This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.mft File: Kbh1W8U-8XdGvSlu8oupAM2Y--A.mft (raw, json) Hash identifier: XJkNaW0xyr4adPScJUXwWZPk/qfFh11+eUN+cOyWxlQ= Subject key identifier: 42:5F:F5:8B:AF:A9:8F:39:E4:CA:50:D7:8F:C3:DB:5F:D1:B0:74:A9 Authority key identifier: 29:B8:75:5B:C5:3E:F1:77:46:BD:29:6E:F2:8B:A9:00:CD:98:FB:E0 Certificate issuer: /CN=29b8755bc53ef17746bd296ef28ba900cd98fbe0 Certificate serial: 019B59E468694695E64E782A4E156F56510F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kbh1W8U-8XdGvSlu8oupAM2Y--A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.mft Manifest number: E8 Signing time: Fri 26 Dec 2025 09:01:39 +0000 Manifest this update: Fri 26 Dec 2025 09:01:39 +0000 Manifest next update: Sat 27 Dec 2025 09:01:39 +0000 Files and hashes: 1: Kbh1W8U-8XdGvSlu8oupAM2Y--A.crl (hash: JTc4/YyQ9BW7+Xg9n7Z4peLjAAe+Wiz4xlZHmukVa4k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.mft rsync://rpki.ripe.net/repository/DEFAULT/Kbh1W8U-8XdGvSlu8oupAM2Y--A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:68:69:46:95:e6:4e:78:2a:4e:15:6f:56:51:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29b8755bc53ef17746bd296ef28ba900cd98fbe0 Validity Not Before: Dec 26 09:01:39 2025 GMT Not After : Dec 27 09:01:39 2025 GMT Subject: CN=425ff58bafa98f39e4ca50d78fc3db5fd1b074a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:27:6d:2e:f0:0b:b7:f5:fa:5b:d9:f8:d2:58: 50:4a:fb:a1:a9:f5:98:d6:45:8a:56:7c:c8:5e:9b: c7:72:57:bc:2a:90:d7:e8:01:e6:c1:79:ad:28:55: 10:bd:e8:ba:2a:4e:f0:55:ff:a6:9c:b4:d8:d1:6b: 81:b0:07:4b:21:9e:b6:95:73:4c:7c:87:53:00:25: df:87:9e:03:f0:30:10:23:af:a2:ed:7e:d7:a0:7f: 06:25:ce:bc:e8:d5:9c:4a:67:0f:81:4d:1f:b3:68: eb:02:9b:3f:76:34:dd:44:8f:81:b2:01:3b:80:0c: 11:8a:2a:2c:57:97:80:97:ae:87:53:22:99:9c:da: 01:ab:db:75:72:f3:f5:dd:18:cf:fd:6f:01:1f:6a: 0f:1f:c1:8d:91:c5:0b:0a:9a:ca:a4:ce:b5:96:3a: a0:41:9c:43:a1:c0:ad:9d:c5:6f:95:c8:d1:be:21: 5f:1d:c3:f7:7f:df:43:c8:ae:61:d0:11:10:cc:a4: 4b:c8:a2:67:81:0b:aa:f8:d6:6f:5a:08:c2:6c:90: bc:0b:40:01:79:71:6a:ae:1d:6e:02:9c:15:b6:be: 70:bb:00:b3:fc:32:7a:e7:c6:5a:42:63:95:d5:8f: d2:0e:5c:a5:12:b7:4e:4a:23:f7:d7:78:11:ad:03: ea:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:5F:F5:8B:AF:A9:8F:39:E4:CA:50:D7:8F:C3:DB:5F:D1:B0:74:A9 X509v3 Authority Key Identifier: keyid:29:B8:75:5B:C5:3E:F1:77:46:BD:29:6E:F2:8B:A9:00:CD:98:FB:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kbh1W8U-8XdGvSlu8oupAM2Y--A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:a5:25:fc:2d:36:39:07:dc:b4:0b:c4:0f:bd:04:9e:e8:60: f9:63:65:ab:40:c7:3e:53:d1:ab:e7:ea:47:21:cf:f8:b4:86: 1b:8e:ec:08:0f:fe:e7:81:f6:e9:b9:9a:26:d2:28:bc:35:80: 08:dc:5d:ba:f6:3d:7e:ee:02:90:25:d3:9c:1c:e3:fa:b6:22: 4f:ce:a8:61:3f:ba:8e:c2:d4:e7:65:3d:b3:2a:16:9c:e8:9b: cf:d3:bc:d3:73:db:58:0c:9e:41:bc:c2:96:41:9d:51:82:32: 0a:e8:e5:88:d5:70:39:ec:87:04:41:97:ad:b3:c5:9e:ed:6d: ee:46:6d:c4:38:53:43:34:cc:2a:87:46:da:d3:1a:02:c0:5d: c9:69:c4:e5:f3:45:89:a1:45:75:32:3f:e5:df:bd:67:da:7c: db:6f:e1:77:a1:08:d6:f2:8e:2d:f8:c0:44:cc:c9:a0:ce:8f: b0:5f:85:0e:58:5a:99:f6:ae:af:e1:db:ae:c1:00:1e:07:33: c9:d6:7e:4c:0d:9a:0c:14:78:e0:46:3e:2c:e8:1c:2e:8b:95: 7a:6a:b0:d7:0e:42:59:50:b7:4f:30:bc:9f:74:52:d4:b4:b5: 81:a9:d1:e0:ab:a6:31:0e:a7:4b:3d:f7:05:0f:e4:af:15:c0: a7:dd:90:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5GhpRpXmTngqThVvVlEPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5Yjg3NTViYzUzZWYxNzc0NmJkMjk2ZWYyOGJhOTAwY2Q5 OGZiZTAwHhcNMjUxMjI2MDkwMTM5WhcNMjUxMjI3MDkwMTM5WjAzMTEwLwYDVQQD Eyg0MjVmZjU4YmFmYTk4ZjM5ZTRjYTUwZDc4ZmMzZGI1ZmQxYjA3NGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzidtLvALt/X6W9n40lhQSvuhqfWY 1kWKVnzIXpvHcle8KpDX6AHmwXmtKFUQvei6Kk7wVf+mnLTY0WuBsAdLIZ62lXNM fIdTACXfh54D8DAQI6+i7X7XoH8GJc686NWcSmcPgU0fs2jrAps/djTdRI+BsgE7 gAwRiiosV5eAl66HUyKZnNoBq9t1cvP13RjP/W8BH2oPH8GNkcULCprKpM61ljqg QZxDocCtncVvlcjRviFfHcP3f99DyK5h0BEQzKRLyKJngQuq+NZvWgjCbJC8C0AB eXFqrh1uApwVtr5wuwCz/DJ658ZaQmOV1Y/SDlylErdOSiP313gRrQPqewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJf9YuvqY855MpQ14/D21/RsHSpMB8GA1UdIwQY MBaAFCm4dVvFPvF3Rr0pbvKLqQDNmPvgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2JoMVc4VS04WGRHdlNsdThvdXBBTTJZLS1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8wNjgyMzEtN2NmYy00MDY4LTg2YjUt OWFiNGFkOGI0ZmY0LzEvS2JoMVc4VS04WGRHdlNsdThvdXBBTTJZLS1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8wNjgyMzEtN2NmYy00MDY4LTg2YjUtOWFiNGFkOGI0ZmY0 LzEvS2JoMVc4VS04WGRHdlNsdThvdXBBTTJZLS1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA6Ul/C02 OQfctAvED70Enuhg+WNlq0DHPlPRq+fqRyHP+LSGG47sCA/+54H26bmaJtIovDWA CNxduvY9fu4CkCXTnBzj+rYiT86oYT+6jsLU52U9syoWnOibz9O803PbWAyeQbzC lkGdUYIyCujliNVwOeyHBEGXrbPFnu1t7kZtxDhTQzTMKodG2tMaAsBdyWnE5fNF iaFFdTI/5d+9Z9p822/hd6EI1vKOLfjARMzJoM6PsF+FDlhamfaur+HbrsEAHgcz ydZ+TA2aDBR44EY+LOgcLouVemqw1w5CWVC3TzC8n3RS1LS1ganR4KumMQ6nSz33 BQ/krxXAp92Q6A== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:33 2025 by rpki-client