This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft File: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft (raw, json) Hash identifier: 1mdUju4kJLiGQoXefKAzrBN7yZOIT3Bj8LmhWCzzadk= Subject key identifier: 2C:AE:08:BD:D5:68:D9:59:54:C2:5C:6F:68:C7:71:1D:13:03:5A:8D Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Certificate serial: 019B0AB5B8B6C28FAB176464B505FE909E5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft Manifest number: 1780 Signing time: Thu 11 Dec 2025 00:00:39 +0000 Manifest this update: Thu 11 Dec 2025 00:00:39 +0000 Manifest next update: Fri 12 Dec 2025 00:00:39 +0000 Files and hashes: 1: 1TO3wwmstlJI_xpUfl9kicvHbH8.roa (hash: l5tHAqNDeNZrnGt3mzboM0n81s+hmMDLpSHW8MhJdZQ=) 2: 26WNO431X2DrhCSuMJxs-XhHdFw.roa (hash: NIeRGI1yKvtGj8sFMzxTqCRVywS0D7qHUOhHSF/o4Dg=) 3: FLQOSktOr1hKjG4R6lRrGTwu4Y4.roa (hash: HCxQYiPGo2KxnCSlrWXoWcHI4W9ZFCE3iBJWeLRX1o8=) 4: MTxciv5mcC6g5MkOWJ_PCLUtcGw.roa (hash: sgzh4uhlDpWhAHL+IAu4cgWAxT/K2/Pct3jSfOVM8NQ=) 5: Y1uBCw2ID0YyZ99v-Z_lyCH99eg.roa (hash: cjULbx6P7MvMK4WANKsBKAVbb7nETAlX3DivVasETiQ=) 6: YaNSkilLvxLgKPrT-xDRiMn7jX4.roa (hash: EZ2qfgMp+bvQiHoGlwVv0eQJIbOoTlAjmgUR8kwZiCU=) 7: bCiizil2Ey8Pvh56RnqDgTk8X7Q.roa (hash: phspsqh/4y98JzmGzw3HpShtGGUJNNv7gxCq93gvxKo=) 8: gyBoR0Pr1cH4RPdcxzglRlFRHBw.roa (hash: 3pblEbuyEQGeT8WjyqKPo8c9UE3z9FtuOT2bJKOYqhg=) 9: iReNUad_z8MIbDXyAmruHYsr7Tg.roa (hash: IQii4bF71uMtioCE1UShqHzf2ujT5ikVUAvaKniKsLg=) 10: jAY2gqsxgcne6CxwXuSfgMf4P5o.roa (hash: GE2OTsJpTeX1gwmggvr4Bc4mDirZkzPXPMqCMKxyOyI=) 11: k3qjfn2AAdeFPjY3Bp8KUgRaMPA.roa (hash: 4Ifjp85NogHztb45WtYR2OYxyvQl/OdGpjlDDi7JSNQ=) 12: kj7kinsfLRhL_IoV619KJi8FFL8.roa (hash: PZmgxN8/Rtu6BsEbQsN7jkEXwA4RX6FBccLjt1dXYy4=) 13: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl (hash: T0e02GsLDuKbU4IqA7T3L5SCPnXYf+yvzeiG2r/Y3x0=) 14: ntJH0KRoZucW8VNuwTIHrnSnlKg.roa (hash: 09HbUbUgEiRqWzx65FOtxruuV31mRSjgz3dJWoNx5nA=) 15: pgkZmq53mdBn0axql3jHx0EQjb0.roa (hash: aQFrLEqXJ0R769ANrMlsyVSYn8plE/Z1heUQyyK64EM=) 16: rQI6zOSTMPr-5aSxylwS7FyovQ4.roa (hash: rfEafPW5O0SAZQwvAq0I4Fkx0LFGcfF/mHD1nsLYnQk=) 17: sjrvDPQwhWQPqwn6TmRlTLKuFYg.roa (hash: 1WK8IPxCTeSex8E0rLqfFDPE1ENBltlsB6VMf3gJcZY=) 18: u4G1_yF4TBBumrIYzOwiYZxivvM.roa (hash: KXapgrZ9J9YmS63vQiCaKhL0YwTkps2tWnrl3xdYLX4=) 19: uMHNQRmfBxlbvZLGtjT4gp4kg2M.roa (hash: F+fAKBuQq3PLDBu2sHTyZl1ELbNuh34xu5t/W6OjOpg=) 20: ywFfsakzP6gwg7h7Z-Y4enCkXVs.roa (hash: zQ4r7S3Ps9QMhK/S8Db/JFo0flSN41hhML8fbJu8SJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0a:b5:b8:b6:c2:8f:ab:17:64:64:b5:05:fe:90:9e:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Validity Not Before: Dec 11 00:00:39 2025 GMT Not After : Dec 12 00:00:39 2025 GMT Subject: CN=2cae08bdd568d95954c25c6f68c7711d13035a8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:92:fd:96:05:d6:2c:1a:f0:01:83:c1:a8:93: dd:15:76:3e:cd:2b:f8:61:44:c4:18:50:a3:d9:3b: 98:cc:b0:ad:c2:eb:c0:64:80:79:8b:7f:69:12:50: 49:32:ac:fc:84:44:f8:60:68:e4:15:a5:6c:c6:db: f8:90:c3:49:d4:3a:2c:e7:3b:05:2b:0f:76:3f:d3: 6c:7b:26:20:e1:40:1e:7a:fb:6a:cc:b4:5e:dc:67: a2:db:04:65:d7:cc:0d:16:f5:40:08:96:48:a7:61: 2f:a4:ff:c9:33:b7:26:2c:21:5f:55:3c:85:21:27: bb:5a:de:25:72:1c:bd:48:1f:64:98:f9:60:38:3e: ce:3f:d2:4c:07:5d:34:a8:80:d3:25:42:03:5e:9e: b8:5d:38:93:6e:71:b2:4d:f9:b0:9a:f3:ff:eb:e5: 94:87:4d:ff:4f:8d:42:3c:e5:b7:3c:6a:cc:cd:4c: 9d:21:02:d6:88:32:25:1f:68:5d:b8:26:7b:ab:47: 33:2d:16:c8:2b:ad:93:9d:00:6f:41:84:8e:36:03: 51:c1:49:4a:17:44:74:e8:dd:47:3c:f1:8b:be:c7: 1c:ed:dd:3c:bf:1d:99:2f:78:e2:2c:d2:dd:19:6e: 21:b7:05:3c:1b:0c:f7:c0:b2:1c:22:98:c3:11:b8: 43:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:AE:08:BD:D5:68:D9:59:54:C2:5C:6F:68:C7:71:1D:13:03:5A:8D X509v3 Authority Key Identifier: keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:3b:1c:e9:d4:5a:bf:51:6d:c2:a6:5a:34:90:f4:ab:68:76: 4b:03:c6:19:18:9f:de:cd:37:09:36:79:cb:9e:e8:75:20:1e: 80:d9:9e:d2:4a:30:49:d4:24:a0:d7:ce:a7:67:e5:53:53:ef: f3:5a:e4:2f:0e:fb:4b:8f:46:80:3d:2c:9f:84:5f:4d:91:30: 41:ff:5a:26:49:a0:2e:db:25:e6:4e:fd:aa:59:13:7e:44:43: 9c:cf:2b:25:19:92:4a:61:d7:ed:d4:d8:ec:12:69:41:a0:89: 91:4a:c7:c9:b4:85:c9:4c:99:1c:93:a4:77:ba:b1:f4:80:09: 12:4a:8b:cd:8b:b2:ad:5f:37:34:53:05:35:b9:80:90:7a:db: ef:6c:92:8d:bc:20:60:b6:39:df:c9:53:1d:ff:1d:6b:99:82: ca:16:14:64:bb:9c:c4:64:a5:6e:9b:25:ae:bf:d2:f8:90:45: e7:1a:42:f8:bd:9a:69:9a:38:f2:62:04:82:88:e0:c1:a0:ea: 11:7c:c6:cf:b6:8a:d9:28:1f:76:eb:a9:f3:95:11:d0:b1:3f: 34:43:12:1f:23:ac:6c:70:be:ff:f2:00:be:ed:5f:10:70:1d: b3:ef:fb:a6:f0:eb:7d:07:bf:25:b9:f8:c1:dd:46:ce:df:f2: 2a:5c:98:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsKtbi2wo+rF2RktQX+kJ5dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYmY2NDY0Y2U2ZTE5YTRkY2Y4YTMyYjI3YTJmMWNiZTE1 NTEwNTUwHhcNMjUxMjExMDAwMDM5WhcNMjUxMjEyMDAwMDM5WjAzMTEwLwYDVQQD EygyY2FlMDhiZGQ1NjhkOTU5NTRjMjVjNmY2OGM3NzExZDEzMDM1YThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJL9lgXWLBrwAYPBqJPdFXY+zSv4 YUTEGFCj2TuYzLCtwuvAZIB5i39pElBJMqz8hET4YGjkFaVsxtv4kMNJ1Dos5zsF Kw92P9NseyYg4UAeevtqzLRe3Gei2wRl18wNFvVACJZIp2EvpP/JM7cmLCFfVTyF ISe7Wt4lchy9SB9kmPlgOD7OP9JMB100qIDTJUIDXp64XTiTbnGyTfmwmvP/6+WU h03/T41CPOW3PGrMzUydIQLWiDIlH2hduCZ7q0czLRbIK62TnQBvQYSONgNRwUlK F0R06N1HPPGLvscc7d08vx2ZL3jiLNLdGW4htwU8Gwz3wLIcIpjDEbhDQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCyuCL3VaNlZVMJcb2jHcR0TA1qNMB8GA1UdIwQY MBaAFJK/ZGTObhmk3PijKyei8cvhVRBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzct YjUzZTMwZTE0MTJhLzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzctYjUzZTMwZTE0MTJh LzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAETsc6dRa v1FtwqZaNJD0q2h2SwPGGRif3s03CTZ5y57odSAegNme0kowSdQkoNfOp2flU1Pv 81rkLw77S49GgD0sn4RfTZEwQf9aJkmgLtsl5k79qlkTfkRDnM8rJRmSSmHX7dTY 7BJpQaCJkUrHybSFyUyZHJOkd7qx9IAJEkqLzYuyrV83NFMFNbmAkHrb72ySjbwg YLY538lTHf8da5mCyhYUZLucxGSlbpslrr/S+JBF5xpC+L2aaZo48mIEgojgwaDq EXzGz7aK2Sgfduup85UR0LE/NEMSHyOsbHC+//IAvu1fEHAds+/7pvDrfQe/Jbn4 wd1Gzt/yKlyYEw== -----END CERTIFICATE-----Generated at Thu Dec 11 01:22:31 2025 by rpki-client