This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft File: KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft (raw, json) Hash identifier: OPFt9mXLfIkUNRdRNpiouW9n+af2fQRUrQZNIyUTV2M= Subject key identifier: 27:93:5D:96:1D:AB:2D:BC:AC:9C:2C:DE:D9:28:F0:25:01:6E:82:9F Authority key identifier: 28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE Certificate issuer: /CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae Certificate serial: 019B1F873C0DBD199805A18CB400A1E95347 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft Manifest number: 0BDE Signing time: Mon 15 Dec 2025 01:01:54 +0000 Manifest this update: Mon 15 Dec 2025 01:01:54 +0000 Manifest next update: Tue 16 Dec 2025 01:01:54 +0000 Files and hashes: 1: 4Dd_oz2TtpOXQBrGavmGYMPXNlw.roa (hash: lEaJsZdsULkNE5Gu41TR5VUrs6XkOuSkB/MqNMbSRqE=) 2: 9CKQGKCQI-bIMlSOn18EkSByP_c.roa (hash: fUEwlGorb/53MsJAC9arcQFk2OY9saq26gPtLezc70o=) 3: Ehx_bk8hfbPb2wCCkbIFutyAoiQ.roa (hash: +HKiRGiNwcMbHRNsEOcJQScZZXduQOT3b8IfA7DUH+8=) 4: KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl (hash: qgycmEbU/fBVqCeOPxA6Wk/J01l4B0sJKtUU1Mm8sVU=) 5: Zpf_5cQ4FG3XJD2pSNgqdO6RL64.roa (hash: lCypfh+z48AhXuHBOYJSvWYoFHxYmD6jZDOJXXouuHI=) 6: fawo1EoqRqBJwHjBpTPTmcGb0cM.roa (hash: F6clH7PVg2lpM3y/mX4Zj9CRymDOfHXzUQhjxqzwyxg=) 7: o9r3uR2f73He5KEKu4BwYPFzrZs.roa (hash: di2c5UqcUyXblOdBvGL8kM199QqPxFbroxHSs6c/vq8=) 8: qF7Yer0u7ziOGGwDeljcv2iin4k.roa (hash: ahTinSaOPP9oVbrP+xhco0U3iDA/GD0BuDeaOSksTIc=) 9: sd0jlwypX7mTRSVDcmbA2KcPRVw.roa (hash: YbZCCfMPY850ehWHI89VOAxoC5oI9QnHcBkGCUColGw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:87:3c:0d:bd:19:98:05:a1:8c:b4:00:a1:e9:53:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae Validity Not Before: Dec 15 01:01:54 2025 GMT Not After : Dec 16 01:01:54 2025 GMT Subject: CN=27935d961dab2dbcac9c2cded928f025016e829f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:13:02:af:39:5e:c4:5c:5d:91:55:6e:f9:a6: ee:3a:14:cc:05:fa:fa:62:91:6f:dc:0f:ba:00:b8: 88:b4:61:8c:01:11:f6:a9:32:a7:60:db:a5:05:65: 2a:dd:53:02:f3:b6:84:8f:ca:4f:f4:20:20:ea:4f: 25:50:01:82:09:ec:83:4d:2a:1b:93:db:d5:80:1c: 10:47:32:d8:36:33:83:bd:0a:5d:df:1d:36:a4:cb: de:88:8b:20:b4:2d:18:c9:ce:1e:91:6a:d8:0c:a9: 1f:9a:d2:32:c4:f3:98:f5:10:6b:53:8a:6f:f2:85: 7f:3d:3b:71:eb:4b:c1:b3:63:c1:ac:f8:cc:99:17: d7:1a:fb:db:93:89:be:fc:f2:de:05:c7:14:ab:64: af:44:a4:7c:53:0f:3f:7c:b0:2b:91:4e:4c:74:04: 61:de:5e:81:eb:28:52:38:fc:95:54:b1:d8:74:59: b2:a0:48:e6:be:64:94:fc:fb:ab:3b:02:1d:2c:f3: 00:1a:ee:c0:b2:bb:35:bf:27:68:61:f6:ae:e9:74: 8c:eb:9f:03:d2:55:37:36:14:b8:5b:f0:55:89:4a: 13:65:b0:1b:9f:cb:b8:ae:23:a0:d8:41:62:7b:71: c5:d1:7e:d8:6f:7a:e4:ad:0b:19:41:f5:66:6f:2e: d5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:93:5D:96:1D:AB:2D:BC:AC:9C:2C:DE:D9:28:F0:25:01:6E:82:9F X509v3 Authority Key Identifier: keyid:28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:c3:67:20:26:c7:84:b9:ff:0e:97:53:29:ac:b6:9e:4a:a2: b2:80:8b:96:ab:ed:67:fd:26:90:c8:e5:28:b9:22:24:69:90: fb:23:22:e8:43:1c:eb:ed:ed:e5:e3:4d:0a:3a:df:97:6c:d9: f1:21:38:e6:14:60:d5:95:c8:56:ec:b2:20:f3:23:a6:fc:8f: 65:f8:36:5c:fb:fe:e1:6f:ea:e9:f0:fa:a1:7d:11:e9:f7:a9: bc:ac:ac:fc:cd:14:3d:2c:4b:75:de:11:d4:f5:d6:29:e3:59: 2f:b8:48:ed:74:c4:bf:ed:8b:3c:80:3b:bd:71:85:32:a1:21: 77:82:21:d1:85:d1:dc:ed:46:69:b6:e0:e2:75:da:fe:ac:e9: dd:12:a4:d3:cf:6e:5e:b7:70:f9:cc:2c:a5:53:13:8f:8d:dc: 00:42:45:2d:fe:61:7c:22:dd:49:57:a4:2d:79:5e:7b:9d:fb: 28:17:4d:51:95:8a:ce:2b:8c:42:4e:5e:53:21:05:91:af:99: 0a:27:1e:dd:85:4b:1c:b3:64:69:47:18:30:72:d2:df:9d:14: 1c:27:fc:99:f1:e3:8a:50:1d:27:fc:db:cc:55:00:20:2c:ff: f4:58:2d:5b:e1:38:fc:a5:ce:e0:e2:7d:cb:38:d6:92:06:3d: 3a:0c:9e:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfhzwNvRmYBaGMtACh6VNHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ZmQ2NmU0M2ExMDQ2MzNiMjdiYWM1MzliOThiZGY4ZWJm YWM5YWUwHhcNMjUxMjE1MDEwMTU0WhcNMjUxMjE2MDEwMTU0WjAzMTEwLwYDVQQD EygyNzkzNWQ5NjFkYWIyZGJjYWM5YzJjZGVkOTI4ZjAyNTAxNmU4MjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhMCrzlexFxdkVVu+abuOhTMBfr6 YpFv3A+6ALiItGGMARH2qTKnYNulBWUq3VMC87aEj8pP9CAg6k8lUAGCCeyDTSob k9vVgBwQRzLYNjODvQpd3x02pMveiIsgtC0Yyc4ekWrYDKkfmtIyxPOY9RBrU4pv 8oV/PTtx60vBs2PBrPjMmRfXGvvbk4m+/PLeBccUq2SvRKR8Uw8/fLArkU5MdARh 3l6B6yhSOPyVVLHYdFmyoEjmvmSU/PurOwIdLPMAGu7Asrs1vydoYfau6XSM658D 0lU3NhS4W/BViUoTZbAbn8u4riOg2EFie3HF0X7Yb3rkrQsZQfVmby7VgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCeTXZYdqy28rJws3tko8CUBboKfMB8GA1UdIwQY MBaAFCj9ZuQ6EEYzsnusU5uYvfjr+smuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1AxbTVEb1FSak95ZTZ4VG01aTktT3Y2eWE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84ZWQzYjctYmIyZC00ZjRkLTlkYjYt MjY3NjY5ZjM1NjQ4LzEvS1AxbTVEb1FSak95ZTZ4VG01aTktT3Y2eWE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi84ZWQzYjctYmIyZC00ZjRkLTlkYjYtMjY3NjY5ZjM1NjQ4 LzEvS1AxbTVEb1FSak95ZTZ4VG01aTktT3Y2eWE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl8NnICbH hLn/DpdTKay2nkqisoCLlqvtZ/0mkMjlKLkiJGmQ+yMi6EMc6+3t5eNNCjrfl2zZ 8SE45hRg1ZXIVuyyIPMjpvyPZfg2XPv+4W/q6fD6oX0R6fepvKys/M0UPSxLdd4R 1PXWKeNZL7hI7XTEv+2LPIA7vXGFMqEhd4Ih0YXR3O1Gabbg4nXa/qzp3RKk089u Xrdw+cwspVMTj43cAEJFLf5hfCLdSVekLXlee537KBdNUZWKziuMQk5eUyEFka+Z Cice3YVLHLNkaUcYMHLS350UHCf8mfHjilAdJ/zbzFUAICz/9FgtW+E4/KXO4OJ9 yzjWkgY9OgyepA== -----END CERTIFICATE-----Generated at Mon Dec 15 05:11:08 2025 by rpki-client