This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft File: KboKHXhI0sGyMd0-aCRCDRh5mRM.mft (raw, json) Hash identifier: ikMjnKgj1ubpdTtGG52BjkG0W5ZbhIEENpp94lGT0tw= Subject key identifier: 9E:07:BE:8B:2C:FD:1E:0F:82:17:EE:6A:35:ED:B0:0C:65:53:67:E9 Authority key identifier: 29:BA:0A:1D:78:48:D2:C1:B2:31:DD:3E:68:24:42:0D:18:79:99:13 Certificate issuer: /CN=29ba0a1d7848d2c1b231dd3e6824420d18799913 Certificate serial: 019AF208ACBB9BC2E2A7144E03BBAEF3112C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 05:00:46 +0000 Manifest this update: Sat 06 Dec 2025 05:00:46 +0000 Manifest next update: Sun 07 Dec 2025 05:00:46 +0000 Files and hashes: 1: KboKHXhI0sGyMd0-aCRCDRh5mRM.crl (hash: 9+revK5qrdRu44+/kcFmLb+1CE8O8JIm3bg5s4oa9Jg=) 2: eZNf3C9feSNGJ4V8vhX9W1CodHo.roa (hash: jCzejzqRu1A4u7nv7yzoXy+ymx/Nx97x4lbTMxiUYlQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ac:bb:9b:c2:e2:a7:14:4e:03:bb:ae:f3:11:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29ba0a1d7848d2c1b231dd3e6824420d18799913 Validity Not Before: Dec 6 05:00:46 2025 GMT Not After : Dec 7 05:00:46 2025 GMT Subject: CN=9e07be8b2cfd1e0f8217ee6a35edb00c655367e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9b:bc:f4:13:1e:c7:de:0e:8e:a0:ec:d2:21: 72:dd:bf:e0:39:da:60:75:28:a4:7b:a3:e4:b4:cb: 86:95:c4:e0:1a:2e:8b:9b:5c:5d:d9:9c:62:0d:53: 4a:e0:c1:70:76:81:4c:7b:53:13:a9:ff:13:00:d2: 44:f1:46:fa:96:30:c5:9f:77:45:84:c2:8d:c0:e8: 13:7b:4c:77:b9:6e:0a:0e:89:70:25:c3:72:e4:2a: a5:33:23:1f:c3:30:5e:8e:4b:b9:01:18:08:ed:2b: 0f:0b:0f:25:c2:13:cc:e6:62:51:74:f1:c5:b3:24: 4b:9c:09:4e:79:9b:d8:d6:28:f7:6b:68:e5:f9:a9: fd:20:55:8a:d7:11:b8:43:98:0e:e6:0a:ea:91:13: f9:a4:15:f5:80:ce:2c:eb:73:68:da:15:6b:49:27: a9:e4:36:a8:ef:39:20:3c:a1:25:25:88:64:4f:2a: c6:b3:ba:0b:e4:0d:02:2e:37:0f:67:b1:b7:4a:46: 48:6b:75:01:e0:c0:10:17:b0:ed:63:61:46:c7:49: a2:ba:ea:c7:55:7a:2d:24:98:3d:9a:43:80:c3:f1: 43:05:0a:c6:f7:71:d6:60:f5:96:99:bf:6e:d7:3a: 6c:4b:c6:a5:ef:1f:61:91:b6:20:46:d1:55:f5:f0: d0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:07:BE:8B:2C:FD:1E:0F:82:17:EE:6A:35:ED:B0:0C:65:53:67:E9 X509v3 Authority Key Identifier: keyid:29:BA:0A:1D:78:48:D2:C1:B2:31:DD:3E:68:24:42:0D:18:79:99:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:1b:c2:0b:56:e1:1b:6c:84:1b:e8:ad:b7:ad:ef:65:99:68: c7:7f:c2:16:9f:16:e5:6f:9e:b4:55:43:88:4d:25:af:05:28: 31:3f:0b:e2:0e:43:c9:02:be:6f:c3:b0:be:f6:ac:83:0c:c7: 2f:6a:09:18:42:a5:a9:a3:07:90:49:ae:7b:4d:42:e4:f2:65: a0:d7:e3:0f:82:5b:07:ce:37:8c:94:eb:b6:54:83:37:fa:2f: 2c:c5:92:1e:a4:44:03:4c:02:66:a9:59:7a:3a:32:31:79:86: ea:10:83:65:af:29:ec:bd:77:fb:1f:e5:5f:1d:2e:21:85:7d: b5:4b:41:ce:c9:e7:e3:b7:37:62:51:34:37:0b:5f:58:43:70: 65:8a:90:c8:a3:8d:47:3c:cd:0e:10:58:fa:b2:61:fb:87:5f: b7:d5:46:88:84:c5:5a:5c:24:cf:53:bb:25:0b:b2:29:59:c3: 50:a3:c0:32:6a:19:95:7a:9f:1a:e1:c7:cf:43:b3:6c:cd:91: 55:8b:2f:6e:0a:0a:ff:c9:f7:9d:d9:b4:60:ac:34:34:72:9e: a1:17:22:84:42:30:85:95:e5:96:f8:cb:fe:86:d4:7b:f5:b8: ba:a3:92:59:a7:e7:a3:ef:27:c7:91:5e:37:0c:43:3e:04:b2: e1:b1:d1:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCKy7m8LipxROA7uu8xEsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YmEwYTFkNzg0OGQyYzFiMjMxZGQzZTY4MjQ0MjBkMTg3 OTk5MTMwHhcNMjUxMjA2MDUwMDQ2WhcNMjUxMjA3MDUwMDQ2WjAzMTEwLwYDVQQD Eyg5ZTA3YmU4YjJjZmQxZTBmODIxN2VlNmEzNWVkYjAwYzY1NTM2N2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJu89BMex94OjqDs0iFy3b/gOdpg dSike6PktMuGlcTgGi6Lm1xd2ZxiDVNK4MFwdoFMe1MTqf8TANJE8Ub6ljDFn3dF hMKNwOgTe0x3uW4KDolwJcNy5CqlMyMfwzBejku5ARgI7SsPCw8lwhPM5mJRdPHF syRLnAlOeZvY1ij3a2jl+an9IFWK1xG4Q5gO5grqkRP5pBX1gM4s63No2hVrSSep 5Dao7zkgPKElJYhkTyrGs7oL5A0CLjcPZ7G3SkZIa3UB4MAQF7DtY2FGx0miuurH VXotJJg9mkOAw/FDBQrG93HWYPWWmb9u1zpsS8al7x9hkbYgRtFV9fDQSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ4Hvoss/R4PghfuajXtsAxlU2fpMB8GA1UdIwQY MBaAFCm6Ch14SNLBsjHdPmgkQg0YeZkTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2JvS0hYaEkwc0d5TWQwLWFDUkNEUmg1bVJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8zMGMwYzAtOWVjYS00NjRmLThiOWYt NmE1YjVmNWNhOWQzLzEvS2JvS0hYaEkwc0d5TWQwLWFDUkNEUmg1bVJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8zMGMwYzAtOWVjYS00NjRmLThiOWYtNmE1YjVmNWNhOWQz LzEvS2JvS0hYaEkwc0d5TWQwLWFDUkNEUmg1bVJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAphvCC1bh G2yEG+itt63vZZlox3/CFp8W5W+etFVDiE0lrwUoMT8L4g5DyQK+b8OwvvasgwzH L2oJGEKlqaMHkEmue01C5PJloNfjD4JbB843jJTrtlSDN/ovLMWSHqREA0wCZqlZ ejoyMXmG6hCDZa8p7L13+x/lXx0uIYV9tUtBzsnn47c3YlE0NwtfWENwZYqQyKON RzzNDhBY+rJh+4dft9VGiITFWlwkz1O7JQuyKVnDUKPAMmoZlXqfGuHHz0OzbM2R VYsvbgoK/8n3ndm0YKw0NHKeoRcihEIwhZXllvjL/obUe/W4uqOSWafno+8nx5Fe NwxDPgSy4bHRxA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:49:45 2025 by rpki-client