This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft File: kvfSE_oTcI4yABhP8bw5FXfMJS8.mft (raw, json) Hash identifier: M43lX0VBa/GhfZHrnyjEzQXfrYxu6S7DiN2OT5znXdk= Subject key identifier: 5F:F9:3C:CD:4A:46:3A:46:D5:C4:F9:8F:DB:1B:58:05:83:8D:39:DB Authority key identifier: 92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F Certificate issuer: /CN=92f7d213fa13708e3200184ff1bc391577cc252f Certificate serial: 019B3EDAA1B273EB7EE08540D627E426601A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft Manifest number: 0C09 Signing time: Sun 21 Dec 2025 03:01:14 +0000 Manifest this update: Sun 21 Dec 2025 03:01:14 +0000 Manifest next update: Mon 22 Dec 2025 03:01:14 +0000 Files and hashes: 1: 27IpBxR2D8_iRTp1ZebUJjNMQ7E.roa (hash: M2K4hgMgo9+z2THk8cplkT7mnkDeMqyV1xRhBWixRg4=) 2: F9JrVraLyMVnFa5WewWKqEk58Z8.roa (hash: HDM5tx94GGzJitG4z0EFA2VGBpL6vQ5NHJ5bG3Fv7N8=) 3: kvfSE_oTcI4yABhP8bw5FXfMJS8.crl (hash: vpq74gM14d5iXsBT9PkHzlLRKJXGiXTg21pYsXtpg8Q=) 4: mm_Nb9z81V6NkXEN_XliD4j7rHA.roa (hash: sOGwZzPqCMO2h8qKL02SJARBROyj852YXrPvjJD/tMY=) 5: rNpSWTnlV1SjNzY7gYc6fGpCUg0.roa (hash: ogw4H6tz270SkrKMzgOGbWp8o172su6jWT/mKGItQ1o=) 6: tgAHftofsUlrut1OVcO8hHTBTbc.roa (hash: tgkhROI0aApXAU3ooNKzzNjHjSmQxJBLSWJU0UDgdqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:a1:b2:73:eb:7e:e0:85:40:d6:27:e4:26:60:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92f7d213fa13708e3200184ff1bc391577cc252f Validity Not Before: Dec 21 03:01:14 2025 GMT Not After : Dec 22 03:01:14 2025 GMT Subject: CN=5ff93ccd4a463a46d5c4f98fdb1b5805838d39db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bd:19:d0:57:74:0b:2e:64:2c:2a:4e:d5:2c: c0:b1:d3:c3:a1:68:f8:05:4e:e1:74:04:f9:74:14: 6b:3a:3f:b3:a2:95:a7:37:9d:74:6b:1e:4d:68:78: 94:92:76:c2:33:6a:6c:ad:9e:90:98:8c:54:a2:05: 06:8a:cd:15:b2:4e:25:9b:2f:03:11:17:51:47:72: 70:7d:19:81:16:df:97:ab:7d:cf:85:97:98:98:87: 62:c7:71:72:c3:63:5a:2d:e2:f9:78:01:1a:89:19: bd:64:ff:7e:1e:6f:8e:9d:75:34:68:56:49:e4:d5: 07:16:98:eb:d7:f9:69:1e:0b:8e:d3:9a:a3:35:0c: 8f:8b:8e:5e:ae:3d:7c:e7:54:24:b1:48:27:77:2c: dd:6a:cc:19:9a:f6:0e:d2:4d:1a:07:e6:a1:d2:cf: 05:e6:32:29:77:8f:ef:68:f8:ec:b3:ac:3a:9c:09: 1c:32:0f:ee:f1:d3:27:cc:6d:35:b3:af:34:28:05: 8b:ad:7a:8f:a9:d2:1d:51:01:01:38:a5:9a:17:34: 20:e6:68:e6:c0:e2:e1:a7:bd:aa:67:bd:33:c6:74: a8:8a:28:03:c9:e8:44:df:2c:6c:ea:f3:f2:70:8f: 53:b3:a5:bc:cf:83:0e:ed:cd:22:55:f4:07:e7:43: 6c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F9:3C:CD:4A:46:3A:46:D5:C4:F9:8F:DB:1B:58:05:83:8D:39:DB X509v3 Authority Key Identifier: keyid:92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:a8:5e:9e:61:ce:7f:3e:1d:4a:38:7a:43:6b:f0:b3:83:75: 15:30:82:f7:43:68:2e:f1:b8:9d:f0:21:fb:46:be:a5:31:7e: cc:6a:f4:e6:ea:75:1d:5c:19:2b:59:61:37:76:d3:60:31:48: 21:aa:ff:7a:f5:56:6f:97:9c:90:56:ba:4c:85:56:14:83:03: 1b:c0:f4:0a:e5:6c:f3:0f:8e:4c:1c:8b:1c:9a:26:c5:1f:1e: 84:71:3c:34:5d:9c:1a:62:45:67:6a:81:a2:85:59:97:11:dc: de:3c:3a:41:cb:d5:7e:37:0b:f1:bd:41:31:5f:58:b6:c6:2b: 18:0a:0b:3a:dd:47:e4:5f:5c:5c:af:88:78:ae:6e:92:d9:28: 74:b8:4d:fc:1f:05:0f:28:e6:31:24:14:3a:e4:66:a1:f8:ae: 1d:8f:7d:19:60:7c:5c:cb:66:4d:ef:fe:2e:ed:d0:24:a6:bd: 7f:bb:89:24:aa:ee:14:75:f0:4c:c5:aa:c8:8f:32:4b:58:e3: 6c:de:c9:6f:bf:8d:80:68:c4:92:01:8c:ae:eb:63:ce:05:76: 31:27:09:48:ee:34:2d:84:ee:8b:af:e5:00:0c:b7:11:ef:45: 97:0e:ea:13:53:cc:4f:7f:76:8f:5e:87:b9:6d:08:35:e6:64: d6:99:00:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2qGyc+t+4IVA1ifkJmAaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZjdkMjEzZmExMzcwOGUzMjAwMTg0ZmYxYmMzOTE1Nzdj YzI1MmYwHhcNMjUxMjIxMDMwMTE0WhcNMjUxMjIyMDMwMTE0WjAzMTEwLwYDVQQD Eyg1ZmY5M2NjZDRhNDYzYTQ2ZDVjNGY5OGZkYjFiNTgwNTgzOGQzOWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo70Z0Fd0Cy5kLCpO1SzAsdPDoWj4 BU7hdAT5dBRrOj+zopWnN510ax5NaHiUknbCM2psrZ6QmIxUogUGis0Vsk4lmy8D ERdRR3JwfRmBFt+Xq33PhZeYmIdix3Fyw2NaLeL5eAEaiRm9ZP9+Hm+OnXU0aFZJ 5NUHFpjr1/lpHguO05qjNQyPi45erj1851QksUgndyzdaswZmvYO0k0aB+ah0s8F 5jIpd4/vaPjss6w6nAkcMg/u8dMnzG01s680KAWLrXqPqdIdUQEBOKWaFzQg5mjm wOLhp72qZ70zxnSoiigDyehE3yxs6vPycI9Ts6W8z4MO7c0iVfQH50NsmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/5PM1KRjpG1cT5j9sbWAWDjTnbMB8GA1UdIwQY MBaAFJL30hP6E3COMgAYT/G8ORV3zCUvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3ZmU0Vfb1RjSTR5QUJoUDhidzVGWGZNSlM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi80ODIxMDEtYWM5NC00ZjBiLTkzMDkt M2UxOGVlNmI0YTVhLzEva3ZmU0Vfb1RjSTR5QUJoUDhidzVGWGZNSlM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi80ODIxMDEtYWM5NC00ZjBiLTkzMDktM2UxOGVlNmI0YTVh LzEva3ZmU0Vfb1RjSTR5QUJoUDhidzVGWGZNSlM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApqhenmHO fz4dSjh6Q2vws4N1FTCC90NoLvG4nfAh+0a+pTF+zGr05up1HVwZK1lhN3bTYDFI Iar/evVWb5eckFa6TIVWFIMDG8D0CuVs8w+OTByLHJomxR8ehHE8NF2cGmJFZ2qB ooVZlxHc3jw6QcvVfjcL8b1BMV9YtsYrGAoLOt1H5F9cXK+IeK5uktkodLhN/B8F DyjmMSQUOuRmofiuHY99GWB8XMtmTe/+Lu3QJKa9f7uJJKruFHXwTMWqyI8yS1jj bN7Jb7+NgGjEkgGMrutjzgV2MScJSO40LYTui6/lAAy3Ee9Flw7qE1PMT392j16H uW0INeZk1pkAaA== -----END CERTIFICATE-----Generated at Sun Dec 21 07:21:25 2025 by rpki-client