This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft File: KXnMQ8JGn_pc-LesY5sB86dorFU.mft (raw, json) Hash identifier: xKIh+b/9uEKiW9GRYt1VAg464Z4HqJC2q8VTZdaLYb8= Subject key identifier: B6:E5:3D:CD:BE:8D:2C:D9:05:7F:09:CD:C2:AF:52:6F:31:B1:03:4C Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55 Certificate issuer: /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55 Certificate serial: 019AF1D1D4FCD7D5AA852CE56B3637DA6B38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft Manifest number: 0901 Signing time: Sat 06 Dec 2025 04:00:51 +0000 Manifest this update: Sat 06 Dec 2025 04:00:51 +0000 Manifest next update: Sun 07 Dec 2025 04:00:51 +0000 Files and hashes: 1: EI7dYlJh6LhMXB8o9nb3T4Z5aSU.roa (hash: MmSw3Gp5lTTxkK0eiPx+eF3FQfljG+ipyig54PF6DUw=) 2: KXnMQ8JGn_pc-LesY5sB86dorFU.crl (hash: ygLIepPIaaPjNy7ag9JebFACsq5mCSgl7fC9Zhrznfo=) 3: RnDsNDAUOmfocBcXgLTcHPDDhKQ.roa (hash: yyfreslJl3l+RdMxXIwzsT6k7E7HMN8jhFZGTbEdlJI=) 4: Y8zzieez_mdBu3g9ytJW3F1qtcM.roa (hash: IBQYnJmIJpRbjM/GjJNvEs/gT4e0NBRUv4AwTGSAB8I=) 5: _eEka1D2F9svheD7_1S50A6jg0c.roa (hash: FY3lzS47CrifHw8hxi2Yq9gCSugm8bX/KQaXGUUplkU=) 6: jTf4hu8p-YdeMkBcAMreST3RURY.roa (hash: IZtRwQReOQuA1Z4S5nLNVFRKIJVo5gpQ/QND37UUm9g=) 7: qV0bi1f4xUUogQC2jTvfOlCFNsY.roa (hash: JeZIDT/pHiJyZCYpNCof5wbSJ0INX3sJ+QZbs083uM0=) 8: tW9K0gmr3gNJNZi6H4Oj8e3Jn10.roa (hash: bWzKXJxMql9A44/Gmu3Ld5HFcp9B6Ivj+R3Ym/3BJEA=) 9: ueIl5HLpFqn43HBQc7-Q4ZVn06k.roa (hash: fzhg7jHCYT5oIQ824HH1vwjcqcxosVhT8YpZmbw8K50=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:d4:fc:d7:d5:aa:85:2c:e5:6b:36:37:da:6b:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55 Validity Not Before: Dec 6 04:00:51 2025 GMT Not After : Dec 7 04:00:51 2025 GMT Subject: CN=b6e53dcdbe8d2cd9057f09cdc2af526f31b1034c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0e:c1:01:c4:aa:d2:db:b9:91:8d:4d:37:a3: 0d:fd:ce:4b:9a:e8:69:02:60:6d:7f:11:6d:82:00: cd:ee:fc:ae:bc:ba:17:3f:94:f2:46:67:9d:f7:5c: f0:aa:d5:d0:61:31:50:85:78:a1:5f:b1:15:39:40: 89:24:2c:d3:fb:2c:d8:28:d1:7e:3c:77:28:1f:d7: 7c:ed:9a:5d:69:c9:74:83:36:2c:10:d8:4f:d1:8d: 99:d7:18:05:0a:bc:48:36:89:65:77:61:8d:41:7c: b7:bd:79:d9:20:47:f2:e5:8f:ad:9a:cd:cd:e7:ed: 7c:f9:64:78:13:b0:7a:e5:db:57:74:eb:c7:d5:ba: 23:ce:73:1c:48:a9:bb:83:20:cf:bd:5a:51:b7:ed: 76:21:76:f7:b3:f6:27:a9:75:15:c0:1e:9a:0f:4c: 1e:e3:6d:3e:39:4e:e7:a9:1e:17:f2:56:b2:58:0d: 59:b3:8e:d6:7d:e8:ea:c0:27:e8:de:74:11:43:79: 00:2e:02:e9:5e:98:3b:31:c6:3c:52:0a:a0:55:95: e9:21:7a:c0:c7:13:ba:c4:10:c8:7e:ab:e6:a1:be: 76:01:4f:14:4c:e2:50:a4:35:6a:fa:2d:94:9d:7c: ff:7e:a1:1f:cd:dd:24:cb:83:7d:ce:d1:07:fe:f2: ce:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:E5:3D:CD:BE:8D:2C:D9:05:7F:09:CD:C2:AF:52:6F:31:B1:03:4C X509v3 Authority Key Identifier: keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:72:18:36:0f:40:33:09:d0:26:87:c6:f2:19:34:56:b0:4f: 2c:6d:71:5a:a3:d2:c6:10:53:4d:3b:65:ec:b6:46:31:b6:3c: 01:3e:16:e2:66:fd:34:a1:3b:19:05:9c:7c:6f:b5:f4:16:86: 3c:c9:e0:85:b9:f0:03:d7:01:b9:fe:f4:3b:bd:d3:ac:08:fb: 09:d9:21:1b:5e:fd:05:36:01:68:68:50:e5:e2:60:b5:72:90: 6e:4e:a3:9f:b6:00:71:ae:4f:03:c9:7e:78:aa:1d:e3:2c:4e: 49:3a:39:3f:95:f0:e8:71:61:7a:ea:1c:dc:2b:b0:0a:ea:51: 52:31:4e:e8:9e:fe:0e:b5:bf:dc:2a:87:83:8c:c4:a3:2a:59: 70:bc:90:8b:41:69:d5:66:60:7c:08:34:d0:f9:f5:50:a1:fa: 88:f1:04:0e:9d:e9:c6:98:48:96:74:00:e8:83:7f:c4:64:60: ed:7e:7b:fa:a0:25:b2:b6:f5:6a:18:b4:da:ad:82:0b:31:99: 00:72:f1:8c:28:c1:85:47:8c:7b:12:b9:16:ba:f9:a3:a8:da: 7b:a1:8c:dc:71:bf:b4:fb:c2:b8:c7:6b:c0:23:38:17:65:9a: 65:0c:2b:2a:31:97:5e:03:ee:0b:fd:1e:72:98:11:12:71:12: 31:83:41:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0dT819WqhSzlazY32ms4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NzljYzQzYzI0NjlmZmE1Y2Y4YjdhYzYzOWIwMWYzYTc2 OGFjNTUwHhcNMjUxMjA2MDQwMDUxWhcNMjUxMjA3MDQwMDUxWjAzMTEwLwYDVQQD EyhiNmU1M2RjZGJlOGQyY2Q5MDU3ZjA5Y2RjMmFmNTI2ZjMxYjEwMzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQ7BAcSq0tu5kY1NN6MN/c5Lmuhp AmBtfxFtggDN7vyuvLoXP5TyRmed91zwqtXQYTFQhXihX7EVOUCJJCzT+yzYKNF+ PHcoH9d87Zpdacl0gzYsENhP0Y2Z1xgFCrxINolld2GNQXy3vXnZIEfy5Y+tms3N 5+18+WR4E7B65dtXdOvH1bojznMcSKm7gyDPvVpRt+12IXb3s/YnqXUVwB6aD0we 420+OU7nqR4X8layWA1Zs47WfejqwCfo3nQRQ3kALgLpXpg7McY8UgqgVZXpIXrA xxO6xBDIfqvmob52AU8UTOJQpDVq+i2UnXz/fqEfzd0ky4N9ztEH/vLOWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLblPc2+jSzZBX8JzcKvUm8xsQNMMB8GA1UdIwQY MBaAFCl5zEPCRp/6XPi3rGObAfOnaKxVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1huTVE4SkduX3BjLUxlc1k1c0I4NmRvckZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9lNDBmOWQtMDBmNC00MGQ5LThiOGQt NDBlYWViYzFjNDdlLzEvS1huTVE4SkduX3BjLUxlc1k1c0I4NmRvckZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9lNDBmOWQtMDBmNC00MGQ5LThiOGQtNDBlYWViYzFjNDdl LzEvS1huTVE4SkduX3BjLUxlc1k1c0I4NmRvckZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA33IYNg9A MwnQJofG8hk0VrBPLG1xWqPSxhBTTTtl7LZGMbY8AT4W4mb9NKE7GQWcfG+19BaG PMnghbnwA9cBuf70O73TrAj7CdkhG179BTYBaGhQ5eJgtXKQbk6jn7YAca5PA8l+ eKod4yxOSTo5P5Xw6HFheuoc3CuwCupRUjFO6J7+DrW/3CqHg4zEoypZcLyQi0Fp 1WZgfAg00Pn1UKH6iPEEDp3pxphIlnQA6IN/xGRg7X57+qAlsrb1ahi02q2CCzGZ AHLxjCjBhUeMexK5Frr5o6jae6GM3HG/tPvCuMdrwCM4F2WaZQwrKjGXXgPuC/0e cpgREnESMYNBJQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:56:14 2025 by rpki-client