This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft File: KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft (raw, json) Hash identifier: s79JxJqNDxtOI8JAu2b9zgp2Fxik1YKoL+BhtesxbRA= Subject key identifier: 10:F7:B2:C4:06:26:AC:52:CD:28:40:84:64:4B:36:6C:4A:68:AC:38 Authority key identifier: 29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28 Certificate issuer: /CN=291f0b73e67d63c5a4c9046814166a9e21625f28 Certificate serial: 019AF16414B3E939839C98AA9BB34EA1C872 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 02:00:59 +0000 Manifest this update: Sat 06 Dec 2025 02:00:59 +0000 Manifest next update: Sun 07 Dec 2025 02:00:59 +0000 Files and hashes: 1: 1-BYmurPr5LAEsZbg3IkqQQ8bTE.roa (hash: gSRreBFbCS0pgQwKCm4p7z2bTAJn0+Iu8NoE2w5inzM=) 2: KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl (hash: ModTL0UsY3c+eWmZBPsEpCQfLF/tcie3+rHJL/v4dNQ=) 3: LkIHKYAztrvXyS2uvM19nitM_J8.roa (hash: bSmM4xvjjm+xIUvcYXqsQ49ZAFIaGh2KEBGQ0EzdDJQ=) 4: YZbRz0TPn2AkN3pts4pehGKPFCQ.roa (hash: +Ns94ZDDFJ4TJopF8u7U1uG56GwRweZl/hjdoUef2a0=) 5: _vdRTtZt9JtL5ja2GczGggJ0SbM.roa (hash: lAHlgKcde7+6Ag5a4YHN2NUrJtyFsbjpueclzD4vqNA=) 6: cPcxLO1mqeKGQGyRnW90EvAI0HE.roa (hash: k9JzzhuzIaxECEDTAdASrMOBk8mvIm/aEbc0qToiokc=) 7: dx0WinCfMz9mrqqCW13H5COmXU8.roa (hash: ljXXTzc+Ws09xCBJIxWwoc/Db/5IEktc/whbot/5Ato=) 8: fx8MLGTxK80dTB_4NJYiocZMPwQ.roa (hash: ktdhmccH0NnIum2PWLW59Gn98yD870nWte0K3STRnHs=) 9: uwiEBGof-KAkpEFhZy-WaLfAvIs.roa (hash: ZnbTLkj0SeUC00zQu5XoWyUlIHf81vfWL1Buec+9xEU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:14:b3:e9:39:83:9c:98:aa:9b:b3:4e:a1:c8:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291f0b73e67d63c5a4c9046814166a9e21625f28 Validity Not Before: Dec 6 02:00:59 2025 GMT Not After : Dec 7 02:00:59 2025 GMT Subject: CN=10f7b2c40626ac52cd284084644b366c4a68ac38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:04:30:ee:4a:58:a0:a8:2f:b8:1a:b9:91:f5: 71:8f:d6:ef:f1:41:cf:4e:03:6b:37:f6:a5:f6:da: 39:86:94:96:b0:58:8a:6d:b4:ab:a9:19:c8:41:15: 29:74:f1:8a:11:b0:35:61:40:75:9a:1c:40:99:ca: fa:5b:1c:83:47:9e:57:c9:2f:83:37:95:69:05:ce: 7b:9e:1c:53:d4:04:34:f9:cd:78:24:64:da:a6:dd: 65:35:85:5c:d6:c7:6e:b4:79:29:8c:2d:c3:fe:f5: 6e:b0:91:d7:99:45:16:b0:1a:04:ec:f0:8d:89:af: 4f:ec:ae:c1:94:2f:38:74:a5:8e:7f:22:c2:eb:b3: b3:16:05:b0:d8:49:d7:0d:76:d9:87:62:91:01:fe: 6e:bd:38:eb:3a:03:50:f8:a0:46:13:ee:d4:46:5f: 61:4b:43:a7:ab:61:10:e7:8c:e4:9a:49:c1:2f:d7: 9a:fe:06:9d:f1:1a:7e:29:9b:9a:13:3b:1a:ea:9b: 03:0d:01:c3:f2:88:28:6d:59:90:aa:c7:bd:20:60: 46:2d:6c:50:a1:ea:95:3c:1a:01:08:d0:35:f8:d9: ff:b3:34:4b:b6:36:bd:26:2c:ca:f4:da:22:75:e3: 73:e7:a9:2e:a8:66:a7:39:7e:a9:5d:1a:51:a7:d2: 2b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F7:B2:C4:06:26:AC:52:CD:28:40:84:64:4B:36:6C:4A:68:AC:38 X509v3 Authority Key Identifier: keyid:29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:9b:2c:1c:aa:d7:b0:08:ca:bd:f6:a3:5b:c8:5f:3c:62:25: ef:43:18:63:67:56:0f:d1:1c:c1:72:75:96:40:9d:c0:e5:48: 40:2a:b8:cc:ae:7b:49:51:6e:83:97:45:be:69:08:d6:14:d4: bd:09:85:59:4a:01:7e:b3:b9:8a:be:64:0e:28:a4:0d:a3:6f: cd:33:7a:0b:fd:32:06:c3:87:c8:1a:25:bd:f4:f4:d8:94:5a: 00:bb:e1:0b:3d:18:a9:61:44:74:2a:4e:5b:b2:0e:5e:65:67: 06:c6:27:93:07:f3:f9:01:84:45:64:63:8b:58:bd:f1:48:1c: f1:ec:83:c9:9d:d1:e0:eb:49:48:e2:d9:d1:66:f2:35:f8:cf: ec:05:48:1a:df:e9:dc:fb:88:80:85:bd:e3:97:fd:32:6d:fa: 46:de:34:66:fe:19:10:96:70:ca:29:40:e8:61:ca:da:41:fd: cd:d6:8a:03:1c:56:79:ae:e3:10:42:9b:ac:ee:4f:91:4b:11: 98:95:65:26:2d:cf:b9:43:29:4e:6a:ac:c9:ef:ed:d2:5d:16: 33:03:b5:fa:d1:e6:e8:d1:26:0c:6d:96:3a:51:7f:06:1a:30: 13:08:bf:b6:92:86:8f:7e:28:58:cd:a5:0c:f6:08:c3:ea:bb: 86:ff:4d:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZBSz6TmDnJiqm7NOochyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MWYwYjczZTY3ZDYzYzVhNGM5MDQ2ODE0MTY2YTllMjE2 MjVmMjgwHhcNMjUxMjA2MDIwMDU5WhcNMjUxMjA3MDIwMDU5WjAzMTEwLwYDVQQD EygxMGY3YjJjNDA2MjZhYzUyY2QyODQwODQ2NDRiMzY2YzRhNjhhYzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwQw7kpYoKgvuBq5kfVxj9bv8UHP TgNrN/al9to5hpSWsFiKbbSrqRnIQRUpdPGKEbA1YUB1mhxAmcr6WxyDR55XyS+D N5VpBc57nhxT1AQ0+c14JGTapt1lNYVc1sdutHkpjC3D/vVusJHXmUUWsBoE7PCN ia9P7K7BlC84dKWOfyLC67OzFgWw2EnXDXbZh2KRAf5uvTjrOgNQ+KBGE+7URl9h S0Onq2EQ54zkmknBL9ea/gad8Rp+KZuaEzsa6psDDQHD8ogobVmQqse9IGBGLWxQ oeqVPBoBCNA1+Nn/szRLtja9JizK9NoideNz56kuqGanOX6pXRpRp9IrJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBD3ssQGJqxSzShAhGRLNmxKaKw4MB8GA1UdIwQY MBaAFCkfC3PmfWPFpMkEaBQWap4hYl8oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1I4TGMtWjlZOFdreVFSb0ZCWnFuaUZpWHlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80OGQ2MDktMDg4ZC00MWU0LWJlYzQt MzhlZThmZDY0ZTdkLzEvS1I4TGMtWjlZOFdreVFSb0ZCWnFuaUZpWHlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS80OGQ2MDktMDg4ZC00MWU0LWJlYzQtMzhlZThmZDY0ZTdk LzEvS1I4TGMtWjlZOFdreVFSb0ZCWnFuaUZpWHlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl5ssHKrX sAjKvfajW8hfPGIl70MYY2dWD9EcwXJ1lkCdwOVIQCq4zK57SVFug5dFvmkI1hTU vQmFWUoBfrO5ir5kDiikDaNvzTN6C/0yBsOHyBolvfT02JRaALvhCz0YqWFEdCpO W7IOXmVnBsYnkwfz+QGERWRji1i98Ugc8eyDyZ3R4OtJSOLZ0WbyNfjP7AVIGt/p 3PuIgIW945f9Mm36Rt40Zv4ZEJZwyilA6GHK2kH9zdaKAxxWea7jEEKbrO5PkUsR mJVlJi3PuUMpTmqsye/t0l0WMwO1+tHm6NEmDG2WOlF/BhowEwi/tpKGj34oWM2l DPYIw+q7hv9NPA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:32:02 2025 by rpki-client