This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft File: KfajAL99QLf41hgcW4p9vHG30SM.mft (raw, json) Hash identifier: zWYh0ePzyYAIZVoeGiGEpxZQo8RUL+LYOdyLNGuEvjc= Subject key identifier: E5:7C:4E:52:4C:C5:8B:E4:EC:15:BE:4F:2A:FB:3C:25:8E:0D:C3:FB Authority key identifier: 29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23 Certificate issuer: /CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123 Certificate serial: 019B2F9E595057DE967BA9039467604FCBB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft Manifest number: 0B62 Signing time: Thu 18 Dec 2025 04:01:05 +0000 Manifest this update: Thu 18 Dec 2025 04:01:05 +0000 Manifest next update: Fri 19 Dec 2025 04:01:05 +0000 Files and hashes: 1: KfajAL99QLf41hgcW4p9vHG30SM.crl (hash: hgGCCAr54/0S6nHIL1NHuzBgAw9a+6p+1E75AAS7ACQ=) 2: bXochpGWrfkL9JTx-tBya7FybWc.roa (hash: GWw+pyqvyZwm3wir46g8ZzCYrwNMhLudtjpRVXUkGu8=) 3: rF48GSjCA8nAgS7e7P_0TwDWMHI.roa (hash: mzK0vZsIrvw7/YH7xF2HGiJG11ODO49sPGy1ll1t6eQ=) 4: s8_NtbGTu8kgBV4HuDM2-AUVj2Q.roa (hash: E+MCsmGddUOCxHp7ENUlFyd8Du3D6Rxe6k6mioQYpr4=) 5: wKUJgTwD7cFwdEtrEHOHqt6iRN8.roa (hash: kOGKpGaa2gE7ztgll470FJTFa167kUV848g0OHaW6ow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:59:50:57:de:96:7b:a9:03:94:67:60:4f:cb:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123 Validity Not Before: Dec 18 04:01:05 2025 GMT Not After : Dec 19 04:01:05 2025 GMT Subject: CN=e57c4e524cc58be4ec15be4f2afb3c258e0dc3fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9b:04:e5:ca:b8:1d:2b:44:62:db:c0:61:b8: d3:27:d9:60:88:0f:6f:f1:ce:97:33:9f:df:46:88: 08:0c:29:07:62:59:55:28:82:fd:fb:55:be:c3:f2: 97:d5:fe:d2:dd:50:fc:60:14:41:4f:a1:d3:74:e5: d1:33:4d:dd:91:a3:03:be:4f:20:c9:37:78:d4:06: e7:ac:69:1d:51:2d:56:a3:ab:de:07:2e:bb:76:5b: 01:d4:94:45:40:45:94:a1:1c:e0:f2:30:39:45:69: 34:2b:bd:d6:64:ce:ed:aa:81:b0:55:42:e6:6e:28: 67:0e:86:9c:a1:64:35:a1:90:a4:9b:bb:01:ee:4d: 26:19:f3:4e:2d:be:58:3c:8a:01:ce:9d:8e:24:1c: cb:cd:3a:ba:44:15:8b:43:1d:c3:2e:b2:8e:91:3b: 1c:8e:a1:d9:e9:f7:73:ee:b9:48:6a:a0:f6:45:18: e7:43:94:f9:2b:42:3a:a0:e5:97:ba:a8:7e:29:97: 0d:35:72:64:f9:b9:7e:d6:f9:96:1b:d1:e5:0c:16: 06:40:28:07:27:ec:75:ba:47:8a:59:18:5f:35:d9: 36:5d:70:e0:46:e4:da:c4:f4:07:92:32:94:f0:c3: 2f:2c:f9:22:1b:8d:36:b4:73:24:71:3d:b7:db:50: 72:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:7C:4E:52:4C:C5:8B:E4:EC:15:BE:4F:2A:FB:3C:25:8E:0D:C3:FB X509v3 Authority Key Identifier: keyid:29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:f8:6a:bd:95:d8:79:70:d2:60:2e:0a:57:08:4a:a1:5a:68: e2:03:b7:97:0d:d0:1f:2f:ff:41:4b:2d:35:21:41:48:1d:8e: 5a:c0:0a:59:74:86:21:c2:3f:b7:40:e4:42:cd:cc:9d:2b:13: 20:82:56:9f:a4:ff:62:a4:49:87:e3:79:6e:07:fd:4c:ff:e5: 32:6e:c9:f6:54:f0:fd:45:c9:9e:70:99:bf:c3:56:27:5b:70: ab:30:22:6c:ec:76:5f:b2:7d:3f:1b:28:f4:de:8b:2c:b0:92: be:d1:37:59:2d:ce:ad:b2:9f:ff:22:a6:d5:38:f8:9d:01:b4: 6e:3c:de:99:36:28:da:47:84:29:e4:dd:02:1f:e4:d4:46:56: 4c:ea:bd:c4:f4:eb:cc:2b:ff:d1:25:b6:7d:c0:49:9b:ff:83: d7:83:b9:f4:9b:38:a1:d3:cd:3d:52:61:63:e7:77:78:15:6a: 0d:98:09:73:01:8a:fa:57:bc:88:51:1f:a5:69:4c:e9:7b:6f: f4:ce:1a:32:72:3b:e8:e3:34:c7:bd:53:cd:17:70:a1:77:87: 76:9d:99:4f:ff:a6:84:5c:02:83:a1:70:dd:f0:3d:5c:23:7a: ab:8a:d8:9e:fa:ff:51:8d:47:95:e6:33:e5:3c:97:f6:99:6f: 50:0c:51:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnllQV96We6kDlGdgT8uwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZjZhMzAwYmY3ZDQwYjdmOGQ2MTgxYzViOGE3ZGJjNzFi N2QxMjMwHhcNMjUxMjE4MDQwMTA1WhcNMjUxMjE5MDQwMTA1WjAzMTEwLwYDVQQD EyhlNTdjNGU1MjRjYzU4YmU0ZWMxNWJlNGYyYWZiM2MyNThlMGRjM2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JsE5cq4HStEYtvAYbjTJ9lgiA9v 8c6XM5/fRogIDCkHYllVKIL9+1W+w/KX1f7S3VD8YBRBT6HTdOXRM03dkaMDvk8g yTd41AbnrGkdUS1Wo6veBy67dlsB1JRFQEWUoRzg8jA5RWk0K73WZM7tqoGwVULm bihnDoacoWQ1oZCkm7sB7k0mGfNOLb5YPIoBzp2OJBzLzTq6RBWLQx3DLrKOkTsc jqHZ6fdz7rlIaqD2RRjnQ5T5K0I6oOWXuqh+KZcNNXJk+bl+1vmWG9HlDBYGQCgH J+x1ukeKWRhfNdk2XXDgRuTaxPQHkjKU8MMvLPkiG402tHMkcT2321ByCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOV8TlJMxYvk7BW+Tyr7PCWODcP7MB8GA1UdIwQY MBaAFCn2owC/fUC3+NYYHFuKfbxxt9EjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2ZhakFMOTlRTGY0MWhnY1c0cDl2SEczMFNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hYWY0OWMtODNkZC00NmFhLThjZTct Yjg0YzQxM2RmYWE0LzEvS2ZhakFMOTlRTGY0MWhnY1c0cDl2SEczMFNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9hYWY0OWMtODNkZC00NmFhLThjZTctYjg0YzQxM2RmYWE0 LzEvS2ZhakFMOTlRTGY0MWhnY1c0cDl2SEczMFNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq/hqvZXY eXDSYC4KVwhKoVpo4gO3lw3QHy//QUstNSFBSB2OWsAKWXSGIcI/t0DkQs3MnSsT IIJWn6T/YqRJh+N5bgf9TP/lMm7J9lTw/UXJnnCZv8NWJ1twqzAibOx2X7J9Pxso 9N6LLLCSvtE3WS3OrbKf/yKm1Tj4nQG0bjzemTYo2keEKeTdAh/k1EZWTOq9xPTr zCv/0SW2fcBJm/+D14O59Js4odPNPVJhY+d3eBVqDZgJcwGK+le8iFEfpWlM6Xtv 9M4aMnI76OM0x71TzRdwoXeHdp2ZT/+mhFwCg6Fw3fA9XCN6q4rYnvr/UY1HleYz 5TyX9plvUAxR+g== -----END CERTIFICATE-----Generated at Thu Dec 18 07:06:07 2025 by rpki-client