This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft File: Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft (raw, json) Hash identifier: N1L0XzuvQ9ZIetwye3DQ4aGd5wzuXM780/6KOi6v/5w= Subject key identifier: 2F:52:FB:69:B0:38:0B:27:DC:CB:D0:42:89:AD:FE:8A:75:78:04:BF Authority key identifier: 2A:6F:8F:FB:E0:98:92:20:71:F0:C9:C3:A6:0F:5D:FD:CD:E4:6D:A4 Certificate issuer: /CN=2a6f8ffbe098922071f0c9c3a60f5dfdcde46da4 Certificate serial: 019B1E06389F3A7B407BCD2FD32884AFA8D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft Manifest number: 079D Signing time: Sun 14 Dec 2025 18:01:22 +0000 Manifest this update: Sun 14 Dec 2025 18:01:22 +0000 Manifest next update: Mon 15 Dec 2025 18:01:22 +0000 Files and hashes: 1: E3Zl7hTQVNjV63pjgOsge1XkH0U.roa (hash: yrZmQZ4kTmjXpz++XtNl02KMrQY9DBIkid1grpWXuJM=) 2: Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl (hash: q8XTgbzQELTv1p64QnmixnICYG9sRarIOOOPfzB76Xg=) 3: o0lO65ar-rW4jL4W8sebNaso080.roa (hash: WWdJYnb/d9BssaNMXrRC81WhzrjAYNXMX5FXKx6MRRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:06:38:9f:3a:7b:40:7b:cd:2f:d3:28:84:af:a8:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a6f8ffbe098922071f0c9c3a60f5dfdcde46da4 Validity Not Before: Dec 14 18:01:22 2025 GMT Not After : Dec 15 18:01:22 2025 GMT Subject: CN=2f52fb69b0380b27dccbd04289adfe8a757804bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a7:06:7b:fc:4e:a7:fc:27:0c:43:04:8a:fd: c8:b9:ef:0e:15:f1:72:84:75:7f:07:b6:2d:08:00: 23:7b:be:de:b4:d7:e1:59:b0:ba:08:1d:8c:a6:c3: 9c:98:a6:1f:f4:a1:75:a5:76:38:4c:ad:e8:48:fd: bd:2e:d2:16:de:4f:9d:95:31:4b:91:54:e5:35:75: b2:2e:59:87:b5:b1:94:d3:d3:82:78:b5:0e:10:65: 42:81:b6:91:4d:d0:ea:87:59:79:f0:7c:a1:39:0e: 9d:1e:3c:94:7f:8f:10:a2:17:b4:11:9b:f5:51:57: 7f:92:0a:27:01:06:e9:b2:67:ff:c0:cb:1a:3e:3b: 1e:48:7e:e2:3d:80:11:59:b7:f7:48:dc:bf:ea:a5: b2:31:02:0b:7f:92:2c:7f:37:b5:f4:81:49:1f:a9: b7:a8:ed:51:5e:49:ac:9b:33:d8:e5:4b:6c:36:c1: 7b:65:c1:28:34:d4:db:37:ac:43:fd:b1:7a:d7:d1: e8:fb:85:7e:06:9f:87:d3:af:b1:2d:a1:b2:e1:9c: f4:c6:fc:e0:dd:47:93:5f:dd:f4:eb:6e:f7:44:1e: ab:f1:ba:53:cf:06:7b:8a:b2:b8:a0:8c:e5:10:ff: c9:45:40:01:39:f6:64:aa:7f:88:76:40:26:e9:24: c2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:52:FB:69:B0:38:0B:27:DC:CB:D0:42:89:AD:FE:8A:75:78:04:BF X509v3 Authority Key Identifier: keyid:2A:6F:8F:FB:E0:98:92:20:71:F0:C9:C3:A6:0F:5D:FD:CD:E4:6D:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:78:20:29:1d:68:53:9d:4f:ab:51:79:63:dd:3d:16:d0:50: 53:5f:2a:00:1a:27:6f:01:f9:0f:d3:87:00:90:4f:3a:35:c9: 80:f1:21:b5:83:6f:66:fc:e8:96:e0:03:d1:7c:18:c7:42:a9: 67:c5:06:21:b1:2d:c8:1d:c2:89:04:b6:fb:39:4f:22:c1:ba: bc:e1:76:69:37:47:fc:6b:13:0f:8e:1b:f1:70:d9:d9:43:7c: ab:e7:22:0e:2d:9d:ad:c0:69:e8:ef:10:73:b5:27:5b:6d:39: 39:08:68:0e:5a:16:88:7f:e4:fa:91:dc:db:a1:5b:a2:e9:9f: 8c:e7:cf:69:6f:e8:6a:16:34:34:e7:8f:66:fb:05:55:5c:6e: c8:78:97:2a:ca:d5:2b:d9:d3:22:13:fc:de:65:f2:7d:2e:cf: e5:07:9b:58:47:67:f7:15:7d:5d:d1:ed:ff:ef:c3:bb:3b:be: 0a:9a:01:79:a9:c2:6a:1b:34:4f:6b:3b:cd:c9:b8:95:8b:9c: 10:90:fa:59:c7:2b:b6:dd:c3:e5:4a:2b:70:41:3e:2b:06:21: 0a:87:e1:e2:53:4d:91:73:3d:a0:12:3d:0a:a7:50:e6:48:1d: 55:e1:ce:ca:05:61:d2:79:9c:12:7b:76:f4:6b:2c:ad:5b:dd: 96:9d:02:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZseBjifOntAe80v0yiEr6jXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhNmY4ZmZiZTA5ODkyMjA3MWYwYzljM2E2MGY1ZGZkY2Rl NDZkYTQwHhcNMjUxMjE0MTgwMTIyWhcNMjUxMjE1MTgwMTIyWjAzMTEwLwYDVQQD EygyZjUyZmI2OWIwMzgwYjI3ZGNjYmQwNDI4OWFkZmU4YTc1NzgwNGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7KcGe/xOp/wnDEMEiv3Iue8OFfFy hHV/B7YtCAAje77etNfhWbC6CB2MpsOcmKYf9KF1pXY4TK3oSP29LtIW3k+dlTFL kVTlNXWyLlmHtbGU09OCeLUOEGVCgbaRTdDqh1l58HyhOQ6dHjyUf48Qohe0EZv1 UVd/kgonAQbpsmf/wMsaPjseSH7iPYARWbf3SNy/6qWyMQILf5Isfze19IFJH6m3 qO1RXkmsmzPY5UtsNsF7ZcEoNNTbN6xD/bF619Ho+4V+Bp+H06+xLaGy4Zz0xvzg 3UeTX9306273RB6r8bpTzwZ7irK4oIzlEP/JRUABOfZkqn+IdkAm6STCeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC9S+2mwOAsn3MvQQomt/op1eAS/MB8GA1UdIwQY MBaAFCpvj/vgmJIgcfDJw6YPXf3N5G2kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS20tUC0tQ1lraUJ4OE1uRHBnOWRfYzNrYmFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82MzhkODgtNDk1Mi00OTYwLTg3NzQt YzFjNGQ4Y2JmNDU5LzEvS20tUC0tQ1lraUJ4OE1uRHBnOWRfYzNrYmFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My82MzhkODgtNDk1Mi00OTYwLTg3NzQtYzFjNGQ4Y2JmNDU5 LzEvS20tUC0tQ1lraUJ4OE1uRHBnOWRfYzNrYmFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD3ggKR1o U51Pq1F5Y909FtBQU18qABonbwH5D9OHAJBPOjXJgPEhtYNvZvzoluAD0XwYx0Kp Z8UGIbEtyB3CiQS2+zlPIsG6vOF2aTdH/GsTD44b8XDZ2UN8q+ciDi2drcBp6O8Q c7UnW205OQhoDloWiH/k+pHc26FboumfjOfPaW/oahY0NOePZvsFVVxuyHiXKsrV K9nTIhP83mXyfS7P5QebWEdn9xV9XdHt/+/Duzu+CpoBeanCahs0T2s7zcm4lYuc EJD6Wccrtt3D5UorcEE+KwYhCofh4lNNkXM9oBI9CqdQ5kgdVeHOygVh0nmcEnt2 9GssrVvdlp0COg== -----END CERTIFICATE-----Generated at Sun Dec 14 23:19:14 2025 by rpki-client