This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft File: KXrnWSylJJHcFmow_hR31xK9Rl0.mft (raw, json) Hash identifier: yKX9WVD6ShBfkw+wPLzglR4UhTJQPERgRF4GNEGqNkc= Subject key identifier: BF:4C:1E:2E:0C:72:F2:05:54:4B:B7:9E:7F:33:AD:83:58:B7:03:7E Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d Certificate serial: 019B38A19EC742A74DA1B642D913EB67B4E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft Manifest number: 1797 Signing time: Fri 19 Dec 2025 22:01:14 +0000 Manifest this update: Fri 19 Dec 2025 22:01:14 +0000 Manifest next update: Sat 20 Dec 2025 22:01:14 +0000 Files and hashes: 1: 3S9CxnQg7YWqU3K6TXltDEUCLyw.roa (hash: 3OEFYGKv+A11bV584/FIEjB0rz/syH/3YTSncOKzqpk=) 2: 7iZSI8YJjBx97RcBp5yy0dHgNCc.roa (hash: zYIePn/XtBi1RBLoEwZwbryvrg3fa+ccFHSQFX92GIc=) 3: 8aTIb0puCina4qQH9DISIqfOc4Q.roa (hash: 1Nu+gUGiEPO422nTi4SIHIM/055+/Bx1i4GdyYjGB6w=) 4: 9DoakwUWAGtHNEatYpKzbo2QTwI.roa (hash: N1mtoTrK+kfX1PnLRJRzSQlCeUqp41+33H0gjLXBdeo=) 5: EZFIYtcapsDAbifqmq2FXtp-Cdw.roa (hash: f6ff20P7C3YhGHb/pCr95k1VGXcMCffUp+GlTWJzaPk=) 6: F-e0yheo2RviKbK6HPx7_eTqhA4.roa (hash: KEJO7y7WsDfC5FsDfSaCJ3hpxQXSnjViDnFGvytgGQY=) 7: KXrnWSylJJHcFmow_hR31xK9Rl0.crl (hash: AFoSOY5HN39qtShmcqjPjPunHZqXd21ut/uf3juzM+U=) 8: cWm4lcomb_7tGOMAKfN645HZ4lY.roa (hash: Q1Xtl3Tt4xDVvissECGJZtzvYROTu/HRq3nIK5nwbTU=) 9: ic83PxAobxuOswBFck-YRl3xl5s.roa (hash: b2hEd1qs+ywRwA/SKMeyaDMx96OzLoUUBDS6BjYhAik=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:9e:c7:42:a7:4d:a1:b6:42:d9:13:eb:67:b4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d Validity Not Before: Dec 19 22:01:14 2025 GMT Not After : Dec 20 22:01:14 2025 GMT Subject: CN=bf4c1e2e0c72f205544bb79e7f33ad8358b7037e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:34:32:a4:a9:be:bb:a9:2d:c4:0e:e1:35:a7: f1:49:00:62:35:40:d7:b2:c2:51:ff:fe:0a:75:e2: b3:c0:35:18:16:65:48:3d:28:ef:ce:38:7b:5f:a4: ef:09:bd:84:05:96:ea:6c:3f:b5:89:9d:2e:dc:ed: f8:56:e7:66:4b:6e:20:88:9d:41:75:3f:4c:ee:b2: a4:46:b5:8b:f3:79:1f:eb:fc:60:81:33:84:07:9d: 0d:1a:24:ad:ea:db:fd:87:b9:cd:96:e8:a1:2f:0f: fb:30:24:7f:b7:0a:87:41:38:d8:2b:65:b3:ac:35: 09:66:81:42:a8:f5:4d:36:43:b4:34:46:9f:5d:91: a2:33:b7:93:61:63:4c:c3:83:51:a7:12:27:e7:a7: 51:9d:83:7f:96:ed:f7:08:1e:a5:9c:f5:46:f0:c6: 09:55:7f:32:80:3e:0e:2e:00:0a:de:95:d0:13:54: a4:1a:2a:69:87:bd:06:25:e0:7b:83:0f:a1:33:09: 00:45:f3:c0:74:69:cd:95:5b:88:19:89:5e:27:0f: 42:59:9f:44:38:55:9e:0d:cc:e8:50:74:dd:b4:2f: b0:cc:26:cb:fc:fb:ec:2d:f7:e1:84:f6:c4:b4:bd: 6a:13:c1:ac:c2:55:47:39:b7:ff:26:21:61:c8:59: 72:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:4C:1E:2E:0C:72:F2:05:54:4B:B7:9E:7F:33:AD:83:58:B7:03:7E X509v3 Authority Key Identifier: keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:19:57:ef:65:dc:82:93:8a:00:22:e9:98:2e:ae:a5:ab:45: 65:37:13:9a:7d:03:b5:4c:a5:14:5f:6e:8e:d2:5d:0f:09:42: c7:a1:fc:8b:2f:85:03:89:79:17:33:bb:74:e7:f3:12:10:06: f9:08:3e:9a:91:23:7b:12:49:fd:76:72:e3:13:26:72:e7:51: bd:2f:03:47:bf:34:4d:70:12:55:6a:8c:66:ba:90:df:66:02: 5d:84:f3:ca:f1:55:59:2c:ac:85:e8:bf:ef:97:ff:49:5a:22: 03:9c:3c:39:fe:34:43:c4:54:4d:f5:9c:90:f5:5e:ef:b8:20: ee:ad:97:69:6d:3f:52:d9:c5:ab:2b:f6:c8:84:92:58:f9:41: e7:7b:f9:9b:fa:90:9a:31:7b:ba:ec:b5:6c:f1:5e:d0:84:70: 71:ab:0c:ed:5e:dc:57:59:bb:98:c2:56:8c:f4:3a:81:11:86: 49:b7:b6:dc:87:61:fd:58:c1:95:c4:80:8c:48:b8:62:af:7d: 4d:67:3c:33:f7:8f:72:22:68:d8:1b:92:2c:36:ba:44:34:af: 36:6e:ad:4f:dc:2d:2e:86:26:ca:ca:8f:4d:dc:15:0f:fc:e5: 8e:ec:6e:1c:18:c5:9d:94:88:90:42:93:01:86:40:2d:6f:cb: b5:9a:84:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oZ7HQqdNobZC2RPrZ7TgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2FlNzU5MmNhNTI0OTFkYzE2NmEzMGZlMTQ3N2Q3MTJi ZDQ2NWQwHhcNMjUxMjE5MjIwMTE0WhcNMjUxMjIwMjIwMTE0WjAzMTEwLwYDVQQD EyhiZjRjMWUyZTBjNzJmMjA1NTQ0YmI3OWU3ZjMzYWQ4MzU4YjcwMzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjQypKm+u6ktxA7hNafxSQBiNUDX ssJR//4KdeKzwDUYFmVIPSjvzjh7X6TvCb2EBZbqbD+1iZ0u3O34VudmS24giJ1B dT9M7rKkRrWL83kf6/xggTOEB50NGiSt6tv9h7nNluihLw/7MCR/twqHQTjYK2Wz rDUJZoFCqPVNNkO0NEafXZGiM7eTYWNMw4NRpxIn56dRnYN/lu33CB6lnPVG8MYJ VX8ygD4OLgAK3pXQE1SkGipph70GJeB7gw+hMwkARfPAdGnNlVuIGYleJw9CWZ9E OFWeDczoUHTdtC+wzCbL/PvsLffhhPbEtL1qE8GswlVHObf/JiFhyFlyKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL9MHi4McvIFVEu3nn8zrYNYtwN+MB8GA1UdIwQY MBaAFCl651kspSSR3BZqMP4Ud9cSvUZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgt MzkxMGE1OWExMTIxLzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgtMzkxMGE1OWExMTIx LzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIhlX72Xc gpOKACLpmC6upatFZTcTmn0DtUylFF9ujtJdDwlCx6H8iy+FA4l5FzO7dOfzEhAG +Qg+mpEjexJJ/XZy4xMmcudRvS8DR780TXASVWqMZrqQ32YCXYTzyvFVWSyshei/ 75f/SVoiA5w8Of40Q8RUTfWckPVe77gg7q2XaW0/UtnFqyv2yISSWPlB53v5m/qQ mjF7uuy1bPFe0IRwcasM7V7cV1m7mMJWjPQ6gRGGSbe23Idh/VjBlcSAjEi4Yq99 TWc8M/ePciJo2BuSLDa6RDSvNm6tT9wtLoYmysqPTdwVD/zljuxuHBjFnZSIkEKT AYZALW/LtZqEig== -----END CERTIFICATE-----Generated at Fri Dec 19 23:53:22 2025 by rpki-client