This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft File: KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft (raw, json) Hash identifier: q7Sm1OwKtpKc632DQjSrLtW+gd80KhiypBvkTJVrt9o= Subject key identifier: DA:31:D2:12:15:FF:84:88:2A:F2:AE:FA:FE:79:8B:F6:7D:14:B2:8C Authority key identifier: 29:76:6D:1A:E6:EB:21:84:9B:C3:A3:B2:D1:8E:86:3D:27:3D:24:04 Certificate issuer: /CN=29766d1ae6eb21849bc3a3b2d18e863d273d2404 Certificate serial: 019B2D0C24F50DAE6E391698667969F489F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft Manifest number: 018B Signing time: Wed 17 Dec 2025 16:02:09 +0000 Manifest this update: Wed 17 Dec 2025 16:02:09 +0000 Manifest next update: Thu 18 Dec 2025 16:02:09 +0000 Files and hashes: 1: 1HqQBJhpRaROMHOezXr8-gOHJ-E.roa (hash: qIvuj3HHmRwp3qhT9RCCOv4MPrrW/PDxkYPz1nz2Hdc=) 2: KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl (hash: mseKalsu67P9YntHlx3c9kDuEpkHFtVL10DJ9Nc+Uaw=) 3: PNqLkZolFE-nbQkO_6muHe9SeaA.roa (hash: Gal/fe+4IR2MPMSFBjUaz/ftVvLiPlkLRd02XNWJeOs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 16:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0c:24:f5:0d:ae:6e:39:16:98:66:79:69:f4:89:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29766d1ae6eb21849bc3a3b2d18e863d273d2404 Validity Not Before: Dec 17 16:02:09 2025 GMT Not After : Dec 18 16:02:09 2025 GMT Subject: CN=da31d21215ff84882af2aefafe798bf67d14b28c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a5:fc:d6:7d:12:f9:aa:51:c8:3d:d3:f8:72: ca:59:01:38:73:e4:6a:63:f0:72:a9:fc:66:59:e5: bb:41:31:c7:1a:bd:19:f4:fd:86:c8:89:88:2f:3b: 0f:e5:68:bc:67:3b:b0:ed:a0:b3:93:94:80:a5:c5: 48:05:c5:08:17:a0:94:b0:45:5c:ed:99:db:97:29: c2:89:78:dd:a3:c2:8b:b3:91:22:23:9a:b8:ac:83: 7f:eb:10:0a:d7:cf:00:8f:3d:0e:d2:f7:b4:6b:75: 99:36:bb:58:0a:b1:8b:f0:92:a5:c0:4e:0b:ac:af: 8a:13:9b:fc:74:c9:18:70:59:c1:fb:25:be:89:f5: a8:ed:43:f6:c6:74:60:37:94:5d:53:cb:de:07:c8: 4f:3f:99:d8:7d:51:b2:95:78:e4:61:8e:54:f9:a5: 85:5a:d2:a2:97:91:6a:ad:da:b8:6e:e2:89:e5:9f: 36:8d:69:32:e7:cb:1b:0f:a3:62:b1:0a:f3:16:40: 21:81:99:aa:de:92:f1:fe:fc:32:91:b2:e0:96:c2: a1:a9:cb:0a:41:32:58:a6:9f:40:92:14:e3:2f:df: 66:80:26:f5:00:ef:bd:60:68:91:d4:39:92:5a:35: 96:4e:72:37:3a:64:99:2b:26:31:66:6d:1d:6e:b7: a5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:31:D2:12:15:FF:84:88:2A:F2:AE:FA:FE:79:8B:F6:7D:14:B2:8C X509v3 Authority Key Identifier: keyid:29:76:6D:1A:E6:EB:21:84:9B:C3:A3:B2:D1:8E:86:3D:27:3D:24:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:95:67:89:7c:c0:79:ad:63:7d:96:b8:da:0f:49:89:98:ec: 55:74:be:f9:80:96:6b:9a:ab:12:28:0b:59:4d:37:e9:46:58: 7e:66:e9:fb:cf:c6:e4:f6:c2:4d:07:01:35:bc:ae:4a:db:9f: 7b:aa:d3:c6:f7:88:60:e6:be:ca:57:0d:54:d8:62:e4:b1:b3: 9d:2f:99:87:84:d6:5a:99:b8:20:15:27:b8:a8:1e:90:ff:36: f4:ee:f2:4d:90:13:64:3e:85:a7:fc:24:57:81:7c:0d:9f:e0: 91:b4:29:82:b8:46:5e:44:ca:58:7d:59:fe:d0:89:0b:a0:fe: 18:b7:40:66:5c:65:71:45:e3:62:e4:65:ff:0c:1f:95:c9:f2: 61:a2:79:01:60:e7:c1:c9:59:e0:ec:10:e4:27:88:12:95:7e: b3:53:60:65:02:1a:43:11:91:59:b8:6f:28:4f:bb:2a:9c:fa: 78:2f:b9:57:fe:2e:f5:21:df:eb:01:7c:a9:22:5a:30:ab:34: ef:6c:d4:d0:31:4d:75:e2:31:63:11:1b:b0:46:c7:9c:e5:57: f0:a6:5f:e5:fa:40:25:ca:2d:9f:d1:fe:5d:7f:78:db:c5:56: 1d:7f:f5:24:fc:17:a8:c2:f3:aa:38:ae:cf:c4:e5:52:c7:96: 1b:ac:39:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstDCT1Da5uORaYZnlp9InzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NzY2ZDFhZTZlYjIxODQ5YmMzYTNiMmQxOGU4NjNkMjcz ZDI0MDQwHhcNMjUxMjE3MTYwMjA5WhcNMjUxMjE4MTYwMjA5WjAzMTEwLwYDVQQD EyhkYTMxZDIxMjE1ZmY4NDg4MmFmMmFlZmFmZTc5OGJmNjdkMTRiMjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaX81n0S+apRyD3T+HLKWQE4c+Rq Y/ByqfxmWeW7QTHHGr0Z9P2GyImILzsP5Wi8Zzuw7aCzk5SApcVIBcUIF6CUsEVc 7ZnblynCiXjdo8KLs5EiI5q4rIN/6xAK188Ajz0O0ve0a3WZNrtYCrGL8JKlwE4L rK+KE5v8dMkYcFnB+yW+ifWo7UP2xnRgN5RdU8veB8hPP5nYfVGylXjkYY5U+aWF WtKil5Fqrdq4buKJ5Z82jWky58sbD6NisQrzFkAhgZmq3pLx/vwykbLglsKhqcsK QTJYpp9AkhTjL99mgCb1AO+9YGiR1DmSWjWWTnI3OmSZKyYxZm0dbrelEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNox0hIV/4SIKvKu+v55i/Z9FLKMMB8GA1UdIwQY MBaAFCl2bRrm6yGEm8OjstGOhj0nPSQEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1hadEd1YnJJWVNidzZPeTBZNkdQU2M5SkFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iNzExZmItZTU4NC00ZjM1LWEwZWMt MTE1ZDY4ZDliODFiLzEvS1hadEd1YnJJWVNidzZPeTBZNkdQU2M5SkFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9iNzExZmItZTU4NC00ZjM1LWEwZWMtMTE1ZDY4ZDliODFi LzEvS1hadEd1YnJJWVNidzZPeTBZNkdQU2M5SkFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALpVniXzA ea1jfZa42g9JiZjsVXS++YCWa5qrEigLWU036UZYfmbp+8/G5PbCTQcBNbyuStuf e6rTxveIYOa+ylcNVNhi5LGznS+Zh4TWWpm4IBUnuKgekP829O7yTZATZD6Fp/wk V4F8DZ/gkbQpgrhGXkTKWH1Z/tCJC6D+GLdAZlxlcUXjYuRl/wwflcnyYaJ5AWDn wclZ4OwQ5CeIEpV+s1NgZQIaQxGRWbhvKE+7Kpz6eC+5V/4u9SHf6wF8qSJaMKs0 72zU0DFNdeIxYxEbsEbHnOVX8KZf5fpAJcotn9H+XX9428VWHX/1JPwXqMLzqjiu z8TlUseWG6w54A== -----END CERTIFICATE-----Generated at Thu Dec 18 00:10:36 2025 by rpki-client