This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft File: KfajAL99QLf41hgcW4p9vHG30SM.mft (raw, json) Hash identifier: 1JPxdrXD/MKg4yNVDb4nbKPIT4SRYVKf0vu4Lvq4P80= Subject key identifier: 52:BD:94:15:7B:AA:76:51:7E:51:87:01:71:D9:5D:A4:A0:BC:66:25 Authority key identifier: 29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23 Certificate issuer: /CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123 Certificate serial: 019B3D22EC63D11847405B05BBDA81ABF771 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft Manifest number: 0B69 Signing time: Sat 20 Dec 2025 19:00:57 +0000 Manifest this update: Sat 20 Dec 2025 19:00:57 +0000 Manifest next update: Sun 21 Dec 2025 19:00:57 +0000 Files and hashes: 1: KfajAL99QLf41hgcW4p9vHG30SM.crl (hash: rBoYexM/NGmOKQDWQN/2aH6juFSC4xWqS6deU3/nC+8=) 2: bXochpGWrfkL9JTx-tBya7FybWc.roa (hash: GWw+pyqvyZwm3wir46g8ZzCYrwNMhLudtjpRVXUkGu8=) 3: rF48GSjCA8nAgS7e7P_0TwDWMHI.roa (hash: mzK0vZsIrvw7/YH7xF2HGiJG11ODO49sPGy1ll1t6eQ=) 4: s8_NtbGTu8kgBV4HuDM2-AUVj2Q.roa (hash: E+MCsmGddUOCxHp7ENUlFyd8Du3D6Rxe6k6mioQYpr4=) 5: wKUJgTwD7cFwdEtrEHOHqt6iRN8.roa (hash: kOGKpGaa2gE7ztgll470FJTFa167kUV848g0OHaW6ow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:22:ec:63:d1:18:47:40:5b:05:bb:da:81:ab:f7:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123 Validity Not Before: Dec 20 19:00:57 2025 GMT Not After : Dec 21 19:00:57 2025 GMT Subject: CN=52bd94157baa76517e51870171d95da4a0bc6625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e5:27:86:90:77:b7:c1:19:67:29:50:e0:4a: 52:aa:18:83:a7:43:78:c1:d9:fd:cb:1f:8a:17:b6: 20:a9:54:d0:8a:b3:2a:33:fe:f3:97:ef:29:24:d2: f1:b3:ed:ce:25:d7:d3:18:64:b4:77:c2:19:71:1f: cb:f4:2d:d5:af:08:6c:b3:d5:28:30:4f:ca:84:c0: 1b:2e:82:fd:5a:7d:9f:8b:8b:86:aa:d5:a2:e6:88: 60:9a:40:40:aa:ab:58:6d:cf:f0:c8:ab:71:3a:10: be:48:70:7e:f6:2b:bd:20:6d:62:d4:1e:36:75:09: 21:1f:b2:ba:ae:ba:20:9d:34:54:70:dc:55:fa:cf: b1:f6:39:e6:b8:03:83:32:8a:78:64:93:89:01:07: 39:f2:a0:6e:63:d3:09:ab:fd:91:02:80:a7:23:44: c0:71:cb:7c:9a:ae:78:dd:fd:ee:e6:4f:73:2b:ab: 27:85:2a:aa:53:d2:2e:c3:ef:e2:74:60:ba:ff:dd: 58:aa:c2:6d:84:ab:91:32:5e:3f:54:d9:56:f5:5a: e5:cd:aa:45:50:b8:64:89:d5:5f:cc:b2:53:92:d7: 28:6b:e5:5c:3f:90:5b:f5:a4:48:61:7d:d7:04:fa: 6e:39:58:97:73:8b:df:b8:cd:59:72:b5:b2:32:f2: b6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:BD:94:15:7B:AA:76:51:7E:51:87:01:71:D9:5D:A4:A0:BC:66:25 X509v3 Authority Key Identifier: keyid:29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:60:26:9c:64:14:8c:b8:0a:a3:cc:fe:29:e7:14:56:d8:cb: d8:5f:76:a5:ee:f9:89:bf:82:9e:90:ea:05:e2:32:e3:cf:28: 7d:ea:c1:f4:bc:07:9c:ba:ad:61:58:87:88:2a:e8:a7:9a:ff: f3:b5:07:07:18:6e:f9:24:e8:44:29:28:5f:6a:39:bd:d0:9d: 2c:1e:94:d0:16:ef:77:6f:51:5c:90:d7:1d:1b:16:15:a5:56: 81:10:03:2c:70:51:37:a4:cd:31:67:bd:40:b0:0b:a3:ad:03: 90:e4:4c:db:3d:c8:b9:62:d5:97:c4:ad:3f:eb:a9:f8:66:1c: e2:f6:c6:e3:c9:ba:25:bb:04:01:fa:69:1c:76:fa:9a:a5:7d: 85:17:c5:d3:79:3d:e5:bc:84:ec:90:49:78:61:13:69:4b:6e: bc:d3:2c:f8:9f:48:df:69:c5:26:39:d9:72:b4:92:71:79:0f: fd:a6:60:3a:6d:f9:43:ba:ec:c2:c5:6b:dd:45:9c:98:3e:c3: cf:17:a2:db:65:78:03:e3:79:dc:9f:b0:e8:f2:15:1d:44:bf: c5:f1:23:dc:31:26:28:b5:fe:fd:83:c4:a9:43:ef:35:10:e4: 8b:78:00:06:bb:3a:86:53:00:60:c5:cf:44:67:35:04:a0:08: 45:23:92:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Iuxj0RhHQFsFu9qBq/dxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZjZhMzAwYmY3ZDQwYjdmOGQ2MTgxYzViOGE3ZGJjNzFi N2QxMjMwHhcNMjUxMjIwMTkwMDU3WhcNMjUxMjIxMTkwMDU3WjAzMTEwLwYDVQQD Eyg1MmJkOTQxNTdiYWE3NjUxN2U1MTg3MDE3MWQ5NWRhNGEwYmM2NjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuUnhpB3t8EZZylQ4EpSqhiDp0N4 wdn9yx+KF7YgqVTQirMqM/7zl+8pJNLxs+3OJdfTGGS0d8IZcR/L9C3Vrwhss9Uo ME/KhMAbLoL9Wn2fi4uGqtWi5ohgmkBAqqtYbc/wyKtxOhC+SHB+9iu9IG1i1B42 dQkhH7K6rrognTRUcNxV+s+x9jnmuAODMop4ZJOJAQc58qBuY9MJq/2RAoCnI0TA cct8mq543f3u5k9zK6snhSqqU9Iuw+/idGC6/91YqsJthKuRMl4/VNlW9VrlzapF ULhkidVfzLJTktcoa+VcP5Bb9aRIYX3XBPpuOViXc4vfuM1ZcrWyMvK2pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFK9lBV7qnZRflGHAXHZXaSgvGYlMB8GA1UdIwQY MBaAFCn2owC/fUC3+NYYHFuKfbxxt9EjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2ZhakFMOTlRTGY0MWhnY1c0cDl2SEczMFNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hYWY0OWMtODNkZC00NmFhLThjZTct Yjg0YzQxM2RmYWE0LzEvS2ZhakFMOTlRTGY0MWhnY1c0cDl2SEczMFNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9hYWY0OWMtODNkZC00NmFhLThjZTctYjg0YzQxM2RmYWE0 LzEvS2ZhakFMOTlRTGY0MWhnY1c0cDl2SEczMFNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmGAmnGQU jLgKo8z+KecUVtjL2F92pe75ib+CnpDqBeIy488oferB9LwHnLqtYViHiCrop5r/ 87UHBxhu+SToRCkoX2o5vdCdLB6U0Bbvd29RXJDXHRsWFaVWgRADLHBRN6TNMWe9 QLALo60DkORM2z3IuWLVl8StP+up+GYc4vbG48m6JbsEAfppHHb6mqV9hRfF03k9 5byE7JBJeGETaUtuvNMs+J9I32nFJjnZcrSScXkP/aZgOm35Q7rswsVr3UWcmD7D zxei22V4A+N53J+w6PIVHUS/xfEj3DEmKLX+/YPEqUPvNRDki3gABrs6hlMAYMXP RGc1BKAIRSOSgA== -----END CERTIFICATE-----Generated at Sun Dec 21 02:20:00 2025 by rpki-client