This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft File: KIVYUqS80b8eyBPzwTsPHzcvOXE.mft (raw, json) Hash identifier: +1bC+BCWEOFTTdz+u1ycaTz0ChWG4vAjo5oUDOBMonE= Subject key identifier: AD:10:39:80:8C:DB:71:B8:23:FA:07:37:9C:09:A8:93:2B:62:21:C7 Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Certificate serial: 019AF0BF8D245ED11D16B3F63D5D26A4EDC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft Manifest number: 177E Signing time: Fri 05 Dec 2025 23:01:16 +0000 Manifest this update: Fri 05 Dec 2025 23:01:16 +0000 Manifest next update: Sat 06 Dec 2025 23:01:16 +0000 Files and hashes: 1: 0QJCOt-53tnbei-BBNpPRqd93lA.roa (hash: SxpfZus2XMCNBzDteZgXEjPeCC02JP1wgshR4fmnE74=) 2: KIVYUqS80b8eyBPzwTsPHzcvOXE.crl (hash: FQfwxhGzE1yP1LHZw1JUI/b/6ZvZbD7TwKcJCdOhSGU=) 3: PQE-MW_ft7NOulI3nuA3Ttqd9zM.roa (hash: tS26IQNDjX0XuEf3rRKTOSs366e2zvh7MCyAP+zqiiA=) 4: S87F6thVxwCZscy_VovEDJcB8HM.roa (hash: E4K0X+XV1CxBX46EYMwd+oDIHEvCmqQAB6iKbCet77s=) 5: Y8SRLYUIdW_joHTz3PksrXah_rw.roa (hash: VwC43mv96BdBo/MF0MD6doZlRHk6o8P7NRY9bJBrem0=) 6: aer8a26VEmmy2Cy7_8hze3JY1ak.roa (hash: 7q3S2TY/+jxhv9AP9xHCanK4ZXfND8pGXb4R0LjZhXM=) 7: eeBJ8THWmjzQcGoaeafXUKnM3oI.roa (hash: sKx/pHZQstUAOq64IcMsxEnWLROmY7DGo9QHgBCkTRM=) 8: haVl-IddpVIOhoadpyJZ_a5CgAY.roa (hash: xEVD5o+b6swUkv0iGkz/lglqYHWH3tPCrwBEj8vxyI4=) 9: kgTLGOsUBsYOKbWXNc3cqPzwgb4.roa (hash: ST4s4BtTU2rODHYfq5kax5E8/vHW7595/W9otyGkb80=) 10: pL_tDJmTdtKmoEEnGB3Z5Sqfoww.roa (hash: H1JfkznIuDny5RXJezYE6vZGSTmymf6VReWBmSqQlss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:8d:24:5e:d1:1d:16:b3:f6:3d:5d:26:a4:ed:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Validity Not Before: Dec 5 23:01:16 2025 GMT Not After : Dec 6 23:01:16 2025 GMT Subject: CN=ad1039808cdb71b823fa07379c09a8932b6221c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f8:9a:88:e0:8a:4c:fb:ec:90:d5:cd:7a:0b: 00:a9:aa:91:67:a8:ef:db:eb:54:69:ee:17:6e:fb: b6:72:12:5e:83:47:6d:1a:e3:3f:6a:02:d6:8f:7f: 68:b1:d3:10:00:d4:71:7a:10:37:60:d4:b9:5e:46: 1b:9c:bf:68:f9:fc:2b:e0:bf:33:4d:1a:23:3b:51: 21:1d:0a:2a:18:8b:33:5b:f7:92:47:eb:25:b0:68: ce:d3:15:02:f1:a8:72:8a:b0:97:e4:9e:ab:54:d8: 2a:b9:23:e2:7c:9f:ec:48:4c:52:ac:28:72:dd:bc: c2:08:97:84:cb:da:b1:69:f1:2f:20:c4:70:46:bd: d9:94:21:d7:76:d4:3d:33:c3:25:1c:e9:1a:28:44: 1a:ef:f8:00:9e:3f:c3:45:44:38:db:9a:2f:2a:b0: 12:59:ea:48:36:38:d2:9f:ee:5d:d1:d1:f7:a4:ba: 7f:83:b6:f2:08:2b:7d:39:7e:c6:63:7f:f8:15:ee: 00:97:c8:72:ae:d9:e5:b6:d1:27:b8:53:ff:00:62: 7e:3a:fd:6e:21:8d:a6:64:bb:7f:88:ed:c8:07:91: 50:37:5b:ae:cd:11:cf:96:d3:4b:7e:c7:78:18:84: 32:53:89:13:d5:0a:fa:78:c1:b1:46:f6:77:5c:7c: e3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:10:39:80:8C:DB:71:B8:23:FA:07:37:9C:09:A8:93:2B:62:21:C7 X509v3 Authority Key Identifier: keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:7f:18:f2:23:5a:fe:60:a4:e0:2e:a3:3d:07:bb:68:84:d7: c9:d9:a6:2d:40:be:4a:9d:ac:12:0c:4c:c9:7c:e4:23:c5:83: f1:ab:0e:41:2d:10:a7:43:1b:15:98:58:fa:cb:63:93:39:52: 0d:fb:13:10:20:95:27:82:84:1d:27:30:24:46:03:a4:91:35: ec:3a:0c:b5:0d:39:fb:54:00:db:db:34:c9:2e:b5:af:b2:41: 3d:6f:9b:db:50:f5:67:22:fb:ce:49:6a:de:1c:8f:88:74:9c: ce:e8:45:3d:10:f2:97:d6:ea:4b:3a:87:cd:0d:82:e0:8f:c4: 71:29:b0:be:da:df:0f:38:ee:d6:c8:8d:c1:83:90:79:79:5f: 55:c1:fd:30:24:2f:14:85:09:06:6f:41:70:4a:b7:20:5b:df: d7:86:0c:b7:a8:b8:ba:bc:c0:07:10:99:fd:3c:bc:9e:7e:9e: 94:70:c0:51:83:d3:5f:c8:a5:92:31:ef:c7:23:8d:31:71:96: ee:1e:12:02:21:f6:2a:48:bf:c4:06:c8:73:f9:65:0b:b2:c7: 7f:e9:2e:b7:c0:e2:ad:98:b3:41:f4:68:f1:1a:9d:a4:36:4c: 7c:26:92:3d:f0:f5:c1:d9:32:20:b0:69:68:3b:d3:72:c0:d0: 47:89:0e:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv40kXtEdFrP2PV0mpO3DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ODU1ODUyYTRiY2QxYmYxZWM4MTNmM2MxM2IwZjFmMzcy ZjM5NzEwHhcNMjUxMjA1MjMwMTE2WhcNMjUxMjA2MjMwMTE2WjAzMTEwLwYDVQQD EyhhZDEwMzk4MDhjZGI3MWI4MjNmYTA3Mzc5YzA5YTg5MzJiNjIyMWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fiaiOCKTPvskNXNegsAqaqRZ6jv 2+tUae4Xbvu2chJeg0dtGuM/agLWj39osdMQANRxehA3YNS5XkYbnL9o+fwr4L8z TRojO1EhHQoqGIszW/eSR+slsGjO0xUC8ahyirCX5J6rVNgquSPifJ/sSExSrChy 3bzCCJeEy9qxafEvIMRwRr3ZlCHXdtQ9M8MlHOkaKEQa7/gAnj/DRUQ425ovKrAS WepINjjSn+5d0dH3pLp/g7byCCt9OX7GY3/4Fe4Al8hyrtnlttEnuFP/AGJ+Ov1u IY2mZLt/iO3IB5FQN1uuzRHPltNLfsd4GIQyU4kT1Qr6eMGxRvZ3XHzj6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0QOYCM23G4I/oHN5wJqJMrYiHHMB8GA1UdIwQY MBaAFCiFWFKkvNG/HsgT88E7Dx83LzlxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEt NzA0NDYzZWJhZDM2LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEtNzA0NDYzZWJhZDM2 LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcn8Y8iNa /mCk4C6jPQe7aITXydmmLUC+Sp2sEgxMyXzkI8WD8asOQS0Qp0MbFZhY+stjkzlS DfsTECCVJ4KEHScwJEYDpJE17DoMtQ05+1QA29s0yS61r7JBPW+b21D1ZyL7zklq 3hyPiHSczuhFPRDyl9bqSzqHzQ2C4I/EcSmwvtrfDzju1siNwYOQeXlfVcH9MCQv FIUJBm9BcEq3IFvf14YMt6i4urzABxCZ/Ty8nn6elHDAUYPTX8ilkjHvxyONMXGW 7h4SAiH2Kki/xAbIc/llC7LHf+kut8DirZizQfRo8RqdpDZMfCaSPfD1wdkyILBp aDvTcsDQR4kO6g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:21:38 2025 by rpki-client