This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft File: kbP11vQ-gwcfp35tPru3k1L5YbU.mft (raw, json) Hash identifier: sW9V2smDlIn8IDzTIUXf5z2IazwegySIFHgYD4SD7AU= Subject key identifier: 56:8F:33:75:68:FA:87:B8:6A:35:A4:B6:20:1C:74:78:8C:A3:FD:3C Authority key identifier: 91:B3:F5:D6:F4:3E:83:07:1F:A7:7E:6D:3E:BB:B7:93:52:F9:61:B5 Certificate issuer: /CN=91b3f5d6f43e83071fa77e6d3ebbb79352f961b5 Certificate serial: 019B4092126810D5E3FC018B5FCFE2BB0C57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft Manifest number: 1067 Signing time: Sun 21 Dec 2025 11:01:13 +0000 Manifest this update: Sun 21 Dec 2025 11:01:13 +0000 Manifest next update: Mon 22 Dec 2025 11:01:13 +0000 Files and hashes: 1: X8wL7IEItggqG87hU2SRjhDFo0c.roa (hash: Z7Uz5pUQbhyO7q39OnET5F24kmKZzxNrZzpSD8G3ebQ=) 2: kbP11vQ-gwcfp35tPru3k1L5YbU.crl (hash: 8t8myBow3wLpMvJVQbgyDHOWUlwWcoOn3bCgVvKMk4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:92:12:68:10:d5:e3:fc:01:8b:5f:cf:e2:bb:0c:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91b3f5d6f43e83071fa77e6d3ebbb79352f961b5 Validity Not Before: Dec 21 11:01:13 2025 GMT Not After : Dec 22 11:01:13 2025 GMT Subject: CN=568f337568fa87b86a35a4b6201c74788ca3fd3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:36:69:04:48:c0:62:0b:ba:3e:b1:3f:d5:29: 5d:92:a9:c9:c4:3b:02:a8:64:fb:c4:b0:6d:0a:68: 50:98:ed:16:a5:3e:be:21:78:d6:86:64:2d:4b:0c: 06:93:41:aa:73:3d:77:47:2b:b5:29:e8:01:e1:21: 8e:ab:46:8e:23:ea:a8:dd:27:e2:84:ad:af:2c:1a: dc:4f:16:87:cf:6b:65:3e:9c:ed:0f:4f:6e:4c:a1: b5:f6:8c:c2:9f:21:1f:9e:77:5f:81:0f:7a:02:02: 18:0e:5f:99:dc:a0:2a:36:9b:d9:af:56:4a:5f:e1: d1:8e:de:25:1d:ba:f2:16:2d:39:9c:81:5f:ab:56: 57:51:67:c8:71:19:e6:9e:a9:3f:f4:04:8c:a6:84: aa:ef:e1:d8:b6:e4:09:42:04:79:94:3c:0b:82:6c: 50:96:95:6d:3c:e1:e0:4d:35:fe:29:6b:2c:71:ae: 7d:fe:83:44:e8:16:ff:5a:2c:20:dd:31:73:73:d1: 4b:30:54:ed:3f:96:c2:15:2c:ef:5d:73:fe:02:71: b0:1a:cd:16:0b:de:6b:21:9d:98:9d:bf:ba:15:8a: 70:7f:1c:28:f5:dc:26:5a:37:59:70:4d:92:c9:a0: 97:40:31:42:f3:22:56:c9:83:61:ba:3a:66:b2:50: 1a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:8F:33:75:68:FA:87:B8:6A:35:A4:B6:20:1C:74:78:8C:A3:FD:3C X509v3 Authority Key Identifier: keyid:91:B3:F5:D6:F4:3E:83:07:1F:A7:7E:6D:3E:BB:B7:93:52:F9:61:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:9e:f5:c7:37:b6:2a:72:07:cf:f2:2d:5d:df:42:7f:33:31: 78:b3:58:23:22:ca:98:46:83:2d:f7:e3:10:15:33:89:e4:b3: fc:aa:cf:a3:6f:61:a5:55:eb:1f:59:bc:d3:17:54:41:e5:89: f8:a6:b0:04:d8:4a:f7:93:c1:f8:eb:a2:5a:fa:5a:99:37:fc: fd:b0:31:87:4c:8c:bf:85:80:26:aa:7c:81:76:c6:c4:63:0b: 0f:aa:ef:ea:c3:15:1a:ee:d2:4d:52:76:2e:ef:0d:55:3a:f4: 31:40:4a:30:cf:3a:42:b6:db:8e:63:6e:41:e0:6d:ca:c2:33: ce:c3:02:3f:da:96:c0:e6:df:e7:95:a4:77:e5:cb:c7:02:44: 12:00:04:35:c7:2d:51:db:0f:9a:5d:37:a7:91:9c:56:83:ad: 0f:fb:2a:ed:f8:52:e4:1c:e7:f5:5a:c5:44:27:b5:6a:39:7b: 00:5e:bc:75:b4:79:cf:5d:2b:96:7b:b6:3a:d1:1a:42:69:1e: c0:a0:78:70:b7:20:f9:80:da:97:9a:2e:2e:e9:b7:7e:2e:18: 33:32:ca:dd:81:be:ca:cd:7e:09:62:34:25:6b:9f:47:b6:b9: a2:c8:1e:05:3f:fe:20:d3:6f:33:59:0f:ba:3d:50:9d:74:00: 66:78:a5:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkhJoENXj/AGLX8/iuwxXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxYjNmNWQ2ZjQzZTgzMDcxZmE3N2U2ZDNlYmJiNzkzNTJm OTYxYjUwHhcNMjUxMjIxMTEwMTEzWhcNMjUxMjIyMTEwMTEzWjAzMTEwLwYDVQQD Eyg1NjhmMzM3NTY4ZmE4N2I4NmEzNWE0YjYyMDFjNzQ3ODhjYTNmZDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTZpBEjAYgu6PrE/1SldkqnJxDsC qGT7xLBtCmhQmO0WpT6+IXjWhmQtSwwGk0Gqcz13Ryu1KegB4SGOq0aOI+qo3Sfi hK2vLBrcTxaHz2tlPpztD09uTKG19ozCnyEfnndfgQ96AgIYDl+Z3KAqNpvZr1ZK X+HRjt4lHbryFi05nIFfq1ZXUWfIcRnmnqk/9ASMpoSq7+HYtuQJQgR5lDwLgmxQ lpVtPOHgTTX+KWssca59/oNE6Bb/Wiwg3TFzc9FLMFTtP5bCFSzvXXP+AnGwGs0W C95rIZ2Ynb+6FYpwfxwo9dwmWjdZcE2SyaCXQDFC8yJWyYNhujpmslAakQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFaPM3Vo+oe4ajWktiAcdHiMo/08MB8GA1UdIwQY MBaAFJGz9db0PoMHH6d+bT67t5NS+WG1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2JQMTF2US1nd2NmcDM1dFBydTNrMUw1WWJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84N2E4NjMtZGE2Zi00OTgxLTkzNzgt YjJjZDRlNTgxMDBlLzEva2JQMTF2US1nd2NmcDM1dFBydTNrMUw1WWJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS84N2E4NjMtZGE2Zi00OTgxLTkzNzgtYjJjZDRlNTgxMDBl LzEva2JQMTF2US1nd2NmcDM1dFBydTNrMUw1WWJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiJ71xze2 KnIHz/ItXd9CfzMxeLNYIyLKmEaDLffjEBUzieSz/KrPo29hpVXrH1m80xdUQeWJ +KawBNhK95PB+OuiWvpamTf8/bAxh0yMv4WAJqp8gXbGxGMLD6rv6sMVGu7STVJ2 Lu8NVTr0MUBKMM86QrbbjmNuQeBtysIzzsMCP9qWwObf55Wkd+XLxwJEEgAENcct UdsPml03p5GcVoOtD/sq7fhS5Bzn9VrFRCe1ajl7AF68dbR5z10rlnu2OtEaQmke wKB4cLcg+YDal5ouLum3fi4YMzLK3YG+ys1+CWI0JWufR7a5osgeBT/+INNvM1kP uj1QnXQAZnilyg== -----END CERTIFICATE-----Generated at Sun Dec 21 19:19:02 2025 by rpki-client