This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft File: KfajAL99QLf41hgcW4p9vHG30SM.mft (raw, json) Hash identifier: g0Ic71CvskhsGHpEDwx8Bsrr9J4+fzFCXXr0MZDlZdM= Subject key identifier: 59:8A:4D:89:14:87:16:75:70:C4:B7:3C:E4:FF:0B:24:F2:22:A6:AE Authority key identifier: 29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23 Certificate issuer: /CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123 Certificate serial: 019B1C4E549E33E9EA655D7370DCCB068BA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft Manifest number: 0B58 Signing time: Sun 14 Dec 2025 10:00:54 +0000 Manifest this update: Sun 14 Dec 2025 10:00:54 +0000 Manifest next update: Mon 15 Dec 2025 10:00:54 +0000 Files and hashes: 1: KfajAL99QLf41hgcW4p9vHG30SM.crl (hash: LjTzMJRdFtWGoijBsvT6QQPdUtgOqW7DMn1I3kXFc5o=) 2: bXochpGWrfkL9JTx-tBya7FybWc.roa (hash: GWw+pyqvyZwm3wir46g8ZzCYrwNMhLudtjpRVXUkGu8=) 3: rF48GSjCA8nAgS7e7P_0TwDWMHI.roa (hash: mzK0vZsIrvw7/YH7xF2HGiJG11ODO49sPGy1ll1t6eQ=) 4: s8_NtbGTu8kgBV4HuDM2-AUVj2Q.roa (hash: E+MCsmGddUOCxHp7ENUlFyd8Du3D6Rxe6k6mioQYpr4=) 5: wKUJgTwD7cFwdEtrEHOHqt6iRN8.roa (hash: kOGKpGaa2gE7ztgll470FJTFa167kUV848g0OHaW6ow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 10:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:4e:54:9e:33:e9:ea:65:5d:73:70:dc:cb:06:8b:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123 Validity Not Before: Dec 14 10:00:54 2025 GMT Not After : Dec 15 10:00:54 2025 GMT Subject: CN=598a4d891487167570c4b73ce4ff0b24f222a6ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ec:96:00:cb:f3:48:ab:39:60:e4:25:73:93: 15:37:06:07:93:93:28:2d:bd:9e:ef:88:0a:29:50: ee:f8:69:0d:ed:ba:8c:8a:b5:1f:fc:28:fd:77:59: 0f:c1:3d:04:08:b9:68:43:7c:cd:14:f0:5a:00:15: 7d:99:ed:3f:d9:d3:cd:62:ab:aa:54:0b:f8:1e:37: 44:f4:53:db:69:73:8a:14:3c:56:dd:9b:b8:5b:bd: 7e:96:fa:4b:97:29:7e:f1:c9:07:fd:3e:6e:d0:ad: b6:18:46:32:c9:8e:c2:64:d6:ff:79:1d:ba:f8:c6: 3d:b7:b2:ca:e6:31:f3:d6:e7:2b:fb:0e:b0:3c:69: 8b:49:5b:bf:92:45:21:56:56:4f:95:7c:2c:33:e4: bb:87:c5:90:65:c0:18:9b:a1:e9:17:13:46:cb:20: 41:5b:88:35:4d:4a:f6:22:5d:d9:67:1f:56:da:d6: 80:91:4b:60:74:11:47:38:0f:da:75:96:ec:ec:f7: 00:e9:85:3b:74:4a:0a:d3:89:35:8b:f5:49:a7:ae: 9c:07:bd:93:9a:1e:13:c4:8b:01:92:a5:ab:bf:5a: ed:70:18:33:03:00:a9:de:3d:da:88:52:b4:a3:5e: d4:b8:b0:5a:90:1b:50:bd:0b:88:69:71:28:b0:6e: 26:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:8A:4D:89:14:87:16:75:70:C4:B7:3C:E4:FF:0B:24:F2:22:A6:AE X509v3 Authority Key Identifier: keyid:29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:19:77:a1:f4:e9:70:c0:da:79:36:c4:50:d7:2b:6a:fa:ce: e4:0c:db:5d:1e:e5:eb:dc:1c:b7:24:06:29:f9:be:d0:5c:90: 06:fd:c0:87:da:8b:f4:32:cc:da:88:7a:7d:42:3f:88:48:2a: 56:db:77:d7:f1:cb:81:41:6e:12:43:ae:77:6f:09:0c:44:f6: d9:d7:95:5e:a1:89:7a:7d:d8:3a:6e:cd:77:75:42:b4:74:75: 1a:24:da:5b:66:b2:51:68:3e:db:11:c8:42:8e:7d:63:9d:ea: 4f:1a:14:18:f1:1e:a4:61:74:1b:17:94:32:39:d4:e9:4d:b4: c1:a0:47:ed:c0:2e:5a:8e:0b:82:ec:b1:54:ec:76:e5:36:8c: 2e:7f:e0:28:9f:9d:a3:d0:b1:5d:62:ba:8d:5c:f6:22:5b:2c: 56:77:b3:ef:d0:85:b5:d9:7a:60:af:8c:33:ff:3d:53:59:7c: cb:4d:b6:0a:58:b1:dd:25:78:26:d5:f5:c3:22:fb:b8:8a:ec: 82:83:dc:0a:52:89:a7:88:ff:14:62:0b:c6:05:d8:d3:f5:b4: a3:ab:35:c9:1b:31:01:3e:7d:f4:8d:70:f6:ed:04:98:39:c9: c4:6d:63:89:39:93:c5:ea:2e:18:51:e9:30:41:94:8c:88:22: 86:41:b6:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscTlSeM+nqZV1zcNzLBounMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZjZhMzAwYmY3ZDQwYjdmOGQ2MTgxYzViOGE3ZGJjNzFi N2QxMjMwHhcNMjUxMjE0MTAwMDU0WhcNMjUxMjE1MTAwMDU0WjAzMTEwLwYDVQQD Eyg1OThhNGQ4OTE0ODcxNjc1NzBjNGI3M2NlNGZmMGIyNGYyMjJhNmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+yWAMvzSKs5YOQlc5MVNwYHk5Mo Lb2e74gKKVDu+GkN7bqMirUf/Cj9d1kPwT0ECLloQ3zNFPBaABV9me0/2dPNYquq VAv4HjdE9FPbaXOKFDxW3Zu4W71+lvpLlyl+8ckH/T5u0K22GEYyyY7CZNb/eR26 +MY9t7LK5jHz1ucr+w6wPGmLSVu/kkUhVlZPlXwsM+S7h8WQZcAYm6HpFxNGyyBB W4g1TUr2Il3ZZx9W2taAkUtgdBFHOA/adZbs7PcA6YU7dEoK04k1i/VJp66cB72T mh4TxIsBkqWrv1rtcBgzAwCp3j3aiFK0o17UuLBakBtQvQuIaXEosG4mxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFmKTYkUhxZ1cMS3POT/CyTyIqauMB8GA1UdIwQY MBaAFCn2owC/fUC3+NYYHFuKfbxxt9EjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2ZhakFMOTlRTGY0MWhnY1c0cDl2SEczMFNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hYWY0OWMtODNkZC00NmFhLThjZTct Yjg0YzQxM2RmYWE0LzEvS2ZhakFMOTlRTGY0MWhnY1c0cDl2SEczMFNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9hYWY0OWMtODNkZC00NmFhLThjZTctYjg0YzQxM2RmYWE0 LzEvS2ZhakFMOTlRTGY0MWhnY1c0cDl2SEczMFNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJhl3ofTp cMDaeTbEUNcravrO5AzbXR7l69wctyQGKfm+0FyQBv3Ah9qL9DLM2oh6fUI/iEgq Vtt31/HLgUFuEkOud28JDET22deVXqGJen3YOm7Nd3VCtHR1GiTaW2ayUWg+2xHI Qo59Y53qTxoUGPEepGF0GxeUMjnU6U20waBH7cAuWo4LguyxVOx25TaMLn/gKJ+d o9CxXWK6jVz2IlssVnez79CFtdl6YK+MM/89U1l8y022Clix3SV4JtX1wyL7uIrs goPcClKJp4j/FGILxgXY0/W0o6s1yRsxAT599I1w9u0EmDnJxG1jiTmTxeouGFHp MEGUjIgihkG2YQ== -----END CERTIFICATE-----Generated at Sun Dec 14 17:07:49 2025 by rpki-client