This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft File: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft (raw, json) Hash identifier: xlWndc57aL2lPfw37fkDIsrbnLRopCi3hWIaooIGXdI= Subject key identifier: C3:A1:A3:50:2D:C9:DC:E8:5B:DC:C0:EF:3B:CC:35:68:95:76:17:CD Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Certificate serial: 019B3532484CB4DE13430C5C714F071EAAA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft Manifest number: 1796 Signing time: Fri 19 Dec 2025 06:00:46 +0000 Manifest this update: Fri 19 Dec 2025 06:00:46 +0000 Manifest next update: Sat 20 Dec 2025 06:00:46 +0000 Files and hashes: 1: 1TO3wwmstlJI_xpUfl9kicvHbH8.roa (hash: l5tHAqNDeNZrnGt3mzboM0n81s+hmMDLpSHW8MhJdZQ=) 2: 26WNO431X2DrhCSuMJxs-XhHdFw.roa (hash: NIeRGI1yKvtGj8sFMzxTqCRVywS0D7qHUOhHSF/o4Dg=) 3: FLQOSktOr1hKjG4R6lRrGTwu4Y4.roa (hash: HCxQYiPGo2KxnCSlrWXoWcHI4W9ZFCE3iBJWeLRX1o8=) 4: MTxciv5mcC6g5MkOWJ_PCLUtcGw.roa (hash: sgzh4uhlDpWhAHL+IAu4cgWAxT/K2/Pct3jSfOVM8NQ=) 5: Y1uBCw2ID0YyZ99v-Z_lyCH99eg.roa (hash: cjULbx6P7MvMK4WANKsBKAVbb7nETAlX3DivVasETiQ=) 6: YaNSkilLvxLgKPrT-xDRiMn7jX4.roa (hash: EZ2qfgMp+bvQiHoGlwVv0eQJIbOoTlAjmgUR8kwZiCU=) 7: bCiizil2Ey8Pvh56RnqDgTk8X7Q.roa (hash: phspsqh/4y98JzmGzw3HpShtGGUJNNv7gxCq93gvxKo=) 8: gyBoR0Pr1cH4RPdcxzglRlFRHBw.roa (hash: 3pblEbuyEQGeT8WjyqKPo8c9UE3z9FtuOT2bJKOYqhg=) 9: iReNUad_z8MIbDXyAmruHYsr7Tg.roa (hash: IQii4bF71uMtioCE1UShqHzf2ujT5ikVUAvaKniKsLg=) 10: jAY2gqsxgcne6CxwXuSfgMf4P5o.roa (hash: GE2OTsJpTeX1gwmggvr4Bc4mDirZkzPXPMqCMKxyOyI=) 11: k3qjfn2AAdeFPjY3Bp8KUgRaMPA.roa (hash: 4Ifjp85NogHztb45WtYR2OYxyvQl/OdGpjlDDi7JSNQ=) 12: kj7kinsfLRhL_IoV619KJi8FFL8.roa (hash: PZmgxN8/Rtu6BsEbQsN7jkEXwA4RX6FBccLjt1dXYy4=) 13: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl (hash: FQv4wUpUb54pZvK8pBq0dbsIeFtO3eERXT+LFJ5yRss=) 14: ntJH0KRoZucW8VNuwTIHrnSnlKg.roa (hash: 09HbUbUgEiRqWzx65FOtxruuV31mRSjgz3dJWoNx5nA=) 15: pgkZmq53mdBn0axql3jHx0EQjb0.roa (hash: aQFrLEqXJ0R769ANrMlsyVSYn8plE/Z1heUQyyK64EM=) 16: rQI6zOSTMPr-5aSxylwS7FyovQ4.roa (hash: rfEafPW5O0SAZQwvAq0I4Fkx0LFGcfF/mHD1nsLYnQk=) 17: sjrvDPQwhWQPqwn6TmRlTLKuFYg.roa (hash: 1WK8IPxCTeSex8E0rLqfFDPE1ENBltlsB6VMf3gJcZY=) 18: u4G1_yF4TBBumrIYzOwiYZxivvM.roa (hash: KXapgrZ9J9YmS63vQiCaKhL0YwTkps2tWnrl3xdYLX4=) 19: uMHNQRmfBxlbvZLGtjT4gp4kg2M.roa (hash: F+fAKBuQq3PLDBu2sHTyZl1ELbNuh34xu5t/W6OjOpg=) 20: ywFfsakzP6gwg7h7Z-Y4enCkXVs.roa (hash: zQ4r7S3Ps9QMhK/S8Db/JFo0flSN41hhML8fbJu8SJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:48:4c:b4:de:13:43:0c:5c:71:4f:07:1e:aa:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Validity Not Before: Dec 19 06:00:46 2025 GMT Not After : Dec 20 06:00:46 2025 GMT Subject: CN=c3a1a3502dc9dce85bdcc0ef3bcc3568957617cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4a:39:bd:42:10:47:81:4f:c0:51:8d:85:47: 07:89:40:d4:2c:41:ec:95:2c:a0:37:ba:56:f5:96: eb:cb:0c:a3:ea:62:78:c5:d2:29:4e:6a:21:d9:de: 01:fe:5b:da:70:5b:f5:2c:d8:5f:d5:5f:2e:e6:2d: 79:a5:59:52:1a:0b:f9:94:e4:c0:5d:c1:37:9c:e3: 33:7c:d1:5d:7c:5a:6b:10:1a:a2:f3:2c:eb:e3:92: 47:e4:fb:7d:87:78:2d:48:10:f6:a8:61:5d:5a:72: f4:4f:07:73:f6:a2:64:ec:13:da:de:aa:19:18:3c: 92:4b:d5:90:c8:4c:9e:62:e7:06:e5:a8:82:d1:d6: 1e:b5:7f:61:2c:a2:2b:b3:1f:c6:54:ea:aa:43:c7: 90:76:c0:c6:6a:ec:00:b9:88:57:b6:eb:a4:d5:65: 6a:5b:98:e9:57:d7:05:04:04:31:db:9b:6c:fd:ca: 73:29:72:b3:9a:95:bd:00:12:27:db:8e:29:87:d9: 9e:dc:3f:2c:c1:14:1e:7b:83:bc:78:4c:c6:2a:22: 2d:5d:40:29:a1:3f:89:20:53:a8:ba:0d:b3:52:72: b5:41:d3:19:a9:6c:9c:4f:79:1b:16:29:ee:e5:cb: 85:4d:88:b0:13:a6:4b:a5:85:c6:6a:46:e4:93:55: db:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:A1:A3:50:2D:C9:DC:E8:5B:DC:C0:EF:3B:CC:35:68:95:76:17:CD X509v3 Authority Key Identifier: keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:56:0e:07:e5:a5:39:9a:33:c5:6c:e8:05:22:79:2f:9e:de: 12:32:eb:e0:4b:0e:10:34:b9:47:d6:08:d4:e5:2e:aa:6a:cd: 50:7e:8b:3f:0b:34:35:1b:a6:b9:0e:08:59:b6:f4:d7:43:76: d0:49:24:37:0f:4c:9c:ec:2a:87:45:28:ef:a0:ba:73:0d:28: ad:3e:8a:1d:e3:d4:34:1c:0c:c2:dc:2d:2e:84:10:93:32:85: 96:bf:ad:f2:68:de:af:de:8f:72:08:b2:72:c1:83:f1:55:5e: 47:90:5c:d8:2f:52:8e:20:62:47:58:0c:d9:28:74:d8:d9:6c: 41:b7:10:96:3b:74:53:87:a9:c0:2d:12:b1:70:eb:cc:cc:9a: 52:a2:b1:87:30:35:c5:af:2d:07:06:d7:02:be:bb:9d:93:8a: 1e:06:00:de:2c:c1:5a:87:50:dd:0c:a1:ac:2d:38:a9:28:d1: 12:22:74:68:31:fa:92:9f:34:cc:ac:eb:0c:00:a5:74:1e:b8: 71:a7:e2:0a:98:13:b2:c0:66:f8:07:bf:a4:36:5f:96:76:68: 08:0b:42:8f:a6:bb:89:5f:e0:22:00:d8:29:56:64:ca:84:e1: 46:3c:f2:fc:8f:17:11:b2:54:92:82:86:4f:c2:ea:b8:60:71: 16:0f:15:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MkhMtN4TQwxccU8HHqqnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYmY2NDY0Y2U2ZTE5YTRkY2Y4YTMyYjI3YTJmMWNiZTE1 NTEwNTUwHhcNMjUxMjE5MDYwMDQ2WhcNMjUxMjIwMDYwMDQ2WjAzMTEwLwYDVQQD EyhjM2ExYTM1MDJkYzlkY2U4NWJkY2MwZWYzYmNjMzU2ODk1NzYxN2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuko5vUIQR4FPwFGNhUcHiUDULEHs lSygN7pW9Zbrywyj6mJ4xdIpTmoh2d4B/lvacFv1LNhf1V8u5i15pVlSGgv5lOTA XcE3nOMzfNFdfFprEBqi8yzr45JH5Pt9h3gtSBD2qGFdWnL0Twdz9qJk7BPa3qoZ GDySS9WQyEyeYucG5aiC0dYetX9hLKIrsx/GVOqqQ8eQdsDGauwAuYhXtuuk1WVq W5jpV9cFBAQx25ts/cpzKXKzmpW9ABIn244ph9me3D8swRQee4O8eEzGKiItXUAp oT+JIFOoug2zUnK1QdMZqWycT3kbFinu5cuFTYiwE6ZLpYXGakbkk1XbhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMOho1AtydzoW9zA7zvMNWiVdhfNMB8GA1UdIwQY MBaAFJK/ZGTObhmk3PijKyei8cvhVRBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzct YjUzZTMwZTE0MTJhLzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzctYjUzZTMwZTE0MTJh LzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQFYOB+Wl OZozxWzoBSJ5L57eEjLr4EsOEDS5R9YI1OUuqmrNUH6LPws0NRumuQ4IWbb010N2 0EkkNw9MnOwqh0Uo76C6cw0orT6KHePUNBwMwtwtLoQQkzKFlr+t8mjer96Pcgiy csGD8VVeR5Bc2C9SjiBiR1gM2Sh02NlsQbcQljt0U4epwC0SsXDrzMyaUqKxhzA1 xa8tBwbXAr67nZOKHgYA3izBWodQ3QyhrC04qSjREiJ0aDH6kp80zKzrDACldB64 cafiCpgTssBm+Ae/pDZflnZoCAtCj6a7iV/gIgDYKVZkyoThRjzy/I8XEbJUkoKG T8LquGBxFg8VEQ== -----END CERTIFICATE-----Generated at Fri Dec 19 09:57:28 2025 by rpki-client