This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft File: KV2FhrHf5iE-CywdK__BssjTUc8.mft (raw, json) Hash identifier: zxF8+LuSXhDW3WfaFGSnR0dSMvrmUYjcr/o/4HlOyos= Subject key identifier: 45:53:EB:A8:F0:8B:90:4D:81:5A:0B:F5:67:B3:D0:01:5A:B7:D6:20 Authority key identifier: 29:5D:85:86:B1:DF:E6:21:3E:0B:2C:1D:2B:FF:C1:B2:C8:D3:51:CF Certificate issuer: /CN=295d8586b1dfe6213e0b2c1d2bffc1b2c8d351cf Certificate serial: 019B236483D5139935DC56B394F95144AA84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KV2FhrHf5iE-CywdK__BssjTUc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft Manifest number: 10 Signing time: Mon 15 Dec 2025 19:02:28 +0000 Manifest this update: Mon 15 Dec 2025 19:02:28 +0000 Manifest next update: Tue 16 Dec 2025 19:02:28 +0000 Files and hashes: 1: KV2FhrHf5iE-CywdK__BssjTUc8.crl (hash: u8Rf/dd8hysNGhLfm1dRi7/KGtisSJvYZe4AF0uydp8=) 2: RMsG8pQVuDko30N-hzzT26RjJ9Y.asa (hash: yi02C4KYzTGBREJtJL0ti8csY3NPFrvUw9hF+6s7XDg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft rsync://rpki.ripe.net/repository/DEFAULT/KV2FhrHf5iE-CywdK__BssjTUc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:64:83:d5:13:99:35:dc:56:b3:94:f9:51:44:aa:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295d8586b1dfe6213e0b2c1d2bffc1b2c8d351cf Validity Not Before: Dec 15 19:02:28 2025 GMT Not After : Dec 16 19:02:28 2025 GMT Subject: CN=4553eba8f08b904d815a0bf567b3d0015ab7d620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:40:80:75:eb:5b:42:97:59:07:bd:dc:d1:64: d6:a9:9f:25:1d:82:07:17:ab:5f:d8:9c:31:00:9f: 52:08:8c:65:fd:c2:66:f2:78:33:f8:42:73:e4:cf: d4:88:a7:8f:8c:d1:c6:3c:71:b2:ab:9c:32:9c:0b: fa:77:70:fb:48:c8:7a:d6:f7:ad:e6:91:53:07:b3: 29:c6:51:17:1e:49:b6:f8:e7:cf:44:2d:b6:51:7d: f4:cf:60:6c:4b:f4:4a:4c:ae:b1:cc:e1:99:70:d6: 0a:1f:8c:d5:a0:ec:5a:63:db:59:03:6f:bf:85:6c: 62:50:c6:09:22:18:7e:41:de:5a:3e:d7:aa:30:bf: 20:a5:b7:a9:88:d0:ba:8d:1d:bf:13:c4:64:42:84: 7e:26:f8:f8:29:73:03:93:41:8d:50:7b:45:8d:1e: a6:c2:3c:38:9a:e8:3e:98:05:8d:13:e2:15:2b:ff: a8:4a:00:0c:6d:ab:fc:8f:c2:0c:c4:6e:1c:43:17: 56:5b:e7:f8:72:5e:81:c5:b1:25:0d:d8:84:72:7d: 86:0c:16:c0:52:41:31:1e:ea:4d:74:ce:da:34:97: 2d:e1:23:89:c4:b4:3b:09:cf:29:53:b7:c3:0d:38: 1d:f5:59:72:d9:13:90:7b:c2:56:00:43:0e:50:e3: e2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:53:EB:A8:F0:8B:90:4D:81:5A:0B:F5:67:B3:D0:01:5A:B7:D6:20 X509v3 Authority Key Identifier: keyid:29:5D:85:86:B1:DF:E6:21:3E:0B:2C:1D:2B:FF:C1:B2:C8:D3:51:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KV2FhrHf5iE-CywdK__BssjTUc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:b2:0a:66:92:37:71:cd:4e:9f:1d:d4:f2:84:d9:ab:0f:7a: f3:1d:9d:df:67:00:13:6a:9c:fa:08:ba:b5:c5:ee:ff:90:4a: 32:8a:51:80:21:65:06:c4:6a:88:95:fa:61:9a:4b:9d:a6:9c: f4:02:d0:7e:ed:dc:6a:65:df:12:a3:d9:33:f5:49:97:32:ed: 3f:bc:63:e4:a9:06:e9:e3:14:78:2f:fb:f8:d8:11:b2:78:9b: e8:a3:2a:17:30:a6:20:f7:c4:6f:e6:c9:06:8e:f9:ca:ce:94: f3:97:e8:57:f2:c6:fb:17:4a:3c:93:2f:96:06:66:d5:77:98: fe:38:a7:68:09:23:f2:8f:b4:68:a3:2c:98:32:d8:a0:6f:89: 80:59:53:c7:9f:a0:70:d1:eb:8a:3e:19:13:f1:a3:6a:f8:5f: 6b:13:7d:05:83:5f:97:79:0f:4b:56:2f:8b:b5:29:af:cf:fd: 77:73:9e:f3:b3:1a:b9:9c:f7:08:4b:b3:2e:84:2c:f1:34:e6: 3d:d3:db:43:85:10:bf:0f:51:10:4f:03:0a:6b:39:c2:26:35: e4:c8:aa:ae:7e:06:20:4c:02:a7:ba:ed:44:3a:d5:de:93:1c: 84:5b:a4:9c:aa:98:19:98:8c:85:65:8e:28:7b:c3:c9:df:8f: 17:f8:40:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjZIPVE5k13FazlPlRRKqEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NWQ4NTg2YjFkZmU2MjEzZTBiMmMxZDJiZmZjMWIyYzhk MzUxY2YwHhcNMjUxMjE1MTkwMjI4WhcNMjUxMjE2MTkwMjI4WjAzMTEwLwYDVQQD Eyg0NTUzZWJhOGYwOGI5MDRkODE1YTBiZjU2N2IzZDAwMTVhYjdkNjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxECAdetbQpdZB73c0WTWqZ8lHYIH F6tf2JwxAJ9SCIxl/cJm8ngz+EJz5M/UiKePjNHGPHGyq5wynAv6d3D7SMh61vet 5pFTB7MpxlEXHkm2+OfPRC22UX30z2BsS/RKTK6xzOGZcNYKH4zVoOxaY9tZA2+/ hWxiUMYJIhh+Qd5aPteqML8gpbepiNC6jR2/E8RkQoR+Jvj4KXMDk0GNUHtFjR6m wjw4mug+mAWNE+IVK/+oSgAMbav8j8IMxG4cQxdWW+f4cl6BxbElDdiEcn2GDBbA UkExHupNdM7aNJct4SOJxLQ7Cc8pU7fDDTgd9Vly2ROQe8JWAEMOUOPiLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEVT66jwi5BNgVoL9Wez0AFat9YgMB8GA1UdIwQY MBaAFCldhYax3+YhPgssHSv/wbLI01HPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1YyRmhySGY1aUUtQ3l3ZEtfX0Jzc2pUVWM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC83YzM2NTQtNTcwZi00NTQ0LWFkZWIt NjZiYjMwYzI3YmMxLzEvS1YyRmhySGY1aUUtQ3l3ZEtfX0Jzc2pUVWM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC83YzM2NTQtNTcwZi00NTQ0LWFkZWItNjZiYjMwYzI3YmMx LzEvS1YyRmhySGY1aUUtQ3l3ZEtfX0Jzc2pUVWM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACLIKZpI3 cc1Onx3U8oTZqw968x2d32cAE2qc+gi6tcXu/5BKMopRgCFlBsRqiJX6YZpLnaac 9ALQfu3camXfEqPZM/VJlzLtP7xj5KkG6eMUeC/7+NgRsnib6KMqFzCmIPfEb+bJ Bo75ys6U85foV/LG+xdKPJMvlgZm1XeY/jinaAkj8o+0aKMsmDLYoG+JgFlTx5+g cNHrij4ZE/GjavhfaxN9BYNfl3kPS1Yvi7Upr8/9d3Oe87MauZz3CEuzLoQs8TTm PdPbQ4UQvw9REE8DCms5wiY15Miqrn4GIEwCp7rtRDrV3pMchFuknKqYGZiMhWWO KHvDyd+PF/hAOQ== -----END CERTIFICATE-----Generated at Tue Dec 16 00:45:57 2025 by rpki-client