This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.mft File: KvD7S5rcsuyisQbeCok5YVlszRg.mft (raw, json) Hash identifier: Rs8/wWFFme6d2KbxWRWEV66M5nje9CNnLSWHtKdNOzU= Subject key identifier: 2B:4E:04:75:16:44:12:56:93:CF:24:E7:99:71:13:EF:B7:99:F8:F7 Authority key identifier: 2A:F0:FB:4B:9A:DC:B2:EC:A2:B1:06:DE:0A:89:39:61:59:6C:CD:18 Certificate issuer: /CN=2af0fb4b9adcb2eca2b106de0a893961596ccd18 Certificate serial: 019AF19AE11F12445F9C177B72BF604F7FD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KvD7S5rcsuyisQbeCok5YVlszRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.mft Manifest number: 0DE3 Signing time: Sat 06 Dec 2025 03:00:50 +0000 Manifest this update: Sat 06 Dec 2025 03:00:50 +0000 Manifest next update: Sun 07 Dec 2025 03:00:50 +0000 Files and hashes: 1: KvD7S5rcsuyisQbeCok5YVlszRg.crl (hash: IBXE9YLsJGMEiGP76VPqkcXHvA5aiDBpyoFLJPZSpAg=) 2: zXRn6qUdykmyNBlVs8F5lijyofI.roa (hash: ocGQIF9V1x5fsDLwah9aysnQL0wM33g0zDeGg9Z68IM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.mft rsync://rpki.ripe.net/repository/DEFAULT/KvD7S5rcsuyisQbeCok5YVlszRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:e1:1f:12:44:5f:9c:17:7b:72:bf:60:4f:7f:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2af0fb4b9adcb2eca2b106de0a893961596ccd18 Validity Not Before: Dec 6 03:00:50 2025 GMT Not After : Dec 7 03:00:50 2025 GMT Subject: CN=2b4e04751644125693cf24e7997113efb799f8f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:02:bf:8e:38:e1:cb:85:e4:3a:02:78:f3:4f: b7:cb:f6:70:60:ce:89:27:77:59:1a:f3:af:de:af: dd:d4:d3:f9:79:d0:65:54:58:c5:a3:c4:35:4f:47: 87:b7:f8:22:30:f8:8e:46:fd:df:d2:48:1f:26:13: eb:86:15:6d:ac:88:bb:3b:ca:6b:ac:d9:dc:27:8d: c5:8b:7c:61:a0:8e:2d:34:06:d8:45:2b:b8:a5:20: c6:7b:b9:ee:9a:29:e4:25:1f:c0:c4:a6:c2:e0:24: 5a:80:5c:98:3f:7c:ac:84:94:6c:a9:38:f8:ff:90: 62:f7:af:95:16:72:3a:9a:73:6b:6b:24:51:c8:1f: 49:22:5e:91:bd:19:9e:6a:ff:4c:d8:9c:1f:a2:97: e1:18:d9:53:d9:81:a1:6d:56:0d:03:34:70:b6:57: 06:db:41:1f:75:40:c8:78:1a:5a:bd:87:89:8e:c7: 32:56:a3:ea:f6:3e:32:d1:6b:0f:fb:f9:45:06:ad: 59:b7:33:6f:e7:23:35:eb:fb:a6:f0:62:2f:c2:22: 85:83:aa:3e:75:12:e6:31:53:8b:03:0c:f6:47:15: 45:26:a1:51:87:f8:b1:9b:d0:f6:c8:76:59:61:17: ac:be:0d:27:34:7e:ce:03:62:ab:c8:5a:10:a2:36: 32:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:4E:04:75:16:44:12:56:93:CF:24:E7:99:71:13:EF:B7:99:F8:F7 X509v3 Authority Key Identifier: keyid:2A:F0:FB:4B:9A:DC:B2:EC:A2:B1:06:DE:0A:89:39:61:59:6C:CD:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KvD7S5rcsuyisQbeCok5YVlszRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:28:f7:c5:10:c3:28:27:80:fb:02:6b:98:73:5b:5e:53:c6: 52:dd:60:56:77:4c:0a:1a:bd:02:09:ea:85:6c:02:18:92:6b: 85:05:ff:08:92:09:39:96:fe:ff:82:00:10:57:28:94:9e:62: 24:95:32:9e:87:ac:6d:2a:46:4e:6b:f4:7c:14:72:4c:bd:84: 04:2f:e1:c7:f8:aa:d9:d0:0d:4c:65:55:91:d2:e2:8b:a8:d2: 45:fa:1b:6e:df:68:96:46:00:22:7c:18:2f:47:6e:77:d9:1e: f2:7a:b3:68:8e:34:0e:2f:cc:cd:bd:c1:ec:bb:0d:b0:0c:ff: 4b:d6:78:91:c9:6c:50:82:a6:a0:62:ee:09:74:1e:61:18:a8: 38:f9:64:92:d4:1c:77:3f:3a:41:01:07:45:8e:0b:cb:b3:17: 1e:f6:2f:d3:de:7a:5f:6b:79:3e:1d:dc:35:68:5e:a9:1d:d8: e2:02:e1:a2:39:94:b9:d6:fa:94:a5:49:ff:f4:93:23:be:42: bd:fc:35:87:8a:3a:42:07:8d:4f:ae:7f:4b:07:68:14:2b:c4: 9b:b8:59:88:b3:48:27:d3:3f:ab:8a:fa:a3:84:57:d3:a4:bd: e6:da:1c:81:e9:8b:b2:d9:05:56:c6:6a:5d:ae:7e:62:2c:c6: 1f:01:00:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmuEfEkRfnBd7cr9gT3/TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhZjBmYjRiOWFkY2IyZWNhMmIxMDZkZTBhODkzOTYxNTk2 Y2NkMTgwHhcNMjUxMjA2MDMwMDUwWhcNMjUxMjA3MDMwMDUwWjAzMTEwLwYDVQQD EygyYjRlMDQ3NTE2NDQxMjU2OTNjZjI0ZTc5OTcxMTNlZmI3OTlmOGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQK/jjjhy4XkOgJ480+3y/ZwYM6J J3dZGvOv3q/d1NP5edBlVFjFo8Q1T0eHt/giMPiORv3f0kgfJhPrhhVtrIi7O8pr rNncJ43Fi3xhoI4tNAbYRSu4pSDGe7numinkJR/AxKbC4CRagFyYP3yshJRsqTj4 /5Bi96+VFnI6mnNrayRRyB9JIl6RvRmeav9M2JwfopfhGNlT2YGhbVYNAzRwtlcG 20EfdUDIeBpavYeJjscyVqPq9j4y0WsP+/lFBq1ZtzNv5yM16/um8GIvwiKFg6o+ dRLmMVOLAwz2RxVFJqFRh/ixm9D2yHZZYResvg0nNH7OA2KryFoQojYyYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCtOBHUWRBJWk88k55lxE++3mfj3MB8GA1UdIwQY MBaAFCrw+0ua3LLsorEG3gqJOWFZbM0YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3ZEN1M1cmNzdXlpc1FiZUNvazVZVmxzelJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8yZWRmNDEtNDhlMC00MGFkLThlN2Mt NWU5NTRhZjFkODBlLzEvS3ZEN1M1cmNzdXlpc1FiZUNvazVZVmxzelJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8yZWRmNDEtNDhlMC00MGFkLThlN2MtNWU5NTRhZjFkODBl LzEvS3ZEN1M1cmNzdXlpc1FiZUNvazVZVmxzelJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhSj3xRDD KCeA+wJrmHNbXlPGUt1gVndMChq9AgnqhWwCGJJrhQX/CJIJOZb+/4IAEFcolJ5i JJUynoesbSpGTmv0fBRyTL2EBC/hx/iq2dANTGVVkdLii6jSRfobbt9olkYAInwY L0dud9ke8nqzaI40Di/Mzb3B7LsNsAz/S9Z4kclsUIKmoGLuCXQeYRioOPlkktQc dz86QQEHRY4Ly7MXHvYv0956X2t5Ph3cNWheqR3Y4gLhojmUudb6lKVJ//STI75C vfw1h4o6QgeNT65/SwdoFCvEm7hZiLNIJ9M/q4r6o4RX06S95tocgemLstkFVsZq Xa5+YizGHwEAzA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:48 2025 by rpki-client