This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft File: KVqSt3jt36jc2RfLuHzeMboscy8.mft (raw, json) Hash identifier: 8BLn+Q82c2yAcanR9fMEe7NE3YHLx7ilxv+vi3gyGsM= Subject key identifier: CF:9C:D3:33:AB:58:B4:DC:44:A5:FD:EB:40:67:7A:97:E7:3F:E0:6C Authority key identifier: 29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F Certificate issuer: /CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f Certificate serial: 019AF5AEEF3E6081EA74A9B7CEC07AF12224 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 22:01:13 +0000 Manifest this update: Sat 06 Dec 2025 22:01:13 +0000 Manifest next update: Sun 07 Dec 2025 22:01:13 +0000 Files and hashes: 1: 043uSXcEwcTZgUk5_ExSgvF0TDI.roa (hash: aKMAMHw8f6Tqa+Lu83OKVpFBIm3XSWZO6zpjohL8Alg=) 2: KVqSt3jt36jc2RfLuHzeMboscy8.crl (hash: UijTNtHy80D96Gr5bYWnK2m3cGD6SydfUSEoju5t/8U=) 3: sqwvJOyPTCq5sZkvN5Pbfvvxhgg.roa (hash: HccEp/1nmaqHimBtUpSeAjWigFxaNTmI1UzABIZlNpU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:ef:3e:60:81:ea:74:a9:b7:ce:c0:7a:f1:22:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f Validity Not Before: Dec 6 22:01:13 2025 GMT Not After : Dec 7 22:01:13 2025 GMT Subject: CN=cf9cd333ab58b4dc44a5fdeb40677a97e73fe06c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ca:96:70:7c:87:0e:35:75:6d:c0:a7:25:f1: 6a:3c:e3:3a:16:d2:76:bb:79:3e:40:20:85:e7:1f: b1:20:25:4c:3f:5b:e5:cb:8a:a0:4c:fe:26:41:e7: 2e:e3:77:a0:2c:82:0d:44:f8:86:1a:cb:13:3e:37: 20:ba:c7:f8:4c:07:2e:1a:80:62:5f:8f:59:d4:d9: f4:13:f1:73:95:b9:9a:3e:75:0b:93:5b:7d:da:af: 80:59:85:1e:99:37:db:f2:84:9f:56:a4:33:a3:fe: 44:7c:4a:93:d3:3b:1a:fb:0f:23:c0:81:b7:d5:9b: 31:77:06:db:88:6b:5f:de:bb:08:86:f4:b7:c6:ef: e3:45:8f:8a:e5:bf:9f:cc:96:bb:6b:d4:3c:68:38: 9a:db:ca:f7:b1:4a:e0:a6:08:46:1e:c8:e4:e1:d8: b7:d6:cb:0a:a5:42:1b:d9:c4:fe:44:60:33:ad:a3: f0:a4:b4:ef:52:07:cb:1b:00:16:a6:c3:2c:f4:9f: aa:44:d1:22:42:e3:89:9d:2b:ec:51:d2:9c:bb:92: 4c:14:7c:cd:9d:19:ca:91:60:06:8a:76:e1:b5:e2: 43:e6:ff:c5:71:3b:a1:7d:56:35:3c:b7:c7:0a:51: a4:b3:4c:26:23:d3:15:40:47:32:bf:53:a8:04:65: d9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:9C:D3:33:AB:58:B4:DC:44:A5:FD:EB:40:67:7A:97:E7:3F:E0:6C X509v3 Authority Key Identifier: keyid:29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:d2:95:19:35:d5:d2:8d:b8:e7:c0:93:ed:38:3f:5a:7f:b1: 68:55:77:bb:d1:e8:b4:72:54:a4:de:61:35:b0:f8:39:4e:20: 08:c6:43:47:23:10:b9:20:48:23:66:70:a8:e8:bd:7d:bd:83: 0e:46:4c:6b:a0:c1:19:b3:d7:ec:65:a6:f4:95:0c:02:5b:ba: 6f:98:1f:33:8e:4d:e4:22:1f:91:84:b6:24:05:9c:de:25:71: 34:16:34:34:4b:33:0c:f4:ed:01:9d:be:b8:3f:06:4c:e2:e5: a9:35:3c:ff:4e:de:23:92:5b:ea:98:fb:79:c8:e9:4b:88:cf: 61:e1:c9:03:9c:52:e1:19:4b:a7:9b:46:fc:80:e2:31:6a:d2: 59:29:3e:d8:9f:a3:20:a2:d9:31:e4:12:61:4f:a2:c9:5c:6f: e5:5c:ca:0d:bb:9a:21:43:d2:78:51:8c:73:4b:13:19:5b:2b: a4:f3:86:4b:6b:d4:a2:e3:77:dc:cf:cc:72:82:69:15:88:ae: 92:cd:86:6b:c2:24:f6:21:db:06:7d:34:bc:e9:9d:48:1f:03: 7e:82:80:97:2a:b8:aa:a0:d2:31:54:e5:59:94:bd:04:9f:a9: 4a:75:75:74:b4:98:48:11:9d:0b:e3:c5:16:d0:c1:67:8e:38: be:fc:53:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1ru8+YIHqdKm3zsB68SIkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NWE5MmI3NzhlZGRmYThkY2Q5MTdjYmI4N2NkZTMxYmEy YzczMmYwHhcNMjUxMjA2MjIwMTEzWhcNMjUxMjA3MjIwMTEzWjAzMTEwLwYDVQQD EyhjZjljZDMzM2FiNThiNGRjNDRhNWZkZWI0MDY3N2E5N2U3M2ZlMDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8qWcHyHDjV1bcCnJfFqPOM6FtJ2 u3k+QCCF5x+xICVMP1vly4qgTP4mQecu43egLIINRPiGGssTPjcgusf4TAcuGoBi X49Z1Nn0E/FzlbmaPnULk1t92q+AWYUemTfb8oSfVqQzo/5EfEqT0zsa+w8jwIG3 1ZsxdwbbiGtf3rsIhvS3xu/jRY+K5b+fzJa7a9Q8aDia28r3sUrgpghGHsjk4di3 1ssKpUIb2cT+RGAzraPwpLTvUgfLGwAWpsMs9J+qRNEiQuOJnSvsUdKcu5JMFHzN nRnKkWAGinbhteJD5v/FcTuhfVY1PLfHClGks0wmI9MVQEcyv1OoBGXZZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+c0zOrWLTcRKX960BnepfnP+BsMB8GA1UdIwQY MBaAFClakrd47d+o3NkXy7h83jG6LHMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1ZxU3QzanQzNmpjMlJmTHVIemVNYm9zY3k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83NTcwZTEtYWUzZC00OTAxLTljODUt ZGNkYzVjZWUyNzZmLzEvS1ZxU3QzanQzNmpjMlJmTHVIemVNYm9zY3k4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy83NTcwZTEtYWUzZC00OTAxLTljODUtZGNkYzVjZWUyNzZm LzEvS1ZxU3QzanQzNmpjMlJmTHVIemVNYm9zY3k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ9KVGTXV 0o2458CT7Tg/Wn+xaFV3u9HotHJUpN5hNbD4OU4gCMZDRyMQuSBII2ZwqOi9fb2D DkZMa6DBGbPX7GWm9JUMAlu6b5gfM45N5CIfkYS2JAWc3iVxNBY0NEszDPTtAZ2+ uD8GTOLlqTU8/07eI5Jb6pj7ecjpS4jPYeHJA5xS4RlLp5tG/IDiMWrSWSk+2J+j IKLZMeQSYU+iyVxv5VzKDbuaIUPSeFGMc0sTGVsrpPOGS2vUouN33M/McoJpFYiu ks2Ga8Ik9iHbBn00vOmdSB8DfoKAlyq4qqDSMVTlWZS9BJ+pSnV1dLSYSBGdC+PF FtDBZ444vvxT0A== -----END CERTIFICATE-----Generated at Sun Dec 7 01:32:59 2025 by rpki-client