This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.mft File: kLCsKbEI83Ixb79OqT4UhzGkxOk.mft (raw, json) Hash identifier: Lwd0lmAFTgQ5RPvfaE5j7UmncbuerKz2fRAt5tD0T2I= Subject key identifier: 35:B1:1B:62:C2:E7:E6:66:B0:CA:9B:94:23:5E:27:96:5B:03:4F:38 Authority key identifier: 90:B0:AC:29:B1:08:F3:72:31:6F:BF:4E:A9:3E:14:87:31:A4:C4:E9 Certificate issuer: /CN=90b0ac29b108f372316fbf4ea93e148731a4c4e9 Certificate serial: 019AFCC4B54884B4D64CDBC03C1014509CE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLCsKbEI83Ixb79OqT4UhzGkxOk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.mft Manifest number: 176A Signing time: Mon 08 Dec 2025 07:02:20 +0000 Manifest this update: Mon 08 Dec 2025 07:02:20 +0000 Manifest next update: Tue 09 Dec 2025 07:02:20 +0000 Files and hashes: 1: E7tuzODCvj1Y4rQf0ix9lEI7vNs.roa (hash: 7tjdPPhW07eifJoW12vu1rvxuuaPJc8oBZTFD5/C/EY=) 2: kLCsKbEI83Ixb79OqT4UhzGkxOk.crl (hash: fImE9Z8/co0GD8qt361Fiy4QfjDqAItcCI0Oo/63apw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.mft rsync://rpki.ripe.net/repository/DEFAULT/kLCsKbEI83Ixb79OqT4UhzGkxOk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:c4:b5:48:84:b4:d6:4c:db:c0:3c:10:14:50:9c:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90b0ac29b108f372316fbf4ea93e148731a4c4e9 Validity Not Before: Dec 8 07:02:20 2025 GMT Not After : Dec 9 07:02:20 2025 GMT Subject: CN=35b11b62c2e7e666b0ca9b94235e27965b034f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:22:61:d9:f9:92:b4:de:59:d5:fb:9b:05:bd: f3:12:08:4a:47:e7:21:9f:48:81:0d:39:91:7a:e4: a0:66:fa:29:d6:a4:fc:84:25:e0:3a:6e:71:87:8f: 0b:74:51:52:8c:4b:53:c4:e7:4c:f3:1c:fe:62:14: be:74:da:04:05:53:bd:4c:cf:0b:7b:d8:88:3d:c4: 07:04:9b:d5:31:e9:1e:ab:b7:77:50:ed:7e:de:c7: 78:a8:a7:25:dc:49:bb:f0:8e:fc:9e:ec:81:34:eb: 22:8c:20:40:55:42:43:b8:f4:8a:96:bb:14:0b:6b: d6:d0:3f:6d:9d:70:4b:d0:77:d4:d3:64:72:e4:ce: f5:3f:cf:90:73:57:80:b8:46:b3:3c:a5:50:7e:fd: b5:dc:db:97:10:a4:c2:a8:cb:1d:ff:67:e3:c7:60: 60:aa:2f:5c:8b:93:b7:17:d9:13:1f:01:fd:3a:6a: 0e:bc:30:d6:8b:1d:1e:89:21:db:cd:9c:92:01:c2: 9c:99:b7:63:db:db:fe:bc:76:c6:cf:0d:00:79:f0: 16:7f:05:e0:be:33:78:64:19:e1:c4:c9:91:2f:1f: 56:7b:81:81:35:12:c3:c3:28:c1:23:5c:3f:31:2a: 6d:1a:3c:55:ad:12:54:2a:26:c6:ed:b2:f7:67:0b: 1e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B1:1B:62:C2:E7:E6:66:B0:CA:9B:94:23:5E:27:96:5B:03:4F:38 X509v3 Authority Key Identifier: keyid:90:B0:AC:29:B1:08:F3:72:31:6F:BF:4E:A9:3E:14:87:31:A4:C4:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLCsKbEI83Ixb79OqT4UhzGkxOk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:09:97:7b:78:1d:83:ee:5d:28:e1:bc:fd:b7:b0:90:12:d9: 71:53:94:92:32:58:8e:1c:ed:d5:f2:1f:8e:a4:35:77:43:d0: 1b:63:55:67:aa:50:e9:73:83:b2:39:70:30:69:91:d8:5c:6e: 99:aa:e4:37:48:b9:f2:a6:10:0c:79:0a:7a:17:a6:be:e8:ee: 63:c9:de:10:90:c1:cb:0e:9b:c7:5f:ff:29:ca:d3:62:0f:f5: 2b:fa:7c:b1:02:c5:3f:cf:05:39:78:18:40:82:54:a6:10:01: b5:ed:61:f6:86:57:7d:81:58:6e:e4:9d:98:00:46:c2:da:59: 7a:85:c5:84:45:bf:7e:29:86:6f:bc:ab:59:9d:be:5e:83:72: d3:56:0c:30:97:4f:e9:29:73:70:4c:fc:ba:38:bf:1a:43:98: 39:07:a1:60:a8:59:a7:e2:00:fe:82:91:cb:e9:01:f4:3a:99: 52:ca:e1:07:e4:b0:c7:2d:b1:c7:7a:49:ed:54:e2:34:b3:68: 7f:6b:4a:a6:63:0c:f0:f1:b7:79:0d:8e:a3:e5:f1:d2:c8:6d: d3:e2:af:cd:87:61:fb:7e:2a:51:0e:1c:d4:2e:55:72:7a:c5: 41:ec:bf:c2:ce:d2:db:1b:d3:b8:b7:6b:07:9d:64:20:89:2a: 58:7e:e0:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8xLVIhLTWTNvAPBAUUJzoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwYjBhYzI5YjEwOGYzNzIzMTZmYmY0ZWE5M2UxNDg3MzFh NGM0ZTkwHhcNMjUxMjA4MDcwMjIwWhcNMjUxMjA5MDcwMjIwWjAzMTEwLwYDVQQD EygzNWIxMWI2MmMyZTdlNjY2YjBjYTliOTQyMzVlMjc5NjViMDM0ZjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SJh2fmStN5Z1fubBb3zEghKR+ch n0iBDTmReuSgZvop1qT8hCXgOm5xh48LdFFSjEtTxOdM8xz+YhS+dNoEBVO9TM8L e9iIPcQHBJvVMekeq7d3UO1+3sd4qKcl3Em78I78nuyBNOsijCBAVUJDuPSKlrsU C2vW0D9tnXBL0HfU02Ry5M71P8+Qc1eAuEazPKVQfv213NuXEKTCqMsd/2fjx2Bg qi9ci5O3F9kTHwH9OmoOvDDWix0eiSHbzZySAcKcmbdj29v+vHbGzw0AefAWfwXg vjN4ZBnhxMmRLx9We4GBNRLDwyjBI1w/MSptGjxVrRJUKibG7bL3ZwsebQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDWxG2LC5+ZmsMqblCNeJ5ZbA084MB8GA1UdIwQY MBaAFJCwrCmxCPNyMW+/Tqk+FIcxpMTpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0xDc0tiRUk4M0l4Yjc5T3FUNFVoekdreE9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yZjYzMmMtYmQ1NC00MDM2LTkwYjYt ZDI1M2NkM2U3YTM0LzEva0xDc0tiRUk4M0l4Yjc5T3FUNFVoekdreE9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8yZjYzMmMtYmQ1NC00MDM2LTkwYjYtZDI1M2NkM2U3YTM0 LzEva0xDc0tiRUk4M0l4Yjc5T3FUNFVoekdreE9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAawmXe3gd g+5dKOG8/bewkBLZcVOUkjJYjhzt1fIfjqQ1d0PQG2NVZ6pQ6XODsjlwMGmR2Fxu markN0i58qYQDHkKehemvujuY8neEJDByw6bx1//KcrTYg/1K/p8sQLFP88FOXgY QIJUphABte1h9oZXfYFYbuSdmABGwtpZeoXFhEW/fimGb7yrWZ2+XoNy01YMMJdP 6SlzcEz8uji/GkOYOQehYKhZp+IA/oKRy+kB9DqZUsrhB+Swxy2xx3pJ7VTiNLNo f2tKpmMM8PG3eQ2Oo+Xx0sht0+KvzYdh+34qUQ4c1C5VcnrFQey/ws7S2xvTuLdr B51kIIkqWH7gAw== -----END CERTIFICATE-----Generated at Mon Dec 8 09:36:14 2025 by rpki-client