This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft File: KXnMQ8JGn_pc-LesY5sB86dorFU.mft (raw, json) Hash identifier: leFnbA1FSPIBDwJuWP7eVbtTyNLKwPsBYWsyef/W3G0= Subject key identifier: 86:CE:52:B7:0E:71:C6:48:C9:07:7B:51:4D:A3:3C:D7:7C:37:63:4E Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55 Certificate issuer: /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55 Certificate serial: 019B0EC9D3E984679299B82CA56E10F704F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft Manifest number: 0910 Signing time: Thu 11 Dec 2025 19:01:06 +0000 Manifest this update: Thu 11 Dec 2025 19:01:06 +0000 Manifest next update: Fri 12 Dec 2025 19:01:06 +0000 Files and hashes: 1: EI7dYlJh6LhMXB8o9nb3T4Z5aSU.roa (hash: MmSw3Gp5lTTxkK0eiPx+eF3FQfljG+ipyig54PF6DUw=) 2: KXnMQ8JGn_pc-LesY5sB86dorFU.crl (hash: se+MitFhH0v6iN4P3DjgELPZxSvaLA00DtMBCwLVxFc=) 3: RnDsNDAUOmfocBcXgLTcHPDDhKQ.roa (hash: yyfreslJl3l+RdMxXIwzsT6k7E7HMN8jhFZGTbEdlJI=) 4: Y8zzieez_mdBu3g9ytJW3F1qtcM.roa (hash: IBQYnJmIJpRbjM/GjJNvEs/gT4e0NBRUv4AwTGSAB8I=) 5: _eEka1D2F9svheD7_1S50A6jg0c.roa (hash: FY3lzS47CrifHw8hxi2Yq9gCSugm8bX/KQaXGUUplkU=) 6: jTf4hu8p-YdeMkBcAMreST3RURY.roa (hash: IZtRwQReOQuA1Z4S5nLNVFRKIJVo5gpQ/QND37UUm9g=) 7: qV0bi1f4xUUogQC2jTvfOlCFNsY.roa (hash: JeZIDT/pHiJyZCYpNCof5wbSJ0INX3sJ+QZbs083uM0=) 8: tW9K0gmr3gNJNZi6H4Oj8e3Jn10.roa (hash: bWzKXJxMql9A44/Gmu3Ld5HFcp9B6Ivj+R3Ym/3BJEA=) 9: ueIl5HLpFqn43HBQc7-Q4ZVn06k.roa (hash: fzhg7jHCYT5oIQ824HH1vwjcqcxosVhT8YpZmbw8K50=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:d3:e9:84:67:92:99:b8:2c:a5:6e:10:f7:04:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55 Validity Not Before: Dec 11 19:01:06 2025 GMT Not After : Dec 12 19:01:06 2025 GMT Subject: CN=86ce52b70e71c648c9077b514da33cd77c37634e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7b:e4:2f:87:c3:ee:70:67:c1:b6:6a:c2:12: 6b:e1:85:65:65:60:d9:b4:54:4e:c8:fd:ab:c0:68: 33:5f:09:4b:d3:d4:bc:90:6b:a5:6d:7d:27:35:72: be:64:5a:2b:4e:22:f8:8e:3d:15:49:eb:aa:3b:0a: 1a:7c:13:d0:01:74:88:ac:95:a5:d0:a1:45:bd:02: 7d:b4:94:95:fd:39:b5:43:9e:78:06:8c:96:b6:24: 0c:f9:1b:19:d9:48:4d:d1:37:a2:96:a0:a4:73:ed: 19:86:72:d2:d9:88:3e:c4:11:04:b6:ff:85:65:b3: 58:a7:01:78:51:85:c7:63:9f:23:99:d4:ba:02:b6: 9c:a8:66:4d:4d:90:54:b8:16:fa:ac:d6:81:4d:17: 44:b8:3a:75:6b:3d:02:90:7f:1d:5a:c2:26:50:d7: e9:4b:e0:4c:a9:c0:b9:cf:37:d2:0c:8d:4a:9e:c7: 5a:5f:ed:81:56:8a:fb:0c:77:b8:c3:9e:be:eb:f3: 77:4c:17:82:ce:16:0c:80:d7:89:5c:6b:bb:0d:d6: 25:63:b4:c4:45:a7:f2:34:4b:98:9c:4d:1d:88:94: c1:a4:65:01:16:64:07:ad:74:4b:d3:ad:36:dc:5d: 50:18:be:27:e4:62:39:af:7b:c0:c0:2f:e5:9e:3d: fb:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:CE:52:B7:0E:71:C6:48:C9:07:7B:51:4D:A3:3C:D7:7C:37:63:4E X509v3 Authority Key Identifier: keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:c8:28:63:9f:e2:b2:73:84:ba:f2:56:e4:55:c2:67:c2:7b: 40:27:37:cb:22:f1:2d:81:91:c0:e5:ce:7c:3a:84:e9:20:b6: d6:12:b4:fd:5d:ec:06:b6:1b:06:9b:e6:7c:90:6b:ee:c0:9c: 14:57:91:da:07:8d:c9:11:cd:1a:1c:d1:ae:c6:a1:5c:17:a7: 61:de:34:f1:4e:20:6d:ef:78:17:aa:6b:a7:5b:4a:9c:46:fe: ff:1f:d6:ca:a6:7c:59:6f:d3:98:2e:af:f4:7a:ad:58:f8:ec: 96:86:89:7e:df:d3:8b:a8:80:c4:7b:bb:9c:9f:65:1f:c7:b9: 00:92:25:6d:3c:02:49:8d:9c:42:78:36:99:48:44:6f:44:c7: 50:8a:4e:e9:9b:0b:ae:7e:73:ad:ce:37:38:56:0d:a6:00:87: 69:ba:ff:35:69:80:63:65:e8:23:18:3e:97:f3:3c:36:23:f4: f5:b8:e8:c3:c8:24:5d:1d:69:ca:25:ec:71:41:15:aa:f4:4c: 94:0c:15:91:43:a3:61:e5:03:39:44:10:d0:14:7f:58:e2:5c: 6e:c2:ab:76:e3:b6:05:98:3e:b1:20:5b:07:ee:94:20:cd:0a: a6:98:a6:d0:a6:67:54:97:4a:65:bd:0c:3b:1e:68:62:ea:ab: 82:7f:97:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOydPphGeSmbgspW4Q9wT4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NzljYzQzYzI0NjlmZmE1Y2Y4YjdhYzYzOWIwMWYzYTc2 OGFjNTUwHhcNMjUxMjExMTkwMTA2WhcNMjUxMjEyMTkwMTA2WjAzMTEwLwYDVQQD Eyg4NmNlNTJiNzBlNzFjNjQ4YzkwNzdiNTE0ZGEzM2NkNzdjMzc2MzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3vkL4fD7nBnwbZqwhJr4YVlZWDZ tFROyP2rwGgzXwlL09S8kGulbX0nNXK+ZForTiL4jj0VSeuqOwoafBPQAXSIrJWl 0KFFvQJ9tJSV/Tm1Q554BoyWtiQM+RsZ2UhN0TeilqCkc+0ZhnLS2Yg+xBEEtv+F ZbNYpwF4UYXHY58jmdS6AracqGZNTZBUuBb6rNaBTRdEuDp1az0CkH8dWsImUNfp S+BMqcC5zzfSDI1KnsdaX+2BVor7DHe4w56+6/N3TBeCzhYMgNeJXGu7DdYlY7TE RafyNEuYnE0diJTBpGUBFmQHrXRL06023F1QGL4n5GI5r3vAwC/lnj37NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIbOUrcOccZIyQd7UU2jPNd8N2NOMB8GA1UdIwQY MBaAFCl5zEPCRp/6XPi3rGObAfOnaKxVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1huTVE4SkduX3BjLUxlc1k1c0I4NmRvckZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9lNDBmOWQtMDBmNC00MGQ5LThiOGQt NDBlYWViYzFjNDdlLzEvS1huTVE4SkduX3BjLUxlc1k1c0I4NmRvckZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9lNDBmOWQtMDBmNC00MGQ5LThiOGQtNDBlYWViYzFjNDdl LzEvS1huTVE4SkduX3BjLUxlc1k1c0I4NmRvckZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABcgoY5/i snOEuvJW5FXCZ8J7QCc3yyLxLYGRwOXOfDqE6SC21hK0/V3sBrYbBpvmfJBr7sCc FFeR2geNyRHNGhzRrsahXBenYd408U4gbe94F6prp1tKnEb+/x/WyqZ8WW/TmC6v 9HqtWPjsloaJft/Ti6iAxHu7nJ9lH8e5AJIlbTwCSY2cQng2mUhEb0THUIpO6ZsL rn5zrc43OFYNpgCHabr/NWmAY2XoIxg+l/M8NiP09bjow8gkXR1pyiXscUEVqvRM lAwVkUOjYeUDOUQQ0BR/WOJcbsKrduO2BZg+sSBbB+6UIM0Kppim0KZnVJdKZb0M Ox5oYuqrgn+X4w== -----END CERTIFICATE-----Generated at Thu Dec 11 23:55:14 2025 by rpki-client