This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft File: KXNk9QJTTodxoMYll5TCbibUvKQ.mft (raw, json) Hash identifier: mROEoTcc8n99ySjV5rMfauFsSHMa1GNR5ezQ/bIh0yo= Subject key identifier: 87:DC:70:AB:82:6E:2D:A9:08:DC:4C:BB:12:74:D6:47:4D:C0:7C:E1 Authority key identifier: 29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4 Certificate issuer: /CN=297364f502534e8771a0c6259794c26e26d4bca4 Certificate serial: 019B1201E7649028D485E7273A28F9772381 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft Manifest number: 15DD Signing time: Fri 12 Dec 2025 10:01:13 +0000 Manifest this update: Fri 12 Dec 2025 10:01:13 +0000 Manifest next update: Sat 13 Dec 2025 10:01:13 +0000 Files and hashes: 1: 2Cp_JC-1gSdENPjM_UWn9lNVG7o.roa (hash: +35xjqek9Nhlc/Z0+VDCYx/DAJw10REdvRuvu6t5M3s=) 2: 30p15OIB4xzHle9tD78XYhbRDYI.roa (hash: 9HVb43mRInURyExw74+VWFanW5TCiRHL7zKkRNQfWwc=) 3: 46l3zcDNK_2V63AreaLMsQrAgaE.roa (hash: yY63fb353nPGfB15WkNs5SfqIg+XAt04c2yklxwzqUk=) 4: DrQJgIgCadGbo__38qvLm4f2buQ.roa (hash: Wx23py7fw++y8qecqXEe1C97qUaOVg6INU3OjKvg+YE=) 5: KXNk9QJTTodxoMYll5TCbibUvKQ.crl (hash: pmJ8AfzybUM/8iShavwmCpM+DHOJ5TvBkcDfKZGEJTQ=) 6: Kc-1Z4R9k1b9QbprK1lrnIRFuzo.roa (hash: mIf5b4mKVeZgEr7VsdotpcNIdYch/DFkBdwgO8kit9A=) 7: lTAav4yQpZ87qw_zIchzIsq-5gM.roa (hash: 3b9+qDTSwpfJP/SrqHspJoxR/TN3seQEWvBLhEVGMW0=) 8: x8RX4rKBNmZcMpsvt4Nm7APSjAM.roa (hash: zc30VoGi96Z1iHoOnbaFFXszAPpJE3UJpyJWRy15Byo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:01:e7:64:90:28:d4:85:e7:27:3a:28:f9:77:23:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297364f502534e8771a0c6259794c26e26d4bca4 Validity Not Before: Dec 12 10:01:13 2025 GMT Not After : Dec 13 10:01:13 2025 GMT Subject: CN=87dc70ab826e2da908dc4cbb1274d6474dc07ce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:dd:8a:ba:ed:11:7f:ce:fc:9b:ba:3f:94:52: ca:4c:7d:64:7e:2d:6f:e3:2e:72:6c:17:18:77:2e: a6:b4:b7:ee:11:05:df:44:4c:cb:78:e6:a8:d4:54: 96:7a:e6:1d:c4:f8:ed:e9:8e:6f:33:54:a3:cf:7e: 48:c9:a1:79:ff:52:01:fc:e8:da:ff:06:d8:f3:f0: 47:d6:f0:23:7d:16:3e:d9:1f:5a:30:fa:16:a1:3a: 5c:e2:f4:86:d1:67:98:4f:c2:5c:77:38:6a:2e:47: f2:6f:3b:c6:28:96:16:87:fe:be:31:c1:5b:5b:0d: 88:ae:cf:21:c4:80:12:19:3a:11:e1:0c:37:8b:0b: a1:de:73:92:81:9d:07:e8:f1:65:f2:d0:57:45:32: a6:d4:d6:29:e1:62:79:6f:59:fd:29:f8:0f:b9:cd: f3:3e:f2:ed:53:1d:57:54:d8:cb:b3:24:db:29:3c: 3c:20:31:6c:ff:bf:9b:8a:e1:93:b0:62:52:1b:a2: a6:13:a1:9c:30:b0:46:a6:11:a0:7a:a1:be:8f:96: d0:fa:77:08:08:c0:42:13:4e:c0:de:4b:06:98:7d: 2d:93:97:6e:22:b4:e0:6d:44:17:b5:10:2e:3d:d8: a7:6e:f5:cc:34:b4:4a:cb:38:be:1e:c0:cc:bd:9e: 27:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:DC:70:AB:82:6E:2D:A9:08:DC:4C:BB:12:74:D6:47:4D:C0:7C:E1 X509v3 Authority Key Identifier: keyid:29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:10:17:9c:27:35:3a:d1:62:46:8f:d1:68:19:89:19:1f:17: d0:67:fb:5f:a4:88:dd:fb:2b:d9:58:b8:c3:98:e2:a3:4d:62: 55:fe:3f:2a:de:5e:3d:1d:84:35:51:63:fa:7c:81:3b:c5:4e: 57:10:5f:bb:d5:5a:e9:14:a2:8e:e1:b6:c3:bb:ad:79:07:1f: 9c:ad:9e:df:a6:8c:e1:f7:d9:d8:04:5d:1a:fd:2f:c3:83:ae: d4:e6:35:6e:e2:55:2b:89:32:ff:39:07:aa:c3:f5:79:ae:a7: cd:21:ae:a2:76:9a:98:41:00:63:30:39:50:d8:da:a3:2b:12: 87:53:b8:4a:25:fd:b2:a8:3a:d2:71:15:10:35:6e:f2:e3:fc: 18:ee:4f:d6:ef:6b:58:dc:fe:56:f8:b8:e8:27:59:ca:33:1d: 36:7f:39:d3:eb:65:42:b7:f9:d8:18:b7:51:41:8b:d4:c0:c4: 5d:81:5a:b5:3b:c5:f4:7d:fb:22:83:3d:24:cd:d3:de:5d:4c: d2:15:cf:2b:8a:1f:05:14:68:ec:b4:2f:dc:f9:57:55:ca:b5: b5:5f:ea:82:a3:1b:dd:7e:fd:5b:52:9d:55:fc:03:46:42:0c: 96:9c:58:40:32:fe:13:0f:32:60:a2:79:f9:c8:48:27:05:42: a8:8f:0d:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSAedkkCjUhecnOij5dyOBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NzM2NGY1MDI1MzRlODc3MWEwYzYyNTk3OTRjMjZlMjZk NGJjYTQwHhcNMjUxMjEyMTAwMTEzWhcNMjUxMjEzMTAwMTEzWjAzMTEwLwYDVQQD Eyg4N2RjNzBhYjgyNmUyZGE5MDhkYzRjYmIxMjc0ZDY0NzRkYzA3Y2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmt2Kuu0Rf878m7o/lFLKTH1kfi1v 4y5ybBcYdy6mtLfuEQXfREzLeOao1FSWeuYdxPjt6Y5vM1Sjz35IyaF5/1IB/Oja /wbY8/BH1vAjfRY+2R9aMPoWoTpc4vSG0WeYT8JcdzhqLkfybzvGKJYWh/6+McFb Ww2Irs8hxIASGToR4Qw3iwuh3nOSgZ0H6PFl8tBXRTKm1NYp4WJ5b1n9KfgPuc3z PvLtUx1XVNjLsyTbKTw8IDFs/7+biuGTsGJSG6KmE6GcMLBGphGgeqG+j5bQ+ncI CMBCE07A3ksGmH0tk5duIrTgbUQXtRAuPdinbvXMNLRKyzi+HsDMvZ4neQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfccKuCbi2pCNxMuxJ01kdNwHzhMB8GA1UdIwQY MBaAFClzZPUCU06HcaDGJZeUwm4m1LykMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1hOazlRSlRUb2R4b01ZbGw1VENiaWJVdktRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wNDU4MjAtMzU0Ni00MDdjLTgzYTUt MGEwZjNlNzhhNDkzLzEvS1hOazlRSlRUb2R4b01ZbGw1VENiaWJVdktRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8wNDU4MjAtMzU0Ni00MDdjLTgzYTUtMGEwZjNlNzhhNDkz LzEvS1hOazlRSlRUb2R4b01ZbGw1VENiaWJVdktRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaBAXnCc1 OtFiRo/RaBmJGR8X0Gf7X6SI3fsr2Vi4w5jio01iVf4/Kt5ePR2ENVFj+nyBO8VO VxBfu9Va6RSijuG2w7uteQcfnK2e36aM4ffZ2ARdGv0vw4Ou1OY1buJVK4ky/zkH qsP1ea6nzSGuonaamEEAYzA5UNjaoysSh1O4SiX9sqg60nEVEDVu8uP8GO5P1u9r WNz+Vvi46CdZyjMdNn850+tlQrf52Bi3UUGL1MDEXYFatTvF9H37IoM9JM3T3l1M 0hXPK4ofBRRo7LQv3PlXVcq1tV/qgqMb3X79W1KdVfwDRkIMlpxYQDL+Ew8yYKJ5 +chIJwVCqI8NoQ== -----END CERTIFICATE-----Generated at Fri Dec 12 18:49:22 2025 by rpki-client