This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft File: Kb4C3qCghumID1ZMhocrvFl8xnI.mft (raw, json) Hash identifier: vPyOn5EeY5/X1ZMVOU42u+BvGl6KG7O+Z2cqpI1sjGs= Subject key identifier: 29:7F:78:89:35:EE:51:D7:69:F5:A8:4D:11:33:C5:44:A2:58:8E:37 Authority key identifier: 29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 Certificate issuer: /CN=29be02dea0a086e9880f564c86872bbc597cc672 Certificate serial: 019B33E8CE02294A57EDA7CF9DD680F0858F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft Manifest number: 1574 Signing time: Fri 19 Dec 2025 00:00:53 +0000 Manifest this update: Fri 19 Dec 2025 00:00:53 +0000 Manifest next update: Sat 20 Dec 2025 00:00:53 +0000 Files and hashes: 1: 6KpBI63kEhQRzmhRvVQxSFsUBTI.roa (hash: Ckcyw44N8h4Yete0VsDquepnFPzly6G4UPrg1n68+p4=) 2: Bl50d2SW5pMGbeTLnaL144PRWUQ.roa (hash: bI5Yiq9+r3/RdML3fweIl1fiyaU2NaLiJvR9z1M6k50=) 3: Kb4C3qCghumID1ZMhocrvFl8xnI.crl (hash: YxL/FTFhgScaoIvSzn8WTAdvJYzjnNbWEaJjr+2U0eM=) 4: MLMPGj8H9Pi_UwBtlTfByiigjfM.roa (hash: pC0aw2jiKroOvxcRGHKOge3OdR3RFQ8raECTuPmJMXM=) 5: OHP3S03u5tMHflzGMFoSd5vTyZk.roa (hash: nGDY1zJo3dHSTN2PJe0pXCx8heywXO+QdXtgHJbEB2A=) 6: RZnwVTO26PBx3a68dhxrN-N2_9U.roa (hash: 2uzv1j/fxffpUq8amOpURgwfPrkNCx7YPSsxO/BHSJk=) 7: XkZDM_8IFwDF5TaEYGBCOeA1rnY.roa (hash: wJ3Nd2iWllTHLJTwVq5JnkwdVdkkialVRVjZAGjLaUA=) 8: aB7sKw4yBEcglwqSevB86YJRj7Y.roa (hash: PH14Cm3gVr59rgH3FX69SJ0GUOOG1kpk0YkBDPc5P9M=) 9: j1JcZG88WoDJIAs0TuxaORvfLro.roa (hash: yIeCKxXutjytoAiiGxkiUBSn0Vk24wB2GDbKm+IJthI=) 10: nwUsD1fndRShZT-s5ssppnOFmiI.roa (hash: 5Gw61qVpay4Kz2GbqbYja1rnv6svDc1Ma6KW2KgO/Fk=) 11: zphCyxB7JvvZfrdVh3qU9-FSl5c.roa (hash: PYY+kdRiBf7TYzIHyOP800eu0rdgwqkk9pHLsntWJR8=) 12: zvPA1UGui-igyOCxkJMwtvZ5S28.roa (hash: /AfKz5TxnkzdqXaxQMADqDtWb4d/fIp2oXqMIKdkCNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:ce:02:29:4a:57:ed:a7:cf:9d:d6:80:f0:85:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29be02dea0a086e9880f564c86872bbc597cc672 Validity Not Before: Dec 19 00:00:53 2025 GMT Not After : Dec 20 00:00:53 2025 GMT Subject: CN=297f788935ee51d769f5a84d1133c544a2588e37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8e:47:b3:e0:48:d1:43:4f:91:ac:2b:82:9f: 3c:e9:ce:b2:75:28:1f:df:77:58:6c:e3:8f:db:57: 1b:5a:47:62:0f:f5:73:bb:6c:ca:a6:b8:76:b0:8f: 3a:82:46:0e:22:08:e9:52:6a:e8:61:b5:8c:9d:8b: 4f:ed:7e:06:aa:3d:bc:60:48:da:7b:36:01:c3:1c: f1:21:b3:ba:a1:35:13:e4:bb:5c:aa:11:3c:f1:f8: a2:de:c4:fc:b0:67:04:e7:28:e7:b7:67:c1:4f:3b: cb:2c:52:99:f0:2a:f4:45:6b:64:32:e9:80:82:8a: a2:85:ee:a2:2b:56:55:de:cd:25:d4:04:79:a7:7b: 38:a9:54:b4:f0:ce:a6:28:e6:f6:0f:3e:ad:ed:3d: c7:65:31:bf:e3:b4:14:18:ef:61:d1:d3:fd:8b:3c: ca:c9:dc:d5:e9:7d:4b:34:4e:f0:92:df:44:42:10: 8e:0d:0c:1b:13:eb:f3:a2:5f:c0:21:a3:e7:43:fa: ce:e5:2d:fd:45:ae:85:52:94:ef:13:0b:33:e8:a2: 16:27:9c:e3:0a:77:97:fa:1f:95:c9:ca:ca:48:e2: 84:ed:ec:32:8a:04:af:10:0e:f0:8d:e4:2d:eb:5b: 2a:01:78:fe:6a:72:41:ad:00:f1:46:a0:4f:a2:83: bc:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:7F:78:89:35:EE:51:D7:69:F5:A8:4D:11:33:C5:44:A2:58:8E:37 X509v3 Authority Key Identifier: keyid:29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:3c:fb:7d:f7:cb:90:bb:7c:3e:9e:7d:0e:28:8b:ab:04:1f: d4:d9:b4:56:0a:da:36:f3:33:0f:fc:19:95:ec:71:f4:e8:3e: 87:87:89:c6:2f:5c:39:bb:ee:62:8d:7c:77:d0:41:25:76:93: f0:2b:19:5c:f4:ad:26:14:71:a0:91:43:11:54:18:f5:70:e7: ee:13:b2:42:b8:d3:30:9c:28:de:05:c9:2d:10:5b:ee:be:4a: fc:74:1d:d0:12:9e:b3:d8:e8:31:33:4e:c9:c5:bd:32:20:75: 49:c8:8d:d6:3e:2d:17:78:03:c7:13:f4:2e:e5:9e:29:fe:62: cc:2a:d9:04:73:46:b6:14:12:dd:6c:fe:a3:d8:4b:d7:4a:5e: fb:92:ca:4c:f9:ec:ba:5b:fb:89:1d:a1:97:6a:a6:76:4d:2f: 9b:d3:a6:b3:9a:9e:c8:b4:df:64:07:73:1c:d0:22:6e:43:6d: 0d:31:02:fb:2e:a8:46:94:c8:1e:a9:e0:d2:3c:de:a2:70:1e: 1c:da:29:fd:bf:0b:9f:ae:95:53:84:6f:9c:7f:81:8b:5c:fe: 06:9f:c9:99:82:4c:f3:30:17:fd:b9:32:4d:f5:f2:7c:bf:0a: 47:d3:37:e7:38:e8:09:4e:1c:d2:8b:71:13:3a:4e:9e:0e:46: ec:d9:a5:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6M4CKUpX7afPndaA8IWPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YmUwMmRlYTBhMDg2ZTk4ODBmNTY0Yzg2ODcyYmJjNTk3 Y2M2NzIwHhcNMjUxMjE5MDAwMDUzWhcNMjUxMjIwMDAwMDUzWjAzMTEwLwYDVQQD EygyOTdmNzg4OTM1ZWU1MWQ3NjlmNWE4NGQxMTMzYzU0NGEyNTg4ZTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3o5Hs+BI0UNPkawrgp886c6ydSgf 33dYbOOP21cbWkdiD/Vzu2zKprh2sI86gkYOIgjpUmroYbWMnYtP7X4Gqj28YEja ezYBwxzxIbO6oTUT5LtcqhE88fii3sT8sGcE5yjnt2fBTzvLLFKZ8Cr0RWtkMumA goqihe6iK1ZV3s0l1AR5p3s4qVS08M6mKOb2Dz6t7T3HZTG/47QUGO9h0dP9izzK ydzV6X1LNE7wkt9EQhCODQwbE+vzol/AIaPnQ/rO5S39Ra6FUpTvEwsz6KIWJ5zj CneX+h+VycrKSOKE7ewyigSvEA7wjeQt61sqAXj+anJBrQDxRqBPooO8CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCl/eIk17lHXafWoTREzxUSiWI43MB8GA1UdIwQY MBaAFCm+At6goIbpiA9WTIaHK7xZfMZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMt MDAzYTE1NjhiZjNmLzEvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMtMDAzYTE1NjhiZjNm LzEvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHTz7fffL kLt8Pp59DiiLqwQf1Nm0VgraNvMzD/wZlexx9Og+h4eJxi9cObvuYo18d9BBJXaT 8CsZXPStJhRxoJFDEVQY9XDn7hOyQrjTMJwo3gXJLRBb7r5K/HQd0BKes9joMTNO ycW9MiB1SciN1j4tF3gDxxP0LuWeKf5izCrZBHNGthQS3Wz+o9hL10pe+5LKTPns ulv7iR2hl2qmdk0vm9Oms5qeyLTfZAdzHNAibkNtDTEC+y6oRpTIHqng0jzeonAe HNop/b8Ln66VU4RvnH+Bi1z+Bp/JmYJM8zAX/bkyTfXyfL8KR9M35zjoCU4c0otx EzpOng5G7NmlKw== -----END CERTIFICATE-----Generated at Fri Dec 19 07:53:07 2025 by rpki-client