This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft File: KX75vv0afiTAzJcpmH_AZda3Ey8.mft (raw, json) Hash identifier: jh5OHfsNiT2afzZZnAJJba4dDjkT2ywuXX5XhTzS4Bs= Subject key identifier: C6:A5:47:DE:2F:AD:1F:4C:0A:B3:FA:F4:87:19:88:3A:1E:F1:C9:7F Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Certificate serial: 019AF0BF0035636683620BD97EA8E1321EEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft Manifest number: 0710 Signing time: Fri 05 Dec 2025 23:00:40 +0000 Manifest this update: Fri 05 Dec 2025 23:00:40 +0000 Manifest next update: Sat 06 Dec 2025 23:00:40 +0000 Files and hashes: 1: 1-d_4NnGRWiLNxMtEHTI7liKr9UI.roa (hash: CvRaWUsgFRo0d4EaYRA4VrTo+xf/BVknD8qlBjzpT68=) 2: 7m4lOeQqYBEB4ZtdqaGC1ntIwzU.roa (hash: sfdA24wwXEgvg9PIxS/Vj9fLKs9tr5CuykJHD/1DKt0=) 3: DC8CWnfWr0kQCJUXXP37JYlG3bs.roa (hash: hIJ82Bht26+DJ40TdTwMmY9/6cclogWpDkPQZ7x1T3M=) 4: GZOk1yLtT85SuOsXwESP5vjo36E.roa (hash: H5Ahmgm6guc/1E9tVEpA5mmu7swxmuaCmqeEu6T2UbU=) 5: KX75vv0afiTAzJcpmH_AZda3Ey8.crl (hash: Ou3/9Ajk22n8NWtfiJdWGlAWTYLcsT4HCTXVS1J8VlE=) 6: Ow6xOfingvBCtHoNkaHGobxC5yY.roa (hash: NhFSRa+v/S1zW+iyQy+gxANBr6Bnqty2hhUOwum97Kc=) 7: Pno1SFxbk0xVeOW-JPd8JX-O0mk.roa (hash: fmuEF5lkwyellcCtxWvoihI9gke5w70i2mKnnNxM4gQ=) 8: QChegxRLNPsgM4aZ3Xr6VhdLIWc.roa (hash: bRcFRsu1/yeWRw6CVou2c0H6TdcYO6U68qWIBkemHjQ=) 9: V0aRJCOG2a9twiI1SK4HfmRChII.roa (hash: xPnpahcVRHcbxfnhq7t0F7epLdK24cqdjPN51uTlfmE=) 10: cBKQe1No6Wf-B3FmLfpXGNcc_I8.roa (hash: Xi+GnpcIV9drKvTmQHNYIPB6evWNG3aHkh9CmwgJtg0=) 11: fKcwQYNH98XsFcbKGJENUZXHFjI.roa (hash: 3FvUc7KWveMGfwTJPyrap8mlbMCiKY4QmfDzgX7qeAk=) 12: hKRvEPMVo2ukUILwmPta9_N3Dm4.roa (hash: qTgr935WkDSGh45Ek2R2g/eV9pnfadByRLqS2Wh5HdI=) 13: nE0OXgliNp8A4G7VVUGWDEbIapM.roa (hash: blapwLKKxbaTSgMI1djgGdf4v6BK9yYSBx7kV8mmmio=) 14: nendNgfVYn3Er_Jx5FR9_K0MhAI.roa (hash: Zo4nTYqJK3HMiwWvWWXaOyWIMzLwcZzzdn6p7ZMhRf0=) 15: w-kia0Dcl-D0S1cF7F9c-RlG748.roa (hash: TI6//HLATO/7mdIMcI1NIKH9FQsgJWUg8coUzNZcuE0=) 16: yw8DESSBr60q1emz0AQWHVmDiSc.roa (hash: 62HhiJzKA1YpCJz4IDxH8lXY6DCkSVDgw8b+vMmzYQw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:00:35:63:66:83:62:0b:d9:7e:a8:e1:32:1e:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Validity Not Before: Dec 5 23:00:40 2025 GMT Not After : Dec 6 23:00:40 2025 GMT Subject: CN=c6a547de2fad1f4c0ab3faf48719883a1ef1c97f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3d:80:e5:ec:29:6b:01:1b:66:12:d2:13:bc: 67:10:e8:4a:38:97:e3:37:7b:26:b5:13:ce:cb:43: b1:90:c7:32:6e:ed:56:e8:42:10:28:dd:94:a6:17: a1:0e:ce:9f:83:19:48:44:54:0c:ec:bd:52:96:88: 95:a1:c5:35:3d:c7:12:53:69:91:06:07:e4:da:a3: 07:07:64:c5:a5:46:bc:b4:ef:48:7a:a4:6c:e6:5b: 08:fc:26:c6:fa:c4:6d:eb:0b:91:1c:da:c6:ff:e9: 9e:87:f6:60:d0:0a:79:a9:13:c0:68:ac:4f:da:b1: 9c:ed:0b:1d:f5:32:6c:d6:de:9f:35:f8:6e:f4:f0: 0e:2d:46:0e:71:2a:b5:85:df:45:09:63:94:de:49: da:98:be:c0:14:d8:01:75:3f:00:af:ca:23:db:ed: b1:cf:c3:3a:ce:3d:45:14:12:ea:1e:98:80:72:4c: 24:63:eb:45:4d:7f:c0:2a:02:bd:31:b7:fb:e9:42: ff:33:f2:e0:2c:7f:49:0c:f1:a4:e3:ba:61:8e:d2: d0:2c:81:d8:aa:95:ef:85:d3:ee:4c:84:d7:89:29: dc:7c:cd:94:c5:6d:97:e3:0e:24:65:45:b6:d4:4e: ed:d4:e2:a4:b0:94:8c:cf:0f:37:27:b2:4e:e7:47: 88:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:A5:47:DE:2F:AD:1F:4C:0A:B3:FA:F4:87:19:88:3A:1E:F1:C9:7F X509v3 Authority Key Identifier: keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:1d:84:4b:cc:d3:a2:67:d6:d9:17:8b:65:94:a3:11:cb:fe: 26:5d:12:d9:c6:09:be:d7:df:c6:d2:d5:cc:b8:15:75:a7:b4: 8b:2e:10:0e:a3:eb:c2:1c:2b:51:05:05:3a:71:a9:41:61:26: 82:93:3d:78:e7:06:70:8b:12:83:26:08:08:c6:6e:5c:0e:ab: 95:90:9e:a0:b2:95:de:36:92:90:48:af:bd:91:71:9e:e2:88: ff:52:fd:7d:26:7e:e4:52:99:61:3e:1f:51:90:e9:5d:33:8c: fd:b9:c5:60:78:a8:40:f5:34:f0:5c:78:7b:c6:c7:67:8c:8c: e1:69:76:be:a0:3d:3c:97:96:5e:1c:d3:d0:ae:ee:59:fb:39: 96:77:2c:9d:4e:b0:06:9b:e3:30:04:87:bd:ac:87:2a:b4:47: e1:84:8d:14:64:58:31:a1:74:60:0b:3b:53:08:53:34:15:d1: c2:80:95:b4:e4:3a:99:02:16:e5:e9:71:0b:89:4b:bf:aa:34: 67:e6:88:b0:f5:d2:fe:8e:2c:6a:dc:18:92:28:fe:53:be:6f: 0f:98:c4:46:fb:25:b6:d6:f1:0c:55:8e:f0:24:38:da:88:1a: d9:4f:a7:42:e9:b0:3d:a2:c4:db:f5:fb:0a:4d:46:62:36:4c: f0:5a:c0:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvwA1Y2aDYgvZfqjhMh7vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2VmOWJlZmQxYTdlMjRjMGNjOTcyOTk4N2ZjMDY1ZDZi NzEzMmYwHhcNMjUxMjA1MjMwMDQwWhcNMjUxMjA2MjMwMDQwWjAzMTEwLwYDVQQD EyhjNmE1NDdkZTJmYWQxZjRjMGFiM2ZhZjQ4NzE5ODgzYTFlZjFjOTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz2A5ewpawEbZhLSE7xnEOhKOJfj N3smtRPOy0OxkMcybu1W6EIQKN2UphehDs6fgxlIRFQM7L1SloiVocU1PccSU2mR Bgfk2qMHB2TFpUa8tO9IeqRs5lsI/CbG+sRt6wuRHNrG/+meh/Zg0Ap5qRPAaKxP 2rGc7Qsd9TJs1t6fNfhu9PAOLUYOcSq1hd9FCWOU3knamL7AFNgBdT8Ar8oj2+2x z8M6zj1FFBLqHpiAckwkY+tFTX/AKgK9Mbf76UL/M/LgLH9JDPGk47phjtLQLIHY qpXvhdPuTITXiSncfM2UxW2X4w4kZUW21E7t1OKksJSMzw83J7JO50eI+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMalR94vrR9MCrP69IcZiDoe8cl/MB8GA1UdIwQY MBaAFCl++b79Gn4kwMyXKZh/wGXWtxMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWIt ZGVlNzY4NjAwMTNkLzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWItZGVlNzY4NjAwMTNk LzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjh2ES8zT omfW2ReLZZSjEcv+Jl0S2cYJvtffxtLVzLgVdae0iy4QDqPrwhwrUQUFOnGpQWEm gpM9eOcGcIsSgyYICMZuXA6rlZCeoLKV3jaSkEivvZFxnuKI/1L9fSZ+5FKZYT4f UZDpXTOM/bnFYHioQPU08Fx4e8bHZ4yM4Wl2vqA9PJeWXhzT0K7uWfs5lncsnU6w BpvjMASHvayHKrRH4YSNFGRYMaF0YAs7UwhTNBXRwoCVtOQ6mQIW5elxC4lLv6o0 Z+aIsPXS/o4satwYkij+U75vD5jERvslttbxDFWO8CQ42oga2U+nQumwPaLE2/X7 Ck1GYjZM8FrAyg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:08 2025 by rpki-client