This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft File: kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft (raw, json) Hash identifier: aYxiLWExUNbnMj2iJ4VHCDIsVdZM6KyPssTqu/hoGTE= Subject key identifier: F7:8D:07:70:62:C3:10:39:46:17:13:07:62:F0:8A:86:8D:4F:F0:ED Authority key identifier: 90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89 Certificate issuer: /CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089 Certificate serial: 019B3155B92B3C90FC89B63790EAD0922F83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft Manifest number: 0B2E Signing time: Thu 18 Dec 2025 12:01:00 +0000 Manifest this update: Thu 18 Dec 2025 12:01:00 +0000 Manifest next update: Fri 19 Dec 2025 12:01:00 +0000 Files and hashes: 1: QskXpCpWaerncmB5Tx33KABcmDs.roa (hash: fifxhbdZnzofmDMHP2JVB3uX7ui63rFuuabdauCyEO0=) 2: cpWvTztcB_PVgTrvB1pOMqOcrgg.roa (hash: F85tpYix9Q/joiRkP3de92k+CoUDGGFBzb+mLGcQwm8=) 3: kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl (hash: JfE36tXnRLhOpXu3yyq0yYU2Aya0EJK3IDjSJ4c4wGU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:55:b9:2b:3c:90:fc:89:b6:37:90:ea:d0:92:2f:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089 Validity Not Before: Dec 18 12:01:00 2025 GMT Not After : Dec 19 12:01:00 2025 GMT Subject: CN=f78d077062c310394617130762f08a868d4ff0ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e0:cd:c1:57:d7:d4:8c:1f:f4:28:4f:23:97: c6:ee:af:14:28:71:95:fb:fc:7c:dc:75:dd:95:be: 40:ec:61:53:7a:1b:7d:88:43:ed:a0:ed:83:d4:f1: 57:3f:05:a5:28:0b:f0:bf:35:23:b2:79:c6:4d:92: 71:a7:e6:82:63:dc:90:50:c9:e3:ff:a8:28:63:c4: a2:f9:54:f7:bb:b5:d0:82:40:32:bb:03:b0:47:c6: ca:b8:8d:8d:dd:3a:41:95:ef:a0:fe:f9:ba:38:e7: 90:38:f8:ba:90:1f:24:a0:64:0d:f9:ba:4c:27:f3: 41:0b:e3:77:66:c6:0b:42:04:70:64:79:a8:53:0e: 87:31:3e:3c:80:88:d2:1d:bd:4a:c9:9c:9e:ce:5a: a1:15:61:e1:0e:b1:cb:2f:38:a8:bc:1c:d3:1b:99: 07:d3:ad:a7:af:34:3a:43:d9:3d:29:a3:8d:29:d2: aa:a3:92:bd:73:29:47:3d:1a:31:ac:7f:0c:c8:df: db:9b:0d:97:09:bd:a7:7e:7c:6c:d8:f4:0e:29:34: 7a:55:63:ee:70:02:df:32:f4:d8:ea:a6:f0:af:e4: 1a:e8:0d:68:27:fb:06:4a:b3:96:1c:74:f1:46:de: 05:2a:80:dc:be:e9:a0:78:f6:8f:ee:7d:c5:64:db: 4c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:8D:07:70:62:C3:10:39:46:17:13:07:62:F0:8A:86:8D:4F:F0:ED X509v3 Authority Key Identifier: keyid:90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:a7:7d:91:a2:55:39:c3:3a:69:ea:a5:4d:59:e5:d6:92:84: 4e:ec:c7:b0:da:c7:97:36:af:33:cb:1e:35:af:8a:72:35:74: 78:00:f6:9f:dd:fe:c8:9a:d7:8e:49:b7:3b:ee:02:06:bc:d7: d0:bb:b5:bd:83:8d:86:08:4d:ed:04:9c:34:00:18:83:c3:a9: 06:a2:24:55:35:1f:25:80:eb:a5:74:fc:78:49:0b:70:69:f2: 2d:d0:7a:5b:da:d1:1e:b5:04:75:07:9d:35:d8:1d:f5:46:21: 0e:0f:14:2a:ca:c3:bd:67:d7:08:9c:ff:78:8f:d5:a3:9b:d6: 58:3b:b6:7c:08:74:ad:ef:67:53:c4:47:83:9d:46:cb:80:8e: d6:e8:38:ff:9b:64:f6:44:14:34:15:bd:82:ac:02:6d:82:44: 51:46:61:5c:fc:0a:e8:2c:a1:e5:9e:b0:bc:22:4f:7a:d3:94: e5:0d:36:08:70:a7:a6:8f:25:c3:a8:34:b7:1a:a4:28:b5:b8: 7f:63:8d:18:20:78:5a:dd:90:a0:5d:e3:53:e5:6b:86:1c:a1: 52:ed:ae:2c:24:74:17:35:51:7b:12:0a:2f:8f:0a:b2:c5:a2: 0e:cd:72:dd:74:19:a2:bb:2d:cd:0d:1c:32:41:68:a1:35:83: dc:51:b8:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVbkrPJD8ibY3kOrQki+DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwNTFlYmY4YzI4ZjgxN2I3ZjE0OGJmYzk1Y2MyYjViNGNi MzAwODkwHhcNMjUxMjE4MTIwMTAwWhcNMjUxMjE5MTIwMTAwWjAzMTEwLwYDVQQD EyhmNzhkMDc3MDYyYzMxMDM5NDYxNzEzMDc2MmYwOGE4NjhkNGZmMGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxODNwVfX1Iwf9ChPI5fG7q8UKHGV +/x83HXdlb5A7GFTeht9iEPtoO2D1PFXPwWlKAvwvzUjsnnGTZJxp+aCY9yQUMnj /6goY8Si+VT3u7XQgkAyuwOwR8bKuI2N3TpBle+g/vm6OOeQOPi6kB8koGQN+bpM J/NBC+N3ZsYLQgRwZHmoUw6HMT48gIjSHb1KyZyezlqhFWHhDrHLLziovBzTG5kH 062nrzQ6Q9k9KaONKdKqo5K9cylHPRoxrH8MyN/bmw2XCb2nfnxs2PQOKTR6VWPu cALfMvTY6qbwr+Qa6A1oJ/sGSrOWHHTxRt4FKoDcvumgePaP7n3FZNtMawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPeNB3BiwxA5RhcTB2LwioaNT/DtMB8GA1UdIwQY MBaAFJBR6/jCj4F7fxSL/JXMK1tMswCJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0ZIci1NS1BnWHRfRkl2OGxjd3JXMHl6QUlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My83OWI1OTctNmIwYy00ZDAzLWJmNDAt MzEyNDdmM2E0NTM5LzEva0ZIci1NS1BnWHRfRkl2OGxjd3JXMHl6QUlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My83OWI1OTctNmIwYy00ZDAzLWJmNDAtMzEyNDdmM2E0NTM5 LzEva0ZIci1NS1BnWHRfRkl2OGxjd3JXMHl6QUlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUad9kaJV OcM6aeqlTVnl1pKETuzHsNrHlzavM8seNa+KcjV0eAD2n93+yJrXjkm3O+4CBrzX 0Lu1vYONhghN7QScNAAYg8OpBqIkVTUfJYDrpXT8eEkLcGnyLdB6W9rRHrUEdQed Ndgd9UYhDg8UKsrDvWfXCJz/eI/Vo5vWWDu2fAh0re9nU8RHg51Gy4CO1ug4/5tk 9kQUNBW9gqwCbYJEUUZhXPwK6Cyh5Z6wvCJPetOU5Q02CHCnpo8lw6g0txqkKLW4 f2ONGCB4Wt2QoF3jU+VrhhyhUu2uLCR0FzVRexIKL48KssWiDs1y3XQZorstzQ0c MkFooTWD3FG4Ng== -----END CERTIFICATE-----Generated at Thu Dec 18 17:32:48 2025 by rpki-client