This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft File: KIVYUqS80b8eyBPzwTsPHzcvOXE.mft (raw, json) Hash identifier: ELm8Lh/pjeIoHdXB2qy+CNy8vjmpF1VTDFzULSn4hME= Subject key identifier: A9:06:36:90:8D:54:7D:A7:B3:CC:C2:D5:47:95:E8:A3:87:22:BF:9B Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Certificate serial: 019B1193B381D2E286736EC95E9A348981C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft Manifest number: 178F Signing time: Fri 12 Dec 2025 08:00:50 +0000 Manifest this update: Fri 12 Dec 2025 08:00:50 +0000 Manifest next update: Sat 13 Dec 2025 08:00:50 +0000 Files and hashes: 1: 0QJCOt-53tnbei-BBNpPRqd93lA.roa (hash: SxpfZus2XMCNBzDteZgXEjPeCC02JP1wgshR4fmnE74=) 2: KIVYUqS80b8eyBPzwTsPHzcvOXE.crl (hash: CcpulUgJSA9bNyMGoBjkj745hE6GXKH6zIDCrMxXtf4=) 3: PQE-MW_ft7NOulI3nuA3Ttqd9zM.roa (hash: tS26IQNDjX0XuEf3rRKTOSs366e2zvh7MCyAP+zqiiA=) 4: S87F6thVxwCZscy_VovEDJcB8HM.roa (hash: E4K0X+XV1CxBX46EYMwd+oDIHEvCmqQAB6iKbCet77s=) 5: Y8SRLYUIdW_joHTz3PksrXah_rw.roa (hash: VwC43mv96BdBo/MF0MD6doZlRHk6o8P7NRY9bJBrem0=) 6: aer8a26VEmmy2Cy7_8hze3JY1ak.roa (hash: 7q3S2TY/+jxhv9AP9xHCanK4ZXfND8pGXb4R0LjZhXM=) 7: eeBJ8THWmjzQcGoaeafXUKnM3oI.roa (hash: sKx/pHZQstUAOq64IcMsxEnWLROmY7DGo9QHgBCkTRM=) 8: haVl-IddpVIOhoadpyJZ_a5CgAY.roa (hash: xEVD5o+b6swUkv0iGkz/lglqYHWH3tPCrwBEj8vxyI4=) 9: kgTLGOsUBsYOKbWXNc3cqPzwgb4.roa (hash: ST4s4BtTU2rODHYfq5kax5E8/vHW7595/W9otyGkb80=) 10: pL_tDJmTdtKmoEEnGB3Z5Sqfoww.roa (hash: H1JfkznIuDny5RXJezYE6vZGSTmymf6VReWBmSqQlss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:93:b3:81:d2:e2:86:73:6e:c9:5e:9a:34:89:81:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Validity Not Before: Dec 12 08:00:50 2025 GMT Not After : Dec 13 08:00:50 2025 GMT Subject: CN=a90636908d547da7b3ccc2d54795e8a38722bf9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:28:27:01:b4:a7:d7:27:d0:b3:15:ef:94:28: 49:11:9d:6a:00:67:8b:a8:e9:61:b2:19:93:22:06: 91:74:64:fb:14:00:a3:79:5e:60:7c:32:cf:2e:95: 1a:19:40:ab:37:fe:14:ea:00:97:b8:99:c6:96:a4: 25:f8:61:9c:e8:7b:03:08:f5:18:5d:06:a2:ed:05: 38:cd:57:6b:11:78:e3:51:89:bb:33:98:ff:5c:dc: fc:f9:cb:e6:04:08:88:55:aa:4f:9d:05:d2:2c:bf: c0:5d:09:b6:16:2d:f6:5f:86:92:96:b6:3b:ae:68: af:ae:7f:a9:5c:5a:02:ec:e0:c9:54:34:36:b0:3c: 56:0b:ff:3f:22:cd:24:99:0d:3f:f6:f7:d2:16:28: 06:e9:96:6f:c2:c4:6c:78:11:b1:fe:8b:52:38:7c: 23:88:74:85:da:af:61:59:c6:21:52:54:3a:9c:44: 09:fe:5f:18:3c:6a:56:e8:3e:a6:9c:f9:aa:d5:70: 33:87:ed:86:e3:d1:7b:e3:54:8d:d5:0b:fd:d6:e4: 2f:d7:4c:18:3f:53:4a:7b:07:57:ee:c0:d3:3d:d6: d7:5f:1b:de:4e:57:65:4b:ad:82:53:7f:93:de:82: 05:e4:da:6e:27:4f:d9:36:a3:0d:70:9b:18:29:4b: 5e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:06:36:90:8D:54:7D:A7:B3:CC:C2:D5:47:95:E8:A3:87:22:BF:9B X509v3 Authority Key Identifier: keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:6f:cb:81:26:ac:74:2f:d7:af:fb:18:b3:76:9b:63:c5:56: eb:bd:82:dc:fe:b5:ec:e1:b1:c7:87:b8:c2:9c:bf:11:11:4b: 70:c9:f6:4a:74:d4:db:6a:b2:a9:67:88:38:1e:9a:22:5f:0b: 08:58:aa:89:41:d6:4a:a0:b9:82:7d:ca:f5:8f:9f:68:52:37: 04:22:b3:eb:a2:06:c4:a4:69:e5:98:b6:0c:0b:eb:88:76:6d: b6:3f:4c:2d:54:fb:23:10:53:79:1b:57:b8:3c:b0:20:5c:98: 50:fa:30:f6:71:75:e8:17:e0:ea:64:61:ea:a9:61:29:22:cf: 5d:8a:23:44:a6:e1:ca:73:17:af:42:eb:7e:8f:95:59:f7:69: a0:e6:b4:43:33:60:34:5b:7c:c2:83:ec:be:97:d3:06:7b:ba: 4f:c2:71:98:be:d5:2b:75:fa:67:e8:10:c8:41:28:e9:41:d9: 03:bd:56:5e:69:27:1a:68:04:b0:5f:bf:39:48:e0:b5:a5:6b: b4:db:14:30:00:70:5b:cc:a4:36:8a:cc:e0:34:08:bb:38:4c: 8f:ba:df:74:df:ec:d1:cb:b5:89:16:cb:7f:f0:44:59:84:43: e3:22:44:85:d6:fb:57:82:f1:14:9a:2c:75:52:a5:81:dd:87: 29:89:d6:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRk7OB0uKGc27JXpo0iYHDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ODU1ODUyYTRiY2QxYmYxZWM4MTNmM2MxM2IwZjFmMzcy ZjM5NzEwHhcNMjUxMjEyMDgwMDUwWhcNMjUxMjEzMDgwMDUwWjAzMTEwLwYDVQQD EyhhOTA2MzY5MDhkNTQ3ZGE3YjNjY2MyZDU0Nzk1ZThhMzg3MjJiZjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtygnAbSn1yfQsxXvlChJEZ1qAGeL qOlhshmTIgaRdGT7FACjeV5gfDLPLpUaGUCrN/4U6gCXuJnGlqQl+GGc6HsDCPUY XQai7QU4zVdrEXjjUYm7M5j/XNz8+cvmBAiIVapPnQXSLL/AXQm2Fi32X4aSlrY7 rmivrn+pXFoC7ODJVDQ2sDxWC/8/Is0kmQ0/9vfSFigG6ZZvwsRseBGx/otSOHwj iHSF2q9hWcYhUlQ6nEQJ/l8YPGpW6D6mnPmq1XAzh+2G49F741SN1Qv91uQv10wY P1NKewdX7sDTPdbXXxveTldlS62CU3+T3oIF5NpuJ0/ZNqMNcJsYKUterwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKkGNpCNVH2ns8zC1UeV6KOHIr+bMB8GA1UdIwQY MBaAFCiFWFKkvNG/HsgT88E7Dx83LzlxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEt NzA0NDYzZWJhZDM2LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEtNzA0NDYzZWJhZDM2 LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAom/LgSas dC/Xr/sYs3abY8VW672C3P617OGxx4e4wpy/ERFLcMn2SnTU22qyqWeIOB6aIl8L CFiqiUHWSqC5gn3K9Y+faFI3BCKz66IGxKRp5Zi2DAvriHZttj9MLVT7IxBTeRtX uDywIFyYUPow9nF16Bfg6mRh6qlhKSLPXYojRKbhynMXr0Lrfo+VWfdpoOa0QzNg NFt8woPsvpfTBnu6T8JxmL7VK3X6Z+gQyEEo6UHZA71WXmknGmgEsF+/OUjgtaVr tNsUMABwW8ykNorM4DQIuzhMj7rfdN/s0cu1iRbLf/BEWYRD4yJEhdb7V4LxFJos dVKlgd2HKYnWpA== -----END CERTIFICATE-----Generated at Fri Dec 12 17:12:35 2025 by rpki-client