This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft File: kiIItHtqhk2dH_M-BqqB0TgZp04.mft (raw, json) Hash identifier: 71pFzVW26AM5qJyeHScaC1LdjvDL5WYpAmPbZbkbdT0= Subject key identifier: 1E:A1:42:AF:7B:5A:EC:3F:80:D4:E0:F1:57:6F:76:06:F7:01:C3:83 Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Certificate serial: 019AF23F655A508212E951C3DFEADBEFDE7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft Manifest number: 17B5 Signing time: Sat 06 Dec 2025 06:00:32 +0000 Manifest this update: Sat 06 Dec 2025 06:00:32 +0000 Manifest next update: Sun 07 Dec 2025 06:00:32 +0000 Files and hashes: 1: 1-rtI9dIBDPGpB7XLgp5LO6PPhNw.roa (hash: ZOyoK37XAa4AMrftPMDpS57217i8QyMPPSqOrLIuDh0=) 2: 1MqnWOr2XX863k_xrrBNGhpSTM8.roa (hash: ZAHJz2QsnnKlOkhGF4MOgyBVqnyxAgqsRswDwRAbn1Q=) 3: ETJiLj_FPEXG5No5WrAoxGg_y_w.roa (hash: 662t7NLUufLVnPvlW5VowqyxEXMWNP4WIugo2zvrIGE=) 4: Il-erxMI4M94_jrG5zUQVeoL7sI.roa (hash: k2tfe5PGNF5YTVczprADK+deYh+5lz2pJBVEO5+Hrkc=) 5: QX1PzB0slLNh42gV_9Uq9W7-NNU.roa (hash: 42Me4JYy4dGGMwi/uXUY8iDNdYDcztDyEjfKcP1cPGo=) 6: WtirBgLdd1QDsDcFh1HdrsUIlWo.roa (hash: GA2Y0Eudc/59qW3vmpiDOm6qcDbR/NWl/VMU6tiADWg=) 7: XPCmvArgHR13v_k02Z1LW1lWJx8.roa (hash: 9yrs8EgUGCgumASichQb2a43gXVQMGz8ZJNkpOkb3cg=) 8: XWYIJ6UuSY9_AQiT-hJINBObDQE.roa (hash: PdxLhxNEU7vSAkCuLaQWVId/t5OMWmj8bekrOqUDrSs=) 9: cOLPd5Lu_3ww7o-cdhWB7-TfdNY.roa (hash: S/36KJdTMQ8aIP0tPHIBx2zWJTQd/RRNG/oJA1iTyvo=) 10: iCgmGpyhGXjIvVkyeLmT7N8_y-4.roa (hash: jOahkOswhpSU7ry2oaBtzcTaxYOf5EimbWn3HXDfD9I=) 11: j-60Smkd34pUp65Reim9QN1pXBY.roa (hash: M2tsmNC79ATfwuHh7j2unUzS2isZxvxmhlA+F7YtpNY=) 12: kiIItHtqhk2dH_M-BqqB0TgZp04.crl (hash: EuXW8sDItx7C8Ols1JyFxlwHurQUnLTXr8pJZQidjLc=) 13: knSytMRDBBEnCJmSSPDhHWtHg0c.roa (hash: xgKSyUyWK6rR5NEa7nVIywiPdyu/cPSGzuk49MX8f0A=) 14: vBAure0FxWxWdTfj2W3O6_7De24.roa (hash: yikPG1Koq3q/WuhD/GCuT4mpPwhtQgx1jshmNW1jKHY=) 15: vQeju5IXNjEoWBC9ET0ksVohAAw.roa (hash: vNUoX8dzp8vlCht08az7kkkn7Bm6tbtsihn+s5TebwA=) 16: yyPUAj_dCWAktPW0jmBjCiRvIJg.roa (hash: H8oCA9x6vnmIvl4HatB3uvnypYSjgIN9/CrfMgatutI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:65:5a:50:82:12:e9:51:c3:df:ea:db:ef:de:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Validity Not Before: Dec 6 06:00:32 2025 GMT Not After : Dec 7 06:00:32 2025 GMT Subject: CN=1ea142af7b5aec3f80d4e0f1576f7606f701c383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8d:52:dc:ea:d3:72:19:f5:7b:6c:50:df:fa: d3:9b:bf:aa:d6:82:4b:cc:55:46:3a:ba:4f:34:b9: 22:25:eb:6f:8f:65:2a:41:67:ba:b0:8d:39:35:ee: 81:7f:0d:a7:e9:27:f6:c2:13:19:00:ae:62:1a:9f: 93:66:53:61:46:e0:18:db:8e:e8:a4:61:24:cd:ba: e6:fd:95:04:f4:d3:58:54:8b:8b:24:ca:67:c8:5f: df:37:71:b4:5b:39:e0:5b:b5:c5:16:60:68:92:fc: 07:a7:5f:c6:ed:55:51:ff:36:bc:12:6d:05:dd:63: 5b:00:b9:66:f3:15:14:31:a2:7c:49:c1:d1:6f:2f: b4:b4:ba:90:73:ab:ee:e2:8c:ce:2a:3c:d5:31:10: 9e:61:59:c0:a9:89:a5:5a:dc:ef:45:49:1b:fd:cc: a6:8d:db:d6:ef:1d:00:99:d4:8d:5f:f5:8e:1b:05: ee:df:9a:73:7c:f9:43:25:f5:f2:3f:8e:f6:46:03: 31:db:6c:43:e0:72:74:fb:d0:ed:3b:2a:aa:aa:87: a1:ff:2a:f5:94:eb:6d:12:59:5a:5a:9f:55:c1:85: dd:f2:11:05:09:3f:e8:4e:e3:ae:40:4e:7e:a8:60: 27:ed:9d:0b:d4:00:37:15:86:e9:c6:06:b5:29:ed: 5a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A1:42:AF:7B:5A:EC:3F:80:D4:E0:F1:57:6F:76:06:F7:01:C3:83 X509v3 Authority Key Identifier: keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:71:c1:a0:56:41:4e:8b:2d:e6:50:2a:e1:aa:42:21:02:c4: 91:94:d3:c0:f7:d7:0e:2b:82:90:8f:50:6e:a3:c2:80:7c:9d: 46:af:e2:ff:b8:14:23:a9:4d:79:92:bc:2e:8c:ac:6c:ee:fb: 6f:5e:de:27:6b:b2:1d:cc:df:ce:1c:2f:3c:74:51:4d:65:88: d0:42:98:98:d6:9f:27:9a:03:32:a4:36:97:e3:e0:27:0e:7a: 8c:20:b0:d5:f3:be:89:85:4f:15:14:34:57:72:1b:f6:bb:c1: 79:63:90:33:5c:90:e1:5d:87:11:41:18:60:00:07:af:87:2e: 86:2c:0c:36:b2:6a:3b:1e:25:f6:ff:ec:27:a9:0f:78:67:ee: a4:03:74:d5:3a:4c:09:e5:52:ac:63:ba:39:d8:a1:ad:c6:2f: b9:8c:81:18:ee:65:3c:d3:82:eb:15:c8:58:a7:13:42:c4:b6: 78:ca:37:65:53:6c:37:2d:1d:91:9b:cb:e5:06:de:3c:b1:f2: 55:68:41:10:4c:99:76:35:7d:01:bb:b7:9a:f3:81:b2:77:ec: a5:35:e3:22:b9:7c:d4:c9:e0:eb:85:65:9c:f0:5d:4d:f4:6c: e3:65:43:05:61:7f:16:fb:38:29:3c:3f:e8:a5:74:f6:fa:f9: d0:22:68:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP2VaUIIS6VHD3+rb7958MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMjIwOGI0N2I2YTg2NGQ5ZDFmZjMzZTA2YWE4MWQxMzgx OWE3NGUwHhcNMjUxMjA2MDYwMDMyWhcNMjUxMjA3MDYwMDMyWjAzMTEwLwYDVQQD EygxZWExNDJhZjdiNWFlYzNmODBkNGUwZjE1NzZmNzYwNmY3MDFjMzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAko1S3OrTchn1e2xQ3/rTm7+q1oJL zFVGOrpPNLkiJetvj2UqQWe6sI05Ne6Bfw2n6Sf2whMZAK5iGp+TZlNhRuAY247o pGEkzbrm/ZUE9NNYVIuLJMpnyF/fN3G0WzngW7XFFmBokvwHp1/G7VVR/za8Em0F 3WNbALlm8xUUMaJ8ScHRby+0tLqQc6vu4ozOKjzVMRCeYVnAqYmlWtzvRUkb/cym jdvW7x0AmdSNX/WOGwXu35pzfPlDJfXyP472RgMx22xD4HJ0+9DtOyqqqoeh/yr1 lOttEllaWp9VwYXd8hEFCT/oTuOuQE5+qGAn7Z0L1AA3FYbpxga1Ke1aaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB6hQq97Wuw/gNTg8Vdvdgb3AcODMB8GA1UdIwQY MBaAFJIiCLR7aoZNnR/zPgaqgdE4GadOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTct OTViMDhlMzY2MGNmLzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTctOTViMDhlMzY2MGNm LzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV3HBoFZB Tost5lAq4apCIQLEkZTTwPfXDiuCkI9QbqPCgHydRq/i/7gUI6lNeZK8LoysbO77 b17eJ2uyHczfzhwvPHRRTWWI0EKYmNafJ5oDMqQ2l+PgJw56jCCw1fO+iYVPFRQ0 V3Ib9rvBeWOQM1yQ4V2HEUEYYAAHr4cuhiwMNrJqOx4l9v/sJ6kPeGfupAN01TpM CeVSrGO6OdihrcYvuYyBGO5lPNOC6xXIWKcTQsS2eMo3ZVNsNy0dkZvL5QbePLHy VWhBEEyZdjV9Abu3mvOBsnfspTXjIrl81Mng64VlnPBdTfRs42VDBWF/Fvs4KTw/ 6KV09vr50CJoDg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:26 2025 by rpki-client