This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft File: kuDCRw6wpptO-lhbnLLAZ2ErN54.mft (raw, json) Hash identifier: vFpUBNvoPjaXBEHP3yYZUyv3fA4Gm5JiUxBLIYfKWzA= Subject key identifier: AE:4A:CB:8A:10:D5:4E:ED:3E:58:75:48:00:31:9F:70:53:A0:BB:35 Authority key identifier: 92:E0:C2:47:0E:B0:A6:9B:4E:FA:58:5B:9C:B2:C0:67:61:2B:37:9E Certificate issuer: /CN=92e0c2470eb0a69b4efa585b9cb2c067612b379e Certificate serial: 019AF164024D59D3D47FF11CC64D3AB76C46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 02:00:54 +0000 Manifest this update: Sat 06 Dec 2025 02:00:54 +0000 Manifest next update: Sun 07 Dec 2025 02:00:54 +0000 Files and hashes: 1: PFjd2yWfyUqACNexTKNE7uw-CUw.roa (hash: 2N8aNvblU0PO6uAwaoOi3OFj+fZYGQD09CyRfcuaD9M=) 2: kuDCRw6wpptO-lhbnLLAZ2ErN54.crl (hash: VWsW/FrWInIgBachensg+pFJjqwwE2ZZpqGZJtUwjS4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:02:4d:59:d3:d4:7f:f1:1c:c6:4d:3a:b7:6c:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92e0c2470eb0a69b4efa585b9cb2c067612b379e Validity Not Before: Dec 6 02:00:54 2025 GMT Not After : Dec 7 02:00:54 2025 GMT Subject: CN=ae4acb8a10d54eed3e58754800319f7053a0bb35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e0:f5:fb:02:72:87:07:f4:35:ae:ad:b8:ef: c1:14:d9:41:07:38:0e:01:ff:df:b2:ce:bd:0d:40: 29:29:54:ec:ff:52:98:7d:eb:50:26:17:a4:d0:f0: 48:a6:0c:b7:77:d7:ef:b9:25:3d:18:8a:f1:32:79: f1:c8:c0:b1:c5:0b:94:90:64:a6:50:43:16:33:c8: 97:88:9d:d0:1b:a2:0e:09:e9:ec:7f:5a:cd:07:c4: 13:61:26:e7:6e:a9:d9:18:6b:e9:21:e3:7e:ef:f2: 98:4d:f8:d2:35:08:bb:b6:33:09:ca:77:76:dc:e0: 2c:e4:54:72:85:02:6e:f0:c1:37:c0:76:82:f6:e6: 8d:07:e9:d5:71:07:aa:de:bd:d6:7a:51:93:f3:11: d5:b6:c0:03:56:d3:79:d7:b2:78:85:9a:82:9a:ab: 12:30:bf:27:e2:01:96:47:18:4e:96:a2:73:ab:e5: d2:f1:8b:66:ee:c2:c4:06:f4:e8:07:5f:8e:b1:e8: cc:74:df:4a:a7:c2:85:39:04:16:7e:9b:c1:a9:15: c6:5f:fe:3d:f6:3b:58:b6:18:e2:77:17:6b:bf:bb: 9f:90:21:b1:55:4b:f6:98:31:a7:f1:28:4d:40:2f: 70:3f:05:96:9d:d8:74:5f:d1:e5:38:de:17:62:2e: 2d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:4A:CB:8A:10:D5:4E:ED:3E:58:75:48:00:31:9F:70:53:A0:BB:35 X509v3 Authority Key Identifier: keyid:92:E0:C2:47:0E:B0:A6:9B:4E:FA:58:5B:9C:B2:C0:67:61:2B:37:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:49:47:cc:28:a4:b6:96:72:24:f2:be:25:5c:e7:12:8f:23: 19:8f:88:09:a1:b9:3f:40:f3:03:22:ab:47:cd:59:ed:f5:79: 45:b6:fe:5a:ea:d6:13:6d:b5:76:33:65:23:9c:c3:b5:ed:50: cb:a6:87:26:9d:e9:62:0e:cf:58:e3:27:ec:c4:03:2f:e4:4c: 7b:fd:8c:f3:88:f9:51:7d:64:32:64:b7:99:64:02:e4:f0:ab: b5:69:0b:a4:0d:2a:50:6b:0d:b7:fd:94:18:ba:27:c3:25:b0: 26:60:14:c2:05:40:dc:3e:1c:30:a0:9a:1d:7f:f4:40:14:95: 93:9e:1f:2a:eb:1c:cb:fc:a6:02:d7:4a:de:f9:01:a1:c3:26: b1:cf:7f:61:fd:bf:a5:29:18:cd:ec:71:06:04:a3:a3:69:73: de:ae:87:ab:fe:3d:1f:60:7b:b1:17:a9:c6:5f:31:96:a3:9d: 71:86:bb:ed:70:8f:0e:80:b0:c1:c4:7b:cb:80:d1:bf:5d:42: ef:18:a9:36:d3:32:6d:4b:3f:e6:d4:54:0b:16:6e:02:28:67: 80:77:1f:c5:16:6e:5b:fd:24:b7:33:98:9c:ee:9f:be:c4:6b: c8:14:1e:94:ac:ee:e4:55:c1:1b:f8:e2:a6:d2:21:50:ac:ee: 4e:36:47:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZAJNWdPUf/Ecxk06t2xGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZTBjMjQ3MGViMGE2OWI0ZWZhNTg1YjljYjJjMDY3NjEy YjM3OWUwHhcNMjUxMjA2MDIwMDU0WhcNMjUxMjA3MDIwMDU0WjAzMTEwLwYDVQQD EyhhZTRhY2I4YTEwZDU0ZWVkM2U1ODc1NDgwMDMxOWY3MDUzYTBiYjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuD1+wJyhwf0Na6tuO/BFNlBBzgO Af/fss69DUApKVTs/1KYfetQJhek0PBIpgy3d9fvuSU9GIrxMnnxyMCxxQuUkGSm UEMWM8iXiJ3QG6IOCensf1rNB8QTYSbnbqnZGGvpIeN+7/KYTfjSNQi7tjMJynd2 3OAs5FRyhQJu8ME3wHaC9uaNB+nVcQeq3r3WelGT8xHVtsADVtN517J4hZqCmqsS ML8n4gGWRxhOlqJzq+XS8Ytm7sLEBvToB1+OsejMdN9Kp8KFOQQWfpvBqRXGX/49 9jtYthjidxdrv7ufkCGxVUv2mDGn8ShNQC9wPwWWndh0X9HlON4XYi4tFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK5Ky4oQ1U7tPlh1SAAxn3BToLs1MB8GA1UdIwQY MBaAFJLgwkcOsKabTvpYW5yywGdhKzeeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3VEQ1J3NndwcHRPLWxoYm5MTEFaMkVyTjU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xM2IwY2QtNTk5Mi00NTYxLTk3Mjkt YjMwZmUwNThkMTYyLzEva3VEQ1J3NndwcHRPLWxoYm5MTEFaMkVyTjU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xM2IwY2QtNTk5Mi00NTYxLTk3MjktYjMwZmUwNThkMTYy LzEva3VEQ1J3NndwcHRPLWxoYm5MTEFaMkVyTjU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH0lHzCik tpZyJPK+JVznEo8jGY+ICaG5P0DzAyKrR81Z7fV5Rbb+WurWE221djNlI5zDte1Q y6aHJp3pYg7PWOMn7MQDL+RMe/2M84j5UX1kMmS3mWQC5PCrtWkLpA0qUGsNt/2U GLonwyWwJmAUwgVA3D4cMKCaHX/0QBSVk54fKuscy/ymAtdK3vkBocMmsc9/Yf2/ pSkYzexxBgSjo2lz3q6Hq/49H2B7sRepxl8xlqOdcYa77XCPDoCwwcR7y4DRv11C 7xipNtMybUs/5tRUCxZuAihngHcfxRZuW/0ktzOYnO6fvsRryBQelKzu5FXBG/ji ptIhUKzuTjZHYA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:07:40 2025 by rpki-client