This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft File: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft (raw, json) Hash identifier: KesKS0atzfHc7eX+P5lRpalebcqa+6068TfAmpQKGkY= Subject key identifier: 6A:7B:C7:4B:11:26:23:FE:C6:FC:47:E1:A3:BD:F0:C3:A8:93:C0:A4 Authority key identifier: 29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0 Certificate issuer: /CN=29390ec0adca5f0743d181145c7899f991fb65e0 Certificate serial: 019B115CD651593E2DA30C7B6C4CCC4E7F53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft Manifest number: 177B Signing time: Fri 12 Dec 2025 07:00:55 +0000 Manifest this update: Fri 12 Dec 2025 07:00:55 +0000 Manifest next update: Sat 13 Dec 2025 07:00:55 +0000 Files and hashes: 1: 4AoUOv0FI3bJOWNB03o-fqag36g.roa (hash: lE0wM7qhSogQ0qa/Rafsku4glOJqw2l70ocwo2WeE/c=) 2: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl (hash: Er1FSNjGkAabzPASPU/z0ucTx0+ud7+PRSWrt+QC1dY=) 3: ksEVVLS3M5w1AKi-nF72xAY7y7o.roa (hash: z5VVyVNSP1G0pwH68pGPs7a4UWtVv2Td4kN9zQtymP4=) 4: xnJga-iVwigHTsD-dtkf_nC-qeI.roa (hash: GsXHxv2wkqRmHr0aWFfubv19P/bPTlYuX8bNACGOcog=) 5: zZmhXAJxJDzvO8-P5W7loaS7fbA.roa (hash: taOY8It1xL3N2EmSMhPslz70+vQnXy7dwL95lxsh0c4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 07:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:5c:d6:51:59:3e:2d:a3:0c:7b:6c:4c:cc:4e:7f:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29390ec0adca5f0743d181145c7899f991fb65e0 Validity Not Before: Dec 12 07:00:55 2025 GMT Not After : Dec 13 07:00:55 2025 GMT Subject: CN=6a7bc74b112623fec6fc47e1a3bdf0c3a893c0a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8d:35:aa:91:56:12:02:97:fd:1a:aa:4f:25: e1:5e:26:a6:a7:40:00:41:b7:96:75:ce:9b:d8:82: 4a:be:83:ce:c4:a5:df:91:b0:57:98:ba:99:82:7c: b3:68:61:04:4f:5d:c0:bd:3e:fe:3a:6d:56:aa:b9: 31:1f:d1:24:2e:22:77:02:21:02:51:16:0f:02:eb: d3:02:55:11:42:9d:e4:f4:dd:7f:0e:0f:ef:d3:5a: 85:c7:91:15:db:1c:92:63:54:c8:69:35:78:3f:f4: 01:7e:6a:88:c3:c6:7a:1a:42:54:60:53:c4:c4:24: 74:ce:73:f7:d3:9c:d8:ef:19:13:60:56:83:4a:26: 68:54:c5:fa:59:3b:17:a8:95:f4:61:ea:d4:dd:f5: 67:96:2a:24:c6:1c:eb:0c:74:47:1b:13:62:b5:5d: c9:bf:26:55:72:b1:56:e0:82:fd:ab:29:fc:7a:47: 5f:e8:f2:91:ac:d0:96:bd:23:c5:7d:c6:8e:04:4e: 35:b0:60:b2:46:ca:eb:2c:a8:61:b3:78:15:12:58: ea:1b:53:af:84:48:6e:10:80:77:f4:5e:42:9c:f4: 30:d8:5f:3f:dd:7f:7a:13:42:11:2a:a4:58:45:0d: 2b:87:ca:e9:f2:df:4d:6d:f5:58:6b:57:56:82:05: 42:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:7B:C7:4B:11:26:23:FE:C6:FC:47:E1:A3:BD:F0:C3:A8:93:C0:A4 X509v3 Authority Key Identifier: keyid:29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:54:c1:5b:50:45:3e:cc:55:25:25:46:34:c4:2a:dc:1a:b8: cf:b9:21:f1:14:af:89:a9:aa:0e:43:d8:60:95:6f:2b:71:a3: 47:d0:d6:fb:c4:73:0e:40:4f:79:0a:11:35:9e:f5:d9:30:c3: ae:d1:47:f6:40:5a:51:90:43:8d:6a:fd:a6:2e:af:51:ef:cf: a7:8b:9d:41:e7:7b:d3:ed:0f:08:94:4b:00:7d:bb:55:83:ae: 7c:54:f3:65:ef:c6:94:ff:c2:5c:0f:0c:47:c1:3f:5a:85:48: 93:24:a7:06:32:33:0c:6f:21:4c:3e:5a:4e:cd:e4:bb:d9:5b: c6:05:bd:24:fe:17:9c:21:d8:8e:c0:e7:90:ee:85:0c:98:c7: 08:95:2c:66:92:ee:a1:9a:33:cd:c9:a4:1d:f0:ca:eb:9a:79: cd:a0:87:ba:62:1f:84:bb:12:d2:f1:06:98:6f:e4:ef:ab:c6: e8:18:cb:83:3c:06:e5:7f:31:83:9e:5f:b8:f5:8a:ab:60:0b: 5b:61:6e:f3:f5:5b:57:c8:9e:e6:46:c6:8e:c0:ea:a4:74:90: a0:3f:08:c1:c0:b4:93:73:b4:55:a5:8f:fc:67:d2:c5:40:53: 10:57:28:dd:29:c5:ee:57:34:d8:a6:e5:7d:38:50:69:6f:82: 24:5d:97:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRXNZRWT4towx7bEzMTn9TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MzkwZWMwYWRjYTVmMDc0M2QxODExNDVjNzg5OWY5OTFm YjY1ZTAwHhcNMjUxMjEyMDcwMDU1WhcNMjUxMjEzMDcwMDU1WjAzMTEwLwYDVQQD Eyg2YTdiYzc0YjExMjYyM2ZlYzZmYzQ3ZTFhM2JkZjBjM2E4OTNjMGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs401qpFWEgKX/RqqTyXhXiamp0AA QbeWdc6b2IJKvoPOxKXfkbBXmLqZgnyzaGEET13AvT7+Om1WqrkxH9EkLiJ3AiEC URYPAuvTAlURQp3k9N1/Dg/v01qFx5EV2xySY1TIaTV4P/QBfmqIw8Z6GkJUYFPE xCR0znP305zY7xkTYFaDSiZoVMX6WTsXqJX0YerU3fVnliokxhzrDHRHGxNitV3J vyZVcrFW4IL9qyn8ekdf6PKRrNCWvSPFfcaOBE41sGCyRsrrLKhhs3gVEljqG1Ov hEhuEIB39F5CnPQw2F8/3X96E0IRKqRYRQ0rh8rp8t9NbfVYa1dWggVCoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGp7x0sRJiP+xvxH4aO98MOok8CkMB8GA1UdIwQY MBaAFCk5DsCtyl8HQ9GBFFx4mfmR+2XgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9iMzEzOTItMmQxYy00OTM0LWE1OWUt ZWQ0MzNhYWM3ODI4LzEvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9iMzEzOTItMmQxYy00OTM0LWE1OWUtZWQ0MzNhYWM3ODI4 LzEvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGFTBW1BF PsxVJSVGNMQq3Bq4z7kh8RSviamqDkPYYJVvK3GjR9DW+8RzDkBPeQoRNZ712TDD rtFH9kBaUZBDjWr9pi6vUe/Pp4udQed70+0PCJRLAH27VYOufFTzZe/GlP/CXA8M R8E/WoVIkySnBjIzDG8hTD5aTs3ku9lbxgW9JP4XnCHYjsDnkO6FDJjHCJUsZpLu oZozzcmkHfDK65p5zaCHumIfhLsS0vEGmG/k76vG6BjLgzwG5X8xg55fuPWKq2AL W2Fu8/VbV8ie5kbGjsDqpHSQoD8IwcC0k3O0VaWP/GfSxUBTEFco3SnF7lc02Kbl fThQaW+CJF2XdA== -----END CERTIFICATE-----Generated at Fri Dec 12 17:33:48 2025 by rpki-client