This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft File: kKBl7vQNwBahvn8o1uZsp6h-f-U.mft (raw, json) Hash identifier: vcwGwwHslnWywwjiX0/QI2nvp1tkMJ4CqImdwf6zRNY= Subject key identifier: 2C:36:93:CB:38:32:DB:67:31:67:5D:0D:75:C1:05:D3:4A:09:21:1B Authority key identifier: 90:A0:65:EE:F4:0D:C0:16:A1:BE:7F:28:D6:E6:6C:A7:A8:7E:7F:E5 Certificate issuer: /CN=90a065eef40dc016a1be7f28d6e66ca7a87e7fe5 Certificate serial: 019B5A8841DEF17130DF7A428CE8F3F7E7FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKBl7vQNwBahvn8o1uZsp6h-f-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft Manifest number: 179B Signing time: Fri 26 Dec 2025 12:00:37 +0000 Manifest this update: Fri 26 Dec 2025 12:00:37 +0000 Manifest next update: Sat 27 Dec 2025 12:00:37 +0000 Files and hashes: 1: FXtyRxy310ujzM3-FcQZ1xIE8BM.roa (hash: sjb/b0eSiH//cLJ9qvCys98Peom21sTpufoCnNtl4os=) 2: kKBl7vQNwBahvn8o1uZsp6h-f-U.crl (hash: HYUQK2IID3QvmajFFQomU8ODXDBMf4AAgKswkDSwNig=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.crl rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft rsync://rpki.ripe.net/repository/DEFAULT/kKBl7vQNwBahvn8o1uZsp6h-f-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:41:de:f1:71:30:df:7a:42:8c:e8:f3:f7:e7:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90a065eef40dc016a1be7f28d6e66ca7a87e7fe5 Validity Not Before: Dec 26 12:00:37 2025 GMT Not After : Dec 27 12:00:37 2025 GMT Subject: CN=2c3693cb3832db6731675d0d75c105d34a09211b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e0:36:ab:99:76:54:bd:20:b1:73:4e:72:89: e3:90:a4:0d:9e:f8:fb:8a:a5:ad:c5:97:26:ee:2b: e5:3e:7c:b8:36:8e:37:2e:ff:75:4e:d1:c0:59:0a: 51:c8:dd:33:10:d1:8b:03:9d:dd:ea:da:f1:53:62: 7e:63:9a:40:89:5c:96:85:91:9e:a5:76:a0:71:af: 63:f3:8c:d9:d3:65:5f:15:12:f3:f7:32:cf:1b:45: 0d:88:43:de:b9:4f:0f:3b:fa:e0:94:8e:05:83:c1: d2:b3:97:dd:8c:32:18:8d:d7:70:cd:b1:1c:20:89: 28:74:6f:b3:9e:87:a8:e9:cb:b2:24:da:ed:24:6f: a7:4d:7e:e2:e4:9d:dd:05:ba:2c:15:d2:d0:1a:f0: 33:47:09:c9:7a:d1:48:3f:e8:ea:e3:80:2e:e2:8b: b1:a5:74:e1:a0:60:84:83:60:18:9e:f4:54:d0:e5: 69:a9:78:5b:fb:3e:91:5b:96:67:1e:4f:83:6a:91: 64:22:ce:0f:fd:e0:a2:93:a7:b3:de:21:1c:ca:b7: 7c:c1:fc:84:e6:d3:6a:c9:85:f8:03:9c:ed:44:5f: a6:3f:65:a7:30:5f:37:2c:54:ee:d2:6a:4a:e2:b4: 54:e4:9c:45:ae:a2:00:86:28:18:9c:7b:38:9c:d5: 93:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:36:93:CB:38:32:DB:67:31:67:5D:0D:75:C1:05:D3:4A:09:21:1B X509v3 Authority Key Identifier: keyid:90:A0:65:EE:F4:0D:C0:16:A1:BE:7F:28:D6:E6:6C:A7:A8:7E:7F:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKBl7vQNwBahvn8o1uZsp6h-f-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e9:a1:96:6f:b5:75:4b:5a:66:86:fc:65:1f:b6:60:98:0f:10: fc:0b:c2:54:59:2a:ba:36:a8:cc:ea:ef:1f:d2:4a:35:5b:68: c0:26:19:fa:10:65:68:68:d1:9b:fa:a4:ed:9e:75:db:3f:6e: 37:a0:05:a4:39:24:ab:6e:05:fb:4f:87:cd:31:9c:0c:c3:3c: fa:14:c8:c4:66:2c:e5:88:80:4e:65:5a:90:7b:eb:7a:ab:28: 5e:68:73:4e:fe:5b:c7:7d:3a:d0:a1:ef:0d:9c:55:fc:21:bb: 45:ba:c1:21:21:37:0e:16:d5:f5:74:51:f2:7e:ed:a0:67:63: ca:80:46:a7:cb:14:b0:bc:4f:f3:f7:32:52:e5:10:55:04:35: ee:e8:fe:5b:34:07:f0:bf:5e:dd:2c:80:74:7c:ca:2a:0d:56: 84:1f:79:d8:47:7a:82:95:a8:90:5a:5e:b3:89:cc:32:f4:5b: 05:b0:66:74:af:1e:c4:13:aa:73:72:4f:a6:90:23:c4:d1:ab: 98:cb:6c:80:8e:93:a4:10:a9:05:1c:fb:b9:27:97:da:e3:08: 45:e9:4b:f6:d2:cd:f5:84:f4:ef:ad:6c:d4:e8:a3:d8:3f:f7: d2:ac:67:98:a4:d7:6a:65:dc:51:58:cb:5f:89:f2:6f:7d:c3: b4:13:05:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiEHe8XEw33pCjOjz9+f9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwYTA2NWVlZjQwZGMwMTZhMWJlN2YyOGQ2ZTY2Y2E3YTg3 ZTdmZTUwHhcNMjUxMjI2MTIwMDM3WhcNMjUxMjI3MTIwMDM3WjAzMTEwLwYDVQQD EygyYzM2OTNjYjM4MzJkYjY3MzE2NzVkMGQ3NWMxMDVkMzRhMDkyMTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+A2q5l2VL0gsXNOconjkKQNnvj7 iqWtxZcm7ivlPny4No43Lv91TtHAWQpRyN0zENGLA53d6trxU2J+Y5pAiVyWhZGe pXagca9j84zZ02VfFRLz9zLPG0UNiEPeuU8PO/rglI4Fg8HSs5fdjDIYjddwzbEc IIkodG+znoeo6cuyJNrtJG+nTX7i5J3dBbosFdLQGvAzRwnJetFIP+jq44Au4oux pXThoGCEg2AYnvRU0OVpqXhb+z6RW5ZnHk+DapFkIs4P/eCik6ez3iEcyrd8wfyE 5tNqyYX4A5ztRF+mP2WnMF83LFTu0mpK4rRU5JxFrqIAhigYnHs4nNWTCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCw2k8s4MttnMWddDXXBBdNKCSEbMB8GA1UdIwQY MBaAFJCgZe70DcAWob5/KNbmbKeofn/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0tCbDd2UU53QmFodm44bzF1WnNwNmgtZi1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS83NjhhYTItMGI0NC00Y2Y0LWI5ODQt OTI0Y2RmMjc2ZDhkLzEva0tCbDd2UU53QmFodm44bzF1WnNwNmgtZi1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS83NjhhYTItMGI0NC00Y2Y0LWI5ODQtOTI0Y2RmMjc2ZDhk LzEva0tCbDd2UU53QmFodm44bzF1WnNwNmgtZi1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6aGWb7V1 S1pmhvxlH7ZgmA8Q/AvCVFkqujaozOrvH9JKNVtowCYZ+hBlaGjRm/qk7Z512z9u N6AFpDkkq24F+0+HzTGcDMM8+hTIxGYs5YiATmVakHvreqsoXmhzTv5bx3060KHv DZxV/CG7RbrBISE3DhbV9XRR8n7toGdjyoBGp8sUsLxP8/cyUuUQVQQ17uj+WzQH 8L9e3SyAdHzKKg1WhB952Ed6gpWokFpes4nMMvRbBbBmdK8exBOqc3JPppAjxNGr mMtsgI6TpBCpBRz7uSeX2uMIRelL9tLN9YT0761s1Oij2D/30qxnmKTXamXcUVjL X4nyb33DtBMFQg== -----END CERTIFICATE-----Generated at Fri Dec 26 17:43:24 2025 by rpki-client