This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.mft File: kVNTmOpX9qyMAuZZ6S8YsTjhNhk.mft (raw, json) Hash identifier: ryHZcwwlZJrFtBRgFabTW662ovKHEbwDVONsMqjcukw= Subject key identifier: AB:86:18:25:41:BF:7C:45:20:8C:99:15:8E:7F:85:F6:24:7E:C2:EF Authority key identifier: 91:53:53:98:EA:57:F6:AC:8C:02:E6:59:E9:2F:18:B1:38:E1:36:19 Certificate issuer: /CN=91535398ea57f6ac8c02e659e92f18b138e13619 Certificate serial: 019AF50B4663B383F742D6E8051DDF0BA12E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.mft Manifest number: 14CB Signing time: Sat 06 Dec 2025 19:02:28 +0000 Manifest this update: Sat 06 Dec 2025 19:02:28 +0000 Manifest next update: Sun 07 Dec 2025 19:02:28 +0000 Files and hashes: 1: kVNTmOpX9qyMAuZZ6S8YsTjhNhk.crl (hash: tqsVl372nrAPJ+/OBV0WJ3wNXyr5vsFhUEtwcFqBv4I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.mft rsync://rpki.ripe.net/repository/DEFAULT/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:46:63:b3:83:f7:42:d6:e8:05:1d:df:0b:a1:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91535398ea57f6ac8c02e659e92f18b138e13619 Validity Not Before: Dec 6 19:02:28 2025 GMT Not After : Dec 7 19:02:28 2025 GMT Subject: CN=ab86182541bf7c45208c99158e7f85f6247ec2ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:93:fd:2d:87:96:35:e9:62:96:19:63:2f:90: 6e:24:37:f2:af:9f:50:51:3e:a0:4f:f5:b1:53:1f: 34:dc:68:e7:18:07:27:f3:7a:39:09:d5:9d:5c:46: 5a:05:88:86:e9:39:10:fb:4b:93:62:c7:99:93:e4: 61:74:c1:d2:58:68:cd:20:5b:37:66:e4:dc:43:1a: 6e:3c:4a:56:e0:fb:75:be:3e:ad:27:5b:69:c9:a2: b2:8d:a3:4b:a2:f5:36:71:ed:b3:34:d7:0c:02:cd: f1:19:c8:a7:8f:88:c6:72:44:79:64:e1:8d:92:35: be:f9:63:4c:eb:aa:f8:15:f9:33:7c:a6:e5:87:14: af:b6:44:3b:1e:04:36:43:c2:32:43:5e:1d:6c:82: 9a:27:e1:45:e6:09:1a:96:3f:21:7c:27:95:4b:cf: d5:cc:47:fd:b0:2b:87:f5:7c:88:2f:d3:85:c2:40: 50:28:24:6e:4f:8a:c1:89:6e:a6:74:6a:ff:b5:c8: 50:0d:9c:af:52:92:1f:cd:dc:34:35:b9:b6:d3:85: 6b:d6:d8:f3:64:6b:87:c3:c1:98:f4:5e:8f:c3:3b: 8c:02:d5:13:4e:ed:a9:a8:b8:d8:73:f6:24:bf:64: fd:b4:ed:3a:b8:58:4b:f3:4c:90:af:eb:70:07:e1: f0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:86:18:25:41:BF:7C:45:20:8C:99:15:8E:7F:85:F6:24:7E:C2:EF X509v3 Authority Key Identifier: keyid:91:53:53:98:EA:57:F6:AC:8C:02:E6:59:E9:2F:18:B1:38:E1:36:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:48:d8:d1:e5:f3:63:74:28:70:7f:32:fe:49:2e:16:3c:8b: 7d:be:b7:96:93:8e:ad:4e:05:fd:46:82:55:30:b3:6b:28:fa: 3e:93:10:6d:ed:cd:fa:ff:e5:a5:51:44:0a:c1:38:4a:b2:63: 09:02:b6:7f:14:0e:78:2e:e1:c0:e3:21:76:e2:7e:b6:40:1e: 85:4a:59:0b:0e:a2:d7:51:3d:79:84:52:3e:d1:7b:6f:7c:98: 75:fd:91:f8:c3:90:b3:fd:0f:31:93:ef:35:23:90:5f:73:10: 7a:5c:66:fd:4f:a4:2a:40:07:7e:bb:b8:55:fa:62:b8:9b:7f: 27:ba:23:fc:ba:c6:38:2d:26:e2:ac:9e:b3:4c:16:49:6b:1c: 2d:d1:d6:50:5b:09:3d:3a:aa:a1:8d:3e:09:5b:cf:0c:e1:24: 03:35:34:37:24:63:2e:42:ea:b5:06:5c:2a:26:dd:a2:06:f1: 33:aa:02:ff:6c:52:26:f3:9f:97:74:8b:6b:b2:cd:ef:cb:f2: 2a:2d:39:5b:84:3b:f0:af:43:6a:81:a9:33:e8:60:e5:e0:11: c4:65:8b:1b:d6:ed:ed:94:72:d3:95:59:22:61:71:36:25:ab: c2:7c:a5:01:79:05:63:9e:0d:e5:e7:f9:f8:00:99:99:3f:0e: 6f:83:4a:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C0Zjs4P3QtboBR3fC6EuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxNTM1Mzk4ZWE1N2Y2YWM4YzAyZTY1OWU5MmYxOGIxMzhl MTM2MTkwHhcNMjUxMjA2MTkwMjI4WhcNMjUxMjA3MTkwMjI4WjAzMTEwLwYDVQQD EyhhYjg2MTgyNTQxYmY3YzQ1MjA4Yzk5MTU4ZTdmODVmNjI0N2VjMmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZP9LYeWNelilhljL5BuJDfyr59Q UT6gT/WxUx803GjnGAcn83o5CdWdXEZaBYiG6TkQ+0uTYseZk+RhdMHSWGjNIFs3 ZuTcQxpuPEpW4Pt1vj6tJ1tpyaKyjaNLovU2ce2zNNcMAs3xGcinj4jGckR5ZOGN kjW++WNM66r4FfkzfKblhxSvtkQ7HgQ2Q8IyQ14dbIKaJ+FF5gkalj8hfCeVS8/V zEf9sCuH9XyIL9OFwkBQKCRuT4rBiW6mdGr/tchQDZyvUpIfzdw0Nbm204Vr1tjz ZGuHw8GY9F6PwzuMAtUTTu2pqLjYc/Ykv2T9tO06uFhL80yQr+twB+HwLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKuGGCVBv3xFIIyZFY5/hfYkfsLvMB8GA1UdIwQY MBaAFJFTU5jqV/asjALmWekvGLE44TYZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1ZOVG1PcFg5cXlNQXVaWjZTOFlzVGpoTmhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8wY2ExNzUtODk1YS00NTJhLWJhZDQt YzU5OWYwOTc4N2Y5LzEva1ZOVG1PcFg5cXlNQXVaWjZTOFlzVGpoTmhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8wY2ExNzUtODk1YS00NTJhLWJhZDQtYzU5OWYwOTc4N2Y5 LzEva1ZOVG1PcFg5cXlNQXVaWjZTOFlzVGpoTmhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaEjY0eXz Y3QocH8y/kkuFjyLfb63lpOOrU4F/UaCVTCzayj6PpMQbe3N+v/lpVFECsE4SrJj CQK2fxQOeC7hwOMhduJ+tkAehUpZCw6i11E9eYRSPtF7b3yYdf2R+MOQs/0PMZPv NSOQX3MQelxm/U+kKkAHfru4VfpiuJt/J7oj/LrGOC0m4qyes0wWSWscLdHWUFsJ PTqqoY0+CVvPDOEkAzU0NyRjLkLqtQZcKibdogbxM6oC/2xSJvOfl3SLa7LN78vy Ki05W4Q78K9DaoGpM+hg5eARxGWLG9bt7ZRy05VZImFxNiWrwnylAXkFY54N5ef5 +ACZmT8Ob4NKgw== -----END CERTIFICATE-----Generated at Sun Dec 7 04:30:25 2025 by rpki-client