This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft File: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft (raw, json) Hash identifier: yjctKRtBTrG8b0X8lRgrxQHlJdnWipsDpMUOdXV0t2s= Subject key identifier: C8:0E:FE:7C:7C:CE:EB:ED:69:5D:57:78:89:BC:39:1B:6E:53:5C:37 Authority key identifier: 29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0 Certificate issuer: /CN=29390ec0adca5f0743d181145c7899f991fb65e0 Certificate serial: 019B3E357E6F626A19C4979DD8297670242D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft Manifest number: 1794 Signing time: Sun 21 Dec 2025 00:00:51 +0000 Manifest this update: Sun 21 Dec 2025 00:00:51 +0000 Manifest next update: Mon 22 Dec 2025 00:00:51 +0000 Files and hashes: 1: 4AoUOv0FI3bJOWNB03o-fqag36g.roa (hash: lE0wM7qhSogQ0qa/Rafsku4glOJqw2l70ocwo2WeE/c=) 2: 9JCvBC467iJkWVUyejrQdCcE8Vc.roa (hash: PZtqmEou/QOEvimRrt1u0929zRJ68Cvl3HD4b24PJ+8=) 3: JtbY0FQzOJRnoTP2ZFPSZaRelpg.roa (hash: fMqCLhQrv0nksxCKmBYDHrUOhFa10GxwpIAcTIeduuc=) 4: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl (hash: 2Cqk6iR9LcUAt6UM6cOWX5SErFGqWBT/rEhHkua3VIE=) 5: ksEVVLS3M5w1AKi-nF72xAY7y7o.roa (hash: z5VVyVNSP1G0pwH68pGPs7a4UWtVv2Td4kN9zQtymP4=) 6: oJyyYZN3aEY3mfL5n1a4s-7OLSo.roa (hash: VFWCw2rY2jvZouyZxNQBHjl3kSzi5T7ckY59fJbMU/4=) 7: rGbAvxffuaD19j9Z71kDL1ZXfkw.roa (hash: sitMqNnjc8K5EZ9Upi4aj5hSlGyOwGjgogjDhHAmXNw=) 8: xnJga-iVwigHTsD-dtkf_nC-qeI.roa (hash: GsXHxv2wkqRmHr0aWFfubv19P/bPTlYuX8bNACGOcog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:35:7e:6f:62:6a:19:c4:97:9d:d8:29:76:70:24:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29390ec0adca5f0743d181145c7899f991fb65e0 Validity Not Before: Dec 21 00:00:51 2025 GMT Not After : Dec 22 00:00:51 2025 GMT Subject: CN=c80efe7c7cceebed695d577889bc391b6e535c37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:03:ac:4b:c3:ce:6f:05:a2:64:4d:4d:2e:e0: 99:8e:0d:c6:f9:ef:42:52:0e:ec:06:d4:b7:ab:d9: a3:1f:74:8b:66:de:71:dd:69:af:f4:6c:f2:e0:9b: 23:68:3b:8b:81:e3:6a:1d:e9:22:eb:ff:3e:91:9e: b3:3c:fc:a5:27:67:5c:be:e8:ae:21:c7:2f:47:d3: b1:06:47:ec:79:4d:a2:a4:e9:b7:3f:bc:b9:75:89: 4f:e5:f1:a8:b2:74:82:e8:9e:06:0e:a5:93:13:f2: fe:d9:98:e9:b9:ab:38:86:d8:6f:9c:29:9f:55:10: e1:53:d3:24:95:ed:67:56:f6:f2:46:0c:0c:64:a1: ca:95:9f:0b:0f:f3:a1:8f:ea:0a:c0:01:07:65:f5: cf:df:06:84:d2:a7:91:0a:68:c2:53:85:84:c9:0f: b5:c4:0f:a0:c6:11:c8:ca:71:4a:34:dd:95:8d:7a: be:4f:5f:22:2d:13:51:5e:8f:2c:9d:fb:7a:d0:b4: bd:f8:c5:86:be:43:16:8a:b9:fa:cd:2e:62:a3:9d: fc:f4:fd:b5:ed:17:7d:d4:cc:6f:c2:bd:9c:47:62: 46:10:2a:de:47:78:35:cb:11:08:05:69:c7:d4:27: 50:09:0b:74:2f:28:7d:4b:0e:0e:25:7d:78:23:c9: a3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:0E:FE:7C:7C:CE:EB:ED:69:5D:57:78:89:BC:39:1B:6E:53:5C:37 X509v3 Authority Key Identifier: keyid:29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:40:08:5f:88:ab:c9:fb:dc:72:05:0c:58:15:64:23:90:31: 23:30:16:ac:3b:5b:e3:33:06:4a:e3:81:a6:45:2d:5d:5a:d1: 6b:b8:a9:3d:8d:33:7e:a5:24:73:c4:29:52:52:55:e0:95:1f: d9:f0:72:29:d3:be:2e:59:d6:be:d2:fa:26:b5:44:d1:1e:89: 77:5c:0e:70:1a:f2:9b:e0:ec:9e:05:ef:3d:dc:94:a7:1f:28: ec:1c:d8:e4:03:1f:7e:86:bb:fb:b6:ba:ef:fc:c0:61:66:91: 14:b4:95:84:95:6d:ea:bd:54:f8:7d:30:2c:6a:65:3b:4c:65: 1f:13:98:9e:bf:a8:ea:40:a7:32:6d:dd:58:cc:44:41:98:dc: a7:d5:ce:65:60:7a:1c:62:ad:64:33:fe:50:f1:60:c8:f8:1d: f0:a5:dc:f6:d1:10:7b:a8:4e:55:f1:6c:70:02:6f:15:56:69: 0e:6f:2d:33:c1:be:d5:73:0e:8b:65:de:a9:6c:6b:a5:86:c8: 7e:d6:31:8c:12:f5:f9:0e:ad:b9:5f:d4:69:7a:d8:16:37:0d: 49:05:bb:16:0f:c5:88:a9:8e:11:69:4e:e4:e3:60:72:2f:e6: 21:cb:3b:9e:83:50:01:d7:fd:28:f1:12:47:ff:7f:39:85:84: 08:f7:a4:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+NX5vYmoZxJed2Cl2cCQtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MzkwZWMwYWRjYTVmMDc0M2QxODExNDVjNzg5OWY5OTFm YjY1ZTAwHhcNMjUxMjIxMDAwMDUxWhcNMjUxMjIyMDAwMDUxWjAzMTEwLwYDVQQD EyhjODBlZmU3YzdjY2VlYmVkNjk1ZDU3Nzg4OWJjMzkxYjZlNTM1YzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAOsS8PObwWiZE1NLuCZjg3G+e9C Ug7sBtS3q9mjH3SLZt5x3Wmv9Gzy4JsjaDuLgeNqHeki6/8+kZ6zPPylJ2dcvuiu IccvR9OxBkfseU2ipOm3P7y5dYlP5fGosnSC6J4GDqWTE/L+2Zjpuas4hthvnCmf VRDhU9Mkle1nVvbyRgwMZKHKlZ8LD/Ohj+oKwAEHZfXP3waE0qeRCmjCU4WEyQ+1 xA+gxhHIynFKNN2VjXq+T18iLRNRXo8snft60LS9+MWGvkMWirn6zS5io5389P21 7Rd91Mxvwr2cR2JGECreR3g1yxEIBWnH1CdQCQt0Lyh9Sw4OJX14I8mjRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMgO/nx8zuvtaV1XeIm8ORtuU1w3MB8GA1UdIwQY MBaAFCk5DsCtyl8HQ9GBFFx4mfmR+2XgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9iMzEzOTItMmQxYy00OTM0LWE1OWUt ZWQ0MzNhYWM3ODI4LzEvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9iMzEzOTItMmQxYy00OTM0LWE1OWUtZWQ0MzNhYWM3ODI4 LzEvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAakAIX4ir yfvccgUMWBVkI5AxIzAWrDtb4zMGSuOBpkUtXVrRa7ipPY0zfqUkc8QpUlJV4JUf 2fByKdO+LlnWvtL6JrVE0R6Jd1wOcBrym+DsngXvPdyUpx8o7BzY5AMffoa7+7a6 7/zAYWaRFLSVhJVt6r1U+H0wLGplO0xlHxOYnr+o6kCnMm3dWMxEQZjcp9XOZWB6 HGKtZDP+UPFgyPgd8KXc9tEQe6hOVfFscAJvFVZpDm8tM8G+1XMOi2XeqWxrpYbI ftYxjBL1+Q6tuV/UaXrYFjcNSQW7Fg/FiKmOEWlO5ONgci/mIcs7noNQAdf9KPES R/9/OYWECPekUA== -----END CERTIFICATE-----Generated at Sun Dec 21 03:31:00 2025 by rpki-client