This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft File: kfX87b24TdUvxncNfM_T_GaE-kE.mft (raw, json) Hash identifier: Ghq7d/gfBYQFiNhtDn5VJNkbvZRbPZIQzsgQmNGJ79Y= Subject key identifier: 71:F4:C1:32:2F:76:F5:F4:35:53:8E:69:68:29:46:6D:47:2F:CA:A4 Authority key identifier: 91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41 Certificate issuer: /CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41 Certificate serial: 019AEF3E55A1686D97F79750733B0E5C2A3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft Manifest number: 1767 Signing time: Fri 05 Dec 2025 16:00:30 +0000 Manifest this update: Fri 05 Dec 2025 16:00:30 +0000 Manifest next update: Sat 06 Dec 2025 16:00:30 +0000 Files and hashes: 1: 6UpEJlRsXOn9vaGmBJWrZdfalwA.roa (hash: HSwxSSz5lFpaFRsJuAqgaQ8EsTFkTI/T+FmwfdtjYaA=) 2: 9tPvRIgWOFQGF5ALiDiBtpjalf0.roa (hash: CNi9LKlhqfclz9Oir048bs7o3/W9+fUSyftDkxngReE=) 3: JvOQdUjkCtx4pMZ63YDUDSKRif8.roa (hash: lpSKgZ5ZudI2jyQ9YWWPgdYiIoklrO/1U/orK0nz9yw=) 4: kfX87b24TdUvxncNfM_T_GaE-kE.crl (hash: a38E3Fxw2FkDS0UcBvgCxUu0Ou5O/6CXPoFdSaSxLOs=) 5: lKDuxfpv6g9ZDhVaa38VKaYZKKg.roa (hash: OVK0az1AcO1NBXsdKgGXvtFiE3weIknB+sCCAuqYuGw=) 6: xXN1JERl6SmTU8LGAK6YjCsE_8g.roa (hash: UJ/2eCVna1OAdfj1e6cD3/kAVB2y1kYmD/HxfsrIilw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ef:3e:55:a1:68:6d:97:f7:97:50:73:3b:0e:5c:2a:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41 Validity Not Before: Dec 5 16:00:30 2025 GMT Not After : Dec 6 16:00:30 2025 GMT Subject: CN=71f4c1322f76f5f435538e696829466d472fcaa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2d:08:b1:a5:12:6f:2c:55:99:17:82:7c:24: 77:82:0f:28:46:c6:b4:5d:42:57:62:18:14:5d:63: 5e:c0:86:bc:fd:68:11:8b:bb:12:07:5a:20:b4:06: 5d:92:96:f0:ab:e9:4b:e8:e1:f6:5c:d5:f1:77:d9: 90:36:a7:29:34:6b:23:81:b1:97:fc:7b:dd:60:63: 2b:01:77:fe:da:5b:29:cb:ad:3b:66:66:13:b3:bb: bb:ed:64:4b:fa:ae:0f:d6:50:f0:88:c9:4a:eb:08: 3a:3d:ab:74:fc:60:2b:87:4f:33:28:e1:e2:f7:7c: ad:ed:6b:3c:7d:f9:21:ff:42:ef:d4:22:64:08:a9: ca:9e:af:8f:5d:ce:f8:a4:fe:c2:b8:ad:29:7a:18: 25:5a:a6:f9:0f:cb:1e:a5:b5:f8:ec:26:a2:12:ea: 33:00:f1:e0:c4:3c:11:b2:ce:c3:13:31:96:ee:60: b4:44:28:d3:45:ac:6b:4e:4b:c0:45:28:98:58:ba: d6:07:ac:1d:01:a9:89:27:4f:dd:89:06:87:e9:06: 2f:3b:54:44:90:9c:6a:51:8a:0c:71:ae:05:33:cb: a2:39:90:87:63:b7:a4:56:1f:2c:37:5b:79:76:02: d9:0f:1f:17:d1:07:09:82:a9:73:95:f2:42:57:17: bd:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F4:C1:32:2F:76:F5:F4:35:53:8E:69:68:29:46:6D:47:2F:CA:A4 X509v3 Authority Key Identifier: keyid:91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:f8:3b:3d:b9:69:dd:af:42:0d:cc:b8:80:b3:b0:f0:e4:07: 33:e1:6b:45:f9:49:e2:ce:eb:92:ac:2c:8f:bd:30:99:d9:88: 88:35:97:5e:25:4c:8a:78:cf:d9:ff:37:dc:79:a2:53:e4:3c: 38:4d:73:a9:b4:f7:fe:48:ef:38:5e:ab:22:45:0c:a8:94:5d: d0:a9:9a:fe:a5:7c:7a:93:fa:bc:97:8c:f5:c8:49:54:39:ab: ce:b8:ae:5b:8f:40:63:3a:44:a1:c8:b2:c9:eb:a0:4e:c6:6e: 1d:f1:1a:c3:e8:d2:68:ec:90:32:ef:8c:e1:df:83:98:6f:77: 49:49:9f:1a:91:d8:b3:68:52:5f:79:09:16:60:e5:4b:5c:38: e1:80:29:dd:f3:6d:e3:a9:91:95:84:44:0d:c2:45:48:ed:e5: a1:66:0f:43:6a:20:99:94:64:bd:3d:65:30:29:ee:13:8e:38: 75:5b:41:e6:45:03:9d:20:0c:cc:af:ea:05:24:4b:fe:c2:66: 21:90:41:3e:c3:a4:a4:1b:65:36:e9:27:8d:f5:de:b2:38:fe: 55:3d:66:98:32:ae:5f:c9:b6:11:5b:14:82:01:23:ed:87:bc: c7:9e:b7:35:bb:de:e9:84:f8:a7:96:19:a8:f3:6d:0f:2a:c9: ab:b1:99:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrvPlWhaG2X95dQczsOXCo+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZjVmY2VkYmRiODRkZDUyZmM2NzcwZDdjY2ZkM2ZjNjY4 NGZhNDEwHhcNMjUxMjA1MTYwMDMwWhcNMjUxMjA2MTYwMDMwWjAzMTEwLwYDVQQD Eyg3MWY0YzEzMjJmNzZmNWY0MzU1MzhlNjk2ODI5NDY2ZDQ3MmZjYWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0S0IsaUSbyxVmReCfCR3gg8oRsa0 XUJXYhgUXWNewIa8/WgRi7sSB1ogtAZdkpbwq+lL6OH2XNXxd9mQNqcpNGsjgbGX /HvdYGMrAXf+2lspy607ZmYTs7u77WRL+q4P1lDwiMlK6wg6Pat0/GArh08zKOHi 93yt7Ws8ffkh/0Lv1CJkCKnKnq+PXc74pP7CuK0pehglWqb5D8sepbX47CaiEuoz APHgxDwRss7DEzGW7mC0RCjTRaxrTkvARSiYWLrWB6wdAamJJ0/diQaH6QYvO1RE kJxqUYoMca4FM8uiOZCHY7ekVh8sN1t5dgLZDx8X0QcJgqlzlfJCVxe9NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHH0wTIvdvX0NVOOaWgpRm1HL8qkMB8GA1UdIwQY MBaAFJH1/O29uE3VL8Z3DXzP0/xmhPpBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2ZYODdiMjRUZFV2eG5jTmZNX1RfR2FFLWtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85YTA5ODEtMGFkOC00OGE1LWJmZWMt OGNjOTgzMzYxMWU2LzEva2ZYODdiMjRUZFV2eG5jTmZNX1RfR2FFLWtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC85YTA5ODEtMGFkOC00OGE1LWJmZWMtOGNjOTgzMzYxMWU2 LzEva2ZYODdiMjRUZFV2eG5jTmZNX1RfR2FFLWtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq/g7Pblp 3a9CDcy4gLOw8OQHM+FrRflJ4s7rkqwsj70wmdmIiDWXXiVMinjP2f833HmiU+Q8 OE1zqbT3/kjvOF6rIkUMqJRd0Kma/qV8epP6vJeM9chJVDmrzriuW49AYzpEociy yeugTsZuHfEaw+jSaOyQMu+M4d+DmG93SUmfGpHYs2hSX3kJFmDlS1w44YAp3fNt 46mRlYREDcJFSO3loWYPQ2ogmZRkvT1lMCnuE444dVtB5kUDnSAMzK/qBSRL/sJm IZBBPsOkpBtlNuknjfXesjj+VT1mmDKuX8m2EVsUggEj7Ye8x563Nbve6YT4p5YZ qPNtDyrJq7GZiQ== -----END CERTIFICATE-----Generated at Fri Dec 5 23:04:24 2025 by rpki-client