This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft File: kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft (raw, json) Hash identifier: hkxcOnASdzdq8T4u5hP+3+LmGARuHh708fFW8aDJAbU= Subject key identifier: F6:C6:EA:9E:FB:F1:38:E5:73:C0:2F:1D:6E:2F:8F:C0:F6:9C:18:D7 Authority key identifier: 92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39 Certificate issuer: /CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139 Certificate serial: 019B3AFDDCF29862F2E94DABDFCC2A953666 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft Manifest number: 1795 Signing time: Sat 20 Dec 2025 09:01:14 +0000 Manifest this update: Sat 20 Dec 2025 09:01:14 +0000 Manifest next update: Sun 21 Dec 2025 09:01:14 +0000 Files and hashes: 1: L3kS7Jn1yhF9Sq1B0Zxhnxy-UmQ.roa (hash: 7USsx/75CcWYYXOpIrJthPZ+SLbNDigaF6/K5IzHy04=) 2: L3xdjIH2zy7v5Cj6gtkLDE8Ij7M.roa (hash: Q+o3qtQDOHZiPtx1qsjKwH4+/xbmKCsf4LWPeNV0Toc=) 3: Te7YHi2pfVF9zbo2M3FU6X9QFw8.roa (hash: iefxuR6cCSeQuUVD7gHNM5oNj3aGdVfsEjg121b/nwY=) 4: YbdTZXXJ_bhou-ns1MRKdw7L4Hs.roa (hash: Yu99aBSHIFLARWNtpLmDu4XobT/yupAF1F7TMAyI2tE=) 5: Z82XkiOXgkgyHP_qUTQtV9ipAQI.roa (hash: Pcm+DnawQak47wg3O3tVgdWOq8t4gYDBeT6sBFXXJVE=) 6: kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl (hash: zPgeuoxRynS350jgYl1E3orqBX+IDaOJsoYJ87hXNso=) 7: xzAOimHDia6u9KEZ2lcYuzbmUh8.roa (hash: twU3Zu+3OA4eLfmXFSTTDjCKPfrJ6o8S1Q+yF0JIdC4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:dc:f2:98:62:f2:e9:4d:ab:df:cc:2a:95:36:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139 Validity Not Before: Dec 20 09:01:14 2025 GMT Not After : Dec 21 09:01:14 2025 GMT Subject: CN=f6c6ea9efbf138e573c02f1d6e2f8fc0f69c18d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bc:34:a0:25:63:9c:b9:9f:cd:d7:7a:b8:9c: 66:8b:19:51:6a:47:3a:2d:d6:33:b3:ed:4d:a8:2b: df:80:69:27:c0:32:ff:06:42:72:ab:fc:d8:4f:b8: cc:40:5f:89:4e:ab:2b:8b:3b:2f:44:bf:3a:a0:d3: 99:5d:9a:71:9d:60:c5:ce:8c:b7:b5:79:e2:ca:ee: e4:d5:a5:f1:87:d6:3b:bc:40:ed:e6:0c:4d:ca:ec: e9:c0:66:0a:d4:b6:7e:89:6d:2b:1b:69:f6:87:b3: fc:30:03:53:2b:15:06:1c:08:84:99:54:b7:e7:7c: 08:08:13:12:26:af:22:56:38:ed:60:91:75:9a:4f: e7:98:bb:d8:b3:43:82:c2:16:9f:66:49:04:d4:26: e9:08:c0:17:7b:1c:34:ca:20:3a:d8:95:c8:78:74: 93:cc:27:d3:58:85:b2:b1:b5:7a:56:ef:35:ee:70: 63:23:21:8c:29:ab:42:58:74:30:a3:26:8d:14:8e: 8d:38:68:aa:ab:40:8f:98:37:b7:80:e7:4a:b2:1c: e5:dc:40:d8:02:36:24:fd:77:ab:f2:fc:13:41:a5: 3e:9b:d9:7c:c8:2f:69:4b:22:93:37:4e:74:c6:8f: 66:99:05:88:1f:1c:32:db:0b:19:b7:fc:1f:13:d3: 0e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C6:EA:9E:FB:F1:38:E5:73:C0:2F:1D:6E:2F:8F:C0:F6:9C:18:D7 X509v3 Authority Key Identifier: keyid:92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:49:c7:ad:0d:fc:86:35:5d:c7:ee:0e:db:77:1c:ad:26:68: 50:e0:96:82:ec:37:5b:56:ad:4c:13:4b:76:57:e3:ef:6f:2d: a4:43:07:68:af:6c:c2:41:a6:90:46:08:a5:c1:9b:90:28:f3: 93:dc:e4:f8:ee:ba:98:57:19:af:4e:58:44:b2:f0:f8:76:b0: 08:40:2b:f8:88:ae:a6:c1:65:1f:b0:e5:45:e0:1a:c0:a3:81: b5:49:ea:bf:d1:c2:f5:1f:36:3d:9c:f1:26:02:c0:90:21:43: 1c:65:51:c8:14:ef:c8:96:99:32:db:bb:16:de:a3:fc:4f:44: 25:74:23:3c:3a:f6:dc:9f:2f:d1:cb:01:18:c4:6e:f2:9f:7f: 78:28:be:ba:40:ad:3f:91:f5:92:b3:7c:38:88:ca:0e:b1:23: 7a:c3:67:99:25:48:54:83:fd:bb:20:94:ab:1b:d6:a2:ba:ad: 62:84:45:fa:b3:1b:26:ce:5d:72:cc:8e:20:84:bc:da:f6:2a: 3b:1f:d5:01:99:2d:5a:13:78:11:11:e3:cd:12:22:b1:35:37: eb:43:12:db:d9:34:15:43:08:d7:91:15:0a:ad:63:8e:ef:47: 9e:5d:c6:d4:d9:0e:49:0b:df:0e:04:55:50:b4:03:55:53:93: 33:b2:ef:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/dzymGLy6U2r38wqlTZmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyOTM1MmE4ZDJkZDcwYzkxZmZjZWM4ZTMyM2ZlNjlmMWU5 YTQxMzkwHhcNMjUxMjIwMDkwMTE0WhcNMjUxMjIxMDkwMTE0WjAzMTEwLwYDVQQD EyhmNmM2ZWE5ZWZiZjEzOGU1NzNjMDJmMWQ2ZTJmOGZjMGY2OWMxOGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurw0oCVjnLmfzdd6uJxmixlRakc6 LdYzs+1NqCvfgGknwDL/BkJyq/zYT7jMQF+JTqsrizsvRL86oNOZXZpxnWDFzoy3 tXniyu7k1aXxh9Y7vEDt5gxNyuzpwGYK1LZ+iW0rG2n2h7P8MANTKxUGHAiEmVS3 53wICBMSJq8iVjjtYJF1mk/nmLvYs0OCwhafZkkE1CbpCMAXexw0yiA62JXIeHST zCfTWIWysbV6Vu817nBjIyGMKatCWHQwoyaNFI6NOGiqq0CPmDe3gOdKshzl3EDY AjYk/Xer8vwTQaU+m9l8yC9pSyKTN050xo9mmQWIHxwy2wsZt/wfE9MOyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPbG6p778Tjlc8AvHW4vj8D2nBjXMB8GA1UdIwQY MBaAFJKTUqjS3XDJH/zsjjI/5p8emkE5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3BOU3FOTGRjTWtmX095T01qX21ueDZhUVRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi83YjZlZGMtYWQyMy00ZDczLWFiNTYt MGExYTM1ODk3ZjEwLzEva3BOU3FOTGRjTWtmX095T01qX21ueDZhUVRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi83YjZlZGMtYWQyMy00ZDczLWFiNTYtMGExYTM1ODk3ZjEw LzEva3BOU3FOTGRjTWtmX095T01qX21ueDZhUVRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD0nHrQ38 hjVdx+4O23ccrSZoUOCWguw3W1atTBNLdlfj728tpEMHaK9swkGmkEYIpcGbkCjz k9zk+O66mFcZr05YRLLw+HawCEAr+IiupsFlH7DlReAawKOBtUnqv9HC9R82PZzx JgLAkCFDHGVRyBTvyJaZMtu7Ft6j/E9EJXQjPDr23J8v0csBGMRu8p9/eCi+ukCt P5H1krN8OIjKDrEjesNnmSVIVIP9uyCUqxvWorqtYoRF+rMbJs5dcsyOIIS82vYq Ox/VAZktWhN4ERHjzRIisTU360MS29k0FUMI15EVCq1jju9Hnl3G1NkOSQvfDgRV ULQDVVOTM7LvnQ== -----END CERTIFICATE-----Generated at Sat Dec 20 12:16:46 2025 by rpki-client