This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft File: kfX87b24TdUvxncNfM_T_GaE-kE.mft (raw, json) Hash identifier: V7+mDkDHUEq9DzWFNG+ZRuo2F08thYMp7nR5dhP+HO0= Subject key identifier: 01:A8:75:EC:FD:A8:C2:FE:15:0B:4F:95:0B:35:D6:F8:66:B9:CC:ED Authority key identifier: 91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41 Certificate issuer: /CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41 Certificate serial: 019B32D5DA2CC8E445068A1A19370585804F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft Manifest number: 178A Signing time: Thu 18 Dec 2025 19:00:34 +0000 Manifest this update: Thu 18 Dec 2025 19:00:34 +0000 Manifest next update: Fri 19 Dec 2025 19:00:34 +0000 Files and hashes: 1: 6UpEJlRsXOn9vaGmBJWrZdfalwA.roa (hash: HSwxSSz5lFpaFRsJuAqgaQ8EsTFkTI/T+FmwfdtjYaA=) 2: 9tPvRIgWOFQGF5ALiDiBtpjalf0.roa (hash: CNi9LKlhqfclz9Oir048bs7o3/W9+fUSyftDkxngReE=) 3: JvOQdUjkCtx4pMZ63YDUDSKRif8.roa (hash: lpSKgZ5ZudI2jyQ9YWWPgdYiIoklrO/1U/orK0nz9yw=) 4: kfX87b24TdUvxncNfM_T_GaE-kE.crl (hash: FD4mZ4z3tY+vVRMFOUf2c6sauJYT2JeLKBKyqf1DpDY=) 5: lKDuxfpv6g9ZDhVaa38VKaYZKKg.roa (hash: OVK0az1AcO1NBXsdKgGXvtFiE3weIknB+sCCAuqYuGw=) 6: xXN1JERl6SmTU8LGAK6YjCsE_8g.roa (hash: UJ/2eCVna1OAdfj1e6cD3/kAVB2y1kYmD/HxfsrIilw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d5:da:2c:c8:e4:45:06:8a:1a:19:37:05:85:80:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41 Validity Not Before: Dec 18 19:00:34 2025 GMT Not After : Dec 19 19:00:34 2025 GMT Subject: CN=01a875ecfda8c2fe150b4f950b35d6f866b9cced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:01:cf:c1:b8:df:5f:e6:ee:ad:30:0e:8e:03: aa:f2:67:e2:8b:78:b2:eb:18:07:4c:c8:da:82:46: 7a:75:cb:bd:f7:9c:d2:17:1f:46:d4:e1:f9:a0:3c: 1e:ca:28:01:01:a0:52:79:c8:78:32:bb:d7:18:74: ab:f5:9f:59:0a:b1:fc:5f:6d:18:5e:ce:99:bd:2d: 16:8e:1a:a7:32:84:9b:4e:d5:c1:40:56:42:38:70: 65:01:4a:03:65:c2:fb:62:93:63:79:46:66:4d:ad: 6f:69:e7:ab:e2:77:a4:b9:2a:ce:bd:0f:11:9d:a8: f6:02:83:3e:6d:c1:ed:7e:f3:0d:86:bb:46:55:bb: ae:6d:88:87:d8:82:2e:57:83:f6:12:b3:59:e9:20: 2a:c4:46:fb:d2:a2:12:e7:c8:4d:21:7e:f6:ac:0c: 32:84:55:e8:d2:01:3c:12:95:d2:f9:7e:4a:00:6d: bf:c6:96:d7:86:b3:84:97:c8:44:81:62:df:1e:3d: 88:2f:ac:be:db:c7:d2:74:67:b2:e3:dd:2a:fc:a6: 1c:58:c8:ab:e7:4e:4a:e0:60:90:5c:03:34:d9:97: 56:e8:fe:3f:04:c4:cd:be:0c:0e:fb:55:17:03:3e: 49:82:e7:37:b6:58:89:df:68:b8:a4:46:36:58:8c: cf:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A8:75:EC:FD:A8:C2:FE:15:0B:4F:95:0B:35:D6:F8:66:B9:CC:ED X509v3 Authority Key Identifier: keyid:91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:47:c6:47:08:fb:77:d3:b9:ed:a3:3a:b0:15:6a:e1:1f:79: ff:0b:dc:cf:3f:d5:67:e8:bd:10:2a:dd:6b:a4:6e:22:b6:88: fa:01:2d:86:e9:62:f9:c7:2d:3a:73:0e:2a:6d:0a:c4:0c:aa: c5:43:83:5e:1f:63:a6:33:a5:2a:23:96:54:1d:d5:25:47:1a: 89:d1:62:e3:7d:9e:fe:aa:17:71:d7:e7:27:71:55:89:37:80: 02:9c:5f:2f:13:d0:a0:50:bd:f3:38:f2:3a:fd:cf:fa:d1:f9: e5:ee:10:3a:09:6d:fd:84:01:0c:ca:e2:35:8b:55:86:71:33: be:47:f8:c7:ea:36:7c:3b:0f:c0:2d:cf:b7:b7:0e:e2:73:57: d7:95:35:4f:0a:90:a9:2a:0a:32:d0:9f:c4:bb:f1:48:4e:dd: 08:84:2e:2b:04:d0:db:b3:04:44:74:0b:0d:64:26:c6:b9:61: d8:41:6d:43:c2:09:6b:d8:fa:81:c5:b9:26:59:17:59:85:b8: f2:80:01:80:f4:83:e7:96:86:79:eb:72:ac:c6:eb:ec:45:27: 37:a0:e3:e4:8d:c1:2a:b3:29:d3:4d:86:87:0f:07:0a:a4:57: 9d:3d:b1:ab:ee:dc:7d:ee:53:a7:4f:4d:29:57:9b:2a:cb:8c: fc:1e:41:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1dosyORFBooaGTcFhYBPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZjVmY2VkYmRiODRkZDUyZmM2NzcwZDdjY2ZkM2ZjNjY4 NGZhNDEwHhcNMjUxMjE4MTkwMDM0WhcNMjUxMjE5MTkwMDM0WjAzMTEwLwYDVQQD EygwMWE4NzVlY2ZkYThjMmZlMTUwYjRmOTUwYjM1ZDZmODY2YjljY2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAHPwbjfX+burTAOjgOq8mfii3iy 6xgHTMjagkZ6dcu995zSFx9G1OH5oDweyigBAaBSech4MrvXGHSr9Z9ZCrH8X20Y Xs6ZvS0WjhqnMoSbTtXBQFZCOHBlAUoDZcL7YpNjeUZmTa1vaeer4nekuSrOvQ8R naj2AoM+bcHtfvMNhrtGVbuubYiH2IIuV4P2ErNZ6SAqxEb70qIS58hNIX72rAwy hFXo0gE8EpXS+X5KAG2/xpbXhrOEl8hEgWLfHj2IL6y+28fSdGey490q/KYcWMir 505K4GCQXAM02ZdW6P4/BMTNvgwO+1UXAz5Jguc3tliJ32i4pEY2WIzPeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAGodez9qML+FQtPlQs11vhmucztMB8GA1UdIwQY MBaAFJH1/O29uE3VL8Z3DXzP0/xmhPpBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2ZYODdiMjRUZFV2eG5jTmZNX1RfR2FFLWtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85YTA5ODEtMGFkOC00OGE1LWJmZWMt OGNjOTgzMzYxMWU2LzEva2ZYODdiMjRUZFV2eG5jTmZNX1RfR2FFLWtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC85YTA5ODEtMGFkOC00OGE1LWJmZWMtOGNjOTgzMzYxMWU2 LzEva2ZYODdiMjRUZFV2eG5jTmZNX1RfR2FFLWtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYkfGRwj7 d9O57aM6sBVq4R95/wvczz/VZ+i9ECrda6RuIraI+gEthuli+cctOnMOKm0KxAyq xUODXh9jpjOlKiOWVB3VJUcaidFi432e/qoXcdfnJ3FViTeAApxfLxPQoFC98zjy Ov3P+tH55e4QOglt/YQBDMriNYtVhnEzvkf4x+o2fDsPwC3Pt7cO4nNX15U1TwqQ qSoKMtCfxLvxSE7dCIQuKwTQ27MERHQLDWQmxrlh2EFtQ8IJa9j6gcW5JlkXWYW4 8oABgPSD55aGeetyrMbr7EUnN6Dj5I3BKrMp002Ghw8HCqRXnT2xq+7cfe5Tp09N KVebKsuM/B5BYQ== -----END CERTIFICATE-----Generated at Thu Dec 18 23:43:25 2025 by rpki-client