This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft File: kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft (raw, json) Hash identifier: U3kNajjkrKfB2Ec3lSnPrRaKVS+wbGDLd2kuWVzTCUI= Subject key identifier: DD:41:8A:55:D0:0B:15:31:60:F6:7D:0B:CC:6C:5C:BF:3D:4C:E4:D9 Authority key identifier: 91:CD:4C:6C:12:60:FC:9A:7C:89:4B:F6:AB:E7:7A:6E:EC:FE:C0:6E Certificate issuer: /CN=91cd4c6c1260fc9a7c894bf6abe77a6eecfec06e Certificate serial: 019AF23FC540C0546FF330176BA1D2E9C466 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft Manifest number: 12E4 Signing time: Sat 06 Dec 2025 06:00:56 +0000 Manifest this update: Sat 06 Dec 2025 06:00:56 +0000 Manifest next update: Sun 07 Dec 2025 06:00:56 +0000 Files and hashes: 1: 7onO-XhdJCc_IRQIQVCJn8u-1wE.roa (hash: sTU2wUb7RHNn6n+c6UyiV4vOHD7amsQkLEZ6q5B98dM=) 2: kc1MbBJg_Jp8iUv2q-d6buz-wG4.crl (hash: owtzLs00HB7JioZU954yULGpTeXmx7tKX6Dit0YdPsE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.crl rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft rsync://rpki.ripe.net/repository/DEFAULT/kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:c5:40:c0:54:6f:f3:30:17:6b:a1:d2:e9:c4:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91cd4c6c1260fc9a7c894bf6abe77a6eecfec06e Validity Not Before: Dec 6 06:00:56 2025 GMT Not After : Dec 7 06:00:56 2025 GMT Subject: CN=dd418a55d00b153160f67d0bcc6c5cbf3d4ce4d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:39:52:e0:8c:d3:58:d8:84:a4:f3:15:6b:86: 89:1e:79:f8:ac:07:d7:cd:f6:60:33:a8:8e:11:4d: 60:b5:23:33:cd:6f:8e:56:c5:9d:73:56:20:3c:8f: c1:9a:82:19:d9:e2:36:9a:56:1f:c7:0a:26:3e:8e: 66:13:64:af:6d:9d:96:7e:e3:1c:69:ac:0e:5f:b4: 99:c0:43:d0:cc:c3:00:c1:71:9c:2d:df:57:00:c9: f7:01:93:c0:55:54:3a:78:e5:28:52:11:ad:02:bd: 61:c4:e3:44:b6:30:33:11:c0:5e:21:18:1d:c4:25: c2:7b:c7:9d:6f:a7:a9:80:e3:83:33:ba:f8:22:6a: c1:37:0a:cd:35:f2:4d:18:e4:e5:71:28:36:24:16: e2:fc:f1:c2:54:40:eb:7c:a5:2a:92:b3:2f:d1:40: 2b:c8:59:ae:5c:f4:95:a6:e5:ec:b5:a2:36:1a:60: 0a:55:68:08:37:d1:bd:cd:15:82:99:39:26:36:43: 91:cf:02:3f:47:e3:92:71:39:bc:74:b4:20:d2:0b: b4:96:e9:8a:a8:26:4f:06:2e:15:45:41:79:f7:e3: 4f:15:89:05:1e:67:1e:30:92:11:8c:b4:c5:ea:db: ba:ff:08:28:fa:43:a6:ef:71:ab:26:06:90:61:db: a5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:41:8A:55:D0:0B:15:31:60:F6:7D:0B:CC:6C:5C:BF:3D:4C:E4:D9 X509v3 Authority Key Identifier: keyid:91:CD:4C:6C:12:60:FC:9A:7C:89:4B:F6:AB:E7:7A:6E:EC:FE:C0:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:b3:a9:61:db:1e:8f:7d:f7:e4:a1:8c:4a:ba:ab:7a:e3:fb: 5c:de:63:d5:f6:ad:17:e3:a6:08:d1:db:21:35:0f:ca:c6:95: 06:4b:e4:86:51:41:95:bf:df:07:95:0e:c1:ac:56:79:ec:29: 06:ba:1c:f1:19:7f:78:50:43:f9:dd:64:c6:a7:79:6f:3b:0b: c0:22:3e:9d:6c:64:08:59:9a:63:7a:80:55:cc:db:bf:3e:86: c1:02:52:48:69:21:8a:a3:67:82:6b:11:df:30:6c:54:9a:06: 89:53:63:53:64:86:78:8e:ae:70:da:e4:4c:39:53:4b:47:cc: 91:1c:26:27:24:6a:9f:bb:0e:a6:f9:36:92:95:36:89:fd:14: 89:6d:8c:e9:48:4f:9a:1a:f3:70:32:a3:98:69:19:c4:d2:13: cc:6c:f1:30:74:df:97:14:f4:d1:1a:4a:85:de:a5:b9:70:ae: 49:a6:10:51:ce:4b:85:44:0b:fb:47:09:f4:5c:fb:bd:de:f6: d8:a8:af:68:e6:83:5b:8e:2f:ab:7c:50:12:a8:66:8e:6c:29: 0b:ac:14:b7:96:69:dd:1a:31:2e:fc:86:6f:ed:16:dd:df:5a: 01:d4:34:e5:8a:7e:ad:22:6f:91:84:e4:69:0e:7a:23:26:55: 55:11:ca:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP8VAwFRv8zAXa6HS6cRmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxY2Q0YzZjMTI2MGZjOWE3Yzg5NGJmNmFiZTc3YTZlZWNm ZWMwNmUwHhcNMjUxMjA2MDYwMDU2WhcNMjUxMjA3MDYwMDU2WjAzMTEwLwYDVQQD EyhkZDQxOGE1NWQwMGIxNTMxNjBmNjdkMGJjYzZjNWNiZjNkNGNlNGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDlS4IzTWNiEpPMVa4aJHnn4rAfX zfZgM6iOEU1gtSMzzW+OVsWdc1YgPI/BmoIZ2eI2mlYfxwomPo5mE2SvbZ2WfuMc aawOX7SZwEPQzMMAwXGcLd9XAMn3AZPAVVQ6eOUoUhGtAr1hxONEtjAzEcBeIRgd xCXCe8edb6epgOODM7r4ImrBNwrNNfJNGOTlcSg2JBbi/PHCVEDrfKUqkrMv0UAr yFmuXPSVpuXstaI2GmAKVWgIN9G9zRWCmTkmNkORzwI/R+OScTm8dLQg0gu0lumK qCZPBi4VRUF59+NPFYkFHmceMJIRjLTF6tu6/wgo+kOm73GrJgaQYdulfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1BilXQCxUxYPZ9C8xsXL89TOTZMB8GA1UdIwQY MBaAFJHNTGwSYPyafIlL9qvnem7s/sBuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2MxTWJCSmdfSnA4aVV2MnEtZDZidXotd0c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9lNWIzMDEtMGMzMy00OGI0LTg0N2It ZTk4ZWUyMzgxMTQ2LzEva2MxTWJCSmdfSnA4aVV2MnEtZDZidXotd0c0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni9lNWIzMDEtMGMzMy00OGI0LTg0N2ItZTk4ZWUyMzgxMTQ2 LzEva2MxTWJCSmdfSnA4aVV2MnEtZDZidXotd0c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwrOpYdse j3335KGMSrqreuP7XN5j1fatF+OmCNHbITUPysaVBkvkhlFBlb/fB5UOwaxWeewp Broc8Rl/eFBD+d1kxqd5bzsLwCI+nWxkCFmaY3qAVczbvz6GwQJSSGkhiqNngmsR 3zBsVJoGiVNjU2SGeI6ucNrkTDlTS0fMkRwmJyRqn7sOpvk2kpU2if0UiW2M6UhP mhrzcDKjmGkZxNITzGzxMHTflxT00RpKhd6luXCuSaYQUc5LhUQL+0cJ9Fz7vd72 2KivaOaDW44vq3xQEqhmjmwpC6wUt5Zp3RoxLvyGb+0W3d9aAdQ05Yp+rSJvkYTk aQ56IyZVVRHK0Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:30 2025 by rpki-client