This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft File: KBZKV1f91XJaYIRPKufvc7EHpMA.mft (raw, json) Hash identifier: /Gyw4IWEm2YiA3N3An/QwpT7ORafrdEuUDWGfyxJSIs= Subject key identifier: AE:7A:39:0A:49:5A:11:68:1A:D4:9F:A4:54:65:AA:3E:4B:98:DC:45 Authority key identifier: 28:16:4A:57:57:FD:D5:72:5A:60:84:4F:2A:E7:EF:73:B1:07:A4:C0 Certificate issuer: /CN=28164a5757fdd5725a60844f2ae7ef73b107a4c0 Certificate serial: 019B300BCB058A1DC8FE32FF90A3E4619682 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBZKV1f91XJaYIRPKufvc7EHpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft Manifest number: 177F Signing time: Thu 18 Dec 2025 06:00:37 +0000 Manifest this update: Thu 18 Dec 2025 06:00:37 +0000 Manifest next update: Fri 19 Dec 2025 06:00:37 +0000 Files and hashes: 1: KBZKV1f91XJaYIRPKufvc7EHpMA.crl (hash: MEfgp4HL6uSMBe7DrbTUdXoUVfZM2TFEUrUgBrXipI0=) 2: MhHg4JFChvahbVNUw3bJFSkkmEg.roa (hash: 4DOu8CWNY1OjDP1XSPeR4I2ZieWWV4v3/yu30qnq/P4=) 3: jPXAyTxRg6IHrumUsMVZCICaKwI.roa (hash: yu/3MPqNqBbwh5Kh6v8tYgtrr60bnzQOIu7M1/9ZqhU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/KBZKV1f91XJaYIRPKufvc7EHpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:0b:cb:05:8a:1d:c8:fe:32:ff:90:a3:e4:61:96:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28164a5757fdd5725a60844f2ae7ef73b107a4c0 Validity Not Before: Dec 18 06:00:37 2025 GMT Not After : Dec 19 06:00:37 2025 GMT Subject: CN=ae7a390a495a11681ad49fa45465aa3e4b98dc45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a5:ac:40:bc:0d:77:da:df:8a:a9:7f:87:bd: d0:c3:e6:7d:88:7a:22:fd:e0:fa:0a:ca:09:a4:bf: 1c:a4:5c:6c:3f:14:56:4e:04:ac:b7:9f:36:b9:c2: 0d:d4:3f:06:d0:5f:3d:db:db:69:bb:1d:31:7a:be: ea:bd:3a:15:fc:bd:b2:e4:d0:22:9a:47:7b:27:00: 40:7d:e8:34:3c:25:7a:af:a9:39:62:67:25:6e:50: f4:53:21:d6:f7:c1:af:8c:8d:a2:14:ed:f6:92:11: 64:b5:81:49:b5:bd:f4:32:05:e3:69:03:bc:50:2c: 89:73:47:58:d8:35:e1:10:17:f1:c3:2d:80:56:1f: 90:85:ab:a7:78:99:47:6e:b4:f4:e8:1c:b2:cd:ee: 83:b6:54:90:30:1b:96:62:c5:98:61:02:0b:a2:dc: a5:45:e2:e3:f8:95:e1:db:19:47:df:5f:77:d5:06: 55:a4:62:9b:7f:29:01:fc:36:06:01:d5:3b:7d:29: 41:4a:fc:fd:39:96:57:28:a7:21:55:7a:3c:33:fd: 48:0f:c4:cc:8e:11:b5:1f:bb:bd:90:47:1c:09:e9: b3:01:2d:ca:c2:a1:cd:3b:a0:19:aa:f5:a9:01:44: 91:03:d0:1b:18:d9:20:d5:8f:5e:5d:f0:4f:ce:85: 2e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:7A:39:0A:49:5A:11:68:1A:D4:9F:A4:54:65:AA:3E:4B:98:DC:45 X509v3 Authority Key Identifier: keyid:28:16:4A:57:57:FD:D5:72:5A:60:84:4F:2A:E7:EF:73:B1:07:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBZKV1f91XJaYIRPKufvc7EHpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:9e:d8:50:8c:fe:27:f5:d6:33:8a:f8:59:2a:12:55:8f:ea: 1d:cf:61:6e:b0:77:74:d7:1c:5c:6f:86:29:db:5f:99:8c:f5: d7:c9:62:b2:6e:4b:ca:85:44:99:8e:2a:d1:20:75:88:7d:be: 11:96:c9:85:89:fb:f9:a5:70:86:98:ea:01:a3:d6:3a:74:ff: 8a:b3:37:ca:a2:ef:f9:e5:a4:c9:fc:46:a6:3a:8e:3d:1d:78: 64:39:aa:9e:cf:50:d5:96:d3:46:0e:ab:74:e7:7c:a4:4f:7d: 4d:c9:3d:74:cf:2f:e5:49:57:b4:51:be:3e:0f:0e:4e:82:5f: 37:fb:59:fd:3c:91:68:7e:65:20:91:26:33:14:7b:3e:0a:3c: c6:6d:e4:38:85:f4:72:80:ad:13:4c:e1:f9:c8:73:5f:f2:5f: d3:62:c9:a0:11:68:80:dd:22:78:5c:4b:2d:84:e9:bc:f3:23: b6:13:86:26:b2:0e:d3:7c:26:9a:3d:65:cd:36:c3:0d:74:f9: 7d:9e:99:92:ca:51:97:d1:4e:52:d1:2d:9d:a8:dc:bc:bf:c0: 0f:d1:68:a3:f8:df:c4:a4:34:18:11:85:bb:95:d8:ea:4f:ef: 6a:67:82:e7:8f:41:7a:28:5f:fb:5c:55:c4:37:2d:83:8b:02: e6:b4:44:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswC8sFih3I/jL/kKPkYZaCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MTY0YTU3NTdmZGQ1NzI1YTYwODQ0ZjJhZTdlZjczYjEw N2E0YzAwHhcNMjUxMjE4MDYwMDM3WhcNMjUxMjE5MDYwMDM3WjAzMTEwLwYDVQQD EyhhZTdhMzkwYTQ5NWExMTY4MWFkNDlmYTQ1NDY1YWEzZTRiOThkYzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaWsQLwNd9rfiql/h73Qw+Z9iHoi /eD6CsoJpL8cpFxsPxRWTgSst582ucIN1D8G0F8929tpux0xer7qvToV/L2y5NAi mkd7JwBAfeg0PCV6r6k5YmclblD0UyHW98GvjI2iFO32khFktYFJtb30MgXjaQO8 UCyJc0dY2DXhEBfxwy2AVh+QhauneJlHbrT06Byyze6DtlSQMBuWYsWYYQILotyl ReLj+JXh2xlH31931QZVpGKbfykB/DYGAdU7fSlBSvz9OZZXKKchVXo8M/1ID8TM jhG1H7u9kEccCemzAS3KwqHNO6AZqvWpAUSRA9AbGNkg1Y9eXfBPzoUu4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK56OQpJWhFoGtSfpFRlqj5LmNxFMB8GA1UdIwQY MBaAFCgWSldX/dVyWmCETyrn73OxB6TAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0JaS1YxZjkxWEphWUlSUEt1ZnZjN0VIcE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NTUzNWItZTYzMC00NTdmLThhMDEt YWVhZTViYmMzOTIwLzEvS0JaS1YxZjkxWEphWUlSUEt1ZnZjN0VIcE1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85NTUzNWItZTYzMC00NTdmLThhMDEtYWVhZTViYmMzOTIw LzEvS0JaS1YxZjkxWEphWUlSUEt1ZnZjN0VIcE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe57YUIz+ J/XWM4r4WSoSVY/qHc9hbrB3dNccXG+GKdtfmYz118lism5LyoVEmY4q0SB1iH2+ EZbJhYn7+aVwhpjqAaPWOnT/irM3yqLv+eWkyfxGpjqOPR14ZDmqns9Q1ZbTRg6r dOd8pE99Tck9dM8v5UlXtFG+Pg8OToJfN/tZ/TyRaH5lIJEmMxR7Pgo8xm3kOIX0 coCtE0zh+chzX/Jf02LJoBFogN0ieFxLLYTpvPMjthOGJrIO03wmmj1lzTbDDXT5 fZ6ZkspRl9FOUtEtnajcvL/AD9Foo/jfxKQ0GBGFu5XY6k/vameC549Beihf+1xV xDctg4sC5rRECA== -----END CERTIFICATE-----Generated at Thu Dec 18 12:49:34 2025 by rpki-client