This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft File: KXrnWSylJJHcFmow_hR31xK9Rl0.mft (raw, json) Hash identifier: 5hFsY9VeRQwx4sEOpgjsLCiCL+Urvon/QDbEkAdSFbI= Subject key identifier: 71:0A:E7:3C:77:71:C1:4B:99:B6:51:F3:42:29:EA:95:19:89:67:0D Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d Certificate serial: 019B4437CFB93BC66E3FF7F38B046015EE43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft Manifest number: 179D Signing time: Mon 22 Dec 2025 04:01:06 +0000 Manifest this update: Mon 22 Dec 2025 04:01:06 +0000 Manifest next update: Tue 23 Dec 2025 04:01:06 +0000 Files and hashes: 1: 3S9CxnQg7YWqU3K6TXltDEUCLyw.roa (hash: 3OEFYGKv+A11bV584/FIEjB0rz/syH/3YTSncOKzqpk=) 2: 7iZSI8YJjBx97RcBp5yy0dHgNCc.roa (hash: zYIePn/XtBi1RBLoEwZwbryvrg3fa+ccFHSQFX92GIc=) 3: 8aTIb0puCina4qQH9DISIqfOc4Q.roa (hash: 1Nu+gUGiEPO422nTi4SIHIM/055+/Bx1i4GdyYjGB6w=) 4: 9DoakwUWAGtHNEatYpKzbo2QTwI.roa (hash: N1mtoTrK+kfX1PnLRJRzSQlCeUqp41+33H0gjLXBdeo=) 5: EZFIYtcapsDAbifqmq2FXtp-Cdw.roa (hash: f6ff20P7C3YhGHb/pCr95k1VGXcMCffUp+GlTWJzaPk=) 6: F-e0yheo2RviKbK6HPx7_eTqhA4.roa (hash: KEJO7y7WsDfC5FsDfSaCJ3hpxQXSnjViDnFGvytgGQY=) 7: KXrnWSylJJHcFmow_hR31xK9Rl0.crl (hash: wjyIfpHXyYrDQMI7JJY6fyirJTR4smkqFwPqQSN0mhE=) 8: cWm4lcomb_7tGOMAKfN645HZ4lY.roa (hash: Q1Xtl3Tt4xDVvissECGJZtzvYROTu/HRq3nIK5nwbTU=) 9: ic83PxAobxuOswBFck-YRl3xl5s.roa (hash: b2hEd1qs+ywRwA/SKMeyaDMx96OzLoUUBDS6BjYhAik=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:37:cf:b9:3b:c6:6e:3f:f7:f3:8b:04:60:15:ee:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d Validity Not Before: Dec 22 04:01:06 2025 GMT Not After : Dec 23 04:01:06 2025 GMT Subject: CN=710ae73c7771c14b99b651f34229ea951989670d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a2:26:43:85:c0:23:96:c0:e3:35:7e:4e:80: e3:dd:e9:09:da:9b:1c:18:6a:5d:eb:30:52:2c:7a: e6:ca:f2:18:b4:cd:f5:7b:54:37:41:96:8b:47:f3: dd:77:cd:d8:67:e7:b5:23:33:f3:6e:46:74:bd:50: 89:70:4b:6d:86:ca:34:c6:25:cd:89:a6:7b:e0:f5: 38:2a:31:44:1a:9a:e0:bd:3d:cc:85:6d:ac:e1:cc: 39:1e:bb:e3:35:bb:8c:38:f6:ba:c0:53:73:2c:90: 82:00:ef:f6:81:df:f9:1b:31:3f:ae:0c:cf:48:dd: 3c:ea:56:5e:1d:70:20:d6:88:d2:f2:a5:84:5e:76: 0f:b3:5f:1e:d5:a5:f1:cf:00:bd:5c:d8:b3:1f:08: bd:e7:4f:bb:ca:ba:1c:86:fd:5a:2e:3f:73:af:6a: 8f:a0:58:82:6f:74:e3:8b:f1:5d:56:b7:a9:3e:fc: 07:cd:77:5b:99:b2:ff:05:f7:d7:6b:5a:d9:de:26: d0:1d:ab:74:bb:ea:41:5a:8b:69:d7:78:a7:f5:d7: 26:87:2a:c5:e3:a1:ea:4b:d3:21:15:6a:91:e7:64: 4a:5e:61:21:64:1a:d0:d2:5c:c9:ea:85:32:27:3b: 80:c1:68:1a:a2:d2:1e:47:a4:73:fc:89:e8:4b:29: 15:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:0A:E7:3C:77:71:C1:4B:99:B6:51:F3:42:29:EA:95:19:89:67:0D X509v3 Authority Key Identifier: keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:b1:fe:8e:91:ec:08:cc:cf:13:56:87:7d:7c:92:ec:f7:ec: a1:c1:ce:5e:f2:25:9a:6f:86:3e:a1:13:f4:28:24:10:01:e0: 9f:08:73:8a:28:88:92:ef:94:7b:1e:97:24:e0:c6:69:84:45: 85:34:9e:22:d3:29:7f:c2:bb:b9:05:09:bf:a4:b5:13:f5:12: 68:77:25:8d:50:1c:be:71:91:31:7b:23:dd:78:07:19:10:f1: bd:8d:c7:8a:69:5e:69:e4:fb:dd:db:4e:ca:db:15:8a:a4:2e: 7c:8c:31:d9:f7:86:57:f4:fd:e7:85:f1:1b:5b:61:e2:5e:95: af:62:c1:5a:a3:bf:b7:ea:12:94:07:9a:b9:f4:45:dc:83:0e: d1:8e:ab:bc:5a:ad:ea:dd:0c:f4:13:9f:96:e7:45:c5:16:7a: 6a:e6:f5:06:60:f0:a3:c9:65:82:0f:4a:3e:6c:09:22:ee:a5: 2c:73:cf:2b:2b:37:87:c4:23:96:8a:25:cc:8c:a7:c5:4b:8f: 00:f9:81:a1:0d:8b:e3:b2:d0:69:6b:14:22:7e:c3:18:cc:dc: 1c:1b:25:96:4b:e5:c3:a1:29:5e:26:99:20:1a:92:dc:42:41: d8:d6:90:80:7d:cc:4b:77:38:b2:b3:41:7f:b1:95:7d:80:f1: f3:d4:08:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEN8+5O8ZuP/fziwRgFe5DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2FlNzU5MmNhNTI0OTFkYzE2NmEzMGZlMTQ3N2Q3MTJi ZDQ2NWQwHhcNMjUxMjIyMDQwMTA2WhcNMjUxMjIzMDQwMTA2WjAzMTEwLwYDVQQD Eyg3MTBhZTczYzc3NzFjMTRiOTliNjUxZjM0MjI5ZWE5NTE5ODk2NzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6ImQ4XAI5bA4zV+ToDj3ekJ2psc GGpd6zBSLHrmyvIYtM31e1Q3QZaLR/Pdd83YZ+e1IzPzbkZ0vVCJcEtthso0xiXN iaZ74PU4KjFEGprgvT3MhW2s4cw5HrvjNbuMOPa6wFNzLJCCAO/2gd/5GzE/rgzP SN086lZeHXAg1ojS8qWEXnYPs18e1aXxzwC9XNizHwi950+7yrochv1aLj9zr2qP oFiCb3Tji/FdVrepPvwHzXdbmbL/BffXa1rZ3ibQHat0u+pBWotp13in9dcmhyrF 46HqS9MhFWqR52RKXmEhZBrQ0lzJ6oUyJzuAwWgaotIeR6Rz/InoSykVDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHEK5zx3ccFLmbZR80Ip6pUZiWcNMB8GA1UdIwQY MBaAFCl651kspSSR3BZqMP4Ud9cSvUZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgt MzkxMGE1OWExMTIxLzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgtMzkxMGE1OWExMTIx LzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy7H+jpHs CMzPE1aHfXyS7PfsocHOXvIlmm+GPqET9CgkEAHgnwhziiiIku+Uex6XJODGaYRF hTSeItMpf8K7uQUJv6S1E/USaHcljVAcvnGRMXsj3XgHGRDxvY3HimleaeT73dtO ytsViqQufIwx2feGV/T954XxG1th4l6Vr2LBWqO/t+oSlAeaufRF3IMO0Y6rvFqt 6t0M9BOfludFxRZ6aub1BmDwo8llgg9KPmwJIu6lLHPPKys3h8QjloolzIynxUuP APmBoQ2L47LQaWsUIn7DGMzcHBsllkvlw6EpXiaZIBqS3EJB2NaQgH3MS3c4srNB f7GVfYDx89QIeA== -----END CERTIFICATE-----Generated at Mon Dec 22 10:38:36 2025 by rpki-client