This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft File: KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft (raw, json) Hash identifier: JFc3oRiTyCXo75sMMqZjeIgKgz2DgqQwF3aD7h+G6xA= Subject key identifier: C5:D9:5A:1B:BE:7E:B8:95:5A:27:1D:2A:4F:DE:84:E1:6A:A4:FC:3B Authority key identifier: 28:1A:0B:BF:52:D8:D2:D4:85:94:34:3A:55:40:9F:C1:0B:B7:B7:1A Certificate issuer: /CN=281a0bbf52d8d2d48594343a55409fc10bb7b71a Certificate serial: 019AF16454C2BF145910C52D65A6F6DD8A3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 02:01:15 +0000 Manifest this update: Sat 06 Dec 2025 02:01:15 +0000 Manifest next update: Sun 07 Dec 2025 02:01:15 +0000 Files and hashes: 1: KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl (hash: CSXVUvT633+cLfql+wleZSlz0CcuWadK2NexOGqIy9Q=) 2: VL0JqwmqF16Z9vYeG0MjePH-HaI.roa (hash: pSsEMVRtkWy4MtHaQ+2yZDRrd+dgM8mCSpJI0iLDlbM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:54:c2:bf:14:59:10:c5:2d:65:a6:f6:dd:8a:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=281a0bbf52d8d2d48594343a55409fc10bb7b71a Validity Not Before: Dec 6 02:01:15 2025 GMT Not After : Dec 7 02:01:15 2025 GMT Subject: CN=c5d95a1bbe7eb8955a271d2a4fde84e16aa4fc3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:38:86:76:1d:b5:03:51:7c:27:c6:15:49:a5: 03:ae:84:a0:2c:b9:16:82:ae:ae:05:7a:e8:f6:93: 1d:2c:1a:47:41:84:09:d7:39:e4:d7:9e:c4:bb:66: e4:d1:bc:c2:9e:72:fa:e1:1e:0b:f1:7a:36:63:bc: e9:31:1c:1f:e6:6e:bb:fa:46:c5:45:eb:6c:c8:6d: ba:8e:74:bf:2f:fb:9b:db:0e:e4:d3:f9:79:cf:68: ee:f2:21:73:8e:91:6b:5c:af:09:ff:a6:63:a7:04: cc:83:12:a0:f8:29:75:25:98:61:28:21:66:ad:29: 76:71:22:93:6c:2c:f5:6a:91:87:2d:90:46:84:16: ac:c3:99:71:00:e2:df:50:ac:61:33:11:d3:b2:21: 23:6f:ff:55:40:eb:94:52:0c:dd:77:21:ad:d8:d1: a9:9e:2d:a5:3e:16:80:be:6b:8a:a0:f2:7b:26:c0: 7e:4e:17:98:6d:39:e4:36:e2:87:e3:bc:75:68:7a: 22:4e:d8:d8:26:93:bf:06:61:76:54:1d:ee:13:92: b3:19:30:cd:0b:ce:de:85:2e:e8:07:fb:9b:39:17: 7e:7a:72:a7:67:9f:8f:2b:37:48:e4:ec:fe:30:75: ad:56:4b:d8:67:29:7c:31:a0:bb:6f:ce:8c:67:cc: 5f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D9:5A:1B:BE:7E:B8:95:5A:27:1D:2A:4F:DE:84:E1:6A:A4:FC:3B X509v3 Authority Key Identifier: keyid:28:1A:0B:BF:52:D8:D2:D4:85:94:34:3A:55:40:9F:C1:0B:B7:B7:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:e6:0b:6e:4f:32:1f:51:20:04:f9:a9:2e:a0:44:5a:e8:5f: a2:48:72:58:67:37:03:95:83:bf:09:b4:47:f5:5e:2c:8f:0e: cb:a6:09:0a:29:b7:b9:5c:26:50:70:cc:45:7f:0f:b2:3a:47: fe:40:b7:e6:bd:c3:74:2f:39:a8:33:1b:18:30:53:19:08:1a: 21:17:e6:a1:3b:67:ee:cc:6b:96:09:e7:b8:21:38:ae:ec:d5: e5:d7:77:57:2e:7f:bd:e8:2a:83:a6:fb:fc:cc:40:0f:28:b6: 83:88:89:1a:33:fa:8b:a1:a9:50:fb:d0:34:ed:de:35:f8:3c: b1:9e:f8:7f:04:fd:88:32:5d:03:0d:5d:e1:63:8e:46:24:ee: 85:02:78:23:32:dc:ca:1a:8f:a4:24:44:e8:a4:0a:1b:b1:94: 98:67:5a:d7:95:bd:d9:65:d1:6a:ee:d1:8c:fe:f8:c1:46:09: 8a:8b:9b:cd:aa:f4:39:65:f8:4e:9a:07:dc:a4:65:3b:31:97: ad:3f:36:38:b8:8c:be:bf:2c:13:74:b6:d0:f0:3f:cf:7f:34: 14:9d:c8:f3:12:bd:a2:cf:6c:c7:c6:07:5f:4c:56:71:2c:7a: a2:75:15:0f:6f:99:b5:1b:c9:79:55:19:57:de:bf:99:3e:61: df:94:41:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZFTCvxRZEMUtZab23Yo8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MWEwYmJmNTJkOGQyZDQ4NTk0MzQzYTU1NDA5ZmMxMGJi N2I3MWEwHhcNMjUxMjA2MDIwMTE1WhcNMjUxMjA3MDIwMTE1WjAzMTEwLwYDVQQD EyhjNWQ5NWExYmJlN2ViODk1NWEyNzFkMmE0ZmRlODRlMTZhYTRmYzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyziGdh21A1F8J8YVSaUDroSgLLkW gq6uBXro9pMdLBpHQYQJ1znk157Eu2bk0bzCnnL64R4L8Xo2Y7zpMRwf5m67+kbF RetsyG26jnS/L/ub2w7k0/l5z2ju8iFzjpFrXK8J/6ZjpwTMgxKg+Cl1JZhhKCFm rSl2cSKTbCz1apGHLZBGhBasw5lxAOLfUKxhMxHTsiEjb/9VQOuUUgzddyGt2NGp ni2lPhaAvmuKoPJ7JsB+TheYbTnkNuKH47x1aHoiTtjYJpO/BmF2VB3uE5KzGTDN C87ehS7oB/ubORd+enKnZ5+PKzdI5Oz+MHWtVkvYZyl8MaC7b86MZ8xfhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMXZWhu+friVWicdKk/ehOFqpPw7MB8GA1UdIwQY MBaAFCgaC79S2NLUhZQ0OlVAn8ELt7caMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0JvTHYxTFkwdFNGbERRNlZVQ2Z3UXUzdHhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8zZjUxNTQtNjNkOC00YTRiLTlhNDgt MWM5YzRhMWJiZDQzLzEvS0JvTHYxTFkwdFNGbERRNlZVQ2Z3UXUzdHhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS8zZjUxNTQtNjNkOC00YTRiLTlhNDgtMWM5YzRhMWJiZDQz LzEvS0JvTHYxTFkwdFNGbERRNlZVQ2Z3UXUzdHhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADuYLbk8y H1EgBPmpLqBEWuhfokhyWGc3A5WDvwm0R/VeLI8Oy6YJCim3uVwmUHDMRX8PsjpH /kC35r3DdC85qDMbGDBTGQgaIRfmoTtn7sxrlgnnuCE4ruzV5dd3Vy5/vegqg6b7 /MxADyi2g4iJGjP6i6GpUPvQNO3eNfg8sZ74fwT9iDJdAw1d4WOORiTuhQJ4IzLc yhqPpCRE6KQKG7GUmGda15W92WXRau7RjP74wUYJioubzar0OWX4TpoH3KRlOzGX rT82OLiMvr8sE3S20PA/z380FJ3I8xK9os9sx8YHX0xWcSx6onUVD2+ZtRvJeVUZ V96/mT5h35RB6Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:33:11 2025 by rpki-client