This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft File: Kb4C3qCghumID1ZMhocrvFl8xnI.mft (raw, json) Hash identifier: R3sMqR4rijhT+ihtmzftrdXHxOOFxfQM1DfK2AsL9Oo= Subject key identifier: E9:CE:CE:48:B9:59:59:89:FF:A8:C1:7F:04:5F:5E:C9:30:13:38:3A Authority key identifier: 29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 Certificate issuer: /CN=29be02dea0a086e9880f564c86872bbc597cc672 Certificate serial: 019B112593DF457C074ED9C19627CF35478E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft Manifest number: 1562 Signing time: Fri 12 Dec 2025 06:00:33 +0000 Manifest this update: Fri 12 Dec 2025 06:00:33 +0000 Manifest next update: Sat 13 Dec 2025 06:00:33 +0000 Files and hashes: 1: 6KpBI63kEhQRzmhRvVQxSFsUBTI.roa (hash: Ckcyw44N8h4Yete0VsDquepnFPzly6G4UPrg1n68+p4=) 2: Bl50d2SW5pMGbeTLnaL144PRWUQ.roa (hash: bI5Yiq9+r3/RdML3fweIl1fiyaU2NaLiJvR9z1M6k50=) 3: Kb4C3qCghumID1ZMhocrvFl8xnI.crl (hash: lPgjp9bgV7VUNtQwI+k8Zk1GtikFiud+iC44XxX0lNo=) 4: MLMPGj8H9Pi_UwBtlTfByiigjfM.roa (hash: pC0aw2jiKroOvxcRGHKOge3OdR3RFQ8raECTuPmJMXM=) 5: OHP3S03u5tMHflzGMFoSd5vTyZk.roa (hash: nGDY1zJo3dHSTN2PJe0pXCx8heywXO+QdXtgHJbEB2A=) 6: RZnwVTO26PBx3a68dhxrN-N2_9U.roa (hash: 2uzv1j/fxffpUq8amOpURgwfPrkNCx7YPSsxO/BHSJk=) 7: XkZDM_8IFwDF5TaEYGBCOeA1rnY.roa (hash: wJ3Nd2iWllTHLJTwVq5JnkwdVdkkialVRVjZAGjLaUA=) 8: aB7sKw4yBEcglwqSevB86YJRj7Y.roa (hash: PH14Cm3gVr59rgH3FX69SJ0GUOOG1kpk0YkBDPc5P9M=) 9: j1JcZG88WoDJIAs0TuxaORvfLro.roa (hash: yIeCKxXutjytoAiiGxkiUBSn0Vk24wB2GDbKm+IJthI=) 10: nwUsD1fndRShZT-s5ssppnOFmiI.roa (hash: 5Gw61qVpay4Kz2GbqbYja1rnv6svDc1Ma6KW2KgO/Fk=) 11: zphCyxB7JvvZfrdVh3qU9-FSl5c.roa (hash: PYY+kdRiBf7TYzIHyOP800eu0rdgwqkk9pHLsntWJR8=) 12: zvPA1UGui-igyOCxkJMwtvZ5S28.roa (hash: /AfKz5TxnkzdqXaxQMADqDtWb4d/fIp2oXqMIKdkCNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 06:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:25:93:df:45:7c:07:4e:d9:c1:96:27:cf:35:47:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29be02dea0a086e9880f564c86872bbc597cc672 Validity Not Before: Dec 12 06:00:33 2025 GMT Not After : Dec 13 06:00:33 2025 GMT Subject: CN=e9cece48b9595989ffa8c17f045f5ec93013383a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:37:b9:24:c4:c1:7f:d9:1b:d5:4f:3a:87:12: 24:b2:1e:b2:a0:d6:d3:27:ba:1d:92:7a:e1:64:53: 1c:aa:16:fe:82:91:43:cd:71:a1:31:26:23:99:9e: ec:fe:32:f0:9a:c2:80:73:c5:53:1c:b0:b2:d3:1c: a4:3c:20:62:a1:07:d3:c9:b5:ce:43:0b:da:dd:54: 01:58:ab:55:8f:37:a5:d4:f8:4b:5e:84:b2:84:3b: 8c:59:3d:06:85:3f:75:fb:78:57:de:e9:a0:39:00: ef:9a:df:71:59:8e:06:e1:d5:f3:fb:c5:a9:ee:b8: 5f:10:01:1c:d2:3e:37:46:78:39:1d:a3:cf:9a:55: 35:1b:79:4f:ee:cb:95:4a:76:d0:d3:d0:ac:0e:4c: 82:ec:eb:c0:4a:80:88:3b:e0:0d:19:91:7d:c2:74: 19:a9:30:d8:44:40:25:7a:85:df:ea:e0:74:be:f0: c7:4b:a8:09:c0:ed:fe:f9:af:3a:21:c5:a8:08:e6: 3c:65:e0:8c:35:31:ee:d9:f6:97:5a:b4:7a:30:2a: 79:58:60:cf:c0:65:d5:f8:2e:66:d7:99:43:03:90: 71:ea:21:78:ba:42:74:dc:3d:d1:b1:b0:0b:b6:1f: f9:99:cb:37:7a:c5:86:d7:38:aa:78:07:19:59:b1: 2d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:CE:CE:48:B9:59:59:89:FF:A8:C1:7F:04:5F:5E:C9:30:13:38:3A X509v3 Authority Key Identifier: keyid:29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:e4:ad:11:fb:54:09:65:23:e5:24:77:b7:da:28:10:b7:35: b4:c6:93:40:38:38:86:35:f7:76:45:54:37:77:d3:8b:15:66: 28:9a:c5:14:e5:e8:54:16:d2:5c:05:c0:0b:55:2b:37:f7:40: d8:8f:ea:91:b8:e4:73:33:26:c5:f2:e2:c1:06:f1:2c:04:6c: 24:7e:87:55:c2:4a:c2:41:f7:1a:fe:28:e5:2c:4a:eb:20:cf: 82:dd:9c:51:02:e8:5f:f9:d7:19:02:73:b6:b2:b9:a1:4e:a3: 3a:c8:02:0e:a2:6c:90:78:11:18:96:43:f5:0e:95:ec:c6:1f: 16:73:1c:1f:66:db:55:45:11:e7:ee:a7:d6:d5:bf:40:b4:11: 42:90:01:93:1b:19:bc:c6:52:6e:eb:94:fc:71:36:69:e9:3e: d1:f6:3b:58:21:7b:16:86:ad:26:0c:1d:73:7f:c6:b9:6c:96: 18:a7:37:14:ea:29:aa:d0:db:b9:10:d3:15:ef:1d:7b:a4:05: 11:03:18:17:43:68:5b:d7:e0:31:cb:4c:04:8e:ea:dd:38:78: d8:24:44:97:cc:cb:94:5d:9c:8f:14:5c:eb:f6:ba:6c:ad:bf: 92:c2:6b:4d:43:3e:47:fc:fa:60:b1:c1:0d:74:06:9a:ac:a5: c5:8f:35:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRJZPfRXwHTtnBlifPNUeOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YmUwMmRlYTBhMDg2ZTk4ODBmNTY0Yzg2ODcyYmJjNTk3 Y2M2NzIwHhcNMjUxMjEyMDYwMDMzWhcNMjUxMjEzMDYwMDMzWjAzMTEwLwYDVQQD EyhlOWNlY2U0OGI5NTk1OTg5ZmZhOGMxN2YwNDVmNWVjOTMwMTMzODNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnje5JMTBf9kb1U86hxIksh6yoNbT J7odknrhZFMcqhb+gpFDzXGhMSYjmZ7s/jLwmsKAc8VTHLCy0xykPCBioQfTybXO Qwva3VQBWKtVjzel1PhLXoSyhDuMWT0GhT91+3hX3umgOQDvmt9xWY4G4dXz+8Wp 7rhfEAEc0j43Rng5HaPPmlU1G3lP7suVSnbQ09CsDkyC7OvASoCIO+ANGZF9wnQZ qTDYREAleoXf6uB0vvDHS6gJwO3++a86IcWoCOY8ZeCMNTHu2faXWrR6MCp5WGDP wGXV+C5m15lDA5Bx6iF4ukJ03D3RsbALth/5mcs3esWG1ziqeAcZWbEtewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOnOzki5WVmJ/6jBfwRfXskwEzg6MB8GA1UdIwQY MBaAFCm+At6goIbpiA9WTIaHK7xZfMZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMt MDAzYTE1NjhiZjNmLzEvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMtMDAzYTE1NjhiZjNm LzEvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVOStEftU CWUj5SR3t9ooELc1tMaTQDg4hjX3dkVUN3fTixVmKJrFFOXoVBbSXAXAC1UrN/dA 2I/qkbjkczMmxfLiwQbxLARsJH6HVcJKwkH3Gv4o5SxK6yDPgt2cUQLoX/nXGQJz trK5oU6jOsgCDqJskHgRGJZD9Q6V7MYfFnMcH2bbVUUR5+6n1tW/QLQRQpABkxsZ vMZSbuuU/HE2aek+0fY7WCF7FoatJgwdc3/GuWyWGKc3FOopqtDbuRDTFe8de6QF EQMYF0NoW9fgMctMBI7q3Th42CREl8zLlF2cjxRc6/a6bK2/ksJrTUM+R/z6YLHB DXQGmqylxY819A== -----END CERTIFICATE-----Generated at Fri Dec 12 12:29:29 2025 by rpki-client