This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft File: Kb4C3qCghumID1ZMhocrvFl8xnI.mft (raw, json) Hash identifier: r6XRvICyBLsYMhaiHolTu40mhtavqfrdWYmjXJjVTMU= Subject key identifier: 13:8A:D0:A5:C1:5E:F4:4D:63:B8:E4:95:6C:80:54:EF:B6:86:00:8D Authority key identifier: 29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 Certificate issuer: /CN=29be02dea0a086e9880f564c86872bbc597cc672 Certificate serial: 019B3D906F2C41B44574473219A8930DD773 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft Manifest number: 1579 Signing time: Sat 20 Dec 2025 21:00:34 +0000 Manifest this update: Sat 20 Dec 2025 21:00:34 +0000 Manifest next update: Sun 21 Dec 2025 21:00:34 +0000 Files and hashes: 1: 6KpBI63kEhQRzmhRvVQxSFsUBTI.roa (hash: Ckcyw44N8h4Yete0VsDquepnFPzly6G4UPrg1n68+p4=) 2: Bl50d2SW5pMGbeTLnaL144PRWUQ.roa (hash: bI5Yiq9+r3/RdML3fweIl1fiyaU2NaLiJvR9z1M6k50=) 3: Kb4C3qCghumID1ZMhocrvFl8xnI.crl (hash: /lEPEur1SgHNBQilh4AHFlTMdmfEzu7j5ffmg5gaTAs=) 4: MLMPGj8H9Pi_UwBtlTfByiigjfM.roa (hash: pC0aw2jiKroOvxcRGHKOge3OdR3RFQ8raECTuPmJMXM=) 5: OHP3S03u5tMHflzGMFoSd5vTyZk.roa (hash: nGDY1zJo3dHSTN2PJe0pXCx8heywXO+QdXtgHJbEB2A=) 6: RZnwVTO26PBx3a68dhxrN-N2_9U.roa (hash: 2uzv1j/fxffpUq8amOpURgwfPrkNCx7YPSsxO/BHSJk=) 7: XkZDM_8IFwDF5TaEYGBCOeA1rnY.roa (hash: wJ3Nd2iWllTHLJTwVq5JnkwdVdkkialVRVjZAGjLaUA=) 8: aB7sKw4yBEcglwqSevB86YJRj7Y.roa (hash: PH14Cm3gVr59rgH3FX69SJ0GUOOG1kpk0YkBDPc5P9M=) 9: j1JcZG88WoDJIAs0TuxaORvfLro.roa (hash: yIeCKxXutjytoAiiGxkiUBSn0Vk24wB2GDbKm+IJthI=) 10: nwUsD1fndRShZT-s5ssppnOFmiI.roa (hash: 5Gw61qVpay4Kz2GbqbYja1rnv6svDc1Ma6KW2KgO/Fk=) 11: zphCyxB7JvvZfrdVh3qU9-FSl5c.roa (hash: PYY+kdRiBf7TYzIHyOP800eu0rdgwqkk9pHLsntWJR8=) 12: zvPA1UGui-igyOCxkJMwtvZ5S28.roa (hash: /AfKz5TxnkzdqXaxQMADqDtWb4d/fIp2oXqMIKdkCNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:6f:2c:41:b4:45:74:47:32:19:a8:93:0d:d7:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29be02dea0a086e9880f564c86872bbc597cc672 Validity Not Before: Dec 20 21:00:34 2025 GMT Not After : Dec 21 21:00:34 2025 GMT Subject: CN=138ad0a5c15ef44d63b8e4956c8054efb686008d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:92:ed:33:5f:e2:22:ba:8d:5c:6d:98:a2:7b: 48:d6:81:a2:4d:03:37:44:d8:ba:59:2a:41:ce:5a: 76:0c:3c:57:23:22:61:16:e0:94:40:2a:15:17:be: e2:bf:12:92:f3:e4:b8:07:49:c5:1b:4c:27:e9:23: e0:4c:98:4d:73:68:5b:29:3a:64:5f:00:7d:c4:9d: e6:c3:d9:a2:34:e8:5f:52:da:24:38:cc:3d:9a:b9: af:6c:9d:06:76:ad:58:40:03:ad:9e:ee:64:51:90: dd:c9:99:21:95:f1:6c:ab:08:a5:4d:44:fc:15:11: 02:59:05:d8:a9:4d:01:c5:10:d3:98:52:20:19:30: e7:f5:3a:3a:ed:ef:7c:b8:09:1a:d1:06:73:8e:7d: 1a:b4:4b:74:98:13:06:f1:b6:4a:aa:74:70:01:5a: 1d:d5:7f:d0:a4:a1:ac:83:60:6d:7f:56:b1:e6:d5: 2f:56:fd:74:6b:a3:29:35:d5:0b:37:ae:f2:26:20: e3:9d:91:8d:06:5e:d6:9e:7d:59:6d:30:75:de:f9: aa:e2:0a:1f:e8:9c:12:e8:a7:1b:19:9f:0e:0a:16: dd:f3:e7:2b:64:be:26:2e:de:f5:ff:1c:1b:b6:97: 7b:d3:7a:2f:92:67:ac:82:5a:d1:00:8f:ac:b6:51: e7:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:8A:D0:A5:C1:5E:F4:4D:63:B8:E4:95:6C:80:54:EF:B6:86:00:8D X509v3 Authority Key Identifier: keyid:29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:29:85:ef:ef:a9:12:a0:d7:a4:da:ea:65:36:a5:88:f1:1f: 82:64:aa:bf:11:5a:a9:45:39:a4:33:17:19:5a:82:41:25:82: ec:68:a5:f2:92:c6:38:b4:e3:14:35:26:e2:35:08:1d:50:a4: 89:29:03:a1:e2:09:f5:79:d9:f6:a3:60:3c:8d:69:7c:c1:fd: e8:53:4c:cb:b2:33:a0:79:98:e3:43:ec:dc:ff:1c:09:5f:e2: 16:11:3d:d9:3e:20:2f:af:f9:61:04:ec:c4:1b:ba:9b:00:e9: 78:72:82:19:c6:fa:34:c9:69:f3:8a:4a:10:de:89:ce:82:6c: 75:96:da:7e:df:e4:0d:c0:27:cf:25:41:5e:f0:8d:11:0d:ac: e3:fa:84:2f:6f:b9:33:1c:a8:8b:da:b4:44:b4:08:7e:ff:8e: 76:a0:5c:6d:ac:85:55:0e:1f:36:e0:8b:66:37:97:6b:9c:f4: 76:d5:14:bd:a8:38:b3:c2:f3:3f:84:d6:02:13:77:2f:51:da: 99:30:55:08:ee:88:d5:70:82:0e:57:6d:46:74:d6:b4:b6:67: 29:ab:f5:1a:51:55:ae:ed:a9:71:c2:5b:15:d4:03:93:99:9f: 66:59:79:de:c4:9c:2d:b5:d0:bb:c6:3a:72:a3:98:12:24:7f: e3:d4:0d:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kG8sQbRFdEcyGaiTDddzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YmUwMmRlYTBhMDg2ZTk4ODBmNTY0Yzg2ODcyYmJjNTk3 Y2M2NzIwHhcNMjUxMjIwMjEwMDM0WhcNMjUxMjIxMjEwMDM0WjAzMTEwLwYDVQQD EygxMzhhZDBhNWMxNWVmNDRkNjNiOGU0OTU2YzgwNTRlZmI2ODYwMDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZLtM1/iIrqNXG2YontI1oGiTQM3 RNi6WSpBzlp2DDxXIyJhFuCUQCoVF77ivxKS8+S4B0nFG0wn6SPgTJhNc2hbKTpk XwB9xJ3mw9miNOhfUtokOMw9mrmvbJ0Gdq1YQAOtnu5kUZDdyZkhlfFsqwilTUT8 FRECWQXYqU0BxRDTmFIgGTDn9To67e98uAka0QZzjn0atEt0mBMG8bZKqnRwAVod 1X/QpKGsg2Btf1ax5tUvVv10a6MpNdULN67yJiDjnZGNBl7Wnn1ZbTB13vmq4gof 6JwS6KcbGZ8OChbd8+crZL4mLt71/xwbtpd703ovkmesglrRAI+stlHnoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBOK0KXBXvRNY7jklWyAVO+2hgCNMB8GA1UdIwQY MBaAFCm+At6goIbpiA9WTIaHK7xZfMZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMt MDAzYTE1NjhiZjNmLzEvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMtMDAzYTE1NjhiZjNm LzEvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASCmF7++p EqDXpNrqZTaliPEfgmSqvxFaqUU5pDMXGVqCQSWC7Gil8pLGOLTjFDUm4jUIHVCk iSkDoeIJ9XnZ9qNgPI1pfMH96FNMy7IzoHmY40Ps3P8cCV/iFhE92T4gL6/5YQTs xBu6mwDpeHKCGcb6NMlp84pKEN6JzoJsdZbaft/kDcAnzyVBXvCNEQ2s4/qEL2+5 Mxyoi9q0RLQIfv+OdqBcbayFVQ4fNuCLZjeXa5z0dtUUvag4s8LzP4TWAhN3L1Ha mTBVCO6I1XCCDldtRnTWtLZnKav1GlFVru2pccJbFdQDk5mfZll53sScLbXQu8Y6 cqOYEiR/49QNlQ== -----END CERTIFICATE-----Generated at Sat Dec 20 22:41:31 2025 by rpki-client