This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft File: kvSxwL-61GuBHu5Wihj7qhSp1oc.mft (raw, json) Hash identifier: +zi4z3nwEI5lgErZa/nKpC8THDnYFqEtJRpeWjU337U= Subject key identifier: 72:46:49:40:2E:14:0C:6C:AB:CF:1F:0F:35:67:6A:1F:93:7E:20:B5 Authority key identifier: 92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87 Certificate issuer: /CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687 Certificate serial: 019B5A88F7D045D6478BB51F7E76D8489B51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft Manifest number: 179B Signing time: Fri 26 Dec 2025 12:01:24 +0000 Manifest this update: Fri 26 Dec 2025 12:01:24 +0000 Manifest next update: Sat 27 Dec 2025 12:01:24 +0000 Files and hashes: 1: 0BEzsazQz-3-fzZOXUBzFR9-SEA.roa (hash: xJdvyBzFJCzDNWN1w4SpJl++kA85g2jY9KiUG4fQa2E=) 2: 1-Oq1-4hF4yCcXZpsJGDusj_hVz4.roa (hash: OUB6/BRumx2Zsh75d5vBwXiCTv8Msk13LqoxzZruX1k=) 3: 8tP5koea75iLq4fzJTwOilUzRew.roa (hash: nuWcmB+t6L5mbRuVr1gjXyaKkJjO2CWP61eKOZ9j5qA=) 4: Q39EicWKCAbcPFSCPOWxVuicNBs.roa (hash: xkLxxvpElKUg8h/PAkiiPnxY3jd1NXP1Ti2bF3eI0Qw=) 5: YTyyNdEqtE7TLFnb5kSYtSXQ6C0.roa (hash: 5KsxEGAO2miZS2qYCAKx62LCPIMduhWMuoqvvhKuiRU=) 6: d8pyP86Y6uwqz1d9ZUqrw3D4VrQ.roa (hash: rdq5z21gij6clSNE/4yKomwJ24Ycc5gYpA5zAtS7MBw=) 7: hLpPT363pnl477GGqc5nq4BfcT0.roa (hash: BX64RFEmiS7zTWdQnQw6dnEj3jYNCJBQmKLpW7F/EpQ=) 8: jNmr_uA5Ik1ev1kitS3H0XRfSs0.roa (hash: MWQMJNqYJOs+qGkZcyXQIyfm7wzm6V1fSmAClA7kRpk=) 9: kvSxwL-61GuBHu5Wihj7qhSp1oc.crl (hash: +08WaGssfApFdfPYJ1lifkBC2jg3If77UmeRom98nxk=) 10: o53Asxejm11sb8YF2NlsCql1ybY.roa (hash: F+bQ4Enys65hQ07aHbKIp+uPwSt+gBE59SdxChGuPUY=) 11: tCAzKxpLrkmFMZR4RRCQd9p1ADo.roa (hash: SCXqn9Sk4hWHzAcns5LvAAZM9YZ7kblGiEWX7nVj190=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 12:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:f7:d0:45:d6:47:8b:b5:1f:7e:76:d8:48:9b:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687 Validity Not Before: Dec 26 12:01:24 2025 GMT Not After : Dec 27 12:01:24 2025 GMT Subject: CN=724649402e140c6cabcf1f0f35676a1f937e20b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0a:68:7e:16:39:c6:d5:11:3e:e7:9c:2a:99: 4b:f4:f7:b6:51:71:1d:c3:e1:6d:33:7a:9b:31:2b: 68:4b:8f:a2:44:ec:34:fe:ac:d9:7c:1f:10:66:dc: 94:dc:b4:09:2d:8d:b4:d1:5f:b0:eb:82:e6:3c:6a: e3:a8:f8:0d:20:5d:d2:57:cd:3c:c0:91:fb:2f:f5: 56:53:62:be:46:e9:d8:67:16:06:75:4b:3e:b7:6e: 9c:a8:ed:77:cb:cb:9e:d9:c4:38:ed:fd:8d:dd:b2: 54:d2:b9:75:1c:70:d0:9a:17:2e:86:aa:30:a0:77: 55:8d:be:57:a8:3c:f6:86:48:e9:bc:62:d6:97:4f: 9a:3e:2d:df:35:d0:bf:95:71:6d:da:22:70:08:9c: 6b:df:05:2e:02:a0:8c:99:ea:43:19:33:ac:2b:fc: 0f:48:a9:1f:15:14:1c:7e:e2:74:32:af:e6:9f:8f: 35:82:14:6e:92:66:17:a5:da:e4:33:0e:4a:dd:0e: fd:bd:ec:46:97:2e:63:45:c4:d1:1f:90:69:42:6e: 9f:d8:79:21:02:b0:07:18:c1:93:74:13:38:ed:13: e7:b7:92:40:54:e7:66:df:8f:a8:fe:b6:51:b6:b1: fd:9d:46:95:1c:00:ee:5e:c6:9e:a7:81:5c:2a:26: 53:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:46:49:40:2E:14:0C:6C:AB:CF:1F:0F:35:67:6A:1F:93:7E:20:B5 X509v3 Authority Key Identifier: keyid:92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:2f:20:8a:b2:6e:4a:69:7b:6e:a7:8d:f1:44:c6:36:ab:01: 30:7d:98:e0:95:5b:98:0d:8b:82:be:5f:28:f5:f4:c1:0a:cb: 79:b6:28:91:01:d3:42:af:96:f8:b1:2f:4d:0c:fe:62:f2:04: 7f:d1:70:9c:ad:fe:6a:1a:09:91:d8:e8:37:5e:d0:ae:5b:12: f3:f8:79:7f:09:12:b4:f2:e0:35:18:42:0c:53:5d:13:bd:04: 9b:91:95:18:fd:1f:1d:05:70:67:4f:22:15:01:eb:b5:43:8c: e8:c0:27:32:f6:e3:4f:a1:f1:5c:e6:96:0b:91:33:35:66:9f: 21:dd:7e:dc:73:31:7f:a0:54:f3:d6:20:6b:56:bd:48:ce:1f: 7c:41:f7:9b:f5:f5:15:b0:c3:17:35:6a:47:e3:7f:40:da:9b: 3c:b1:a8:57:10:d7:3e:b1:0a:ed:1f:db:8c:a9:55:c5:1e:ff: 48:b1:d5:3c:c5:49:9e:48:fd:19:af:19:5f:de:ba:9f:2e:71: 1b:98:e3:56:3e:5d:89:53:d6:cd:9e:54:b9:6d:ea:a4:98:8f: 50:a2:d9:4f:cd:c2:6c:32:6f:21:b5:82:d5:d5:65:3a:3c:f6: 94:1b:72:f5:66:6f:86:cf:87:ff:47:06:66:dd:c7:2a:c9:ba: 56:e3:82:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiPfQRdZHi7UffnbYSJtRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZjRiMWMwYmZiYWQ0NmI4MTFlZWU1NjhhMThmYmFhMTRh OWQ2ODcwHhcNMjUxMjI2MTIwMTI0WhcNMjUxMjI3MTIwMTI0WjAzMTEwLwYDVQQD Eyg3MjQ2NDk0MDJlMTQwYzZjYWJjZjFmMGYzNTY3NmExZjkzN2UyMGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqApofhY5xtURPuecKplL9Pe2UXEd w+FtM3qbMStoS4+iROw0/qzZfB8QZtyU3LQJLY200V+w64LmPGrjqPgNIF3SV808 wJH7L/VWU2K+RunYZxYGdUs+t26cqO13y8ue2cQ47f2N3bJU0rl1HHDQmhcuhqow oHdVjb5XqDz2hkjpvGLWl0+aPi3fNdC/lXFt2iJwCJxr3wUuAqCMmepDGTOsK/wP SKkfFRQcfuJ0Mq/mn481ghRukmYXpdrkMw5K3Q79vexGly5jRcTRH5BpQm6f2Hkh ArAHGMGTdBM47RPnt5JAVOdm34+o/rZRtrH9nUaVHADuXsaep4FcKiZTGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHJGSUAuFAxsq88fDzVnah+TfiC1MB8GA1UdIwQY MBaAFJL0scC/utRrgR7uVooY+6oUqdaHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi80Zjg1MTQtMmUyMC00OTM1LTk5NWMt YTA4NGY3NmM4ZTJiLzEva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi80Zjg1MTQtMmUyMC00OTM1LTk5NWMtYTA4NGY3NmM4ZTJi LzEva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOC8girJu Sml7bqeN8UTGNqsBMH2Y4JVbmA2Lgr5fKPX0wQrLebYokQHTQq+W+LEvTQz+YvIE f9FwnK3+ahoJkdjoN17QrlsS8/h5fwkStPLgNRhCDFNdE70Em5GVGP0fHQVwZ08i FQHrtUOM6MAnMvbjT6HxXOaWC5EzNWafId1+3HMxf6BU89Yga1a9SM4ffEH3m/X1 FbDDFzVqR+N/QNqbPLGoVxDXPrEK7R/bjKlVxR7/SLHVPMVJnkj9Ga8ZX966ny5x G5jjVj5diVPWzZ5UuW3qpJiPUKLZT83CbDJvIbWC1dVlOjz2lBty9WZvhs+H/0cG Zt3HKsm6VuOC7w== -----END CERTIFICATE-----Generated at Fri Dec 26 21:22:14 2025 by rpki-client