This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft File: KT4M2LPgRO24I672iKr7C3XehnU.mft (raw, json) Hash identifier: uwBklvlFeB3+iEuyOTo9I+jWtZameceClcrOHzmKlwo= Subject key identifier: 09:04:37:41:54:31:5C:E0:8F:41:14:96:D2:9A:5C:11:09:2D:CE:E9 Authority key identifier: 29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75 Certificate issuer: /CN=293e0cd8b3e044edb823aef688aafb0b75de8675 Certificate serial: 019B292E7A3C2B1AC4121CCCD69F07917FB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft Manifest number: 14DD Signing time: Tue 16 Dec 2025 22:01:10 +0000 Manifest this update: Tue 16 Dec 2025 22:01:10 +0000 Manifest next update: Wed 17 Dec 2025 22:01:10 +0000 Files and hashes: 1: GGRSsytPMsehyIvT0Ks7HBxoCsU.roa (hash: cnh4oBPVR37nXyxbz0cYq9xtEn4YLbLofR4YLwkw1Ts=) 2: JH04xJWe_z8SXKxh4G8BUvGkgyI.roa (hash: KcYkH5Y5+qxD1S4xEoLuy3XrGXKw19/czmMpLLQb7oM=) 3: KT4M2LPgRO24I672iKr7C3XehnU.crl (hash: Ml7VTVIywIAb2v1q4GOSfp8M7whP/JE2+czq1MZiJ6I=) 4: ZhmjJZRo8Sbwc315ZOZw1TWufMc.roa (hash: NK5M1wuv8SZ2zP40bZYi2MQNmp6KED1qYY75Icn9mak=) 5: nKQffzVaC8uVNgTXixnx37_DL6s.roa (hash: pYAPWd/N9R42UtkBeCiR8wjtUnidTLisTp0Evm7U4aE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 19:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:2e:7a:3c:2b:1a:c4:12:1c:cc:d6:9f:07:91:7f:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=293e0cd8b3e044edb823aef688aafb0b75de8675 Validity Not Before: Dec 16 22:01:10 2025 GMT Not After : Dec 17 22:01:10 2025 GMT Subject: CN=0904374154315ce08f411496d29a5c11092dcee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ae:d9:f3:c9:bd:1f:41:30:9e:7c:6b:3a:7a: 18:e1:c6:32:bc:30:55:eb:11:31:c3:14:34:2f:c2: 7a:a7:bf:f0:85:57:8c:5d:42:10:8a:99:31:65:fb: 2d:a2:00:24:ff:a8:da:fa:74:8a:1d:21:2f:5f:59: 21:43:a4:24:d5:7b:2c:09:81:3a:1f:ef:f7:28:6e: 8c:34:86:ce:3f:e1:77:f7:cf:a7:b9:28:dc:ab:7c: 79:13:46:1d:e4:c0:54:62:92:c3:bf:ea:1a:94:a9: 13:b8:60:b2:8b:23:4b:6e:46:74:b8:5d:f7:fe:b1: a2:ec:dc:e0:27:34:4f:d6:d8:01:a5:b7:ce:40:4f: 48:5a:3c:dd:6f:3e:d7:3e:d2:fd:45:fb:25:77:5b: f7:3d:f7:4b:b3:a0:06:6a:bf:a3:5d:a6:62:7d:ff: e9:d9:be:d2:3a:b7:39:f1:70:f3:61:db:6e:51:5b: 5f:64:9a:a9:37:fb:a8:ad:c5:75:f6:da:16:d3:12: 0e:8a:13:9b:a5:b6:2d:87:0b:ff:34:d7:bd:02:c9: a3:55:95:bf:54:31:4d:7c:fd:10:80:57:4d:7f:63: 49:20:50:89:ac:7b:7e:67:18:ea:59:fa:ba:4a:3a: 66:8a:16:d5:90:4c:25:e0:f6:a6:4d:be:60:18:d9: 29:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:04:37:41:54:31:5C:E0:8F:41:14:96:D2:9A:5C:11:09:2D:CE:E9 X509v3 Authority Key Identifier: keyid:29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:62:58:f3:66:b5:65:61:36:11:3d:f5:54:fc:fd:4b:d8:ba: 4a:84:87:09:ec:16:cc:82:35:ff:1e:d5:dc:79:e8:7e:e1:be: 84:70:31:5a:e1:b4:4c:f4:1d:c6:89:05:df:7b:43:86:43:f6: 86:5c:e7:14:b4:c1:0f:6e:8b:ec:3c:b8:aa:47:9d:7b:f8:d2: 67:e7:15:38:63:b6:a6:17:cd:44:84:b5:09:ad:84:30:c6:f5: 84:28:dd:6e:2c:66:c6:41:93:c1:c4:31:31:d2:a3:9f:d1:19: f9:ec:dd:4f:3a:86:92:70:75:d1:d8:9e:44:d6:61:74:36:3d: cd:57:4a:90:7d:85:47:8d:ce:03:2f:51:8e:05:8b:9d:f5:c9: 85:bc:27:c1:23:47:ff:0a:63:19:4c:73:eb:75:73:e6:e6:17: e1:ae:70:2a:db:b0:8d:75:5c:05:06:1f:85:ee:4a:1f:99:ef: 35:6a:e2:e3:45:30:56:b1:43:ec:e2:e9:53:b6:36:ee:c5:07: ee:59:52:a0:ae:21:82:d4:8f:75:43:46:8e:a6:60:2e:16:19: 53:9a:8b:c6:7c:29:ff:21:75:8d:9c:1b:bf:f7:07:43:90:50: 8e:35:87:7d:49:ff:cc:3b:fd:67:de:63:58:ff:2e:55:37:d9: 13:8d:03:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspLno8KxrEEhzM1p8HkX+4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5M2UwY2Q4YjNlMDQ0ZWRiODIzYWVmNjg4YWFmYjBiNzVk ZTg2NzUwHhcNMjUxMjE2MjIwMTEwWhcNMjUxMjE3MjIwMTEwWjAzMTEwLwYDVQQD EygwOTA0Mzc0MTU0MzE1Y2UwOGY0MTE0OTZkMjlhNWMxMTA5MmRjZWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwa7Z88m9H0EwnnxrOnoY4cYyvDBV 6xExwxQ0L8J6p7/whVeMXUIQipkxZfstogAk/6ja+nSKHSEvX1khQ6Qk1XssCYE6 H+/3KG6MNIbOP+F398+nuSjcq3x5E0Yd5MBUYpLDv+oalKkTuGCyiyNLbkZ0uF33 /rGi7NzgJzRP1tgBpbfOQE9IWjzdbz7XPtL9Rfsld1v3PfdLs6AGar+jXaZiff/p 2b7SOrc58XDzYdtuUVtfZJqpN/uorcV19toW0xIOihObpbYthwv/NNe9AsmjVZW/ VDFNfP0QgFdNf2NJIFCJrHt+ZxjqWfq6SjpmihbVkEwl4PamTb5gGNkpRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAkEN0FUMVzgj0EUltKaXBEJLc7pMB8GA1UdIwQY MBaAFCk+DNiz4ETtuCOu9oiq+wt13oZ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1Q0TTJMUGdSTzI0STY3MmlLcjdDM1hlaG5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82ZGExYzItMjUyZC00YmQyLWI1NmMt YmIyMTdjYzNiNzhkLzEvS1Q0TTJMUGdSTzI0STY3MmlLcjdDM1hlaG5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC82ZGExYzItMjUyZC00YmQyLWI1NmMtYmIyMTdjYzNiNzhk LzEvS1Q0TTJMUGdSTzI0STY3MmlLcjdDM1hlaG5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmGJY82a1 ZWE2ET31VPz9S9i6SoSHCewWzII1/x7V3HnofuG+hHAxWuG0TPQdxokF33tDhkP2 hlznFLTBD26L7Dy4qkede/jSZ+cVOGO2phfNRIS1Ca2EMMb1hCjdbixmxkGTwcQx MdKjn9EZ+ezdTzqGknB10dieRNZhdDY9zVdKkH2FR43OAy9RjgWLnfXJhbwnwSNH /wpjGUxz63Vz5uYX4a5wKtuwjXVcBQYfhe5KH5nvNWri40UwVrFD7OLpU7Y27sUH 7llSoK4hgtSPdUNGjqZgLhYZU5qLxnwp/yF1jZwbv/cHQ5BQjjWHfUn/zDv9Z95j WP8uVTfZE40Dlg== -----END CERTIFICATE-----Generated at Wed Dec 17 04:40:41 2025 by rpki-client