This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft File: KXrnWSylJJHcFmow_hR31xK9Rl0.mft (raw, json) Hash identifier: NjBDYVX+wyvWkhGHHeAGzeBVBWQgBXD3TK36m+ZHKGg= Subject key identifier: 9E:C9:74:7C:5A:C8:7D:6A:2E:0E:26:71:F1:09:2A:1E:2A:B1:B0:11 Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d Certificate serial: 019B066B75F1665FB1D33F06308366541AF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft Manifest number: 177D Signing time: Wed 10 Dec 2025 04:01:04 +0000 Manifest this update: Wed 10 Dec 2025 04:01:04 +0000 Manifest next update: Thu 11 Dec 2025 04:01:04 +0000 Files and hashes: 1: 3S9CxnQg7YWqU3K6TXltDEUCLyw.roa (hash: 3OEFYGKv+A11bV584/FIEjB0rz/syH/3YTSncOKzqpk=) 2: 7iZSI8YJjBx97RcBp5yy0dHgNCc.roa (hash: zYIePn/XtBi1RBLoEwZwbryvrg3fa+ccFHSQFX92GIc=) 3: 8aTIb0puCina4qQH9DISIqfOc4Q.roa (hash: 1Nu+gUGiEPO422nTi4SIHIM/055+/Bx1i4GdyYjGB6w=) 4: 9DoakwUWAGtHNEatYpKzbo2QTwI.roa (hash: N1mtoTrK+kfX1PnLRJRzSQlCeUqp41+33H0gjLXBdeo=) 5: EZFIYtcapsDAbifqmq2FXtp-Cdw.roa (hash: f6ff20P7C3YhGHb/pCr95k1VGXcMCffUp+GlTWJzaPk=) 6: F-e0yheo2RviKbK6HPx7_eTqhA4.roa (hash: KEJO7y7WsDfC5FsDfSaCJ3hpxQXSnjViDnFGvytgGQY=) 7: KXrnWSylJJHcFmow_hR31xK9Rl0.crl (hash: t1beHWdTdOzu4ZwlKhw0xnKWdaFYt7PRkXLIwKt1Y1k=) 8: cWm4lcomb_7tGOMAKfN645HZ4lY.roa (hash: Q1Xtl3Tt4xDVvissECGJZtzvYROTu/HRq3nIK5nwbTU=) 9: ic83PxAobxuOswBFck-YRl3xl5s.roa (hash: b2hEd1qs+ywRwA/SKMeyaDMx96OzLoUUBDS6BjYhAik=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:6b:75:f1:66:5f:b1:d3:3f:06:30:83:66:54:1a:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d Validity Not Before: Dec 10 04:01:04 2025 GMT Not After : Dec 11 04:01:04 2025 GMT Subject: CN=9ec9747c5ac87d6a2e0e2671f1092a1e2ab1b011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:94:01:9c:8f:5f:a1:56:9c:af:b0:e8:63:97: 38:91:33:87:c1:4b:8d:04:a1:7d:3f:97:a2:e3:09: 65:c6:27:26:b7:d1:13:27:3f:fe:da:d7:bb:72:df: fe:1f:df:22:5b:9b:1f:92:66:4e:d8:28:fc:ed:5c: 0d:a8:e4:2d:e5:26:07:ec:3d:b6:c2:d7:e5:26:90: ff:f7:54:01:da:27:d6:b0:51:63:93:36:bc:b2:8e: 72:14:04:64:96:c0:ab:db:e1:41:ba:bf:5e:10:ad: 58:96:d2:ae:b2:c9:d6:32:93:fb:3d:17:63:13:8e: 78:bc:49:26:49:b9:c3:b3:6c:6a:d4:ac:0f:7b:96: 8a:12:65:b1:81:40:24:43:86:3b:27:23:38:98:44: 25:c8:13:a4:c9:aa:29:b9:27:b3:61:b0:4d:d7:06: 14:3e:e7:6c:a2:6a:9f:99:37:d0:c6:f4:bc:2c:52: 6c:66:b0:fe:6d:25:b7:b1:9a:f6:46:d5:41:3b:bd: 21:e5:9f:62:0d:4a:e1:2e:e0:f1:7e:d2:2d:24:f1: ef:18:72:66:b7:3e:d3:29:89:d7:3a:17:a2:f0:d9: 34:20:14:da:bb:e1:c5:a1:31:d5:6e:84:68:93:f0: 0e:f3:4b:00:70:03:45:4c:9c:1a:41:7e:78:20:40: d3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:C9:74:7C:5A:C8:7D:6A:2E:0E:26:71:F1:09:2A:1E:2A:B1:B0:11 X509v3 Authority Key Identifier: keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:13:bb:fc:c4:10:2d:15:39:1c:d0:ef:68:b4:b1:b6:bb:52: c2:27:00:6f:73:b6:a9:a2:08:3a:01:1c:9d:e9:1d:1b:ca:a8: d4:3d:64:b9:35:d9:54:96:c3:77:10:3a:49:3a:2d:26:52:41: 90:f8:10:55:38:61:33:a5:09:74:87:96:1a:17:69:b2:9f:f3: cb:41:22:14:55:d9:12:08:2e:6a:96:b9:30:f7:13:b8:3a:63: 6d:f5:64:78:ae:ae:70:16:6b:17:b1:d2:81:f9:6a:a0:ac:79: 20:32:13:6a:ca:74:91:9d:9e:e8:04:7d:00:20:d6:76:9a:f8: 3b:75:cb:d6:ba:6f:67:6e:9c:23:d0:0b:da:03:07:10:1e:fc: 7a:eb:78:aa:3c:2d:ca:d8:a2:fa:58:bd:21:09:58:cb:85:8d: b7:f2:5a:ca:ff:59:b6:09:04:72:7d:f1:4b:ea:83:b4:ef:5e: 80:83:63:ac:e0:4e:cb:5d:54:33:c8:28:36:c8:ab:56:75:69: 85:89:f9:ce:5a:56:7f:ab:79:c2:2f:49:c4:c3:b7:04:f4:a2: 52:ef:a9:a8:95:6d:4b:1a:96:31:3d:9a:9a:8e:09:ea:b3:58: cd:5b:bb:d0:8b:42:6e:5b:a0:5f:74:1c:4f:1b:15:85:ae:9e: 81:fe:48:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsGa3XxZl+x0z8GMINmVBrzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2FlNzU5MmNhNTI0OTFkYzE2NmEzMGZlMTQ3N2Q3MTJi ZDQ2NWQwHhcNMjUxMjEwMDQwMTA0WhcNMjUxMjExMDQwMTA0WjAzMTEwLwYDVQQD Eyg5ZWM5NzQ3YzVhYzg3ZDZhMmUwZTI2NzFmMTA5MmExZTJhYjFiMDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05QBnI9foVacr7DoY5c4kTOHwUuN BKF9P5ei4wllxicmt9ETJz/+2te7ct/+H98iW5sfkmZO2Cj87VwNqOQt5SYH7D22 wtflJpD/91QB2ifWsFFjkza8so5yFARklsCr2+FBur9eEK1YltKussnWMpP7PRdj E454vEkmSbnDs2xq1KwPe5aKEmWxgUAkQ4Y7JyM4mEQlyBOkyaopuSezYbBN1wYU PudsomqfmTfQxvS8LFJsZrD+bSW3sZr2RtVBO70h5Z9iDUrhLuDxftItJPHvGHJm tz7TKYnXOhei8Nk0IBTau+HFoTHVboRok/AO80sAcANFTJwaQX54IEDTPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ7JdHxayH1qLg4mcfEJKh4qsbARMB8GA1UdIwQY MBaAFCl651kspSSR3BZqMP4Ud9cSvUZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgt MzkxMGE1OWExMTIxLzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgtMzkxMGE1OWExMTIx LzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArBO7/MQQ LRU5HNDvaLSxtrtSwicAb3O2qaIIOgEcnekdG8qo1D1kuTXZVJbDdxA6STotJlJB kPgQVThhM6UJdIeWGhdpsp/zy0EiFFXZEgguapa5MPcTuDpjbfVkeK6ucBZrF7HS gflqoKx5IDITasp0kZ2e6AR9ACDWdpr4O3XL1rpvZ26cI9AL2gMHEB78eut4qjwt ytii+li9IQlYy4WNt/Jayv9ZtgkEcn3xS+qDtO9egINjrOBOy11UM8goNsirVnVp hYn5zlpWf6t5wi9JxMO3BPSiUu+pqJVtSxqWMT2amo4J6rNYzVu70ItCblugX3Qc TxsVha6egf5ITQ== -----END CERTIFICATE-----Generated at Wed Dec 10 09:16:54 2025 by rpki-client