This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft File: kfWJGibPpDaiPn4f-XZki-5573c.mft (raw, json) Hash identifier: LTp8kv2LXhFzClzLIY49FvO5dDOuIUZsU1YkSw1F5Ts= Subject key identifier: 91:98:2F:02:14:6B:F9:FB:70:BB:DA:9B:EF:07:80:6F:62:CB:FE:38 Authority key identifier: 91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77 Certificate issuer: /CN=91f5891a26cfa436a23e7e1ff976648bee79ef77 Certificate serial: 019AF31C315C0DAF899CD15EC7308B7540C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft Manifest number: 15D1 Signing time: Sat 06 Dec 2025 10:01:42 +0000 Manifest this update: Sat 06 Dec 2025 10:01:42 +0000 Manifest next update: Sun 07 Dec 2025 10:01:42 +0000 Files and hashes: 1: AwtKEHfYyxnQ1th-VlZxSnr7g6Q.roa (hash: kaMvuNz15dIgQL2M/Qvml14U3ZSUX9PuIaFhO+5H45U=) 2: DIxBuJDWRajN2G8Xp5FV5TyPSvA.roa (hash: OfQWp1njClDrdouukOkCvfJ95D6ij98TPOIuqpcwAzY=) 3: kfWJGibPpDaiPn4f-XZki-5573c.crl (hash: 8iTOl1gBxAfnUxOIpvA6zuPEkwg5U3ASW0GcShsnMxM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.crl rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:31:5c:0d:af:89:9c:d1:5e:c7:30:8b:75:40:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91f5891a26cfa436a23e7e1ff976648bee79ef77 Validity Not Before: Dec 6 10:01:42 2025 GMT Not After : Dec 7 10:01:42 2025 GMT Subject: CN=91982f02146bf9fb70bbda9bef07806f62cbfe38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:61:92:8e:11:b8:34:26:7e:e4:a8:36:c0:4c: bf:76:fa:d5:71:20:fd:2d:61:8d:b4:c6:2c:76:fc: 6b:a9:f5:43:5e:ed:7e:bb:cc:4e:dc:a5:79:bc:4e: 3a:d3:0e:2c:61:9e:46:4f:87:a2:b5:3f:f6:a5:df: 41:b8:96:05:8d:0d:ce:bf:80:aa:cb:ec:a4:ba:4f: da:3f:ea:d7:11:98:e5:72:ae:94:0e:64:58:f9:49: 33:0f:9d:d0:96:f2:e6:99:e5:04:07:ae:14:0c:f0: 47:61:4d:db:f6:ae:fa:f6:8e:36:82:9c:19:d0:aa: 15:1b:51:57:6c:36:34:fc:d6:bd:6a:2a:f8:6d:e1: fd:67:fd:0d:f9:7f:0f:5f:7b:ab:91:b7:ca:85:a4: f1:31:d2:fa:06:a8:1a:e4:49:99:74:1e:bb:6b:53: 97:17:3c:ad:4d:02:8f:3c:b9:70:3e:5f:20:dc:47: c9:0e:ae:75:43:3a:75:be:62:67:48:e9:55:89:39: 4d:4e:d9:34:b6:d9:27:66:50:82:1b:30:17:a5:f4: d3:45:0f:90:10:7a:8d:a0:41:cc:24:f8:4d:3a:72: 00:ad:4b:89:a7:52:9a:d9:f5:f4:0c:40:06:7b:fc: 2b:6a:33:ad:ed:ad:06:ba:18:63:be:f7:82:55:55: 6c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:98:2F:02:14:6B:F9:FB:70:BB:DA:9B:EF:07:80:6F:62:CB:FE:38 X509v3 Authority Key Identifier: keyid:91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:3a:22:df:4e:7e:63:3a:8e:59:13:e2:7c:12:01:a8:15:b9: 68:19:a9:a3:f4:5a:a3:be:2d:78:ad:08:2b:81:15:20:67:9f: b6:25:90:d3:8a:69:50:1e:7b:96:25:62:28:44:87:d2:28:2f: b0:33:ff:d8:bb:f5:a0:d3:dd:24:74:69:ee:6d:0a:76:f7:1c: 55:2c:4d:90:94:8f:c4:86:55:55:48:42:7a:d5:2b:f0:77:ad: 3a:68:20:9c:c6:82:8b:d3:14:9f:8b:88:ed:b0:6b:7c:f4:a4: e8:16:2a:b6:d2:f0:a2:f1:3c:c6:a7:c0:cd:44:79:2e:b4:4e: 51:a4:db:5e:a8:b4:fb:47:9a:8d:99:57:86:4f:a7:ee:c5:6d: 97:9d:cc:8f:bd:9f:da:8b:f0:1d:6a:d7:f3:74:24:40:7e:8f: 00:f5:2d:2e:ec:17:eb:00:b3:98:81:e8:44:f1:70:38:5f:30: c3:8c:c6:b0:d4:4c:c3:ac:2f:5e:dc:48:32:86:15:d7:44:cd: 44:94:d1:6b:ce:92:f1:1d:98:f7:89:29:c5:c9:5c:3f:b1:b3: 81:14:f7:fa:63:74:20:af:73:78:aa:1f:44:3a:43:f1:2b:ef: e5:ae:2b:c2:5b:06:76:fa:d9:4a:89:77:58:2c:7e:ac:6c:60: a2:6d:4c:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHDFcDa+JnNFexzCLdUDCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZjU4OTFhMjZjZmE0MzZhMjNlN2UxZmY5NzY2NDhiZWU3 OWVmNzcwHhcNMjUxMjA2MTAwMTQyWhcNMjUxMjA3MTAwMTQyWjAzMTEwLwYDVQQD Eyg5MTk4MmYwMjE0NmJmOWZiNzBiYmRhOWJlZjA3ODA2ZjYyY2JmZTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7GGSjhG4NCZ+5Kg2wEy/dvrVcSD9 LWGNtMYsdvxrqfVDXu1+u8xO3KV5vE460w4sYZ5GT4eitT/2pd9BuJYFjQ3Ov4Cq y+ykuk/aP+rXEZjlcq6UDmRY+UkzD53QlvLmmeUEB64UDPBHYU3b9q769o42gpwZ 0KoVG1FXbDY0/Na9air4beH9Z/0N+X8PX3urkbfKhaTxMdL6Bqga5EmZdB67a1OX FzytTQKPPLlwPl8g3EfJDq51Qzp1vmJnSOlViTlNTtk0ttknZlCCGzAXpfTTRQ+Q EHqNoEHMJPhNOnIArUuJp1Ka2fX0DEAGe/wrajOt7a0GuhhjvveCVVVsuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJGYLwIUa/n7cLvam+8HgG9iy/44MB8GA1UdIwQY MBaAFJH1iRomz6Q2oj5+H/l2ZIvuee93MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2ZXSkdpYlBwRGFpUG40Zi1YWmtpLTU1NzNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83ZjFiNzQtYzhkNy00YTBkLThhMzkt ZGFhNzM5MGI1YmE3LzEva2ZXSkdpYlBwRGFpUG40Zi1YWmtpLTU1NzNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy83ZjFiNzQtYzhkNy00YTBkLThhMzktZGFhNzM5MGI1YmE3 LzEva2ZXSkdpYlBwRGFpUG40Zi1YWmtpLTU1NzNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATzoi305+ YzqOWRPifBIBqBW5aBmpo/Rao74teK0IK4EVIGeftiWQ04ppUB57liViKESH0igv sDP/2Lv1oNPdJHRp7m0KdvccVSxNkJSPxIZVVUhCetUr8HetOmggnMaCi9MUn4uI 7bBrfPSk6BYqttLwovE8xqfAzUR5LrROUaTbXqi0+0eajZlXhk+n7sVtl53Mj72f 2ovwHWrX83QkQH6PAPUtLuwX6wCzmIHoRPFwOF8ww4zGsNRMw6wvXtxIMoYV10TN RJTRa86S8R2Y94kpxclcP7GzgRT3+mN0IK9zeKofRDpD8Svv5a4rwlsGdvrZSol3 WCx+rGxgom1M1A== -----END CERTIFICATE-----Generated at Sat Dec 6 13:39:10 2025 by rpki-client