This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft File: kvSxwL-61GuBHu5Wihj7qhSp1oc.mft (raw, json) Hash identifier: AaPbQh4cQVsaW4RB3u2zFy/3MQFnJVywkEgG4I0gyD8= Subject key identifier: 09:99:7D:84:D8:69:83:9A:55:4A:3B:97:69:7F:70:85:8C:6F:C1:35 Authority key identifier: 92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87 Certificate issuer: /CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687 Certificate serial: 019B31FAF898D39D30B3902B4769BC71FEE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft Manifest number: 1786 Signing time: Thu 18 Dec 2025 15:01:29 +0000 Manifest this update: Thu 18 Dec 2025 15:01:29 +0000 Manifest next update: Fri 19 Dec 2025 15:01:29 +0000 Files and hashes: 1: 0BEzsazQz-3-fzZOXUBzFR9-SEA.roa (hash: xJdvyBzFJCzDNWN1w4SpJl++kA85g2jY9KiUG4fQa2E=) 2: 1-Oq1-4hF4yCcXZpsJGDusj_hVz4.roa (hash: OUB6/BRumx2Zsh75d5vBwXiCTv8Msk13LqoxzZruX1k=) 3: 8tP5koea75iLq4fzJTwOilUzRew.roa (hash: nuWcmB+t6L5mbRuVr1gjXyaKkJjO2CWP61eKOZ9j5qA=) 4: Q39EicWKCAbcPFSCPOWxVuicNBs.roa (hash: xkLxxvpElKUg8h/PAkiiPnxY3jd1NXP1Ti2bF3eI0Qw=) 5: YTyyNdEqtE7TLFnb5kSYtSXQ6C0.roa (hash: 5KsxEGAO2miZS2qYCAKx62LCPIMduhWMuoqvvhKuiRU=) 6: d8pyP86Y6uwqz1d9ZUqrw3D4VrQ.roa (hash: rdq5z21gij6clSNE/4yKomwJ24Ycc5gYpA5zAtS7MBw=) 7: hLpPT363pnl477GGqc5nq4BfcT0.roa (hash: BX64RFEmiS7zTWdQnQw6dnEj3jYNCJBQmKLpW7F/EpQ=) 8: jNmr_uA5Ik1ev1kitS3H0XRfSs0.roa (hash: MWQMJNqYJOs+qGkZcyXQIyfm7wzm6V1fSmAClA7kRpk=) 9: kvSxwL-61GuBHu5Wihj7qhSp1oc.crl (hash: pEsoAXvhsfEmVbKeaK1DVcqyrTPlsOpQXldA1Ubs9rY=) 10: o53Asxejm11sb8YF2NlsCql1ybY.roa (hash: F+bQ4Enys65hQ07aHbKIp+uPwSt+gBE59SdxChGuPUY=) 11: tCAzKxpLrkmFMZR4RRCQd9p1ADo.roa (hash: SCXqn9Sk4hWHzAcns5LvAAZM9YZ7kblGiEWX7nVj190=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 15:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:f8:98:d3:9d:30:b3:90:2b:47:69:bc:71:fe:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687 Validity Not Before: Dec 18 15:01:29 2025 GMT Not After : Dec 19 15:01:29 2025 GMT Subject: CN=09997d84d869839a554a3b97697f70858c6fc135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1d:ba:fc:d5:79:78:f7:60:3a:9e:ed:87:d4: 9c:3a:88:2b:1c:8d:43:c9:58:33:e3:9c:42:45:94: 75:2d:d9:36:9e:f9:d7:a9:4d:4a:c8:dc:a1:9d:6a: 9f:8d:3e:0e:65:eb:98:90:e1:8f:cd:9a:f6:25:84: 4c:a4:7f:d1:4a:ce:6c:60:0c:85:97:81:0d:37:77: eb:ff:ea:74:43:aa:ac:16:71:bd:bd:8f:02:80:46: db:39:a5:f3:ed:75:c4:c5:0d:d8:1a:09:2c:52:21: fc:dc:84:f8:f1:4a:c5:1d:67:c8:2b:55:ee:11:0f: 2d:8d:05:41:51:49:6c:01:d8:c3:82:00:e7:eb:22: e0:bc:f8:fa:b5:39:3b:b5:1a:27:97:e1:ff:ed:fd: 5d:ba:59:c5:51:a1:d7:a1:bb:bd:64:2e:59:6f:18: c4:f5:e9:6b:a3:1c:60:fe:22:f4:74:4d:5d:6d:c3: 45:52:10:8a:f6:98:8d:3c:53:c1:80:da:00:12:c0: 5b:1f:7d:ca:b9:17:4a:fd:f5:56:74:25:c9:eb:b4: a2:b8:ed:3f:21:3b:2a:82:03:91:4b:c4:cc:7f:ea: 13:ce:74:0c:df:58:ec:75:9a:74:bc:81:08:95:34: c8:2a:25:c3:b4:c9:0c:65:22:49:b9:6a:9a:86:dc: 14:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:99:7D:84:D8:69:83:9A:55:4A:3B:97:69:7F:70:85:8C:6F:C1:35 X509v3 Authority Key Identifier: keyid:92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:f0:7e:8d:ce:7e:7a:72:b5:1b:21:c9:c9:f8:71:9e:03:ec: fc:b1:c4:bd:6c:72:b0:e6:97:34:49:e9:df:54:09:f1:31:92: 6b:09:06:92:64:38:87:60:72:62:1d:f9:91:05:c9:88:7c:21: 1d:79:42:5d:2e:5d:5b:d8:9f:b4:dc:b8:fc:e0:70:8e:61:b6: e2:96:a0:6a:9e:a5:85:4b:09:90:f9:42:d8:ae:8b:02:d5:72: fe:5f:3f:85:8a:3b:5d:15:36:60:88:cc:40:0f:d5:99:f9:43: eb:f5:3b:5f:48:ac:15:1d:7a:2e:c5:92:74:67:aa:70:21:dd: 95:7e:28:bd:63:77:66:4f:7d:08:64:0e:8a:60:4c:c4:56:59: de:3b:c9:bf:de:b6:92:19:e5:fd:c6:24:72:c1:d2:e2:8e:1e: 72:81:99:9c:08:f7:e5:70:a4:f7:ad:b2:13:95:a2:33:7b:9c: 78:1f:fe:5f:30:92:a0:e7:28:0c:60:a3:c0:4d:ad:9b:26:0a: bf:c9:25:e6:9d:44:81:9d:88:9c:84:de:c9:56:50:9a:ee:9d: 3a:db:e7:1c:b2:87:2d:e2:64:9e:41:94:42:2a:14:b6:77:a5: 2f:37:f6:f6:39:65:a4:9f:34:82:45:57:32:59:10:44:c9:59: 22:2e:cd:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+viY050ws5ArR2m8cf7lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZjRiMWMwYmZiYWQ0NmI4MTFlZWU1NjhhMThmYmFhMTRh OWQ2ODcwHhcNMjUxMjE4MTUwMTI5WhcNMjUxMjE5MTUwMTI5WjAzMTEwLwYDVQQD EygwOTk5N2Q4NGQ4Njk4MzlhNTU0YTNiOTc2OTdmNzA4NThjNmZjMTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR26/NV5ePdgOp7th9ScOogrHI1D yVgz45xCRZR1Ldk2nvnXqU1KyNyhnWqfjT4OZeuYkOGPzZr2JYRMpH/RSs5sYAyF l4ENN3fr/+p0Q6qsFnG9vY8CgEbbOaXz7XXExQ3YGgksUiH83IT48UrFHWfIK1Xu EQ8tjQVBUUlsAdjDggDn6yLgvPj6tTk7tRonl+H/7f1dulnFUaHXobu9ZC5ZbxjE 9elroxxg/iL0dE1dbcNFUhCK9piNPFPBgNoAEsBbH33KuRdK/fVWdCXJ67SiuO0/ ITsqggORS8TMf+oTznQM31jsdZp0vIEIlTTIKiXDtMkMZSJJuWqahtwUvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAmZfYTYaYOaVUo7l2l/cIWMb8E1MB8GA1UdIwQY MBaAFJL0scC/utRrgR7uVooY+6oUqdaHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi80Zjg1MTQtMmUyMC00OTM1LTk5NWMt YTA4NGY3NmM4ZTJiLzEva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi80Zjg1MTQtMmUyMC00OTM1LTk5NWMtYTA4NGY3NmM4ZTJi LzEva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkvB+jc5+ enK1GyHJyfhxngPs/LHEvWxysOaXNEnp31QJ8TGSawkGkmQ4h2ByYh35kQXJiHwh HXlCXS5dW9iftNy4/OBwjmG24pagap6lhUsJkPlC2K6LAtVy/l8/hYo7XRU2YIjM QA/VmflD6/U7X0isFR16LsWSdGeqcCHdlX4ovWN3Zk99CGQOimBMxFZZ3jvJv962 khnl/cYkcsHS4o4ecoGZnAj35XCk962yE5WiM3uceB/+XzCSoOcoDGCjwE2tmyYK v8kl5p1EgZ2InITeyVZQmu6dOtvnHLKHLeJknkGUQioUtnelLzf29jllpJ80gkVX MlkQRMlZIi7Npg== -----END CERTIFICATE-----Generated at Fri Dec 19 00:10:41 2025 by rpki-client