This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft File: KboKHXhI0sGyMd0-aCRCDRh5mRM.mft (raw, json) Hash identifier: 6gjAtEZL+JmIvbbyCjEpp19xEpTvnGtsGPyaGvZKe9E= Subject key identifier: AF:18:3B:C0:0B:2F:0B:7B:E6:4F:15:91:31:2C:BE:5B:01:ED:0D:6F Authority key identifier: 29:BA:0A:1D:78:48:D2:C1:B2:31:DD:3E:68:24:42:0D:18:79:99:13 Certificate issuer: /CN=29ba0a1d7848d2c1b231dd3e6824420d18799913 Certificate serial: 019B262D4FE506C02A6B8E3575B8421D9D25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft Manifest number: 1781 Signing time: Tue 16 Dec 2025 08:01:02 +0000 Manifest this update: Tue 16 Dec 2025 08:01:02 +0000 Manifest next update: Wed 17 Dec 2025 08:01:02 +0000 Files and hashes: 1: KboKHXhI0sGyMd0-aCRCDRh5mRM.crl (hash: 69XpZ6Ya3+bD8+D22eaTW+G6SQ8GtE6dLzhRSi4ByTs=) 2: eZNf3C9feSNGJ4V8vhX9W1CodHo.roa (hash: jCzejzqRu1A4u7nv7yzoXy+ymx/Nx97x4lbTMxiUYlQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 08:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:2d:4f:e5:06:c0:2a:6b:8e:35:75:b8:42:1d:9d:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29ba0a1d7848d2c1b231dd3e6824420d18799913 Validity Not Before: Dec 16 08:01:02 2025 GMT Not After : Dec 17 08:01:02 2025 GMT Subject: CN=af183bc00b2f0b7be64f1591312cbe5b01ed0d6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c9:0f:ec:eb:6b:2f:44:ed:1f:81:ca:cd:6f: 38:b3:17:3a:95:b3:db:6c:4e:66:4d:e3:d6:b0:66: eb:bd:f3:d4:71:77:b9:fd:e3:84:c8:16:22:91:08: 75:9f:37:f7:b1:7a:12:b3:98:b5:ef:1f:65:04:ba: 55:df:c7:59:7f:4c:b8:8a:90:09:34:01:d2:96:60: c7:c3:7e:66:de:9f:05:c3:10:23:38:23:9a:42:f6: 4b:b0:4d:49:18:db:1d:b2:74:6b:0e:2c:46:80:84: 89:8e:72:12:3b:9c:6a:b7:81:40:01:a6:2b:ed:3a: aa:e0:11:69:b9:cc:32:38:5d:36:5a:4d:3f:56:30: e3:c4:f6:6a:ee:78:98:3a:99:98:6c:3d:90:b6:65: d6:fc:56:cb:69:cd:ee:d1:e1:c5:89:5a:91:cc:35: 2b:f7:0e:7d:eb:e7:9a:b6:f4:05:25:13:aa:88:57: 77:84:f9:5e:c0:73:14:13:25:b7:f5:44:34:dd:61: 43:92:4a:88:8b:77:12:a8:02:01:03:ad:ed:5e:98: c1:c9:1e:75:b9:ac:b1:79:08:65:dd:6a:58:d5:e7: d8:ec:48:d2:3a:84:1f:f7:7e:2c:18:2c:f3:42:e1: 72:54:d9:26:d2:71:63:3a:54:a0:58:1b:8f:4c:da: 2c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:18:3B:C0:0B:2F:0B:7B:E6:4F:15:91:31:2C:BE:5B:01:ED:0D:6F X509v3 Authority Key Identifier: keyid:29:BA:0A:1D:78:48:D2:C1:B2:31:DD:3E:68:24:42:0D:18:79:99:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:58:24:b1:10:c5:3e:0c:38:9a:3a:97:cc:d1:9a:32:b1:60: be:e6:0e:67:4b:d3:c5:a3:7a:74:9f:fd:62:58:44:f5:ca:c4: 7c:19:f0:a7:fa:be:04:e8:6e:ea:5c:e8:97:52:c7:90:ff:84: 5b:35:2d:df:17:4f:f6:76:86:5b:a9:5c:9d:50:a5:48:fd:25: c7:f7:0c:03:52:98:76:5e:98:a7:b9:e4:b8:b1:80:e3:82:98: 68:d4:2a:12:f8:43:77:23:dd:3c:28:d2:10:0e:fc:2a:2d:5c: 49:ac:5e:96:61:87:07:38:b2:b2:e9:0c:30:0b:1f:21:ab:b6: af:9e:3e:c8:1b:c7:8e:e1:1e:3f:89:bb:74:25:61:59:5e:00: e1:61:37:85:a4:84:b1:00:a1:f9:9d:0d:4f:37:a4:6e:40:1e: f0:68:56:d3:03:4e:b7:aa:98:57:1b:c1:e9:11:5c:42:5e:3f: 7a:ac:7a:3d:7b:13:b4:c7:3a:d5:6d:4c:f9:a9:66:ec:03:50: fa:83:8b:7a:ff:4a:ee:d1:d8:97:16:5b:3b:09:68:a0:c5:43: 66:a2:80:26:07:24:98:7a:fd:42:ba:d7:e4:1f:be:57:cd:69: 22:89:fc:0b:92:ca:23:05:8e:85:3d:0c:dd:dc:2e:e7:d1:a1: bd:77:ff:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmLU/lBsAqa441dbhCHZ0lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YmEwYTFkNzg0OGQyYzFiMjMxZGQzZTY4MjQ0MjBkMTg3 OTk5MTMwHhcNMjUxMjE2MDgwMTAyWhcNMjUxMjE3MDgwMTAyWjAzMTEwLwYDVQQD EyhhZjE4M2JjMDBiMmYwYjdiZTY0ZjE1OTEzMTJjYmU1YjAxZWQwZDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyckP7OtrL0TtH4HKzW84sxc6lbPb bE5mTePWsGbrvfPUcXe5/eOEyBYikQh1nzf3sXoSs5i17x9lBLpV38dZf0y4ipAJ NAHSlmDHw35m3p8FwxAjOCOaQvZLsE1JGNsdsnRrDixGgISJjnISO5xqt4FAAaYr 7Tqq4BFpucwyOF02Wk0/VjDjxPZq7niYOpmYbD2QtmXW/FbLac3u0eHFiVqRzDUr 9w596+eatvQFJROqiFd3hPlewHMUEyW39UQ03WFDkkqIi3cSqAIBA63tXpjByR51 uayxeQhl3WpY1efY7EjSOoQf934sGCzzQuFyVNkm0nFjOlSgWBuPTNosVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK8YO8ALLwt75k8VkTEsvlsB7Q1vMB8GA1UdIwQY MBaAFCm6Ch14SNLBsjHdPmgkQg0YeZkTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2JvS0hYaEkwc0d5TWQwLWFDUkNEUmg1bVJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8zMGMwYzAtOWVjYS00NjRmLThiOWYt NmE1YjVmNWNhOWQzLzEvS2JvS0hYaEkwc0d5TWQwLWFDUkNEUmg1bVJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8zMGMwYzAtOWVjYS00NjRmLThiOWYtNmE1YjVmNWNhOWQz LzEvS2JvS0hYaEkwc0d5TWQwLWFDUkNEUmg1bVJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaFgksRDF Pgw4mjqXzNGaMrFgvuYOZ0vTxaN6dJ/9YlhE9crEfBnwp/q+BOhu6lzol1LHkP+E WzUt3xdP9naGW6lcnVClSP0lx/cMA1KYdl6Yp7nkuLGA44KYaNQqEvhDdyPdPCjS EA78Ki1cSaxelmGHBziysukMMAsfIau2r54+yBvHjuEeP4m7dCVhWV4A4WE3haSE sQCh+Z0NTzekbkAe8GhW0wNOt6qYVxvB6RFcQl4/eqx6PXsTtMc61W1M+alm7ANQ +oOLev9K7tHYlxZbOwlooMVDZqKAJgckmHr9QrrX5B++V81pIon8C5LKIwWOhT0M 3dwu59GhvXf/6A== -----END CERTIFICATE-----Generated at Tue Dec 16 18:00:44 2025 by rpki-client