This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft File: Kfp91j8uLYe194UAk8dDu_vhTkQ.mft (raw, json) Hash identifier: VmDGxZGbR2jksp0cGklGfDfnpMcMsOqNOJfxISQx+eI= Subject key identifier: 18:DB:73:AD:B2:15:5B:B9:4F:CD:F4:B3:14:86:7B:66:48:29:17:79 Authority key identifier: 29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 Certificate issuer: /CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Certificate serial: 019B3AFE283EE906AEB0BE260D095ABAE8F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft Manifest number: 0638 Signing time: Sat 20 Dec 2025 09:01:33 +0000 Manifest this update: Sat 20 Dec 2025 09:01:33 +0000 Manifest next update: Sun 21 Dec 2025 09:01:33 +0000 Files and hashes: 1: 05o0ilxpLPFj724SFa-brN8vzXk.roa (hash: CPN9MrS7MYDAN7zH2nr9vN3ZoOoKTAOXjde0z1Y3r4g=) 2: 5h88FMdyJ4BKxPsdcgHQyCeiggw.roa (hash: Owv+GMEcs1uONJHFnOZ4mKs3NxskXYOAjZpyCXtz47Y=) 3: 7HfOX3VXYMpd2AIPBc7-S-uMs_8.roa (hash: k5M6cr3ux0zaC3HrK4AQu/eEDnL7gIrijJy4BZ0Nw4M=) 4: 7OOt-MnHsX07hiPdKHIMZaJ8wrg.roa (hash: 7nZ90mtRGZWhPbm1Puw7IzZkWIgR1R3W35D51WFY05w=) 5: BT9PpbhARp2PKEupubiiio8TvBc.roa (hash: PoRHUsj11iEWOHUhXg6p185DLswF97IfYO5dpNwM+4k=) 6: F1OWe033_DuZ-JjrisCh6PYvi1s.roa (hash: bLONjsizRZ/N6QYxCW6KHMn5K6t8a7PJWP3/t57vEJk=) 7: K3PHjFr5iZQBePAHzZD7020H3CQ.roa (hash: cYqNDwyqOAThtjZwtvIGK4yhgMYUiG7kHacZddA60SQ=) 8: Kfp91j8uLYe194UAk8dDu_vhTkQ.crl (hash: vLId4BOrmiijAhzcaq3X7CNejPP7HmtbWLlloWX2f8g=) 9: PwDUcjqBkiIEULzXxKTVGmmTWG4.roa (hash: FRJ/j45X7Ib31MDYnkP96sRJLV09a4YTIEwHH8GRm+c=) 10: SGJaxM1tftN6eWW_JhWZIZdq6Hs.roa (hash: i3+GB/wkLsPOj8TleSkbJUTDI0kj7dMA6dFb0QRWP+8=) 11: X-V1c33BeHLMq6YPZ6efCsl3cMM.roa (hash: qD2GqEyAmd2okDBw6OR3DlzX+O8r0bDHBHVLHEg9U3g=) 12: X6A7ZOxQkF-N5TBF6hNZ0D-sPxQ.roa (hash: sOJamuYIhYJWJLrvAE1wd1xA2gh7NgXmer7n43KBLdc=) 13: Y68HM_eE8K1w4SS6fxm68_4816Q.roa (hash: j5XSBxx8t0t2IG8jaeix/JPoU5Vp2pcHE0yvoVN43nY=) 14: eM7RoSEq3C715iKtcwBUqsiVTDM.roa (hash: U7xNVv9g2fKrI4EOjzXQcIX1ekwna/aEJqfXxfKaR90=) 15: u-M1H4DlyfJcf3cI4KPf60AAf5E.roa (hash: rqvHkJ1B+GOatMUS6IQfjBMvmK91Ea22MfD3TS1yuVM=) 16: us6ukJjPwguMUHmhc8SpjnjeHOE.roa (hash: RuHDwxtF2zmik+S8Nhu0t8NrGvwHVQJraNmp1nORf/c=) 17: zvMqPtiLMOCgjOxqm6euJp83YNA.roa (hash: jIvx8RFgHAKB/kauSEcxDljiE/0sDn1/Jfcw3a0iCKU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fe:28:3e:e9:06:ae:b0:be:26:0d:09:5a:ba:e8:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Validity Not Before: Dec 20 09:01:33 2025 GMT Not After : Dec 21 09:01:33 2025 GMT Subject: CN=18db73adb2155bb94fcdf4b314867b6648291779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:56:ef:21:e3:18:a7:8d:13:68:47:aa:ca:b7: 5d:ff:b5:fc:99:a6:b1:01:20:65:11:d5:fe:c0:d6: 28:90:26:91:a8:a5:a8:45:61:76:6b:ac:aa:0f:f9: 41:5a:45:42:3f:a4:de:99:84:60:a5:d2:51:2e:ea: ef:04:eb:da:22:d0:03:4c:db:80:74:45:21:c7:a1: b7:ee:0f:db:21:46:9c:75:1b:cb:07:05:21:71:ca: a8:0f:58:25:0a:7c:d0:10:af:8a:f2:e9:a7:04:38: 6d:3f:a0:fb:19:89:1c:96:a1:b9:d9:a4:9f:3b:97: bd:d6:8f:ac:ef:a4:ad:20:44:b9:a7:fc:b8:dd:d3: a3:70:11:18:5f:d7:d0:c0:92:04:c8:74:97:70:f6: 44:06:8c:76:bb:67:b1:c2:5e:90:ed:58:cb:29:e7: c9:b2:1b:f0:e8:95:25:bd:f2:02:ff:85:e9:72:19: e6:e6:c5:2c:24:f1:5a:65:27:ea:8b:97:2f:1f:ce: 4d:e2:19:2d:6c:1b:f0:d7:59:4b:ee:ac:56:d0:14: 4f:c4:10:96:5f:a0:bc:18:f4:6d:24:83:e7:09:4e: f0:0d:fb:7e:62:23:0a:35:7d:68:ba:b4:8b:7e:d3: 2c:7f:e2:73:33:b7:c8:13:a8:00:79:00:86:c9:5d: 8f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:DB:73:AD:B2:15:5B:B9:4F:CD:F4:B3:14:86:7B:66:48:29:17:79 X509v3 Authority Key Identifier: keyid:29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:49:1e:23:ce:0b:df:57:c7:07:54:45:e8:67:2d:96:44:3e: 06:02:7f:78:b9:fd:22:aa:9e:a9:e8:ad:57:b0:07:ab:7d:a2: 19:bb:f0:ad:f7:20:44:5a:26:29:f1:9b:ed:c0:d8:9b:cc:09: d5:35:cd:11:3b:63:39:76:94:ab:61:7a:7c:21:d9:a1:24:a4: 4c:8d:ef:6d:10:f6:5c:0a:4e:53:dc:af:b6:85:14:cc:6f:c1: ea:96:12:15:c3:37:58:5b:1b:99:25:99:2a:cb:91:d0:00:b0: c6:4f:01:13:e7:8b:28:a9:26:aa:9c:d0:51:a9:f4:70:85:5a: 00:f5:7b:fe:48:80:b0:5f:59:b8:c8:5d:a1:c1:56:14:a4:9b: 2c:b3:a2:d0:31:36:dd:9c:92:ac:a1:c8:2b:46:0d:3e:75:0b: f5:dd:c8:99:85:16:29:92:e8:a0:4a:b0:42:4a:3b:ac:d7:fa: db:ec:b0:b8:4a:a6:34:c6:4a:68:51:d1:f2:a3:c8:76:f3:4f: 32:63:ec:25:82:4c:d5:92:d9:20:b6:78:76:e7:3c:e9:78:ea: 4f:2b:3f:8d:2f:13:b5:b6:7a:e8:8b:91:7c:75:c9:dc:e2:a4: 0c:89:ee:83:33:9a:29:e8:24:cc:ed:35:39:33:f2:0f:7d:7b: d3:90:50:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/ig+6QausL4mDQlauuj2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZmE3ZGQ2M2YyZTJkODdiNWY3ODUwMDkzYzc0M2JiZmJl MTRlNDQwHhcNMjUxMjIwMDkwMTMzWhcNMjUxMjIxMDkwMTMzWjAzMTEwLwYDVQQD EygxOGRiNzNhZGIyMTU1YmI5NGZjZGY0YjMxNDg2N2I2NjQ4MjkxNzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFbvIeMYp40TaEeqyrdd/7X8maax ASBlEdX+wNYokCaRqKWoRWF2a6yqD/lBWkVCP6TemYRgpdJRLurvBOvaItADTNuA dEUhx6G37g/bIUacdRvLBwUhccqoD1glCnzQEK+K8umnBDhtP6D7GYkclqG52aSf O5e91o+s76StIES5p/y43dOjcBEYX9fQwJIEyHSXcPZEBox2u2exwl6Q7VjLKefJ shvw6JUlvfIC/4Xpchnm5sUsJPFaZSfqi5cvH85N4hktbBvw11lL7qxW0BRPxBCW X6C8GPRtJIPnCU7wDft+YiMKNX1ourSLftMsf+JzM7fIE6gAeQCGyV2PhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBjbc62yFVu5T830sxSGe2ZIKRd5MB8GA1UdIwQY MBaAFCn6fdY/Li2HtfeFAJPHQ7v74U5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUt NzlmN2I2ZWE3YzE0LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUtNzlmN2I2ZWE3YzE0 LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUUkeI84L 31fHB1RF6GctlkQ+BgJ/eLn9IqqeqeitV7AHq32iGbvwrfcgRFomKfGb7cDYm8wJ 1TXNETtjOXaUq2F6fCHZoSSkTI3vbRD2XApOU9yvtoUUzG/B6pYSFcM3WFsbmSWZ KsuR0ACwxk8BE+eLKKkmqpzQUan0cIVaAPV7/kiAsF9ZuMhdocFWFKSbLLOi0DE2 3ZySrKHIK0YNPnUL9d3ImYUWKZLooEqwQko7rNf62+ywuEqmNMZKaFHR8qPIdvNP MmPsJYJM1ZLZILZ4duc86XjqTys/jS8TtbZ66IuRfHXJ3OKkDInugzOaKegkzO01 OTPyD31705BQMg== -----END CERTIFICATE-----Generated at Sat Dec 20 10:32:22 2025 by rpki-client