1: 6UpEJlRsXOn9vaGmBJWrZdfalwA.roa (hash: HSwxSSz5lFpaFRsJuAqgaQ8EsTFkTI/T+FmwfdtjYaA=) 2: 9tPvRIgWOFQGF5ALiDiBtpjalf0.roa (hash: CNi9LKlhqfclz9Oir048bs7o3/W9+fUSyftDkxngReE=) 3: JvOQdUjkCtx4pMZ63YDUDSKRif8.roa (hash: lpSKgZ5ZudI2jyQ9YWWPgdYiIoklrO/1U/orK0nz9yw=) 4: kfX87b24TdUvxncNfM_T_GaE-kE.crl (hash: Arfg+jWzZIbgyM3UKYJ169NXFUraQ8m2oKRAXIzpGLQ=) 5: lKDuxfpv6g9ZDhVaa38VKaYZKKg.roa (hash: OVK0az1AcO1NBXsdKgGXvtFiE3weIknB+sCCAuqYuGw=) 6: xXN1JERl6SmTU8LGAK6YjCsE_8g.roa (hash: UJ/2eCVna1OAdfj1e6cD3/kAVB2y1kYmD/HxfsrIilw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:09:41:9b:70:a7:79:e8:87:f7:e4:c9:55:17:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41 Validity Not Before: Dec 19 22:01:41 2025 GMT Not After : Dec 20 22:01:41 2025 GMT Subject: CN=a2a37ba31f531901282bfce466a81f4dd367cf08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7a:4e:66:39:18:b6:b4:16:78:de:2c:f2:6c: 8f:45:1c:89:25:3b:85:27:d9:d7:71:5a:59:97:6b: 42:2e:7f:b5:26:32:69:0b:71:64:9d:c3:de:8a:64: df:6d:3b:af:82:d2:92:31:f5:b0:22:18:1b:c4:c2: 85:67:e0:03:df:46:1f:0f:85:91:43:fe:6b:89:27: 36:f8:00:22:fd:35:ef:36:6a:b7:73:52:e8:35:82: 17:4c:2f:6f:c5:52:39:77:59:87:a7:5e:40:6c:45: 77:26:00:9c:34:1d:2c:51:7c:6a:40:a7:83:2a:d3: ca:40:d7:01:90:d1:6e:07:44:a4:33:8b:f9:5f:3b: 43:43:b1:59:17:cb:c8:9c:c9:a2:1a:2b:ba:5d:83: ad:ab:53:e8:bb:ba:9c:aa:55:aa:96:a5:78:e7:9a: 8b:ab:25:66:5f:7c:17:9b:d7:07:18:a1:db:91:3a: 07:52:03:71:c9:0d:fa:7a:62:39:72:ab:0d:d7:ad: d4:e7:71:5a:d0:c6:26:26:53:07:f2:a1:c3:28:76: 62:34:ee:66:6e:4e:c8:60:cd:58:6d:38:39:d4:34: 25:97:7e:84:5c:9b:dd:62:1d:a6:a7:74:64:86:f6: 56:ba:29:8c:6a:02:f3:95:1e:26:07:85:a1:70:1c: c4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A3:7B:A3:1F:53:19:01:28:2B:FC:E4:66:A8:1F:4D:D3:67:CF:08 X509v3 Authority Key Identifier: keyid:91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:3c:35:8e:17:c0:4e:0f:52:4d:0d:7c:d7:44:15:71:02:4b: 74:35:ad:c1:c0:af:89:42:01:fc:79:bb:62:ef:80:38:c2:0a: 62:82:ad:bb:34:12:6f:d8:d1:43:65:44:00:38:c0:bd:6f:82: f7:ae:71:9a:4f:ba:78:7b:81:83:d2:3f:35:f4:4f:dc:09:d3: 7c:ee:4f:3f:4f:c5:77:41:8f:0d:95:19:d4:77:8f:9d:1e:f0: 2c:f2:2d:b5:a9:32:c0:e2:88:3f:73:69:2f:e3:fb:ed:de:20: 0a:35:d0:83:7e:2f:a4:c5:7a:3e:d1:90:7d:0e:eb:1f:cf:29: 1d:25:82:8e:c9:61:7e:63:b7:73:5d:0a:d1:90:78:5f:7b:fc: 84:d7:dd:e0:3d:85:78:35:45:90:2b:f1:40:5b:70:30:fd:a6: 36:1e:33:63:72:93:b0:22:e3:d4:b3:b0:0c:8f:4a:3a:61:6b: 21:a7:24:9e:7f:5e:21:f2:d4:94:a5:60:38:b4:a7:52:75:ff: 13:b4:3c:bb:08:6e:ff:20:e3:c8:d6:b6:08:eb:50:be:13:05: 85:85:88:57:2c:4c:60:e6:61:20:cd:95:21:98:b1:08:2d:fa: 8f:21:67:6e:3d:23:63:08:c3:c6:a0:fe:f7:4a:c3:d4:e1:14: d0:1d:cf:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oglBm3CneeiH9+TJVReBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZjVmY2VkYmRiODRkZDUyZmM2NzcwZDdjY2ZkM2ZjNjY4 NGZhNDEwHhcNMjUxMjE5MjIwMTQxWhcNMjUxMjIwMjIwMTQxWjAzMTEwLwYDVQQD EyhhMmEzN2JhMzFmNTMxOTAxMjgyYmZjZTQ2NmE4MWY0ZGQzNjdjZjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnpOZjkYtrQWeN4s8myPRRyJJTuF J9nXcVpZl2tCLn+1JjJpC3FkncPeimTfbTuvgtKSMfWwIhgbxMKFZ+AD30YfD4WR Q/5riSc2+AAi/TXvNmq3c1LoNYIXTC9vxVI5d1mHp15AbEV3JgCcNB0sUXxqQKeD KtPKQNcBkNFuB0SkM4v5XztDQ7FZF8vInMmiGiu6XYOtq1Pou7qcqlWqlqV455qL qyVmX3wXm9cHGKHbkToHUgNxyQ36emI5cqsN163U53Fa0MYmJlMH8qHDKHZiNO5m bk7IYM1YbTg51DQll36EXJvdYh2mp3RkhvZWuimMagLzlR4mB4WhcBzEIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKKje6MfUxkBKCv85GaoH03TZ88IMB8GA1UdIwQY MBaAFJH1/O29uE3VL8Z3DXzP0/xmhPpBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2ZYODdiMjRUZFV2eG5jTmZNX1RfR2FFLWtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85YTA5ODEtMGFkOC00OGE1LWJmZWMt OGNjOTgzMzYxMWU2LzEva2ZYODdiMjRUZFV2eG5jTmZNX1RfR2FFLWtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC85YTA5ODEtMGFkOC00OGE1LWJmZWMtOGNjOTgzMzYxMWU2 LzEva2ZYODdiMjRUZFV2eG5jTmZNX1RfR2FFLWtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgjw1jhfA Tg9STQ1810QVcQJLdDWtwcCviUIB/Hm7Yu+AOMIKYoKtuzQSb9jRQ2VEADjAvW+C 965xmk+6eHuBg9I/NfRP3AnTfO5PP0/Fd0GPDZUZ1HePnR7wLPIttakywOKIP3Np L+P77d4gCjXQg34vpMV6PtGQfQ7rH88pHSWCjslhfmO3c10K0ZB4X3v8hNfd4D2F eDVFkCvxQFtwMP2mNh4zY3KTsCLj1LOwDI9KOmFrIacknn9eIfLUlKVgOLSnUnX/ E7Q8uwhu/yDjyNa2COtQvhMFhYWIVyxMYOZhIM2VIZixCC36jyFnbj0jYwjDxqD+ 90rD1OEU0B3PFA== -----END CERTIFICATE-----Generated at Fri Dec 19 23:25:24 2025 by rpki-client