This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft File: kRbcv3jGLVHakHag0Gra027jt1U.mft (raw, json) Hash identifier: LBGglgCU84BGB13UlRBQut1gmFQ/VeOAdvljmU1URUk= Subject key identifier: 29:21:A2:B8:51:CB:E6:1F:DF:95:95:5E:52:5C:1C:67:86:90:F8:95 Authority key identifier: 91:16:DC:BF:78:C6:2D:51:DA:90:76:A0:D0:6A:DA:D3:6E:E3:B7:55 Certificate issuer: /CN=9116dcbf78c62d51da9076a0d06adad36ee3b755 Certificate serial: 019AF35224E514DB927598766A713419B3AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 11:00:38 +0000 Manifest this update: Sat 06 Dec 2025 11:00:38 +0000 Manifest next update: Sun 07 Dec 2025 11:00:38 +0000 Files and hashes: 1: DNiv8WMGcPKANx-uQmW-sx5fNXI.roa (hash: Lj5hqHXoRMsEWF++FwaU7YyRf1SOoK6ggthX5YqRKwg=) 2: kRbcv3jGLVHakHag0Gra027jt1U.crl (hash: 5iZ+CtrwtkzwXvy5BNI7DOE+uDBJ6qXgh7mbd7YFqjM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.crl rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:24:e5:14:db:92:75:98:76:6a:71:34:19:b3:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9116dcbf78c62d51da9076a0d06adad36ee3b755 Validity Not Before: Dec 6 11:00:38 2025 GMT Not After : Dec 7 11:00:38 2025 GMT Subject: CN=2921a2b851cbe61fdf95955e525c1c678690f895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:50:da:72:52:18:4a:96:87:9c:3a:5b:50:d6: ba:dc:46:2c:70:71:a2:3b:18:7b:fa:82:85:7d:d7: 73:3e:64:90:3f:b6:25:b7:87:f9:56:51:62:db:66: e1:cf:42:2e:78:0b:f2:4a:1e:89:ec:06:0f:0e:30: b0:1f:75:d2:49:c7:7b:38:63:b5:3d:86:6c:82:1e: 2e:3a:f9:68:45:09:48:98:99:ae:fd:27:04:3e:b6: c3:5b:e8:52:4a:c7:ee:c1:7d:56:2b:90:aa:f6:fc: 33:d9:df:11:a3:5a:52:a0:8f:fd:67:35:ab:2c:3d: 19:ed:28:e9:08:bb:d8:f0:75:e4:d9:a0:83:25:d4: 3b:6c:3a:16:83:2b:18:e1:1c:15:4f:2f:b7:a4:78: a0:c2:36:4d:09:2b:fa:54:92:8c:df:23:f2:a2:bc: b9:48:08:87:a5:2e:fc:cc:e4:9f:a5:7e:37:84:b3: a6:18:f3:cc:b5:19:89:79:f2:15:fa:8d:6f:3c:6a: ee:e1:6f:4f:35:9d:6f:c1:a2:96:3a:6b:28:07:63: b5:52:20:b3:81:40:1f:59:31:cb:d6:26:14:00:cf: 82:67:a4:be:e1:e9:d2:9f:8a:5e:02:7c:b0:d3:b6: 78:75:7a:15:b5:3e:99:aa:55:e2:e4:4d:6c:27:ba: f7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:21:A2:B8:51:CB:E6:1F:DF:95:95:5E:52:5C:1C:67:86:90:F8:95 X509v3 Authority Key Identifier: keyid:91:16:DC:BF:78:C6:2D:51:DA:90:76:A0:D0:6A:DA:D3:6E:E3:B7:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:47:96:e4:91:23:82:15:fd:87:85:3f:b8:e0:9d:5a:a3:b5: 4d:29:9b:73:09:28:a2:87:c2:c9:d1:55:25:44:59:f4:e8:62: 6b:86:37:04:cb:af:53:da:fa:ab:5d:df:b8:9d:44:95:f3:20: 74:65:f3:15:0d:aa:05:ca:58:fe:86:c9:35:e9:24:ba:ac:f5: 0c:19:7e:1d:cc:10:1f:42:66:41:35:e4:15:87:ab:c7:f5:19: 85:e1:b6:4a:8c:07:ea:4e:01:46:30:83:bf:09:73:8f:13:ee: 66:72:93:22:5c:6b:6d:5a:a0:ea:ea:5b:3d:8a:d1:0b:2b:35: 1c:a9:0a:6b:50:a9:82:3d:18:8d:83:9b:67:89:45:9d:d5:be: 12:11:be:96:ab:75:78:87:82:e9:af:c9:21:5c:4d:44:28:9f: c7:8f:c3:ef:91:0d:e7:b1:62:db:0c:00:ae:74:ec:cc:93:69: d5:82:07:d8:0a:44:66:ca:6f:d3:cf:e9:cc:5d:e7:0d:8e:09: 59:be:75:6e:03:fd:05:7f:19:eb:7c:ab:97:a8:6f:55:97:95: 62:38:b0:bb:d9:88:c4:f7:24:33:73:fc:1e:25:9a:6f:58:5e: b6:58:e2:a7:af:92:fe:4e:e7:d0:d5:8a:3a:db:8a:60:a2:da: 9d:fb:51:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUiTlFNuSdZh2anE0GbOtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxMTZkY2JmNzhjNjJkNTFkYTkwNzZhMGQwNmFkYWQzNmVl M2I3NTUwHhcNMjUxMjA2MTEwMDM4WhcNMjUxMjA3MTEwMDM4WjAzMTEwLwYDVQQD EygyOTIxYTJiODUxY2JlNjFmZGY5NTk1NWU1MjVjMWM2Nzg2OTBmODk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVDaclIYSpaHnDpbUNa63EYscHGi Oxh7+oKFfddzPmSQP7Ylt4f5VlFi22bhz0IueAvySh6J7AYPDjCwH3XSScd7OGO1 PYZsgh4uOvloRQlImJmu/ScEPrbDW+hSSsfuwX1WK5Cq9vwz2d8Ro1pSoI/9ZzWr LD0Z7SjpCLvY8HXk2aCDJdQ7bDoWgysY4RwVTy+3pHigwjZNCSv6VJKM3yPyory5 SAiHpS78zOSfpX43hLOmGPPMtRmJefIV+o1vPGru4W9PNZ1vwaKWOmsoB2O1UiCz gUAfWTHL1iYUAM+CZ6S+4enSn4peAnyw07Z4dXoVtT6ZqlXi5E1sJ7r39QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCkhorhRy+Yf35WVXlJcHGeGkPiVMB8GA1UdIwQY MBaAFJEW3L94xi1R2pB2oNBq2tNu47dVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1JiY3YzakdMVkhha0hhZzBHcmEwMjdqdDFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8xMmY1ZDEtZTc2MC00MTAxLWFmMjUt N2ZjNDlkYTUzZDEzLzEva1JiY3YzakdMVkhha0hhZzBHcmEwMjdqdDFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC8xMmY1ZDEtZTc2MC00MTAxLWFmMjUtN2ZjNDlkYTUzZDEz LzEva1JiY3YzakdMVkhha0hhZzBHcmEwMjdqdDFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgkeW5JEj ghX9h4U/uOCdWqO1TSmbcwkooofCydFVJURZ9Ohia4Y3BMuvU9r6q13fuJ1ElfMg dGXzFQ2qBcpY/obJNekkuqz1DBl+HcwQH0JmQTXkFYerx/UZheG2SowH6k4BRjCD vwlzjxPuZnKTIlxrbVqg6upbPYrRCys1HKkKa1Cpgj0YjYObZ4lFndW+EhG+lqt1 eIeC6a/JIVxNRCifx4/D75EN57Fi2wwArnTszJNp1YIH2ApEZspv08/pzF3nDY4J Wb51bgP9BX8Z63yrl6hvVZeVYjiwu9mIxPckM3P8HiWab1hetljip6+S/k7n0NWK OtuKYKLanftRFg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:55:41 2025 by rpki-client