This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft File: KUv7SsSIYBHwbZ3E79RVMyZO14g.mft (raw, json) Hash identifier: tiM3Z9WnPCQLEzzL/Gga0XpZQIWrFsJDH4y8B8WtVLc= Subject key identifier: 8F:8D:67:24:62:59:23:52:2C:90:5E:3E:E9:6D:9C:A4:63:96:2E:2C Authority key identifier: 29:4B:FB:4A:C4:88:60:11:F0:6D:9D:C4:EF:D4:55:33:26:4E:D7:88 Certificate issuer: /CN=294bfb4ac4886011f06d9dc4efd45533264ed788 Certificate serial: 019AF2ADE7029CA21B6E26F0F037817F4217 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft Manifest number: 115B Signing time: Sat 06 Dec 2025 08:01:14 +0000 Manifest this update: Sat 06 Dec 2025 08:01:14 +0000 Manifest next update: Sun 07 Dec 2025 08:01:14 +0000 Files and hashes: 1: KUv7SsSIYBHwbZ3E79RVMyZO14g.crl (hash: AdyPU5zcpYSAUmU42Q8GQVW80Tp98kAobASNUloO6WE=) 2: vUzTxQRZNE5WBxRpFY_1BvR6nb8.roa (hash: 4IGQdOA0rNIT3SYgWTgAAmM5+gTsF90wOn17b+OWr8A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:e7:02:9c:a2:1b:6e:26:f0:f0:37:81:7f:42:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=294bfb4ac4886011f06d9dc4efd45533264ed788 Validity Not Before: Dec 6 08:01:14 2025 GMT Not After : Dec 7 08:01:14 2025 GMT Subject: CN=8f8d6724625923522c905e3ee96d9ca463962e2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:48:bd:ef:86:f4:0a:9e:e8:11:11:aa:d0:da: 6a:5a:c7:ed:b5:a9:e2:11:de:f3:e3:6c:66:4e:03: 60:aa:3e:48:23:7c:87:c3:17:f1:53:93:13:6b:96: a2:51:3d:fb:32:37:0f:9e:d6:be:44:dc:ed:b7:88: 13:ba:17:df:59:81:93:54:bc:ca:38:e6:1b:e7:41: 39:b0:fe:5d:6d:83:aa:74:63:fb:6b:e7:fb:65:f5: 9b:b6:9f:6a:38:89:ed:81:4f:c2:43:47:12:f2:fb: e9:bb:52:e6:fd:90:33:b3:e1:38:0d:46:93:65:2d: 4e:9f:81:10:95:b6:59:14:4f:59:7f:a0:f4:29:49: 66:89:c7:93:37:94:3c:dc:7a:d2:4e:3b:7d:77:6e: 63:4e:70:b1:32:5d:ef:52:fc:3e:cd:be:99:6d:5a: bc:c4:98:cf:37:98:23:ff:fb:a8:63:a9:87:50:44: ec:5d:29:71:42:94:8f:37:91:81:92:7c:99:da:b4: 1f:e0:63:6b:e7:26:da:de:2e:68:5a:2c:d6:ff:f3: 57:83:08:98:23:8e:28:83:b8:36:e1:5e:d0:95:e5: e1:34:4f:c6:02:7b:f1:a8:19:7f:47:7f:f2:3d:8e: ca:b0:f7:0c:a8:7c:a5:05:fa:fe:25:9e:62:98:76: 2c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:8D:67:24:62:59:23:52:2C:90:5E:3E:E9:6D:9C:A4:63:96:2E:2C X509v3 Authority Key Identifier: keyid:29:4B:FB:4A:C4:88:60:11:F0:6D:9D:C4:EF:D4:55:33:26:4E:D7:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:2f:ef:09:3d:c4:1d:8b:64:0e:37:ed:6f:db:23:ee:7e:a8: 59:22:78:ce:2f:dd:5d:15:83:69:86:7d:dc:7b:f1:95:41:92: 72:50:61:84:d5:25:e5:08:da:f2:8e:e3:1e:78:4f:55:62:9c: b0:3b:04:b3:c9:0d:44:99:6a:eb:3d:f3:47:d2:7a:44:ef:15: 7c:b9:b7:84:ed:46:e0:1d:94:56:2b:9a:d0:63:4b:e0:0e:b6: 6f:cf:93:4d:7f:7f:3b:8b:4d:1f:91:e6:1f:92:d2:5b:35:9a: 17:7a:38:c0:4f:31:b1:f3:c6:af:62:5c:6a:f4:c3:5b:7e:07: 38:92:54:21:7c:c5:af:72:5a:c8:78:de:fa:39:a6:52:b9:1d: 1a:fa:80:dd:2f:b7:e4:c7:80:f3:5d:c2:cb:45:79:3f:02:9e: cc:49:4a:a2:04:74:a6:10:56:13:bf:9f:53:42:83:27:27:08: b5:44:38:bf:7b:03:28:3d:d0:73:0f:56:5b:ea:4b:d7:87:1c: e7:de:72:57:ec:62:fa:97:06:94:f9:7a:b9:28:11:df:e4:0b: 61:f7:89:8f:26:0b:da:29:fd:ee:29:f5:d1:f0:f6:0f:0e:02: 7b:12:51:f2:9c:66:77:e8:f3:dd:09:32:2e:1d:64:6d:25:f3: d5:dd:7a:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrecCnKIbbibw8DeBf0IXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NGJmYjRhYzQ4ODYwMTFmMDZkOWRjNGVmZDQ1NTMzMjY0 ZWQ3ODgwHhcNMjUxMjA2MDgwMTE0WhcNMjUxMjA3MDgwMTE0WjAzMTEwLwYDVQQD Eyg4ZjhkNjcyNDYyNTkyMzUyMmM5MDVlM2VlOTZkOWNhNDYzOTYyZTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkki974b0Cp7oERGq0NpqWsfttani Ed7z42xmTgNgqj5II3yHwxfxU5MTa5aiUT37MjcPnta+RNztt4gTuhffWYGTVLzK OOYb50E5sP5dbYOqdGP7a+f7ZfWbtp9qOIntgU/CQ0cS8vvpu1Lm/ZAzs+E4DUaT ZS1On4EQlbZZFE9Zf6D0KUlmiceTN5Q83HrSTjt9d25jTnCxMl3vUvw+zb6ZbVq8 xJjPN5gj//uoY6mHUETsXSlxQpSPN5GBknyZ2rQf4GNr5yba3i5oWizW//NXgwiY I44og7g24V7QleXhNE/GAnvxqBl/R3/yPY7KsPcMqHylBfr+JZ5imHYsrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+NZyRiWSNSLJBePultnKRjli4sMB8GA1UdIwQY MBaAFClL+0rEiGAR8G2dxO/UVTMmTteIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1V2N1NzU0lZQkh3YlozRTc5UlZNeVpPMTRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iMGRhMDYtMWJhNy00OWYwLWE1Njkt OTA5ZmU3YzgwZDk4LzEvS1V2N1NzU0lZQkh3YlozRTc5UlZNeVpPMTRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9iMGRhMDYtMWJhNy00OWYwLWE1NjktOTA5ZmU3YzgwZDk4 LzEvS1V2N1NzU0lZQkh3YlozRTc5UlZNeVpPMTRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlC/vCT3E HYtkDjftb9sj7n6oWSJ4zi/dXRWDaYZ93HvxlUGSclBhhNUl5Qja8o7jHnhPVWKc sDsEs8kNRJlq6z3zR9J6RO8VfLm3hO1G4B2UViua0GNL4A62b8+TTX9/O4tNH5Hm H5LSWzWaF3o4wE8xsfPGr2JcavTDW34HOJJUIXzFr3JayHje+jmmUrkdGvqA3S+3 5MeA813Cy0V5PwKezElKogR0phBWE7+fU0KDJycItUQ4v3sDKD3Qcw9WW+pL14cc 595yV+xi+pcGlPl6uSgR3+QLYfeJjyYL2in97in10fD2Dw4CexJR8pxmd+jz3Qky Lh1kbSXz1d16ug== -----END CERTIFICATE-----Generated at Sat Dec 6 10:01:07 2025 by rpki-client