This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft File: KVV59bZz2-LrujSM-w9WEkzecEg.mft (raw, json) Hash identifier: qskzF7zsCP8cIb5UA1Me+FWWqt6l5QLNjWb71hCEQkc= Subject key identifier: 2C:66:B6:6E:04:66:E8:50:0F:66:7D:82:56:58:F9:71:AB:E3:33:39 Authority key identifier: 29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48 Certificate issuer: /CN=295579f5b673dbe2ebba348cfb0f56124cde7048 Certificate serial: 019AF088B9A2E8C6093BE1CB4EDB070445E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft Manifest number: 1762 Signing time: Fri 05 Dec 2025 22:01:23 +0000 Manifest this update: Fri 05 Dec 2025 22:01:23 +0000 Manifest next update: Sat 06 Dec 2025 22:01:23 +0000 Files and hashes: 1: GLETZPGAzgEdqr3_Ju2Hw5dfeCc.roa (hash: 1ZSMTZbayji0IpT4/tlfR8iOgQX8cgSQ3hZYI5R5pYA=) 2: JVzuM8B6ofXxJRTwKSOh4uQnHZ8.roa (hash: 6kzBk5+13Ftt6UqtqHrn3x6NbCUjc2KzWe2+5j/AkQM=) 3: KVV59bZz2-LrujSM-w9WEkzecEg.crl (hash: MNxbhllcfesrelRAxK+kmoMrOWWC/RZInN8qs5HpHG8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:b9:a2:e8:c6:09:3b:e1:cb:4e:db:07:04:45:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295579f5b673dbe2ebba348cfb0f56124cde7048 Validity Not Before: Dec 5 22:01:23 2025 GMT Not After : Dec 6 22:01:23 2025 GMT Subject: CN=2c66b66e0466e8500f667d825658f971abe33339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9c:ae:aa:24:72:c6:10:7f:36:bc:55:82:33: 11:05:86:63:2a:06:55:a1:29:04:33:92:35:23:47: 69:ed:7d:dc:f5:c3:d0:de:b6:d0:9e:3f:9e:6a:f4: ce:96:69:ed:17:8b:51:14:b4:34:9d:fd:09:89:78: 74:9e:a8:7f:aa:30:db:01:6f:66:9c:2c:7e:42:5e: 7b:03:69:a0:97:86:17:af:3f:3a:57:e1:19:fa:4d: 14:ba:31:a8:4b:4f:01:42:18:07:e4:7b:b2:ab:9c: fc:7a:11:34:70:77:ec:4f:d7:8e:ef:1d:35:8b:75: c1:f4:2a:6b:1e:0e:1a:0e:69:b0:f7:ba:7c:dc:13: 7e:8d:ae:ff:ea:81:f4:89:58:84:82:18:05:be:a1: 89:87:d3:88:90:33:88:39:ce:56:f3:a9:64:4f:f3: 7c:70:1f:61:2f:a5:9a:04:8f:c8:b8:21:11:d8:87: 12:c1:9c:63:13:43:03:3b:2a:7d:04:ad:39:43:62: 80:eb:2e:bf:c9:33:16:59:50:b8:b7:be:9d:72:c2: 5a:f5:a8:e4:1f:69:95:ad:f7:9a:02:d7:75:9b:8c: 50:89:b7:d5:9b:ac:60:2f:29:d8:10:5c:6a:87:b9: c8:86:61:fe:a8:a2:16:d4:34:a1:80:66:d1:f3:c0: af:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:66:B6:6E:04:66:E8:50:0F:66:7D:82:56:58:F9:71:AB:E3:33:39 X509v3 Authority Key Identifier: keyid:29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:03:8d:fe:da:ea:a6:16:0b:29:4b:9e:e4:2a:6c:92:74:38: 30:86:be:2b:ac:2c:6a:a5:e3:12:8c:44:d4:ef:20:98:e4:45: e3:5d:8e:48:a1:d3:45:f9:ee:f6:5c:82:bf:6f:4c:34:3e:d9: 31:88:fd:0d:fc:16:39:66:4c:76:7b:8d:c5:61:8d:84:13:99: 42:d1:29:b8:19:8f:0b:3d:3c:6d:fa:13:8d:af:51:3f:74:a7: ed:b3:c7:70:b3:c9:40:2b:54:03:74:0a:8f:42:13:65:79:b2: 8e:f9:c6:48:17:3c:ce:00:35:f4:8d:9c:ca:af:41:43:0e:02: 96:f7:6c:57:d8:56:bd:51:0d:06:ae:94:36:9b:fe:f1:34:72: f7:49:f0:bc:34:3c:04:52:8f:38:99:c7:d5:52:e0:03:2c:72: 6e:39:e2:90:a8:1c:c2:f5:7f:83:9e:9a:62:44:a6:1a:b2:66: 3a:2e:da:de:6b:3b:9f:ff:35:db:97:df:9e:49:38:fc:44:6c: 1a:42:da:83:2a:2b:43:7c:ad:ee:b6:72:ed:33:fd:6a:bf:e2: 19:01:09:59:e5:24:68:3b:5b:30:eb:89:93:bd:48:b0:52:bb: d3:c5:65:59:62:69:a0:04:c4:5c:7d:de:d9:cf:11:e9:57:6c: 64:9a:9d:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiLmi6MYJO+HLTtsHBEXmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NTU3OWY1YjY3M2RiZTJlYmJhMzQ4Y2ZiMGY1NjEyNGNk ZTcwNDgwHhcNMjUxMjA1MjIwMTIzWhcNMjUxMjA2MjIwMTIzWjAzMTEwLwYDVQQD EygyYzY2YjY2ZTA0NjZlODUwMGY2NjdkODI1NjU4Zjk3MWFiZTMzMzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZyuqiRyxhB/NrxVgjMRBYZjKgZV oSkEM5I1I0dp7X3c9cPQ3rbQnj+eavTOlmntF4tRFLQ0nf0JiXh0nqh/qjDbAW9m nCx+Ql57A2mgl4YXrz86V+EZ+k0UujGoS08BQhgH5Huyq5z8ehE0cHfsT9eO7x01 i3XB9CprHg4aDmmw97p83BN+ja7/6oH0iViEghgFvqGJh9OIkDOIOc5W86lkT/N8 cB9hL6WaBI/IuCER2IcSwZxjE0MDOyp9BK05Q2KA6y6/yTMWWVC4t76dcsJa9ajk H2mVrfeaAtd1m4xQibfVm6xgLynYEFxqh7nIhmH+qKIW1DShgGbR88CvuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCxmtm4EZuhQD2Z9glZY+XGr4zM5MB8GA1UdIwQY MBaAFClVefW2c9vi67o0jPsPVhJM3nBIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1ZWNTliWnoyLUxydWpTTS13OVdFa3plY0VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8xNTc0YzktMDFkNS00OGZkLTk4MGYt MzQzYzRkMjRjMjNiLzEvS1ZWNTliWnoyLUxydWpTTS13OVdFa3plY0VnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS8xNTc0YzktMDFkNS00OGZkLTk4MGYtMzQzYzRkMjRjMjNi LzEvS1ZWNTliWnoyLUxydWpTTS13OVdFa3plY0VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASwON/trq phYLKUue5CpsknQ4MIa+K6wsaqXjEoxE1O8gmORF412OSKHTRfnu9lyCv29MND7Z MYj9DfwWOWZMdnuNxWGNhBOZQtEpuBmPCz08bfoTja9RP3Sn7bPHcLPJQCtUA3QK j0ITZXmyjvnGSBc8zgA19I2cyq9BQw4ClvdsV9hWvVENBq6UNpv+8TRy90nwvDQ8 BFKPOJnH1VLgAyxybjnikKgcwvV/g56aYkSmGrJmOi7a3ms7n/8125ffnkk4/ERs GkLagyorQ3yt7rZy7TP9ar/iGQEJWeUkaDtbMOuJk71IsFK708VlWWJpoATEXH3e 2c8R6VdsZJqdlQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:25:01 2025 by rpki-client