This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft File: KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft (raw, json) Hash identifier: h9YvlmVvv8dpI5TzWll9VF3hjD5b79rHq3EHnAYEh+I= Subject key identifier: E9:2C:35:8D:DE:1C:34:FD:8C:D1:75:CC:DB:5F:47:EE:0F:B3:34:5E Authority key identifier: 29:76:6D:1A:E6:EB:21:84:9B:C3:A3:B2:D1:8E:86:3D:27:3D:24:04 Certificate issuer: /CN=29766d1ae6eb21849bc3a3b2d18e863d273d2404 Certificate serial: 019AF50A366AAE3E567056ADA633CD903012 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft Manifest number: 016E Signing time: Sat 06 Dec 2025 19:01:18 +0000 Manifest this update: Sat 06 Dec 2025 19:01:18 +0000 Manifest next update: Sun 07 Dec 2025 19:01:18 +0000 Files and hashes: 1: 1HqQBJhpRaROMHOezXr8-gOHJ-E.roa (hash: qIvuj3HHmRwp3qhT9RCCOv4MPrrW/PDxkYPz1nz2Hdc=) 2: KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl (hash: H9ZPkaNx1/5CZsHL/TIwF00qk3spS7KYNsiqp6KM5aI=) 3: PNqLkZolFE-nbQkO_6muHe9SeaA.roa (hash: Gal/fe+4IR2MPMSFBjUaz/ftVvLiPlkLRd02XNWJeOs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:36:6a:ae:3e:56:70:56:ad:a6:33:cd:90:30:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29766d1ae6eb21849bc3a3b2d18e863d273d2404 Validity Not Before: Dec 6 19:01:18 2025 GMT Not After : Dec 7 19:01:18 2025 GMT Subject: CN=e92c358dde1c34fd8cd175ccdb5f47ee0fb3345e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:55:fd:aa:b2:bd:e2:a7:ec:4a:4b:a0:5a:0a: 49:ca:80:5a:59:48:e7:fa:a4:97:4c:62:5c:47:ab: cb:74:10:5b:9e:fe:27:e0:11:e5:93:8c:84:f5:8a: d2:22:eb:93:b8:92:80:0c:aa:12:1b:d3:75:09:cf: 4c:55:f9:18:ce:2c:ac:15:7d:3f:27:be:df:4d:44: 5d:bf:03:43:7c:bb:81:a0:0c:14:9a:5f:35:f1:54: a6:72:70:bd:5d:b1:fe:89:9a:58:10:28:cf:c5:45: 92:be:1a:0d:ce:72:ea:b2:7f:c2:a7:ff:d2:9a:e3: 63:56:83:84:a9:f4:60:3e:95:66:5b:e0:fa:b8:2b: 9c:71:60:65:f1:be:71:1a:c4:cf:1c:00:08:10:df: 4d:68:71:ea:53:92:82:d2:85:1f:13:55:66:30:4a: af:1f:e2:30:fa:45:ca:e2:19:cd:b3:99:e4:6d:63: 12:89:67:72:7a:7f:b1:78:26:fe:84:9d:32:f3:20: a3:dc:e3:2b:7e:6c:a2:1e:fb:52:36:c3:f7:21:6e: 5e:34:61:a0:1e:79:20:83:64:30:32:2d:24:47:91: 5d:fd:f4:06:2b:6b:da:09:a9:c5:f1:fb:bd:e7:97: 74:cc:d1:cf:03:c4:52:22:0a:12:f6:0f:8f:11:42: 12:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:2C:35:8D:DE:1C:34:FD:8C:D1:75:CC:DB:5F:47:EE:0F:B3:34:5E X509v3 Authority Key Identifier: keyid:29:76:6D:1A:E6:EB:21:84:9B:C3:A3:B2:D1:8E:86:3D:27:3D:24:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:2e:cb:58:ad:c9:51:8b:de:ac:33:11:c2:95:65:a5:03:87: 61:c6:0f:95:16:ee:c3:53:db:51:67:7b:5e:33:24:3b:35:9f: f0:af:bd:59:6c:82:50:dc:cc:aa:d8:be:ca:d2:9c:31:4f:cb: c2:52:4f:b4:7e:e4:0d:04:f3:22:36:d0:4e:9c:24:65:dd:0b: 09:5a:48:ac:a9:d6:66:9f:a9:9e:85:d0:ac:42:5e:7a:b4:9e: 4a:34:c0:df:e5:3e:33:a9:1b:ff:e8:6a:ba:8f:d0:57:04:f5: ed:e0:95:50:9a:96:d1:b9:86:13:32:ef:b0:00:95:d4:c1:fd: 57:0a:09:d4:c2:f6:b7:18:6d:af:d3:5f:0a:2b:08:21:51:e1: ce:5e:a4:41:b2:c2:d3:f7:2c:63:f8:97:6f:70:6f:5c:dc:ef: 99:25:7d:0b:fd:a7:c3:27:3c:02:97:11:19:73:22:a0:e4:c3: 98:05:d6:2f:4f:da:67:b3:a5:fa:4d:1c:67:14:25:08:1c:99: 30:e5:08:34:37:1f:77:d8:6d:6d:f5:ff:21:f0:2f:ef:d9:ce: 6e:92:81:5a:81:a5:ca:6d:04:db:7f:18:b8:1b:83:9d:5f:ff: 67:26:34:04:f7:33:1b:b8:af:b4:8b:1f:30:37:44:74:a4:9b: 81:ee:b8:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CjZqrj5WcFatpjPNkDASMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NzY2ZDFhZTZlYjIxODQ5YmMzYTNiMmQxOGU4NjNkMjcz ZDI0MDQwHhcNMjUxMjA2MTkwMTE4WhcNMjUxMjA3MTkwMTE4WjAzMTEwLwYDVQQD EyhlOTJjMzU4ZGRlMWMzNGZkOGNkMTc1Y2NkYjVmNDdlZTBmYjMzNDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41X9qrK94qfsSkugWgpJyoBaWUjn +qSXTGJcR6vLdBBbnv4n4BHlk4yE9YrSIuuTuJKADKoSG9N1Cc9MVfkYziysFX0/ J77fTURdvwNDfLuBoAwUml818VSmcnC9XbH+iZpYECjPxUWSvhoNznLqsn/Cp//S muNjVoOEqfRgPpVmW+D6uCuccWBl8b5xGsTPHAAIEN9NaHHqU5KC0oUfE1VmMEqv H+Iw+kXK4hnNs5nkbWMSiWdyen+xeCb+hJ0y8yCj3OMrfmyiHvtSNsP3IW5eNGGg Hnkgg2QwMi0kR5Fd/fQGK2vaCanF8fu955d0zNHPA8RSIgoS9g+PEUISnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOksNY3eHDT9jNF1zNtfR+4PszReMB8GA1UdIwQY MBaAFCl2bRrm6yGEm8OjstGOhj0nPSQEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1hadEd1YnJJWVNidzZPeTBZNkdQU2M5SkFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iNzExZmItZTU4NC00ZjM1LWEwZWMt MTE1ZDY4ZDliODFiLzEvS1hadEd1YnJJWVNidzZPeTBZNkdQU2M5SkFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9iNzExZmItZTU4NC00ZjM1LWEwZWMtMTE1ZDY4ZDliODFi LzEvS1hadEd1YnJJWVNidzZPeTBZNkdQU2M5SkFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATy7LWK3J UYverDMRwpVlpQOHYcYPlRbuw1PbUWd7XjMkOzWf8K+9WWyCUNzMqti+ytKcMU/L wlJPtH7kDQTzIjbQTpwkZd0LCVpIrKnWZp+pnoXQrEJeerSeSjTA3+U+M6kb/+hq uo/QVwT17eCVUJqW0bmGEzLvsACV1MH9VwoJ1ML2txhtr9NfCisIIVHhzl6kQbLC 0/csY/iXb3BvXNzvmSV9C/2nwyc8ApcRGXMioOTDmAXWL0/aZ7Ol+k0cZxQlCByZ MOUINDcfd9htbfX/IfAv79nObpKBWoGlym0E238YuBuDnV//ZyY0BPczG7ivtIsf MDdEdKSbge64/Q== -----END CERTIFICATE-----Generated at Sun Dec 7 01:40:08 2025 by rpki-client