This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft File: KT4M2LPgRO24I672iKr7C3XehnU.mft (raw, json) Hash identifier: ZdbNCGU/ADzdZ3YElGifvjHhg++D6SzTGm2euERceRs= Subject key identifier: A7:B4:D4:F3:06:E7:C6:95:5E:14:57:EB:AA:AA:26:D3:8D:BE:78:89 Authority key identifier: 29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75 Certificate issuer: /CN=293e0cd8b3e044edb823aef688aafb0b75de8675 Certificate serial: 019B3C7FBDE3340F07AAC67B4BE0E8A28ECF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft Manifest number: 14E7 Signing time: Sat 20 Dec 2025 16:02:42 +0000 Manifest this update: Sat 20 Dec 2025 16:02:42 +0000 Manifest next update: Sun 21 Dec 2025 16:02:42 +0000 Files and hashes: 1: GGRSsytPMsehyIvT0Ks7HBxoCsU.roa (hash: cnh4oBPVR37nXyxbz0cYq9xtEn4YLbLofR4YLwkw1Ts=) 2: JH04xJWe_z8SXKxh4G8BUvGkgyI.roa (hash: KcYkH5Y5+qxD1S4xEoLuy3XrGXKw19/czmMpLLQb7oM=) 3: KT4M2LPgRO24I672iKr7C3XehnU.crl (hash: 147ow+K/Ju72I8W55GMouP/NY4rsLSbC6Fn92nm2MIw=) 4: ZhmjJZRo8Sbwc315ZOZw1TWufMc.roa (hash: NK5M1wuv8SZ2zP40bZYi2MQNmp6KED1qYY75Icn9mak=) 5: nKQffzVaC8uVNgTXixnx37_DL6s.roa (hash: pYAPWd/N9R42UtkBeCiR8wjtUnidTLisTp0Evm7U4aE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:bd:e3:34:0f:07:aa:c6:7b:4b:e0:e8:a2:8e:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=293e0cd8b3e044edb823aef688aafb0b75de8675 Validity Not Before: Dec 20 16:02:42 2025 GMT Not After : Dec 21 16:02:42 2025 GMT Subject: CN=a7b4d4f306e7c6955e1457ebaaaa26d38dbe7889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:35:2e:8a:4b:38:48:32:c4:ee:46:1c:e5:46: 47:3b:44:e0:59:b9:95:37:9f:30:62:ee:7e:4d:4f: 23:fa:af:e2:ec:74:e4:78:d7:b8:06:ba:4c:6b:8e: 33:09:e3:77:35:69:b3:c9:b6:55:d1:8c:a1:e1:eb: 49:fb:64:54:46:17:b9:9c:f6:43:39:c2:cf:c6:01: 90:ac:bb:ec:a9:c4:f7:a2:2a:8b:2b:eb:96:1d:09: d0:e2:90:93:8e:0c:fc:2a:58:cb:86:05:5c:9a:c5: 2f:0c:d7:0d:24:19:26:1f:0a:74:26:d5:5f:3b:38: 52:65:b7:2e:f1:c5:f8:f1:3c:96:55:f6:bb:77:6a: 46:cc:8c:4c:08:0d:f2:ba:21:97:c7:27:fe:9e:4d: 5b:ad:50:ee:38:98:9b:17:c8:01:ca:51:a7:d6:ec: db:cc:9f:63:e4:d3:75:1c:a6:49:da:c2:2b:b2:a5: 50:25:43:b9:da:97:2a:47:a7:13:c4:18:4b:17:2f: 30:f0:68:85:3a:78:50:8e:e5:00:58:e0:25:86:d5: 53:40:e1:e6:38:0c:cb:50:f0:38:1a:f7:92:1e:79: 31:22:cf:16:a0:70:13:ea:64:56:84:82:d8:23:3b: 6d:15:73:81:56:31:04:95:cf:34:8e:6c:cb:4e:ce: a8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:B4:D4:F3:06:E7:C6:95:5E:14:57:EB:AA:AA:26:D3:8D:BE:78:89 X509v3 Authority Key Identifier: keyid:29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:28:02:1e:78:46:19:bb:8f:9f:cd:20:a6:3f:b8:ed:ba:f1: da:02:07:83:e0:5e:bd:4f:af:4a:3f:cc:6f:9c:c3:41:b3:75: 19:5f:db:da:48:00:64:2f:0f:0a:9a:9b:cf:05:b6:a1:f3:32: 98:83:8e:63:05:58:98:cc:0b:c9:75:bc:04:96:41:c5:84:f4: bc:e7:c6:ec:50:65:83:13:0f:e7:fc:6f:2b:c5:44:5e:8d:be: 57:6e:b3:10:52:78:62:94:fe:f8:82:f8:83:5e:fe:04:a3:05: ae:b4:7d:9d:fa:2a:18:6b:83:1e:1c:15:4e:fe:bf:9e:c7:94: f0:fa:f4:ff:a7:93:6d:76:f7:53:61:82:b3:d5:22:d1:89:81: 58:db:e3:5f:f2:2a:c0:a7:1d:99:32:4d:5a:7a:62:92:aa:2c: 63:2d:26:75:85:a1:05:94:00:e6:bf:31:95:04:d5:42:24:be: 0b:87:f5:7e:9f:fd:fb:99:c8:4c:dd:ce:c7:cc:8f:5c:6f:75: 43:92:4b:e8:1e:c4:76:c0:1e:05:6d:6f:bc:54:a5:40:5e:29: 1e:c9:7e:6c:cf:2a:19:36:8f:47:ee:10:3c:88:a4:65:e6:3b: 7f:5c:d6:e0:b5:57:57:e6:1e:5b:5c:48:a5:c7:05:79:b7:12: 62:bd:38:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f73jNA8HqsZ7S+Dooo7PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5M2UwY2Q4YjNlMDQ0ZWRiODIzYWVmNjg4YWFmYjBiNzVk ZTg2NzUwHhcNMjUxMjIwMTYwMjQyWhcNMjUxMjIxMTYwMjQyWjAzMTEwLwYDVQQD EyhhN2I0ZDRmMzA2ZTdjNjk1NWUxNDU3ZWJhYWFhMjZkMzhkYmU3ODg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zUuiks4SDLE7kYc5UZHO0TgWbmV N58wYu5+TU8j+q/i7HTkeNe4BrpMa44zCeN3NWmzybZV0Yyh4etJ+2RURhe5nPZD OcLPxgGQrLvsqcT3oiqLK+uWHQnQ4pCTjgz8KljLhgVcmsUvDNcNJBkmHwp0JtVf OzhSZbcu8cX48TyWVfa7d2pGzIxMCA3yuiGXxyf+nk1brVDuOJibF8gBylGn1uzb zJ9j5NN1HKZJ2sIrsqVQJUO52pcqR6cTxBhLFy8w8GiFOnhQjuUAWOAlhtVTQOHm OAzLUPA4GveSHnkxIs8WoHAT6mRWhILYIzttFXOBVjEElc80jmzLTs6oSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKe01PMG58aVXhRX66qqJtONvniJMB8GA1UdIwQY MBaAFCk+DNiz4ETtuCOu9oiq+wt13oZ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1Q0TTJMUGdSTzI0STY3MmlLcjdDM1hlaG5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82ZGExYzItMjUyZC00YmQyLWI1NmMt YmIyMTdjYzNiNzhkLzEvS1Q0TTJMUGdSTzI0STY3MmlLcjdDM1hlaG5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC82ZGExYzItMjUyZC00YmQyLWI1NmMtYmIyMTdjYzNiNzhk LzEvS1Q0TTJMUGdSTzI0STY3MmlLcjdDM1hlaG5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqigCHnhG GbuPn80gpj+47brx2gIHg+BevU+vSj/Mb5zDQbN1GV/b2kgAZC8PCpqbzwW2ofMy mIOOYwVYmMwLyXW8BJZBxYT0vOfG7FBlgxMP5/xvK8VEXo2+V26zEFJ4YpT++IL4 g17+BKMFrrR9nfoqGGuDHhwVTv6/nseU8Pr0/6eTbXb3U2GCs9Ui0YmBWNvjX/Iq wKcdmTJNWnpikqosYy0mdYWhBZQA5r8xlQTVQiS+C4f1fp/9+5nITN3Ox8yPXG91 Q5JL6B7EdsAeBW1vvFSlQF4pHsl+bM8qGTaPR+4QPIikZeY7f1zW4LVXV+YeW1xI pccFebcSYr04aQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:36:34 2025 by rpki-client