This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft File: KdLa_xxbthoKyLPK6tS4ofooTQ8.mft (raw, json) Hash identifier: Y+KW7hgo30eOSmcSY9JT175r1DUnnXL5DlpUir9HKvc= Subject key identifier: CD:2B:E1:0E:55:C6:1B:C1:73:72:84:40:09:FB:2A:D3:10:CF:50:12 Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Certificate serial: 019AF1D2254D222C2C21099584C4095D1A25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft Manifest number: 156D Signing time: Sat 06 Dec 2025 04:01:12 +0000 Manifest this update: Sat 06 Dec 2025 04:01:12 +0000 Manifest next update: Sun 07 Dec 2025 04:01:12 +0000 Files and hashes: 1: 2PegbotqIwMrRQlCESj3wtOxk9Y.roa (hash: rZZVMQZKMI0it0tOgJpydNZzt0GekTuseRWYhBVvg6A=) 2: 3JFGNuMYTVRE_tgsRB9Dv7TkoAI.roa (hash: cgDSOAUcOV7B/P90698S4nI5hWvg5jhDlyl5V3knjkc=) 3: 3XkmMUl7M1nMmiPcb7LUVevLIyY.roa (hash: Pdr72/2Gt/q0gBSGYVJo0n8lS0yGcyhACoYNvfLSjWU=) 4: 9tqxD372UOGf-zL9Og3dZI-GB_E.roa (hash: 1BflUu83I4Fz3YB6j1fHXKTleEcGx3LVxi458xNGCuo=) 5: AT1NLNUZ8X0xD6RcwZMdLdIz2ZM.roa (hash: fjnVFsPrVhpcbyIspcCLA5dZQu2SV1yINQliobo6yxc=) 6: FHCB6DuGL-bnBGM2X1yDzSnX9Zk.roa (hash: r6GDh9X+ylCTDxl9vj4S1UTcrV/ImccaaTi1D8Mi2xk=) 7: G4i5HzFemLXdLvBS_7Q429NG6_c.roa (hash: PhE5GD2aKWrEPp5p1ohcxf7+DsUWcfKZIUIvlvVO+6k=) 8: HN-sxkXhsPARhEyjcxF2VA5ULns.roa (hash: XKKXt3nQtVRf5U2SzwHGZlsTijL5Olvfsj7LyZpSgu0=) 9: HYbbsf8eCMyzWR7NIXL13jWqnOA.roa (hash: 4w478Bzu4qBOXzsZWI8tSBfQuiqe4KuvXGGHx+9OwLQ=) 10: KSdWPEt9fB_iBluYNf4K7txBQrE.roa (hash: YJ0c3CPnKgl+QFgMB6tD+ii2GX7vwrvuc49Rrz/E7uI=) 11: KdLa_xxbthoKyLPK6tS4ofooTQ8.crl (hash: nU4Qxs/ekQY4M2NtEjmJodhKvOWh1bRpKkfHKX/p4sw=) 12: Mf9Ftgoq8hNaUlnWSE1OgssDPng.roa (hash: 2OpCIxzpIQdhVjJD4azKWQqbRjrwZgvvuIiGX67bBpw=) 13: MfgxEOGAfVTGEvhRZTV_fR1-qXk.roa (hash: k0aQBEKvm4oillc+UIihjgdIum6WVpAkoV036ebhwvc=) 14: NcWtmNHRiYuhKShMZ2FiNOKfbAw.roa (hash: 6KR850hMO0L6chqV9/ieA2lf65V6cwC4jHYlXOitS7g=) 15: Q8PmaVsu91FafNMJSiUguBXDAy4.roa (hash: v/8qlXzfsrMPaxgUO4OHSG4SXigE1NDzd1YZIaC3Tfs=) 16: RPKuIuiwLUOTopNmIn4BOJGs7i0.roa (hash: lIg6TqObzFxbqNZ5fchVzBYqOiLD6H6xqfkDU6vs6XY=) 17: S5Vx_PwhrUdn6uSPv9B8Pl8fWZ4.roa (hash: XmpSvZLR/cpO3PqSr4aJClVLTWeNmz7xYTDZX7wuFYc=) 18: XdU9ba_H8wvW9YWGekfY-RC6fac.roa (hash: t+t6oWtjjjeUHSoz5gNWccz0VBGlDxWsh2LU4cszm7w=) 19: ZMqTwlIwPeE8mvoUVuRcrTCwgzU.roa (hash: aGqzihW0U2Fa6GEAQlzK17OaJFeFsHY8Inov7Q4Zp7U=) 20: ZreaaSzvj0F5FavpUXWG2Nvv2Pk.roa (hash: 1Qh4e1SS86x/OjiBlUymOG3z5N1ty2+63wfpNrmVAAs=) 21: _Ua05IcZ-Kd74uu-acz3zYQ2UXg.roa (hash: VTikAPXKyS/i+ZZ35PgUSzUblUTlMqZmtelGl4Mi2wc=) 22: bZv3S6SjMHuATa5GhC0St5hSsfU.roa (hash: v5Z9NLPnQ7ljIuVsTKQar4zGJUJdgJ7qXeQXJqaqbtI=) 23: cOWXDby_VAjDBm-QNXyxFV15NYc.roa (hash: d23wa4ZI6ixe2JTopJ8C5Bi1Ca40n6+Q2pIZccoLoNY=) 24: dEipwsI3eN1As0rWuDbWNnqMvTw.roa (hash: +biJe511JtIv65zZKrLUqAD9MG0u+pcvdynZY6XvZoc=) 25: fFIiPcIZQx033jSV6p41eBFER7E.roa (hash: qhzye0ysaR3MnkAhIOM63hxvVgvo8rQw3JHNBHBliIQ=) 26: fYh96DEUprSlV21wSMnuWBCSwx0.roa (hash: v06BAbDyEGINC47vf0TbEA82PuMPVQcWMD/+BPJ4cCg=) 27: hGqZ-FRlI55t4voAlR-n3NqPej0.roa (hash: B71Rb7BaHyLXQqMJQJiZSZS0lT82TbCVQONz7Ndp5cM=) 28: iZaZeEkRfA-qPxq2ngG3cfkXZcs.roa (hash: T0PfM8f9MKiqot92ZRLwnMqkMZ5rdvRshuTN3e9yWu4=) 29: onT2MkF29XmtrGx1gO1FbJGGd64.roa (hash: 9BBTl4rWlge/62o6XB7LJ3UfJ89LN7a5QNMStDRgw1U=) 30: qwqQv0_kWPrf2uUBMKT2TvBK3mI.roa (hash: ThX6Wi8fnBNMU2VW9z+5scRKlGLAdJdy5Sm4VgDw7kY=) 31: uNJMLJU1OW9vcIqjiQSUIVSCjgc.roa (hash: HOHu6WW/4np2LUQoidC7DHY+Djbp+WHZl3/vUb3ayiQ=) 32: wgXSVyqMPOaVRZoRz2DoQs27lno.roa (hash: 5JI0l9I/46gau6VOxIi0gUhDeXleGfmQ+fS0p1j3UPM=) 33: zoKa5rQePkHEPMZVNfuzo9aiNhc.roa (hash: vKObmrx8e0xeNE7rTL2Kryo1mCerVlEr58rYUGyO4oM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:25:4d:22:2c:2c:21:09:95:84:c4:09:5d:1a:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Validity Not Before: Dec 6 04:01:12 2025 GMT Not After : Dec 7 04:01:12 2025 GMT Subject: CN=cd2be10e55c61bc17372844009fb2ad310cf5012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b6:63:69:2a:08:01:f9:58:78:1e:21:37:fd: 29:0c:bb:bb:60:55:93:6f:a5:b9:2e:ea:7e:db:dc: 1b:0f:3e:70:8f:43:60:5a:60:e8:97:70:34:d2:c7: 37:c1:4a:e9:8c:74:66:f6:56:fa:24:29:71:22:b6: 30:0c:34:cc:73:be:05:1a:f9:93:8a:9a:9c:b6:11: 54:cc:ad:ed:50:d6:5a:f2:a5:2b:93:f7:54:df:7a: 70:40:75:8e:44:ad:d4:b1:b7:8a:77:b4:a2:c2:6d: d7:c0:7e:59:eb:4b:f0:b2:ef:2d:4f:d0:c2:92:09: 09:54:8d:cd:1e:51:03:be:2a:af:20:ae:48:44:48: 0a:61:4d:52:00:34:e6:4d:92:ce:de:aa:e8:da:62: cf:38:99:30:b1:48:da:da:a7:c0:9e:93:6e:17:91: ff:f6:42:95:2e:b3:07:c5:ff:1f:dd:19:10:76:92: 87:08:7d:29:e1:6b:ee:33:fd:27:50:7a:c4:49:d3: 6d:4d:d7:40:f4:67:77:d5:e5:64:79:1e:b1:bc:a9: 14:84:3a:12:51:fe:72:12:b2:c2:19:c7:c0:18:d3: 8c:09:6c:c9:5b:c9:84:5b:40:a6:31:12:a0:26:93: ba:56:1b:94:92:e9:31:ab:70:6e:dd:15:7a:ac:bd: 54:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:2B:E1:0E:55:C6:1B:C1:73:72:84:40:09:FB:2A:D3:10:CF:50:12 X509v3 Authority Key Identifier: keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:d0:5b:2f:48:b8:24:f1:43:ce:88:36:46:88:5e:22:ff:cd: 40:ed:5a:b4:7e:47:6c:03:d2:50:1b:22:37:c1:6e:7d:bf:53: 7b:d9:bb:ce:f3:38:54:90:8c:e5:74:74:10:8f:fb:a3:6a:0b: 6a:19:51:b5:34:b8:58:01:7a:92:36:76:77:5f:d5:8f:94:f9: 57:bd:ae:a6:1e:7a:3b:56:fc:63:cc:dd:29:aa:e3:ea:c2:b3: 6f:b8:57:d8:a0:f6:12:48:1e:68:31:b3:6b:c5:b9:c0:7d:db: 84:0e:23:33:2e:50:1f:98:24:9c:ed:19:9c:fa:2d:41:7b:dc: a4:d8:fb:ca:aa:1a:25:9b:a6:6b:28:c6:4e:48:5d:08:6f:05: 23:c0:f3:9b:6b:92:cd:80:d0:31:e6:71:c9:24:7a:be:94:12: ff:ea:03:4f:8f:0a:4b:38:fc:36:36:5d:e6:05:bb:31:5e:c4: 38:15:f6:66:66:a8:fe:5c:be:b3:79:64:2e:8c:27:3a:17:df: 1d:11:3c:4e:5d:66:3a:35:92:1f:ba:9d:32:58:73:79:88:b2: 44:f8:21:08:b2:64:ef:e6:f2:58:f4:88:a7:f6:a5:0f:24:a8: 49:ec:d7:a9:97:16:cb:3f:73:c6:ce:50:cd:ed:31:8c:e4:9b: 74:29:30:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0iVNIiwsIQmVhMQJXRolMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy ODRkMGYwHhcNMjUxMjA2MDQwMTEyWhcNMjUxMjA3MDQwMTEyWjAzMTEwLwYDVQQD EyhjZDJiZTEwZTU1YzYxYmMxNzM3Mjg0NDAwOWZiMmFkMzEwY2Y1MDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbZjaSoIAflYeB4hN/0pDLu7YFWT b6W5Lup+29wbDz5wj0NgWmDol3A00sc3wUrpjHRm9lb6JClxIrYwDDTMc74FGvmT ipqcthFUzK3tUNZa8qUrk/dU33pwQHWORK3UsbeKd7Siwm3XwH5Z60vwsu8tT9DC kgkJVI3NHlEDviqvIK5IREgKYU1SADTmTZLO3qro2mLPOJkwsUja2qfAnpNuF5H/ 9kKVLrMHxf8f3RkQdpKHCH0p4WvuM/0nUHrESdNtTddA9Gd31eVkeR6xvKkUhDoS Uf5yErLCGcfAGNOMCWzJW8mEW0CmMRKgJpO6VhuUkukxq3Bu3RV6rL1UXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM0r4Q5VxhvBc3KEQAn7KtMQz1ASMB8GA1UdIwQY MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt NGY1N2Q5Y2Y1Y2FhLzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMtBbL0i4 JPFDzog2RoheIv/NQO1atH5HbAPSUBsiN8Fufb9Te9m7zvM4VJCM5XR0EI/7o2oL ahlRtTS4WAF6kjZ2d1/Vj5T5V72uph56O1b8Y8zdKarj6sKzb7hX2KD2EkgeaDGz a8W5wH3bhA4jMy5QH5gknO0ZnPotQXvcpNj7yqoaJZumayjGTkhdCG8FI8Dzm2uS zYDQMeZxySR6vpQS/+oDT48KSzj8NjZd5gW7MV7EOBX2Zmao/ly+s3lkLownOhff HRE8Tl1mOjWSH7qdMlhzeYiyRPghCLJk7+byWPSIp/alDySoSezXqZcWyz9zxs5Q ze0xjOSbdCkw8g== -----END CERTIFICATE-----Generated at Sat Dec 6 14:39:11 2025 by rpki-client