This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft File: kt2u3zcPNa-LXut_hubPr6zojU4.mft (raw, json) Hash identifier: snyfG4lN8qme7ID3p6TyeLJO37blcCoGhbn/nQcRy+Y= Subject key identifier: E5:F4:D0:60:72:90:52:D6:6D:61:8E:B9:6D:15:50:7C:28:95:EF:DD Authority key identifier: 92:DD:AE:DF:37:0F:35:AF:8B:5E:EB:7F:86:E6:CF:AF:AC:E8:8D:4E Certificate issuer: /CN=92ddaedf370f35af8b5eeb7f86e6cfaface88d4e Certificate serial: 019AF0BF4106263F1988A38F289617CDB9E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kt2u3zcPNa-LXut_hubPr6zojU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft Manifest number: 07B3 Signing time: Fri 05 Dec 2025 23:00:57 +0000 Manifest this update: Fri 05 Dec 2025 23:00:57 +0000 Manifest next update: Sat 06 Dec 2025 23:00:57 +0000 Files and hashes: 1: dqOSF9Ies6urS5k4Ct3cQtw5VN8.roa (hash: J3BiGkZdoL6h6rfESwdaItaaKVovQQqfeD9nGDkL6og=) 2: kt2u3zcPNa-LXut_hubPr6zojU4.crl (hash: NDpSEC3AWjsSIc2/wjPN2wmqEWtn6e9jREhi1aozF1A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.crl rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft rsync://rpki.ripe.net/repository/DEFAULT/kt2u3zcPNa-LXut_hubPr6zojU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:41:06:26:3f:19:88:a3:8f:28:96:17:cd:b9:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92ddaedf370f35af8b5eeb7f86e6cfaface88d4e Validity Not Before: Dec 5 23:00:57 2025 GMT Not After : Dec 6 23:00:57 2025 GMT Subject: CN=e5f4d060729052d66d618eb96d15507c2895efdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:16:52:16:88:44:c3:96:cd:19:41:dc:9f:0c: 53:bc:5f:f8:bf:76:0d:e6:82:5d:8d:62:b0:55:79: a4:30:29:a5:63:dd:9a:1a:e0:7f:97:47:f5:2d:75: c0:63:33:db:b1:89:b0:7d:66:ea:3d:96:aa:b6:3b: a4:78:ad:6e:3b:c7:e3:cc:02:bb:36:2c:e5:ac:99: 1d:67:09:60:80:a9:1d:c6:f5:07:c8:16:21:54:f5: 3b:39:f3:ba:21:3a:66:00:8e:fc:e9:30:97:2f:7b: da:91:92:0a:15:cc:98:f8:73:1c:53:1e:87:7a:23: f6:9c:12:9e:5f:cc:01:52:0f:b0:f5:4f:7f:b8:e3: b3:9f:be:87:c4:ed:35:a3:16:4a:ad:df:40:10:cf: 6e:b4:99:e7:bd:21:e2:80:b9:48:c1:59:ca:2e:d9: 72:f4:9a:85:a4:e0:a6:a0:75:26:3c:03:43:7f:ed: bd:b4:a7:e2:d9:ee:15:e5:e8:9f:70:8e:a9:59:15: 7d:90:69:3f:d7:5c:3c:05:f3:26:97:9e:c7:91:b8: f4:59:d3:13:89:ec:d7:26:6c:19:30:43:be:6c:71: 5e:22:a2:00:31:4a:0a:32:58:08:08:7d:27:b2:ef: 96:34:30:77:c0:6e:74:38:71:22:6e:41:93:e2:53: 0d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:F4:D0:60:72:90:52:D6:6D:61:8E:B9:6D:15:50:7C:28:95:EF:DD X509v3 Authority Key Identifier: keyid:92:DD:AE:DF:37:0F:35:AF:8B:5E:EB:7F:86:E6:CF:AF:AC:E8:8D:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kt2u3zcPNa-LXut_hubPr6zojU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:10:99:27:da:e8:cc:43:21:22:51:45:49:ef:79:00:74:31: 85:16:88:a2:69:f4:d4:b5:76:a3:3c:3b:de:c3:cb:b0:78:b0: 2f:1e:02:4b:5f:12:4c:92:cc:6b:2e:48:60:2a:8e:9a:2a:c6: 16:81:47:f8:b5:08:70:11:64:1c:20:07:21:74:f1:21:35:66: 6d:7b:43:66:93:ac:8b:43:93:2c:0b:b0:e5:d0:14:9e:01:9c: 06:a7:4b:a6:86:df:5c:85:6f:e3:ea:90:ba:a6:86:8a:cd:db: 5e:6e:f1:f5:97:e0:5b:84:41:ce:23:4d:d6:7e:ff:25:38:37: 6b:19:47:47:36:68:0a:37:9a:0f:da:fc:73:0c:53:e7:16:81: 9c:11:90:21:88:09:c5:02:ef:02:b1:57:33:0c:57:f9:2a:e9: 87:d8:28:98:7e:00:11:3c:49:30:01:cc:f4:d0:95:e7:db:c4: 4d:a3:83:0f:cd:56:ea:0e:c2:11:c7:9c:dd:a1:38:f7:78:db: 82:f9:29:f0:ba:d3:21:84:5c:c2:00:37:45:e8:5e:b5:71:f2: e7:6a:e0:79:ec:ca:70:dd:3f:70:6d:04:c7:df:90:c3:bd:aa: 5d:9d:b1:71:70:c7:d9:c9:ba:68:2e:ba:bb:3a:b5:1f:db:a2: 34:2a:d0:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv0EGJj8ZiKOPKJYXzbnhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZGRhZWRmMzcwZjM1YWY4YjVlZWI3Zjg2ZTZjZmFmYWNl ODhkNGUwHhcNMjUxMjA1MjMwMDU3WhcNMjUxMjA2MjMwMDU3WjAzMTEwLwYDVQQD EyhlNWY0ZDA2MDcyOTA1MmQ2NmQ2MThlYjk2ZDE1NTA3YzI4OTVlZmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBZSFohEw5bNGUHcnwxTvF/4v3YN 5oJdjWKwVXmkMCmlY92aGuB/l0f1LXXAYzPbsYmwfWbqPZaqtjukeK1uO8fjzAK7 NizlrJkdZwlggKkdxvUHyBYhVPU7OfO6ITpmAI786TCXL3vakZIKFcyY+HMcUx6H eiP2nBKeX8wBUg+w9U9/uOOzn76HxO01oxZKrd9AEM9utJnnvSHigLlIwVnKLtly 9JqFpOCmoHUmPANDf+29tKfi2e4V5eifcI6pWRV9kGk/11w8BfMml57Hkbj0WdMT iezXJmwZMEO+bHFeIqIAMUoKMlgICH0nsu+WNDB3wG50OHEibkGT4lMNBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOX00GBykFLWbWGOuW0VUHwole/dMB8GA1UdIwQY MBaAFJLdrt83DzWvi17rf4bmz6+s6I1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3QydTN6Y1BOYS1MWHV0X2h1YlByNnpvalU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84NGMzZDUtOGFiMi00NGFjLTk0MmIt YzRiOWM1Mzk0MDdiLzEva3QydTN6Y1BOYS1MWHV0X2h1YlByNnpvalU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My84NGMzZDUtOGFiMi00NGFjLTk0MmItYzRiOWM1Mzk0MDdi LzEva3QydTN6Y1BOYS1MWHV0X2h1YlByNnpvalU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAhCZJ9ro zEMhIlFFSe95AHQxhRaIomn01LV2ozw73sPLsHiwLx4CS18STJLMay5IYCqOmirG FoFH+LUIcBFkHCAHIXTxITVmbXtDZpOsi0OTLAuw5dAUngGcBqdLpobfXIVv4+qQ uqaGis3bXm7x9ZfgW4RBziNN1n7/JTg3axlHRzZoCjeaD9r8cwxT5xaBnBGQIYgJ xQLvArFXMwxX+Srph9gomH4AETxJMAHM9NCV59vETaODD81W6g7CEcec3aE493jb gvkp8LrTIYRcwgA3RehetXHy52rgeezKcN0/cG0Ex9+Qw72qXZ2xcXDH2cm6aC66 uzq1H9uiNCrQ/w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:38 2025 by rpki-client