This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft File: kiBfWmTqH7CQrSbc_bGM77mqvY0.mft (raw, json) Hash identifier: zBvq3FhIkISfeyU7HnljVbwWRCawCM1IOfHhc+SSRuk= Subject key identifier: 17:2D:8B:AD:21:20:F9:A3:99:AD:1D:79:D8:03:9F:A5:13:28:42:F6 Authority key identifier: 92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D Certificate issuer: /CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d Certificate serial: 019B51F3213F38A672F515261AC59B066633 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft Manifest number: 1356 Signing time: Wed 24 Dec 2025 20:00:46 +0000 Manifest this update: Wed 24 Dec 2025 20:00:46 +0000 Manifest next update: Thu 25 Dec 2025 20:00:46 +0000 Files and hashes: 1: CWePTkWPKqmq8XCrzmvHtdzJ66c.roa (hash: w47SbHpgg+8nHiedozoZtpn2WeqKZNjvBRbXbOYH5sQ=) 2: QxrO5EAVR8eFM8jH9BCfhqlcchk.roa (hash: YI48GxiCUKeQBfw8EzcAM9WtfO8HGqURFBVLVXq05fo=) 3: kiBfWmTqH7CQrSbc_bGM77mqvY0.crl (hash: noaPm6QZfV56zgnqrBk8LCFiCGdmDPtuIhogSWlCVN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:f3:21:3f:38:a6:72:f5:15:26:1a:c5:9b:06:66:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d Validity Not Before: Dec 24 20:00:46 2025 GMT Not After : Dec 25 20:00:46 2025 GMT Subject: CN=172d8bad2120f9a399ad1d79d8039fa5132842f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:33:ca:e3:9c:8b:6d:d4:5f:2d:ec:c0:c5:25: a3:f7:27:76:e2:42:53:11:a0:bd:1d:02:bd:7f:4c: 54:d5:87:ca:b8:99:dd:7a:dc:bb:fa:09:06:6d:fa: a0:cc:a6:ef:b0:cb:4b:7c:31:25:55:78:b8:ba:1e: ae:13:8e:ac:bb:90:fc:f8:b4:e4:24:63:c6:15:1c: 93:70:3f:98:0e:8b:9b:93:c6:21:3a:c9:c0:11:b6: 44:32:49:7c:32:9e:57:46:43:d3:c7:3c:11:de:8e: 42:42:e1:66:1f:98:09:5d:68:4d:1a:b2:e1:64:89: a7:81:5a:c8:13:f4:3f:26:d4:cb:78:e7:4e:0d:b3: 0a:a0:46:6d:68:9d:7b:40:04:28:1b:53:ad:38:13: a5:4d:6d:91:98:82:72:43:0c:0b:c0:f9:79:84:2c: ed:7f:a2:1e:8f:02:0b:50:e0:41:3e:43:30:2f:da: 06:c0:77:22:6a:bc:ce:71:9e:a7:0d:33:75:43:16: 24:0c:47:63:17:38:7f:ac:21:75:2e:72:8a:03:dd: 93:fd:2c:d1:09:e5:e2:34:85:d3:68:5b:20:37:28: 4a:60:20:66:5a:8a:b3:37:4f:49:b5:15:e1:78:e1: 42:05:f9:66:10:94:7e:5c:07:3a:bd:47:b7:17:4d: 20:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:2D:8B:AD:21:20:F9:A3:99:AD:1D:79:D8:03:9F:A5:13:28:42:F6 X509v3 Authority Key Identifier: keyid:92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:76:ae:8f:50:43:3e:a3:e5:9c:21:8d:e7:1b:b0:0f:53:2c: 87:85:08:b9:c0:9c:c5:f9:64:68:fd:3b:ba:0c:46:c6:08:14: 80:4a:fd:9d:c5:f1:d8:03:36:05:b5:ca:95:e7:56:fc:73:4a: aa:6d:ea:0e:80:4e:e1:74:d0:fb:bb:5a:13:ce:bb:5e:59:9d: 28:65:78:48:76:5e:25:19:c4:9a:ff:72:28:f7:18:3f:cd:eb: 7f:70:29:96:8c:03:2c:51:71:b6:13:e3:45:d4:17:87:c9:af: bd:c3:e4:60:22:1e:bc:7e:19:7a:3b:30:56:ae:3e:b9:29:3a: 76:6d:6d:67:63:2c:46:7d:50:0f:ed:0c:a9:2b:96:52:7d:b6: 57:1a:0b:d4:cd:de:9c:df:2f:25:88:ed:31:37:12:52:c7:82: 02:bc:a7:db:9b:01:8b:f2:5d:ef:d3:9d:a0:b1:9b:e7:72:2b: 8c:73:1d:8c:60:17:10:bc:72:22:65:5a:41:bc:e8:57:cf:dd: 63:b4:57:c1:62:30:aa:01:3f:6d:08:f7:60:03:fb:8e:ec:9f: f6:d3:fa:90:50:7a:61:ab:38:75:86:36:9b:9a:54:e6:0c:62: 9d:3b:0d:38:71:73:e0:52:10:45:0f:6c:c3:75:df:c8:df:e2: f1:78:e0:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtR8yE/OKZy9RUmGsWbBmYzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMjA1ZjVhNjRlYTFmYjA5MGFkMjZkY2ZkYjE4Y2VmYjlh YWJkOGQwHhcNMjUxMjI0MjAwMDQ2WhcNMjUxMjI1MjAwMDQ2WjAzMTEwLwYDVQQD EygxNzJkOGJhZDIxMjBmOWEzOTlhZDFkNzlkODAzOWZhNTEzMjg0MmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDPK45yLbdRfLezAxSWj9yd24kJT EaC9HQK9f0xU1YfKuJndety7+gkGbfqgzKbvsMtLfDElVXi4uh6uE46su5D8+LTk JGPGFRyTcD+YDoubk8YhOsnAEbZEMkl8Mp5XRkPTxzwR3o5CQuFmH5gJXWhNGrLh ZImngVrIE/Q/JtTLeOdODbMKoEZtaJ17QAQoG1OtOBOlTW2RmIJyQwwLwPl5hCzt f6IejwILUOBBPkMwL9oGwHciarzOcZ6nDTN1QxYkDEdjFzh/rCF1LnKKA92T/SzR CeXiNIXTaFsgNyhKYCBmWoqzN09JtRXheOFCBflmEJR+XAc6vUe3F00gfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBcti60hIPmjma0dedgDn6UTKEL2MB8GA1UdIwQY MBaAFJIgX1pk6h+wkK0m3P2xjO+5qr2NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2lCZldtVHFIN0NRclNiY19iR003N21xdlkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82NTIyNjctZWExMy00ODkyLTlmZmEt MDljMWI3MzM2YTUxLzEva2lCZldtVHFIN0NRclNiY19iR003N21xdlkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS82NTIyNjctZWExMy00ODkyLTlmZmEtMDljMWI3MzM2YTUx LzEva2lCZldtVHFIN0NRclNiY19iR003N21xdlkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAInauj1BD PqPlnCGN5xuwD1Msh4UIucCcxflkaP07ugxGxggUgEr9ncXx2AM2BbXKledW/HNK qm3qDoBO4XTQ+7taE867XlmdKGV4SHZeJRnEmv9yKPcYP83rf3AplowDLFFxthPj RdQXh8mvvcPkYCIevH4ZejswVq4+uSk6dm1tZ2MsRn1QD+0MqSuWUn22VxoL1M3e nN8vJYjtMTcSUseCAryn25sBi/Jd79OdoLGb53IrjHMdjGAXELxyImVaQbzoV8/d Y7RXwWIwqgE/bQj3YAP7juyf9tP6kFB6Yas4dYY2m5pU5gxinTsNOHFz4FIQRQ9s w3XfyN/i8XjgRw== -----END CERTIFICATE-----Generated at Thu Dec 25 03:36:42 2025 by rpki-client