This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft File: KdLa_xxbthoKyLPK6tS4ofooTQ8.mft (raw, json) Hash identifier: eMlhuY43STqhdT9a2+FrJQY6/nJdH5PUKne0qbfFHDs= Subject key identifier: 90:D7:A9:C4:67:2C:DA:FE:88:86:FB:90:7E:1E:DB:AC:FA:C7:AC:8D Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Certificate serial: 019AEFE3CC7B8E89D526972CFE88342FCCFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft Manifest number: 156C Signing time: Fri 05 Dec 2025 19:01:14 +0000 Manifest this update: Fri 05 Dec 2025 19:01:14 +0000 Manifest next update: Sat 06 Dec 2025 19:01:14 +0000 Files and hashes: 1: 2PegbotqIwMrRQlCESj3wtOxk9Y.roa (hash: rZZVMQZKMI0it0tOgJpydNZzt0GekTuseRWYhBVvg6A=) 2: 3JFGNuMYTVRE_tgsRB9Dv7TkoAI.roa (hash: cgDSOAUcOV7B/P90698S4nI5hWvg5jhDlyl5V3knjkc=) 3: 3XkmMUl7M1nMmiPcb7LUVevLIyY.roa (hash: Pdr72/2Gt/q0gBSGYVJo0n8lS0yGcyhACoYNvfLSjWU=) 4: 9tqxD372UOGf-zL9Og3dZI-GB_E.roa (hash: 1BflUu83I4Fz3YB6j1fHXKTleEcGx3LVxi458xNGCuo=) 5: AT1NLNUZ8X0xD6RcwZMdLdIz2ZM.roa (hash: fjnVFsPrVhpcbyIspcCLA5dZQu2SV1yINQliobo6yxc=) 6: FHCB6DuGL-bnBGM2X1yDzSnX9Zk.roa (hash: r6GDh9X+ylCTDxl9vj4S1UTcrV/ImccaaTi1D8Mi2xk=) 7: G4i5HzFemLXdLvBS_7Q429NG6_c.roa (hash: PhE5GD2aKWrEPp5p1ohcxf7+DsUWcfKZIUIvlvVO+6k=) 8: HN-sxkXhsPARhEyjcxF2VA5ULns.roa (hash: XKKXt3nQtVRf5U2SzwHGZlsTijL5Olvfsj7LyZpSgu0=) 9: HYbbsf8eCMyzWR7NIXL13jWqnOA.roa (hash: 4w478Bzu4qBOXzsZWI8tSBfQuiqe4KuvXGGHx+9OwLQ=) 10: KSdWPEt9fB_iBluYNf4K7txBQrE.roa (hash: YJ0c3CPnKgl+QFgMB6tD+ii2GX7vwrvuc49Rrz/E7uI=) 11: KdLa_xxbthoKyLPK6tS4ofooTQ8.crl (hash: Dhtc26yU4LSTApkrC6JzM02TcPb5ugLwH8sWXKCG5e0=) 12: Mf9Ftgoq8hNaUlnWSE1OgssDPng.roa (hash: 2OpCIxzpIQdhVjJD4azKWQqbRjrwZgvvuIiGX67bBpw=) 13: MfgxEOGAfVTGEvhRZTV_fR1-qXk.roa (hash: k0aQBEKvm4oillc+UIihjgdIum6WVpAkoV036ebhwvc=) 14: NcWtmNHRiYuhKShMZ2FiNOKfbAw.roa (hash: 6KR850hMO0L6chqV9/ieA2lf65V6cwC4jHYlXOitS7g=) 15: Q8PmaVsu91FafNMJSiUguBXDAy4.roa (hash: v/8qlXzfsrMPaxgUO4OHSG4SXigE1NDzd1YZIaC3Tfs=) 16: RPKuIuiwLUOTopNmIn4BOJGs7i0.roa (hash: lIg6TqObzFxbqNZ5fchVzBYqOiLD6H6xqfkDU6vs6XY=) 17: S5Vx_PwhrUdn6uSPv9B8Pl8fWZ4.roa (hash: XmpSvZLR/cpO3PqSr4aJClVLTWeNmz7xYTDZX7wuFYc=) 18: XdU9ba_H8wvW9YWGekfY-RC6fac.roa (hash: t+t6oWtjjjeUHSoz5gNWccz0VBGlDxWsh2LU4cszm7w=) 19: ZMqTwlIwPeE8mvoUVuRcrTCwgzU.roa (hash: aGqzihW0U2Fa6GEAQlzK17OaJFeFsHY8Inov7Q4Zp7U=) 20: ZreaaSzvj0F5FavpUXWG2Nvv2Pk.roa (hash: 1Qh4e1SS86x/OjiBlUymOG3z5N1ty2+63wfpNrmVAAs=) 21: _Ua05IcZ-Kd74uu-acz3zYQ2UXg.roa (hash: VTikAPXKyS/i+ZZ35PgUSzUblUTlMqZmtelGl4Mi2wc=) 22: bZv3S6SjMHuATa5GhC0St5hSsfU.roa (hash: v5Z9NLPnQ7ljIuVsTKQar4zGJUJdgJ7qXeQXJqaqbtI=) 23: cOWXDby_VAjDBm-QNXyxFV15NYc.roa (hash: d23wa4ZI6ixe2JTopJ8C5Bi1Ca40n6+Q2pIZccoLoNY=) 24: dEipwsI3eN1As0rWuDbWNnqMvTw.roa (hash: +biJe511JtIv65zZKrLUqAD9MG0u+pcvdynZY6XvZoc=) 25: fFIiPcIZQx033jSV6p41eBFER7E.roa (hash: qhzye0ysaR3MnkAhIOM63hxvVgvo8rQw3JHNBHBliIQ=) 26: fYh96DEUprSlV21wSMnuWBCSwx0.roa (hash: v06BAbDyEGINC47vf0TbEA82PuMPVQcWMD/+BPJ4cCg=) 27: hGqZ-FRlI55t4voAlR-n3NqPej0.roa (hash: B71Rb7BaHyLXQqMJQJiZSZS0lT82TbCVQONz7Ndp5cM=) 28: iZaZeEkRfA-qPxq2ngG3cfkXZcs.roa (hash: T0PfM8f9MKiqot92ZRLwnMqkMZ5rdvRshuTN3e9yWu4=) 29: onT2MkF29XmtrGx1gO1FbJGGd64.roa (hash: 9BBTl4rWlge/62o6XB7LJ3UfJ89LN7a5QNMStDRgw1U=) 30: qwqQv0_kWPrf2uUBMKT2TvBK3mI.roa (hash: ThX6Wi8fnBNMU2VW9z+5scRKlGLAdJdy5Sm4VgDw7kY=) 31: uNJMLJU1OW9vcIqjiQSUIVSCjgc.roa (hash: HOHu6WW/4np2LUQoidC7DHY+Djbp+WHZl3/vUb3ayiQ=) 32: wgXSVyqMPOaVRZoRz2DoQs27lno.roa (hash: 5JI0l9I/46gau6VOxIi0gUhDeXleGfmQ+fS0p1j3UPM=) 33: zoKa5rQePkHEPMZVNfuzo9aiNhc.roa (hash: vKObmrx8e0xeNE7rTL2Kryo1mCerVlEr58rYUGyO4oM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ef:e3:cc:7b:8e:89:d5:26:97:2c:fe:88:34:2f:cc:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Validity Not Before: Dec 5 19:01:14 2025 GMT Not After : Dec 6 19:01:14 2025 GMT Subject: CN=90d7a9c4672cdafe8886fb907e1edbacfac7ac8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7f:4d:62:08:37:58:e9:11:60:24:6b:a0:10: 37:88:e2:63:83:91:97:03:7b:69:2e:a4:2b:43:fa: f1:f6:27:cb:97:08:57:b0:0b:b5:81:3e:8c:46:1c: 2e:7f:51:f1:74:07:f2:6d:84:f6:5b:8f:7e:65:a8: 9d:2d:97:a2:78:d7:1b:5f:61:03:e5:b8:3e:ae:4c: 66:fd:05:36:0b:60:55:3a:c9:f3:9a:a0:49:f2:31: 37:f2:2b:8a:48:17:99:fb:51:5f:37:1a:4c:94:07: a2:5f:c6:ed:f6:30:62:94:62:7e:fa:b4:b6:09:c1: c9:64:45:8c:3e:3d:25:42:92:a1:d6:b7:e9:65:3a: 22:5b:87:a3:0c:d5:f5:91:7f:d1:ad:01:7c:a3:3c: d9:e2:62:df:3e:f4:6d:a6:cf:f1:e4:ab:ac:1f:38: 09:17:82:63:90:57:8f:56:08:f7:73:5a:3e:96:b0: 14:a5:0e:8f:06:93:1d:97:87:94:9e:a9:38:f2:f6: 66:dd:30:68:4b:ae:a6:b0:7d:6f:2c:6c:09:a6:5b: 24:c2:3b:f2:ce:ad:ab:5a:b8:cd:62:97:2e:87:16: 57:1b:56:b0:0b:c2:ef:2d:f3:03:ea:ba:dc:71:90: 83:46:bf:b1:a9:d6:e0:c2:b0:98:ea:ed:18:3b:34: 48:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D7:A9:C4:67:2C:DA:FE:88:86:FB:90:7E:1E:DB:AC:FA:C7:AC:8D X509v3 Authority Key Identifier: keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:8c:95:ff:08:29:ae:63:0a:d9:91:85:9d:bb:9d:5c:f4:b5: de:ed:89:ba:9e:ee:27:c5:66:1c:6d:45:04:db:da:19:bd:3d: a8:4a:8e:0b:7e:0a:2b:10:6d:f4:33:49:47:d5:3b:0b:22:62: e2:45:ea:ee:5e:e0:8e:4e:02:72:7d:86:31:b0:58:d5:b0:cf: ff:5b:6e:2b:82:7e:3d:e5:f9:22:f7:30:55:9c:f6:e5:19:15: 38:18:cb:8b:e5:ed:29:20:7e:a4:5c:12:4f:8c:d7:2b:87:fa: dd:d3:17:0f:90:60:ea:36:47:84:0b:4d:9a:af:e2:26:0c:e1: 84:88:d7:03:00:ad:60:b4:95:dc:01:e6:fd:8e:d1:de:87:5f: 92:b3:fa:57:aa:d0:d3:29:e0:c6:7d:e3:bc:56:d8:fc:10:c3: a0:37:ec:b0:73:d4:1a:a4:62:be:d7:f8:48:b3:e1:13:a1:75: db:9d:ad:ef:20:b8:93:52:c1:f7:2f:82:d1:86:4c:fe:66:b5: 62:85:67:53:ee:6a:cf:6d:46:b0:f8:62:59:c8:18:62:14:75: ad:fd:e3:38:77:0c:a1:f2:ce:f8:5a:2c:01:c7:d3:8a:09:2f: 8c:05:01:dc:e4:bf:37:c3:ef:e5:be:a5:75:d1:06:97:6c:48: d8:97:d7:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrv48x7jonVJpcs/og0L8z9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy ODRkMGYwHhcNMjUxMjA1MTkwMTE0WhcNMjUxMjA2MTkwMTE0WjAzMTEwLwYDVQQD Eyg5MGQ3YTljNDY3MmNkYWZlODg4NmZiOTA3ZTFlZGJhY2ZhYzdhYzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn9NYgg3WOkRYCRroBA3iOJjg5GX A3tpLqQrQ/rx9ifLlwhXsAu1gT6MRhwuf1HxdAfybYT2W49+ZaidLZeieNcbX2ED 5bg+rkxm/QU2C2BVOsnzmqBJ8jE38iuKSBeZ+1FfNxpMlAeiX8bt9jBilGJ++rS2 CcHJZEWMPj0lQpKh1rfpZToiW4ejDNX1kX/RrQF8ozzZ4mLfPvRtps/x5KusHzgJ F4JjkFePVgj3c1o+lrAUpQ6PBpMdl4eUnqk48vZm3TBoS66msH1vLGwJplskwjvy zq2rWrjNYpcuhxZXG1awC8LvLfMD6rrccZCDRr+xqdbgwrCY6u0YOzRIzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJDXqcRnLNr+iIb7kH4e26z6x6yNMB8GA1UdIwQY MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt NGY1N2Q5Y2Y1Y2FhLzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvoyV/wgp rmMK2ZGFnbudXPS13u2Jup7uJ8VmHG1FBNvaGb09qEqOC34KKxBt9DNJR9U7CyJi 4kXq7l7gjk4Ccn2GMbBY1bDP/1tuK4J+PeX5IvcwVZz25RkVOBjLi+XtKSB+pFwS T4zXK4f63dMXD5Bg6jZHhAtNmq/iJgzhhIjXAwCtYLSV3AHm/Y7R3odfkrP6V6rQ 0yngxn3jvFbY/BDDoDfssHPUGqRivtf4SLPhE6F1252t7yC4k1LB9y+C0YZM/ma1 YoVnU+5qz21GsPhiWcgYYhR1rf3jOHcMofLO+FosAcfTigkvjAUB3OS/N8Pv5b6l ddEGl2xI2JfXYw== -----END CERTIFICATE-----Generated at Fri Dec 5 20:16:06 2025 by rpki-client