This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft File: kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft (raw, json) Hash identifier: xfk/QhWZicl7dx3Lj/uX2OzjZyCQq527ILRYk66+veo= Subject key identifier: 3F:4E:32:61:9B:21:BD:6D:3A:AA:F7:D1:88:DB:8E:EB:94:06:EB:84 Authority key identifier: 92:F8:56:22:E2:2F:C9:6C:EA:CF:73:11:4D:89:0F:4F:3A:A7:D4:95 Certificate issuer: /CN=92f85622e22fc96ceacf73114d890f4f3aa7d495 Certificate serial: 019B38A199AC5283728CA5F016AFDF6D93C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft Manifest number: 0EA1 Signing time: Fri 19 Dec 2025 22:01:13 +0000 Manifest this update: Fri 19 Dec 2025 22:01:13 +0000 Manifest next update: Sat 20 Dec 2025 22:01:13 +0000 Files and hashes: 1: kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl (hash: MnfY6IOOGGRskjNmAEvk6OrCo553Kqn7fsC0qeyrK4k=) 2: o0NNJAdQ09Zlx7io8L7w4JsxeRk.roa (hash: GHDYyjn7cWOGvu2PuaUkyCHLa21ud2IleT+Ydwgziyc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:99:ac:52:83:72:8c:a5:f0:16:af:df:6d:93:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92f85622e22fc96ceacf73114d890f4f3aa7d495 Validity Not Before: Dec 19 22:01:13 2025 GMT Not After : Dec 20 22:01:13 2025 GMT Subject: CN=3f4e32619b21bd6d3aaaf7d188db8eeb9406eb84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f0:d7:83:e6:af:6c:63:b0:43:9f:c1:e8:9f: ed:52:c2:f9:70:11:9e:ff:0e:5a:65:0c:ab:a8:01: 7d:7d:0b:8c:b7:21:28:a5:a9:05:25:e2:b6:6d:d3: 42:0d:49:50:56:b7:a7:d7:fe:7c:76:83:55:9a:5b: 90:b8:ac:eb:e8:f7:ac:84:3c:04:9d:9c:e0:2f:34: 74:c0:15:d8:f4:d7:44:eb:14:55:2c:da:74:1e:30: 2a:ec:59:dc:78:80:71:e7:2d:0a:bf:9b:cd:c0:f7: 6a:45:f9:84:85:41:3e:38:68:95:40:c3:55:61:d1: da:e6:35:2c:c3:0f:f0:4c:83:0f:03:87:aa:89:9f: 85:18:c4:f1:66:ac:67:c5:6f:d9:79:a8:ef:98:b3: e9:91:6d:10:72:53:47:ad:ec:f5:3a:33:68:e1:b9: c0:25:f8:00:8c:9c:db:34:17:2e:45:b8:6d:83:3a: 3e:5d:70:cd:5a:c2:2f:da:ab:80:ac:4e:16:bc:b0: 36:dc:ac:7b:e6:43:01:7b:66:a9:74:51:bb:83:4e: 4e:a4:8c:56:d3:3f:8e:b5:d4:54:26:20:3d:c4:e6: d0:08:a4:0f:01:92:2f:41:b6:0a:47:5e:14:40:a5: 1f:24:5e:a4:a8:09:0a:08:01:6d:d2:0d:78:9f:ce: ab:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:4E:32:61:9B:21:BD:6D:3A:AA:F7:D1:88:DB:8E:EB:94:06:EB:84 X509v3 Authority Key Identifier: keyid:92:F8:56:22:E2:2F:C9:6C:EA:CF:73:11:4D:89:0F:4F:3A:A7:D4:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:db:83:3d:f8:af:74:10:e7:43:20:7d:73:84:3d:da:63:39: 77:ab:41:f9:3f:95:ef:88:73:ca:69:52:c2:85:8f:97:f8:5e: 65:e7:c1:d0:d5:16:2a:aa:4a:34:38:c6:28:eb:2b:5b:46:c3: 3c:45:ab:9f:ba:da:99:cf:62:9f:31:8a:0c:5c:08:f0:ab:9b: 1f:0c:8c:c0:8f:7e:93:93:eb:20:70:87:24:65:39:4f:5c:47: c7:96:64:15:14:01:87:bc:66:d0:a9:62:22:42:65:d0:da:13: 9c:31:80:50:90:70:bd:da:dc:2f:d0:6e:95:d6:e3:bd:0b:b5: 9c:58:c5:c4:6a:c4:9b:59:7b:6c:37:d8:78:23:68:ad:52:a4: c8:0a:b9:be:11:de:da:28:f6:d6:0c:43:01:72:45:e6:a9:63: a7:88:ef:cf:e9:52:69:4d:c1:5e:51:43:05:57:44:f7:19:78: 74:3e:8f:dd:d5:15:53:2a:9e:67:11:c4:e2:10:fa:fa:5c:fb: 98:fe:aa:1a:78:27:99:6e:76:b9:58:09:c8:63:19:1e:c8:bf: 56:c8:37:6b:f7:66:a4:48:d2:0b:da:78:f3:f1:e3:32:9f:fe: d5:1c:fd:3f:59:e2:bd:4a:27:b1:d3:ba:e2:0e:d0:7d:a9:36: 81:2c:ed:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oZmsUoNyjKXwFq/fbZPAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZjg1NjIyZTIyZmM5NmNlYWNmNzMxMTRkODkwZjRmM2Fh N2Q0OTUwHhcNMjUxMjE5MjIwMTEzWhcNMjUxMjIwMjIwMTEzWjAzMTEwLwYDVQQD EygzZjRlMzI2MTliMjFiZDZkM2FhYWY3ZDE4OGRiOGVlYjk0MDZlYjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfDXg+avbGOwQ5/B6J/tUsL5cBGe /w5aZQyrqAF9fQuMtyEopakFJeK2bdNCDUlQVren1/58doNVmluQuKzr6PeshDwE nZzgLzR0wBXY9NdE6xRVLNp0HjAq7FnceIBx5y0Kv5vNwPdqRfmEhUE+OGiVQMNV YdHa5jUsww/wTIMPA4eqiZ+FGMTxZqxnxW/ZeajvmLPpkW0QclNHrez1OjNo4bnA JfgAjJzbNBcuRbhtgzo+XXDNWsIv2quArE4WvLA23Kx75kMBe2apdFG7g05OpIxW 0z+OtdRUJiA9xObQCKQPAZIvQbYKR14UQKUfJF6kqAkKCAFt0g14n86rEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD9OMmGbIb1tOqr30YjbjuuUBuuEMB8GA1UdIwQY MBaAFJL4ViLiL8ls6s9zEU2JD086p9SVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3ZoV0l1SXZ5V3pxejNNUlRZa1BUenFuMUpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8xMDAwZWItZmZkMC00ZmUzLWI3YWYt MDczOGMyMzM0ZTdmLzEva3ZoV0l1SXZ5V3pxejNNUlRZa1BUenFuMUpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8xMDAwZWItZmZkMC00ZmUzLWI3YWYtMDczOGMyMzM0ZTdm LzEva3ZoV0l1SXZ5V3pxejNNUlRZa1BUenFuMUpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARduDPfiv dBDnQyB9c4Q92mM5d6tB+T+V74hzymlSwoWPl/heZefB0NUWKqpKNDjGKOsrW0bD PEWrn7ramc9inzGKDFwI8KubHwyMwI9+k5PrIHCHJGU5T1xHx5ZkFRQBh7xm0Kli IkJl0NoTnDGAUJBwvdrcL9BuldbjvQu1nFjFxGrEm1l7bDfYeCNorVKkyAq5vhHe 2ij21gxDAXJF5qljp4jvz+lSaU3BXlFDBVdE9xl4dD6P3dUVUyqeZxHE4hD6+lz7 mP6qGngnmW52uVgJyGMZHsi/Vsg3a/dmpEjSC9p48/HjMp/+1Rz9P1nivUonsdO6 4g7Qfak2gSztdg== -----END CERTIFICATE-----Generated at Sat Dec 20 08:05:26 2025 by rpki-client