This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft File: rKbwaDzHS63SOoFAw4XxyBziTfc.mft (raw, json) Hash identifier: 6UoawgMBArdNXCmFO/dUG+y3PnH7Aa0M0U1plOsWJc8= Subject key identifier: 72:BC:FE:A8:4F:E4:D7:0C:36:32:26:F1:58:DF:2D:6D:43:BD:BB:1F Authority key identifier: AC:A6:F0:68:3C:C7:4B:AD:D2:3A:81:40:C3:85:F1:C8:1C:E2:4D:F7 Certificate issuer: /CN=aca6f0683cc74badd23a8140c385f1c81ce24df7 Certificate serial: 019B0E929E2A9C68519576122F7A6BAD05EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft Manifest number: 0E19 Signing time: Thu 11 Dec 2025 18:00:48 +0000 Manifest this update: Thu 11 Dec 2025 18:00:48 +0000 Manifest next update: Fri 12 Dec 2025 18:00:48 +0000 Files and hashes: 1: 0vFnPnyD0rk0NBq-vHcuUjmsih4.roa (hash: 8C+9WOepMdgxD+Xcj7Wjy9LCISmYrp2hucRDb6Vj6WM=) 2: rKbwaDzHS63SOoFAw4XxyBziTfc.crl (hash: UXpdTpKxNqAtOl9zaSFN36IVeflGUwDyFBiKWeLdLSE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.crl rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:9e:2a:9c:68:51:95:76:12:2f:7a:6b:ad:05:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aca6f0683cc74badd23a8140c385f1c81ce24df7 Validity Not Before: Dec 11 18:00:48 2025 GMT Not After : Dec 12 18:00:48 2025 GMT Subject: CN=72bcfea84fe4d70c363226f158df2d6d43bdbb1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:91:36:d8:da:c9:41:9f:ea:42:70:51:86:bf: e9:d1:61:22:49:7a:d5:c6:fb:58:7b:7a:6d:b7:31: d7:53:37:c5:ce:c0:22:c6:4f:4f:22:d0:36:4d:2e: 4c:e7:59:54:c3:ad:d3:ce:f6:e3:56:2f:75:97:c7: 84:c0:3f:3f:11:52:4b:a1:b0:bd:8e:5f:8a:89:dc: 9b:c3:10:58:96:f4:04:05:fc:7d:cd:23:fc:19:7c: 9b:49:a4:38:ea:00:5b:cd:2e:0b:3a:21:e6:19:76: 50:9b:50:7a:03:1d:9e:4c:8c:5d:15:a4:fc:f7:8f: 53:dd:40:53:7d:0d:cb:30:fc:50:a9:4c:14:83:d1: 70:7d:bd:77:3f:4c:31:03:05:e3:99:68:c3:54:bd: a4:aa:6f:27:84:14:da:ba:df:41:1a:21:30:e3:f8: 31:58:f6:95:b8:87:6a:90:0d:35:a2:7c:4c:6d:64: 06:f8:56:bc:ac:c0:fe:38:b6:55:c9:bc:6a:6f:0f: 49:e7:89:63:49:92:07:de:ab:78:d6:73:09:e0:d1: 6b:8f:3a:90:75:44:40:44:11:54:8a:1f:b3:a5:9d: 75:26:00:57:d2:6b:1b:4c:2b:2d:d5:eb:f8:8f:90: f4:df:a6:cb:d6:20:29:2d:a0:af:63:d1:69:a2:22: 7a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:BC:FE:A8:4F:E4:D7:0C:36:32:26:F1:58:DF:2D:6D:43:BD:BB:1F X509v3 Authority Key Identifier: keyid:AC:A6:F0:68:3C:C7:4B:AD:D2:3A:81:40:C3:85:F1:C8:1C:E2:4D:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:18:4b:46:47:85:e9:8a:90:a5:a5:ad:48:a8:bb:a6:de:91: d8:11:6c:1e:e1:e1:b6:93:2d:00:de:dc:06:2a:b3:fe:6e:31: 82:e6:c4:f3:c0:2e:9f:82:34:ed:d9:f0:94:45:b5:9d:5c:65: 62:c2:11:5e:43:75:30:89:76:8a:bd:9e:6d:9d:e9:dd:eb:74: cb:89:7b:90:75:6e:bb:d7:56:32:86:3b:7e:39:ab:c8:aa:63: 6d:66:06:2d:bb:22:32:86:9a:fd:0a:ea:ee:ce:3e:17:0c:6f: 21:89:48:a4:c3:07:e2:57:57:51:4d:29:c5:d4:e7:96:06:37: f7:39:8f:19:fc:c9:c9:28:e0:a4:78:35:cc:ce:50:0e:08:9d: 99:31:3a:76:c6:aa:11:85:67:c0:f8:39:61:ba:a5:97:ca:fc: ba:04:dc:bc:2e:1e:c1:2b:dd:c7:f4:82:51:80:3c:73:84:32: 80:6e:be:9c:32:18:15:41:a2:ec:ee:8a:73:6b:c6:94:d5:6f: c1:37:ff:d2:ad:ec:61:e9:ef:ab:f3:81:a3:2a:3b:e3:c9:54: 98:04:ab:94:9f:b7:88:ee:55:eb:a4:2e:b3:aa:b7:8d:4f:19: 17:8f:78:5b:da:00:ad:b0:c1:29:8e:8c:2f:f7:47:c2:79:33: 3a:65:95:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkp4qnGhRlXYSL3prrQXrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYTZmMDY4M2NjNzRiYWRkMjNhODE0MGMzODVmMWM4MWNl MjRkZjcwHhcNMjUxMjExMTgwMDQ4WhcNMjUxMjEyMTgwMDQ4WjAzMTEwLwYDVQQD Eyg3MmJjZmVhODRmZTRkNzBjMzYzMjI2ZjE1OGRmMmQ2ZDQzYmRiYjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5E22NrJQZ/qQnBRhr/p0WEiSXrV xvtYe3pttzHXUzfFzsAixk9PItA2TS5M51lUw63TzvbjVi91l8eEwD8/EVJLobC9 jl+KidybwxBYlvQEBfx9zSP8GXybSaQ46gBbzS4LOiHmGXZQm1B6Ax2eTIxdFaT8 949T3UBTfQ3LMPxQqUwUg9Fwfb13P0wxAwXjmWjDVL2kqm8nhBTaut9BGiEw4/gx WPaVuIdqkA01onxMbWQG+Fa8rMD+OLZVybxqbw9J54ljSZIH3qt41nMJ4NFrjzqQ dURARBFUih+zpZ11JgBX0msbTCst1ev4j5D036bL1iApLaCvY9FpoiJ64QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHK8/qhP5NcMNjIm8VjfLW1DvbsfMB8GA1UdIwQY MBaAFKym8Gg8x0ut0jqBQMOF8cgc4k33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcktid2FEekhTNjNTT29GQXc0WHh5QnppVGZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yZDQ4MTgtZjE4Mi00YjQ2LTllOGMt MDgyNzk2MWMwNWUwLzEvcktid2FEekhTNjNTT29GQXc0WHh5QnppVGZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8yZDQ4MTgtZjE4Mi00YjQ2LTllOGMtMDgyNzk2MWMwNWUw LzEvcktid2FEekhTNjNTT29GQXc0WHh5QnppVGZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhBhLRkeF 6YqQpaWtSKi7pt6R2BFsHuHhtpMtAN7cBiqz/m4xgubE88Aun4I07dnwlEW1nVxl YsIRXkN1MIl2ir2ebZ3p3et0y4l7kHVuu9dWMoY7fjmryKpjbWYGLbsiMoaa/Qrq 7s4+FwxvIYlIpMMH4ldXUU0pxdTnlgY39zmPGfzJySjgpHg1zM5QDgidmTE6dsaq EYVnwPg5Ybqll8r8ugTcvC4ewSvdx/SCUYA8c4QygG6+nDIYFUGi7O6Kc2vGlNVv wTf/0q3sYenvq/OBoyo748lUmASrlJ+3iO5V66Qus6q3jU8ZF494W9oArbDBKY6M L/dHwnkzOmWVFQ== -----END CERTIFICATE-----Generated at Fri Dec 12 02:23:15 2025 by rpki-client