This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b5f338-7d84-4ac5-b7df-c573d007a781/1/kBH7CJG4_pLLZ6vSni3MhczHhkk.mft File: kBH7CJG4_pLLZ6vSni3MhczHhkk.mft (raw, json) Hash identifier: 73B3y5/XVVNpzw33RsOstZDXdMKjuIyzLZUbOqR7I8o= Subject key identifier: 7D:CA:B1:98:1C:D9:EE:A1:33:82:98:52:B8:65:DA:0F:6E:7F:EC:F3 Authority key identifier: 90:11:FB:08:91:B8:FE:92:CB:67:AB:D2:9E:2D:CC:85:CC:C7:86:49 Certificate issuer: /CN=9011fb0891b8fe92cb67abd29e2dcc85ccc78649 Certificate serial: 019AF164088C849C25F67E1D873091842FFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kBH7CJG4_pLLZ6vSni3MhczHhkk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b5f338-7d84-4ac5-b7df-c573d007a781/1/kBH7CJG4_pLLZ6vSni3MhczHhkk.mft Manifest number: C5 Signing time: Sat 06 Dec 2025 02:00:56 +0000 Manifest this update: Sat 06 Dec 2025 02:00:56 +0000 Manifest next update: Sun 07 Dec 2025 02:00:56 +0000 Files and hashes: 1: kBH7CJG4_pLLZ6vSni3MhczHhkk.crl (hash: 9yyFQ5xsbZSzhWyOWyH+TFhREQYLEeCS5+tiSnDVUS4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/b5f338-7d84-4ac5-b7df-c573d007a781/1/kBH7CJG4_pLLZ6vSni3MhczHhkk.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/b5f338-7d84-4ac5-b7df-c573d007a781/1/kBH7CJG4_pLLZ6vSni3MhczHhkk.mft rsync://rpki.ripe.net/repository/DEFAULT/kBH7CJG4_pLLZ6vSni3MhczHhkk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:08:8c:84:9c:25:f6:7e:1d:87:30:91:84:2f:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9011fb0891b8fe92cb67abd29e2dcc85ccc78649 Validity Not Before: Dec 6 02:00:56 2025 GMT Not After : Dec 7 02:00:56 2025 GMT Subject: CN=7dcab1981cd9eea133829852b865da0f6e7fecf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3d:b6:bd:79:9e:c5:0a:d8:25:0d:7a:bb:92: 51:3b:d0:98:84:37:e2:57:c8:90:9e:66:d8:ae:a6: 88:fd:18:0a:2f:e2:58:99:7c:e1:46:ec:04:a2:35: 7b:11:92:d3:a8:33:35:92:e8:45:34:3e:b4:b2:8e: af:fc:73:02:45:da:19:82:56:e5:80:0f:ce:24:21: 58:b0:2e:e2:f0:72:47:33:9b:2b:cd:3e:b0:e0:0b: e2:ef:a7:8c:4e:76:d7:b4:83:84:56:6d:c5:7f:06: d8:2c:39:36:f6:8d:4d:72:9d:e5:d1:e0:e9:18:c5: a3:d1:d1:63:a7:8d:df:c8:a9:8c:c4:1c:a8:81:2c: e9:15:fc:6a:bd:26:67:26:df:91:84:da:f4:bc:d3: 09:66:3e:d0:b1:5f:c5:95:2b:60:60:c4:f8:b0:c4: 89:ee:bd:16:5b:02:9a:50:e0:2e:df:e6:64:64:ad: 48:5c:62:4c:99:64:7a:4f:d1:20:0e:c4:d8:27:f9: 95:b0:f6:b6:a9:d3:28:a2:8f:c6:26:89:3b:0e:13: b4:a6:c9:95:01:b4:69:b3:a6:39:5d:bd:5a:91:84: e0:40:81:4e:6b:bb:6d:ba:6f:44:56:58:ec:53:84: 75:b0:d7:ae:e7:a5:20:cf:91:f6:80:53:b2:6e:0d: 9b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:CA:B1:98:1C:D9:EE:A1:33:82:98:52:B8:65:DA:0F:6E:7F:EC:F3 X509v3 Authority Key Identifier: keyid:90:11:FB:08:91:B8:FE:92:CB:67:AB:D2:9E:2D:CC:85:CC:C7:86:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kBH7CJG4_pLLZ6vSni3MhczHhkk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b5f338-7d84-4ac5-b7df-c573d007a781/1/kBH7CJG4_pLLZ6vSni3MhczHhkk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b5f338-7d84-4ac5-b7df-c573d007a781/1/kBH7CJG4_pLLZ6vSni3MhczHhkk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:b8:9d:14:48:f0:42:b8:29:58:d2:3a:da:45:87:1d:5b:76: d4:da:ac:f5:1c:47:6e:7e:af:fd:7b:1c:97:91:94:b8:2d:74: 31:95:c4:d9:72:bf:d4:53:6b:2f:b8:40:d1:5c:9e:14:3c:27: 37:cf:30:f7:4d:20:fc:7a:f5:1f:bd:52:b8:07:be:93:66:76: 89:ec:9b:db:f7:be:93:9d:e3:17:99:39:4b:40:26:11:fa:b2: be:a9:9d:e0:bf:f3:16:56:c8:7b:6c:c5:56:cb:b4:90:48:93: 47:94:f1:f5:b0:1c:64:9a:a4:24:9c:9c:6b:fb:75:7e:fe:c8: ad:8a:f8:66:24:00:f5:33:73:6f:46:ea:62:1e:f0:9d:b7:21: 89:4b:d8:64:3c:1d:68:19:08:33:46:45:96:9c:3f:04:da:46: ee:16:6d:de:b5:4d:a0:f1:ce:bc:a9:5f:28:f1:53:a6:45:5a: 97:09:7d:65:e4:ee:67:b5:f1:6c:1b:d4:15:b6:2c:28:ed:75: f8:03:0e:f1:e4:8b:49:4f:d0:99:a7:f3:a3:f2:75:19:bb:33: ae:97:d2:71:73:fb:ae:93:27:b9:1b:a4:1e:52:c0:01:e0:2b: 74:fe:e8:ff:86:e3:60:d3:c4:05:f0:ae:55:cf:a8:d5:7c:e6: ae:59:e4:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZAiMhJwl9n4dhzCRhC/6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwMTFmYjA4OTFiOGZlOTJjYjY3YWJkMjllMmRjYzg1Y2Nj Nzg2NDkwHhcNMjUxMjA2MDIwMDU2WhcNMjUxMjA3MDIwMDU2WjAzMTEwLwYDVQQD Eyg3ZGNhYjE5ODFjZDllZWExMzM4Mjk4NTJiODY1ZGEwZjZlN2ZlY2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2j22vXmexQrYJQ16u5JRO9CYhDfi V8iQnmbYrqaI/RgKL+JYmXzhRuwEojV7EZLTqDM1kuhFND60so6v/HMCRdoZglbl gA/OJCFYsC7i8HJHM5srzT6w4Avi76eMTnbXtIOEVm3FfwbYLDk29o1Ncp3l0eDp GMWj0dFjp43fyKmMxByogSzpFfxqvSZnJt+RhNr0vNMJZj7QsV/FlStgYMT4sMSJ 7r0WWwKaUOAu3+ZkZK1IXGJMmWR6T9EgDsTYJ/mVsPa2qdMooo/GJok7DhO0psmV AbRps6Y5Xb1akYTgQIFOa7ttum9EVljsU4R1sNeu56Ugz5H2gFOybg2bnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH3KsZgc2e6hM4KYUrhl2g9uf+zzMB8GA1UdIwQY MBaAFJAR+wiRuP6Sy2er0p4tzIXMx4ZJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0JIN0NKRzRfcExMWjZ2U25pM01oY3pIaGtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9iNWYzMzgtN2Q4NC00YWM1LWI3ZGYt YzU3M2QwMDdhNzgxLzEva0JIN0NKRzRfcExMWjZ2U25pM01oY3pIaGtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9iNWYzMzgtN2Q4NC00YWM1LWI3ZGYtYzU3M2QwMDdhNzgx LzEva0JIN0NKRzRfcExMWjZ2U25pM01oY3pIaGtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXbidFEjw QrgpWNI62kWHHVt21Nqs9RxHbn6v/Xscl5GUuC10MZXE2XK/1FNrL7hA0VyeFDwn N88w900g/Hr1H71SuAe+k2Z2ieyb2/e+k53jF5k5S0AmEfqyvqmd4L/zFlbIe2zF Vsu0kEiTR5Tx9bAcZJqkJJyca/t1fv7IrYr4ZiQA9TNzb0bqYh7wnbchiUvYZDwd aBkIM0ZFlpw/BNpG7hZt3rVNoPHOvKlfKPFTpkValwl9ZeTuZ7XxbBvUFbYsKO11 +AMO8eSLSU/Qmafzo/J1GbszrpfScXP7rpMnuRukHlLAAeArdP7o/4bjYNPEBfCu Vc+o1Xzmrlnk7w== -----END CERTIFICATE-----Generated at Sat Dec 6 11:13:33 2025 by rpki-client