This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.mft File: kFLex7dhf-OchVDuIMOCIBq5ryo.mft (raw, json) Hash identifier: I8eg3DD+QX3Ccz0W7MR+453sTyAlIFVxqwr9WKkyP2g= Subject key identifier: DF:0A:6F:A8:60:4A:2B:56:76:29:7B:80:BA:0C:0E:7E:47:CF:5D:54 Authority key identifier: 90:52:DE:C7:B7:61:7F:E3:9C:85:50:EE:20:C3:82:20:1A:B9:AF:2A Certificate issuer: /CN=9052dec7b7617fe39c8550ee20c382201ab9af2a Certificate serial: 019B236480CACDAC998C80DBFA0796A1278B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFLex7dhf-OchVDuIMOCIBq5ryo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.mft Manifest number: 1203 Signing time: Mon 15 Dec 2025 19:02:27 +0000 Manifest this update: Mon 15 Dec 2025 19:02:27 +0000 Manifest next update: Tue 16 Dec 2025 19:02:27 +0000 Files and hashes: 1: DoqnptEmFDIWhd5INYDJmXuCj7c.roa (hash: knJh69OYwi71VIfestV+KfQIeq85PlXtAbjPJg+Zm8w=) 2: kFLex7dhf-OchVDuIMOCIBq5ryo.crl (hash: //0uX3ZNycw3y397oHABOMfvn/LFe+Q2wdUCc+dLUSU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.mft rsync://rpki.ripe.net/repository/DEFAULT/kFLex7dhf-OchVDuIMOCIBq5ryo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:64:80:ca:cd:ac:99:8c:80:db:fa:07:96:a1:27:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9052dec7b7617fe39c8550ee20c382201ab9af2a Validity Not Before: Dec 15 19:02:27 2025 GMT Not After : Dec 16 19:02:27 2025 GMT Subject: CN=df0a6fa8604a2b5676297b80ba0c0e7e47cf5d54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c2:18:ba:3a:b4:77:20:f2:67:b7:5b:92:06: 03:d6:d1:27:d5:a4:0e:b5:ef:1e:4f:c4:6b:e8:96: f8:eb:02:c2:c8:a6:04:e3:c3:cb:a1:01:8a:8f:af: b4:8e:9f:25:f5:29:47:18:73:e5:c6:3a:c2:e1:24: 8c:1e:53:95:57:88:c0:4e:48:64:b7:4f:3d:50:9b: e7:6d:b4:93:2b:d1:8b:47:b6:9a:69:51:7f:22:b6: 21:74:4a:41:f8:7e:df:05:0e:f7:a9:b8:1e:26:76: b3:58:11:0e:f5:f8:05:9e:1c:06:e2:b1:4e:b3:fa: 99:f0:e8:62:38:42:17:0e:d7:e9:30:81:33:78:f1: 5f:17:f0:9c:08:15:f8:5a:74:3f:ab:c5:38:95:c4: c7:f9:00:e9:82:7d:84:56:74:29:d8:16:16:54:62: c3:60:c0:39:4f:fd:6c:dc:e9:04:17:d9:94:df:3e: 73:92:a0:83:f8:1f:ee:60:8f:ef:94:f6:43:8c:f3: 0e:58:d2:2a:e2:ab:8b:c2:65:13:46:53:42:ca:cc: 88:33:89:40:b8:29:de:17:b4:7a:bd:9b:82:f1:ef: 42:af:6a:3d:4f:3a:1f:b5:ea:cc:fe:9a:df:70:8a: c3:d2:f6:3c:e0:c0:f1:71:9b:4d:01:c8:75:63:3c: df:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:0A:6F:A8:60:4A:2B:56:76:29:7B:80:BA:0C:0E:7E:47:CF:5D:54 X509v3 Authority Key Identifier: keyid:90:52:DE:C7:B7:61:7F:E3:9C:85:50:EE:20:C3:82:20:1A:B9:AF:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFLex7dhf-OchVDuIMOCIBq5ryo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:47:82:98:d4:2d:73:53:6c:d3:90:b3:ad:f8:d7:37:03:16: ae:9c:5b:8b:82:c0:e4:c0:65:5e:82:a5:2e:46:0f:6a:b2:b8: ab:99:2f:9b:22:26:a7:61:b2:c1:9e:b9:19:16:d7:8f:c5:f0: a9:26:80:f9:34:74:53:bb:06:12:35:be:07:8c:f3:ed:23:5b: c5:41:bd:71:5f:f2:0b:28:d1:d7:17:e8:a5:fa:51:cf:45:26: d7:c2:4e:81:19:7d:d6:f8:d0:0a:5a:84:d2:ab:6d:e5:6d:60: 39:7a:c0:db:86:d3:65:f2:8c:70:ea:ff:0c:60:d4:93:a7:13: 4c:41:ff:d1:bc:d8:ce:39:a2:90:e5:d6:b2:2f:68:af:49:3b: 30:c0:60:bb:e1:04:b5:d1:06:12:77:f5:86:0a:e8:6d:3f:8e: 19:27:9e:01:00:52:d2:dd:13:ae:d1:36:65:59:64:78:aa:6b: 28:c5:f7:d7:70:77:0e:07:77:dc:84:c8:7d:b3:75:0b:28:0d: 6e:5f:3b:ca:9a:fe:52:a4:a1:ce:70:eb:75:c3:01:87:84:2d: 97:1e:b9:e1:db:6f:4c:8f:9c:c3:3e:97:52:3a:61:da:23:96: b7:c4:a6:8e:4a:6f:31:d9:20:7e:e4:cc:de:d3:50:8e:0e:d5: 0d:74:c7:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjZIDKzayZjIDb+geWoSeLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwNTJkZWM3Yjc2MTdmZTM5Yzg1NTBlZTIwYzM4MjIwMWFi OWFmMmEwHhcNMjUxMjE1MTkwMjI3WhcNMjUxMjE2MTkwMjI3WjAzMTEwLwYDVQQD EyhkZjBhNmZhODYwNGEyYjU2NzYyOTdiODBiYTBjMGU3ZTQ3Y2Y1ZDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cIYujq0dyDyZ7dbkgYD1tEn1aQO te8eT8Rr6Jb46wLCyKYE48PLoQGKj6+0jp8l9SlHGHPlxjrC4SSMHlOVV4jATkhk t089UJvnbbSTK9GLR7aaaVF/IrYhdEpB+H7fBQ73qbgeJnazWBEO9fgFnhwG4rFO s/qZ8OhiOEIXDtfpMIEzePFfF/CcCBX4WnQ/q8U4lcTH+QDpgn2EVnQp2BYWVGLD YMA5T/1s3OkEF9mU3z5zkqCD+B/uYI/vlPZDjPMOWNIq4quLwmUTRlNCysyIM4lA uCneF7R6vZuC8e9Cr2o9TzofterM/prfcIrD0vY84MDxcZtNAch1YzzfNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN8Kb6hgSitWdil7gLoMDn5Hz11UMB8GA1UdIwQY MBaAFJBS3se3YX/jnIVQ7iDDgiAaua8qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0ZMZXg3ZGhmLU9jaFZEdUlNT0NJQnE1cnlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9lOWE3YTEtZTlmZS00N2Q0LWFlMzIt ZGYwYTQ0ODAwYWE1LzEva0ZMZXg3ZGhmLU9jaFZEdUlNT0NJQnE1cnlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9lOWE3YTEtZTlmZS00N2Q0LWFlMzItZGYwYTQ0ODAwYWE1 LzEva0ZMZXg3ZGhmLU9jaFZEdUlNT0NJQnE1cnlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2keCmNQt c1Ns05CzrfjXNwMWrpxbi4LA5MBlXoKlLkYParK4q5kvmyImp2GywZ65GRbXj8Xw qSaA+TR0U7sGEjW+B4zz7SNbxUG9cV/yCyjR1xfopfpRz0Um18JOgRl91vjQClqE 0qtt5W1gOXrA24bTZfKMcOr/DGDUk6cTTEH/0bzYzjmikOXWsi9or0k7MMBgu+EE tdEGEnf1hgrobT+OGSeeAQBS0t0TrtE2ZVlkeKprKMX313B3Dgd33ITIfbN1CygN bl87ypr+UqShznDrdcMBh4Qtlx654dtvTI+cwz6XUjph2iOWt8SmjkpvMdkgfuTM 3tNQjg7VDXTHXw== -----END CERTIFICATE-----Generated at Tue Dec 16 00:31:42 2025 by rpki-client