This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft File: KXrnWSylJJHcFmow_hR31xK9Rl0.mft (raw, json) Hash identifier: AWtGHaeL2M85Sg7kn2kjoU3EGr5KxeBTLH3N9L6wlgc= Subject key identifier: 8F:B5:0D:46:CA:A1:C8:D3:B0:8B:E9:BF:14:AB:06:88:9D:02:22:0E Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d Certificate serial: 019AF31D03987E6018C3918349C182A525CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft Manifest number: 1773 Signing time: Sat 06 Dec 2025 10:02:36 +0000 Manifest this update: Sat 06 Dec 2025 10:02:36 +0000 Manifest next update: Sun 07 Dec 2025 10:02:36 +0000 Files and hashes: 1: 3S9CxnQg7YWqU3K6TXltDEUCLyw.roa (hash: 3OEFYGKv+A11bV584/FIEjB0rz/syH/3YTSncOKzqpk=) 2: 7iZSI8YJjBx97RcBp5yy0dHgNCc.roa (hash: zYIePn/XtBi1RBLoEwZwbryvrg3fa+ccFHSQFX92GIc=) 3: 8aTIb0puCina4qQH9DISIqfOc4Q.roa (hash: 1Nu+gUGiEPO422nTi4SIHIM/055+/Bx1i4GdyYjGB6w=) 4: 9DoakwUWAGtHNEatYpKzbo2QTwI.roa (hash: N1mtoTrK+kfX1PnLRJRzSQlCeUqp41+33H0gjLXBdeo=) 5: EZFIYtcapsDAbifqmq2FXtp-Cdw.roa (hash: f6ff20P7C3YhGHb/pCr95k1VGXcMCffUp+GlTWJzaPk=) 6: F-e0yheo2RviKbK6HPx7_eTqhA4.roa (hash: KEJO7y7WsDfC5FsDfSaCJ3hpxQXSnjViDnFGvytgGQY=) 7: KXrnWSylJJHcFmow_hR31xK9Rl0.crl (hash: sYHGMQNVblFZSc9bu0FK4d3V358wqKYhQ37YDdxw5LQ=) 8: cWm4lcomb_7tGOMAKfN645HZ4lY.roa (hash: Q1Xtl3Tt4xDVvissECGJZtzvYROTu/HRq3nIK5nwbTU=) 9: ic83PxAobxuOswBFck-YRl3xl5s.roa (hash: b2hEd1qs+ywRwA/SKMeyaDMx96OzLoUUBDS6BjYhAik=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:03:98:7e:60:18:c3:91:83:49:c1:82:a5:25:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d Validity Not Before: Dec 6 10:02:36 2025 GMT Not After : Dec 7 10:02:36 2025 GMT Subject: CN=8fb50d46caa1c8d3b08be9bf14ab06889d02220e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:14:04:93:cc:1e:5a:c1:b8:70:5f:6d:7d:82: ef:08:1a:16:83:d2:ea:e8:05:f4:2f:47:3e:c4:6c: 31:c3:5d:b1:67:15:0a:9a:9a:84:8a:20:e6:00:f3: 8d:b4:6e:cb:c5:1b:6b:88:4e:b3:56:e6:33:4f:04: 9a:de:42:a0:fc:69:7a:30:3c:b8:92:ce:3c:13:0f: 01:07:cd:91:e9:40:25:c7:bb:54:e5:0a:6a:ef:c1: 92:86:3d:df:f5:c5:73:97:91:dc:82:2f:1c:ff:a9: 22:50:9f:6f:c3:f1:da:57:fd:82:8d:15:12:07:89: 5d:69:2b:93:f9:15:d7:15:ff:dc:e3:21:92:f1:61: d6:00:20:ef:1e:30:8f:46:9f:81:6c:0a:44:c0:b4: 6d:e0:b1:b0:9d:3c:39:b9:7d:d2:85:04:07:86:10: 2a:7b:cb:13:a7:d4:b1:80:ee:65:d4:d5:34:b1:1e: 30:ba:18:0a:0d:a5:46:7e:db:a2:52:cb:51:37:fe: d0:f0:c1:df:fc:7c:bc:c9:67:86:f1:83:44:8a:fd: d0:43:58:cb:fb:b8:ec:9e:b1:0d:be:63:02:10:a7: ca:c7:7e:30:7e:dd:7c:71:e5:5f:ec:63:9d:ad:c5: 16:d7:d2:8a:97:fb:cc:f2:68:17:5f:48:fe:5a:d5: 5b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B5:0D:46:CA:A1:C8:D3:B0:8B:E9:BF:14:AB:06:88:9D:02:22:0E X509v3 Authority Key Identifier: keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:af:33:e7:2d:f3:4f:9f:cb:dc:77:38:3c:df:56:41:6f:77: d4:a3:fa:cd:7e:f4:3c:4b:b2:72:d2:56:28:4d:7b:4c:0b:1f: b8:3c:e6:85:67:95:04:4f:87:98:c4:8e:55:cf:1f:8a:fe:be: 15:b6:5d:41:b8:07:8c:77:17:14:b9:2e:a3:c8:0b:3f:94:91: e0:ec:d3:5b:86:6a:71:c1:74:55:80:16:6d:93:d5:cc:f0:3a: 9b:dd:17:3e:f9:49:01:91:71:26:72:43:aa:df:e2:bd:09:42: 43:ff:16:ca:73:35:e6:a0:68:d3:ad:e7:c5:b5:0b:97:05:40: ea:f7:74:0c:10:89:94:0a:2d:67:74:4e:9b:e5:f5:15:76:9a: a2:57:ae:41:1a:ad:a6:7b:dd:c5:72:be:f5:fb:30:c6:e8:f0: da:fd:72:17:45:a2:c0:57:32:f6:db:cf:84:f0:9f:c1:a4:4d: b5:5b:79:5c:89:f7:85:ec:9a:93:d7:30:e9:11:9b:ba:fe:99: 57:47:46:89:4c:af:c9:f5:57:79:27:9d:98:de:bb:c8:25:dd: 14:12:a6:02:18:d5:14:84:fb:01:aa:50:76:43:a4:df:41:c5: 6b:e7:30:15:fc:db:a3:0c:a9:51:58:37:5f:bc:38:ea:f4:61: 5e:c0:c2:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHQOYfmAYw5GDScGCpSXLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2FlNzU5MmNhNTI0OTFkYzE2NmEzMGZlMTQ3N2Q3MTJi ZDQ2NWQwHhcNMjUxMjA2MTAwMjM2WhcNMjUxMjA3MTAwMjM2WjAzMTEwLwYDVQQD Eyg4ZmI1MGQ0NmNhYTFjOGQzYjA4YmU5YmYxNGFiMDY4ODlkMDIyMjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhQEk8weWsG4cF9tfYLvCBoWg9Lq 6AX0L0c+xGwxw12xZxUKmpqEiiDmAPONtG7LxRtriE6zVuYzTwSa3kKg/Gl6MDy4 ks48Ew8BB82R6UAlx7tU5Qpq78GShj3f9cVzl5Hcgi8c/6kiUJ9vw/HaV/2CjRUS B4ldaSuT+RXXFf/c4yGS8WHWACDvHjCPRp+BbApEwLRt4LGwnTw5uX3ShQQHhhAq e8sTp9SxgO5l1NU0sR4wuhgKDaVGftuiUstRN/7Q8MHf/Hy8yWeG8YNEiv3QQ1jL +7jsnrENvmMCEKfKx34wft18ceVf7GOdrcUW19KKl/vM8mgXX0j+WtVbvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+1DUbKocjTsIvpvxSrBoidAiIOMB8GA1UdIwQY MBaAFCl651kspSSR3BZqMP4Ud9cSvUZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgt MzkxMGE1OWExMTIxLzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgtMzkxMGE1OWExMTIx LzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAba8z5y3z T5/L3Hc4PN9WQW931KP6zX70PEuyctJWKE17TAsfuDzmhWeVBE+HmMSOVc8fiv6+ FbZdQbgHjHcXFLkuo8gLP5SR4OzTW4ZqccF0VYAWbZPVzPA6m90XPvlJAZFxJnJD qt/ivQlCQ/8WynM15qBo063nxbULlwVA6vd0DBCJlAotZ3ROm+X1FXaaoleuQRqt pnvdxXK+9fswxujw2v1yF0WiwFcy9tvPhPCfwaRNtVt5XIn3heyak9cw6RGbuv6Z V0dGiUyvyfVXeSedmN67yCXdFBKmAhjVFIT7AapQdkOk30HFa+cwFfzbowypUVg3 X7w46vRhXsDCeg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:57:41 2025 by rpki-client