This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft File: KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft (raw, json) Hash identifier: MQM2O2n41YFElJWFymNIZaMv5XY6VZRLpOqrz3raZN8= Subject key identifier: 82:0D:CA:61:AB:D8:91:CA:A5:40:AD:DD:D7:50:4D:EF:5B:A0:3F:D7 Authority key identifier: 29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28 Certificate issuer: /CN=291f0b73e67d63c5a4c9046814166a9e21625f28 Certificate serial: 019B3CB4EF931EB2F1E2775E136420E6A4AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 17:00:49 +0000 Manifest this update: Sat 20 Dec 2025 17:00:49 +0000 Manifest next update: Sun 21 Dec 2025 17:00:49 +0000 Files and hashes: 1: 1-BYmurPr5LAEsZbg3IkqQQ8bTE.roa (hash: gSRreBFbCS0pgQwKCm4p7z2bTAJn0+Iu8NoE2w5inzM=) 2: KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl (hash: QIjZUE2cx8UkMtaYrqD5s4J6h7hElIFOqQtaHyPBMlA=) 3: LkIHKYAztrvXyS2uvM19nitM_J8.roa (hash: bSmM4xvjjm+xIUvcYXqsQ49ZAFIaGh2KEBGQ0EzdDJQ=) 4: YZbRz0TPn2AkN3pts4pehGKPFCQ.roa (hash: +Ns94ZDDFJ4TJopF8u7U1uG56GwRweZl/hjdoUef2a0=) 5: _vdRTtZt9JtL5ja2GczGggJ0SbM.roa (hash: lAHlgKcde7+6Ag5a4YHN2NUrJtyFsbjpueclzD4vqNA=) 6: cPcxLO1mqeKGQGyRnW90EvAI0HE.roa (hash: k9JzzhuzIaxECEDTAdASrMOBk8mvIm/aEbc0qToiokc=) 7: dx0WinCfMz9mrqqCW13H5COmXU8.roa (hash: ljXXTzc+Ws09xCBJIxWwoc/Db/5IEktc/whbot/5Ato=) 8: fx8MLGTxK80dTB_4NJYiocZMPwQ.roa (hash: ktdhmccH0NnIum2PWLW59Gn98yD870nWte0K3STRnHs=) 9: uwiEBGof-KAkpEFhZy-WaLfAvIs.roa (hash: ZnbTLkj0SeUC00zQu5XoWyUlIHf81vfWL1Buec+9xEU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:ef:93:1e:b2:f1:e2:77:5e:13:64:20:e6:a4:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291f0b73e67d63c5a4c9046814166a9e21625f28 Validity Not Before: Dec 20 17:00:49 2025 GMT Not After : Dec 21 17:00:49 2025 GMT Subject: CN=820dca61abd891caa540adddd7504def5ba03fd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:61:d0:67:fd:fd:b5:20:59:3a:46:95:90:d8: 3e:b5:66:12:bb:df:23:03:6b:d3:89:56:c0:4c:cf: 21:fa:ab:92:80:3f:83:f2:d2:c7:6b:c3:5d:67:6d: 57:6d:e3:d1:cc:a1:09:d8:96:cc:b9:23:b0:43:30: ed:e8:5e:4b:b8:40:f9:1e:25:8b:4f:4a:5b:37:84: 9f:0b:d1:14:db:d2:bf:3e:88:92:c0:aa:b3:43:c8: 48:61:d4:d7:36:48:da:00:cb:77:8e:a9:0b:67:49: 44:a3:6c:6d:0a:45:9e:2d:3a:39:22:1e:66:e3:9f: 27:2a:62:87:cc:77:57:30:4c:99:56:b1:63:bd:a3: 2e:76:4f:ab:72:47:b5:0e:8a:09:73:ea:86:9c:42: 5c:2a:05:65:12:15:82:d1:f0:cc:12:25:8f:00:f4: 94:a0:cd:fd:43:9c:bd:86:50:f2:4e:00:fe:fc:fb: 9b:e4:b7:a4:bf:3d:96:90:a3:e2:7f:25:90:15:39: f2:4b:88:80:bf:12:c7:63:37:f7:71:f4:6c:f1:e0: d4:fe:32:20:3c:06:88:55:9c:de:18:42:f3:eb:dc: 28:0d:53:f6:05:13:b2:4d:9e:32:ae:f9:83:00:02: e8:23:53:fa:b5:f4:3d:5c:2a:1f:7a:e5:07:20:d6: 82:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:0D:CA:61:AB:D8:91:CA:A5:40:AD:DD:D7:50:4D:EF:5B:A0:3F:D7 X509v3 Authority Key Identifier: keyid:29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:17:96:a8:6a:d6:93:9a:85:eb:6b:98:3b:f3:58:48:9f:f6: a9:a5:71:47:31:f0:2f:e1:12:77:e9:f7:ec:5b:1d:4a:dd:89: 21:f6:00:24:8f:63:6d:34:5b:b1:4c:19:cf:5f:c6:86:8d:cc: 6d:6c:ae:9f:5b:3d:14:56:e3:35:77:80:6e:c5:a4:82:47:11: c8:99:ec:d2:11:1c:19:5c:79:39:57:92:4d:f7:c0:84:f8:8b: 09:ea:37:dd:40:ee:c5:ee:dd:01:23:c3:3f:c5:54:4d:55:64: ba:ab:91:48:bf:8e:f2:4f:f9:d1:4a:e3:6b:92:9b:ea:78:c8: e8:4b:2f:90:51:08:74:c8:41:bf:44:a1:48:8e:45:54:a4:eb: 1c:39:96:d9:21:a6:33:f2:4f:2a:d5:56:07:7a:c2:af:8c:7c: 51:51:2a:57:a1:1a:07:0a:1c:7f:76:26:bf:9e:6c:92:8a:8e: fc:42:34:62:fd:2c:fd:73:d2:d2:7a:54:95:cb:3f:14:22:9c: 58:73:22:e2:9d:83:dd:47:a7:0a:90:8f:12:f7:66:79:bb:3a: 17:e6:c3:fa:9a:8b:f5:2a:e5:01:7b:34:6b:a2:31:fb:f6:aa: 86:2d:cb:57:b9:48:53:60:f7:37:e5:f8:ab:6d:08:e0:5d:25: ca:45:7e:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tO+THrLx4ndeE2Qg5qSrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MWYwYjczZTY3ZDYzYzVhNGM5MDQ2ODE0MTY2YTllMjE2 MjVmMjgwHhcNMjUxMjIwMTcwMDQ5WhcNMjUxMjIxMTcwMDQ5WjAzMTEwLwYDVQQD Eyg4MjBkY2E2MWFiZDg5MWNhYTU0MGFkZGRkNzUwNGRlZjViYTAzZmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GHQZ/39tSBZOkaVkNg+tWYSu98j A2vTiVbATM8h+quSgD+D8tLHa8NdZ21XbePRzKEJ2JbMuSOwQzDt6F5LuED5HiWL T0pbN4SfC9EU29K/PoiSwKqzQ8hIYdTXNkjaAMt3jqkLZ0lEo2xtCkWeLTo5Ih5m 458nKmKHzHdXMEyZVrFjvaMudk+rcke1DooJc+qGnEJcKgVlEhWC0fDMEiWPAPSU oM39Q5y9hlDyTgD+/Pub5Lekvz2WkKPifyWQFTnyS4iAvxLHYzf3cfRs8eDU/jIg PAaIVZzeGELz69woDVP2BROyTZ4yrvmDAALoI1P6tfQ9XCofeuUHINaCMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIINymGr2JHKpUCt3ddQTe9boD/XMB8GA1UdIwQY MBaAFCkfC3PmfWPFpMkEaBQWap4hYl8oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1I4TGMtWjlZOFdreVFSb0ZCWnFuaUZpWHlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80OGQ2MDktMDg4ZC00MWU0LWJlYzQt MzhlZThmZDY0ZTdkLzEvS1I4TGMtWjlZOFdreVFSb0ZCWnFuaUZpWHlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS80OGQ2MDktMDg4ZC00MWU0LWJlYzQtMzhlZThmZDY0ZTdk LzEvS1I4TGMtWjlZOFdreVFSb0ZCWnFuaUZpWHlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYBeWqGrW k5qF62uYO/NYSJ/2qaVxRzHwL+ESd+n37FsdSt2JIfYAJI9jbTRbsUwZz1/Gho3M bWyun1s9FFbjNXeAbsWkgkcRyJns0hEcGVx5OVeSTffAhPiLCeo33UDuxe7dASPD P8VUTVVkuquRSL+O8k/50Urja5Kb6njI6EsvkFEIdMhBv0ShSI5FVKTrHDmW2SGm M/JPKtVWB3rCr4x8UVEqV6EaBwocf3Ymv55skoqO/EI0Yv0s/XPS0npUlcs/FCKc WHMi4p2D3UenCpCPEvdmebs6F+bD+pqL9SrlAXs0a6Ix+/aqhi3LV7lIU2D3N+X4 q20I4F0lykV+Bw== -----END CERTIFICATE-----Generated at Sun Dec 21 00:43:35 2025 by rpki-client