This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft File: kuDCRw6wpptO-lhbnLLAZ2ErN54.mft (raw, json) Hash identifier: SIzJ4x0Cey2zIS0q9rH+/4r9cVdZyMRD3HBFXCeo/mA= Subject key identifier: C9:A0:F5:AA:D3:49:99:28:8E:CD:61:7E:23:8A:5A:0C:28:61:51:27 Authority key identifier: 92:E0:C2:47:0E:B0:A6:9B:4E:FA:58:5B:9C:B2:C0:67:61:2B:37:9E Certificate issuer: /CN=92e0c2470eb0a69b4efa585b9cb2c067612b379e Certificate serial: 019B5004FA2BEE6723A535B2956B0F765127 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft Manifest number: 1795 Signing time: Wed 24 Dec 2025 11:01:02 +0000 Manifest this update: Wed 24 Dec 2025 11:01:02 +0000 Manifest next update: Thu 25 Dec 2025 11:01:02 +0000 Files and hashes: 1: PFjd2yWfyUqACNexTKNE7uw-CUw.roa (hash: 2N8aNvblU0PO6uAwaoOi3OFj+fZYGQD09CyRfcuaD9M=) 2: kuDCRw6wpptO-lhbnLLAZ2ErN54.crl (hash: WCsQ2pFpGe3PP44CRey2C5aUDGWDt+wUvvzgowEzo/I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:04:fa:2b:ee:67:23:a5:35:b2:95:6b:0f:76:51:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92e0c2470eb0a69b4efa585b9cb2c067612b379e Validity Not Before: Dec 24 11:01:02 2025 GMT Not After : Dec 25 11:01:02 2025 GMT Subject: CN=c9a0f5aad34999288ecd617e238a5a0c28615127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e1:6b:55:cb:4d:9f:04:53:d6:e8:9e:e4:c9: af:46:d6:56:f7:f2:38:15:06:ec:d5:d8:d2:83:93: ad:bd:50:b7:d7:3e:94:b6:8e:54:80:27:89:64:6e: 7d:24:51:d8:45:60:c3:8a:c6:96:98:2c:3a:13:3c: 7c:7b:3c:59:5b:f9:2e:9a:3d:92:85:be:03:be:77: 1f:82:e1:9b:a4:fb:3c:e0:d5:b6:f0:16:06:43:23: 78:75:ca:66:5b:3f:b4:5e:dd:fe:80:c0:6c:c5:e6: fc:46:6c:8b:37:cf:14:6b:3b:2e:bd:0b:b7:b2:ff: 9e:09:51:ba:cf:d7:52:85:42:34:2f:c8:77:61:58: b0:b0:c5:67:58:92:f4:f5:ff:db:a8:a5:80:ee:7e: e7:db:13:94:59:28:ef:cb:9d:d9:04:00:09:55:32: ce:52:c8:a0:c2:67:5a:ff:5e:56:e4:a8:20:a8:7f: 2f:26:fb:17:02:a8:38:96:6d:7f:d9:29:32:42:64: aa:aa:2f:7b:57:af:c3:63:d5:35:bd:18:b2:2e:64: a0:3c:7f:96:bc:5a:54:90:be:67:8c:4a:52:4d:0b: b0:f4:ce:33:4d:32:5e:b7:2f:1d:e9:40:9f:32:80: a3:7e:08:b5:bd:50:9e:f4:8b:89:e4:f2:bf:2b:71: 3f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A0:F5:AA:D3:49:99:28:8E:CD:61:7E:23:8A:5A:0C:28:61:51:27 X509v3 Authority Key Identifier: keyid:92:E0:C2:47:0E:B0:A6:9B:4E:FA:58:5B:9C:B2:C0:67:61:2B:37:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:7d:cd:8c:b9:3e:ca:f1:9b:7b:43:fd:7f:7b:0c:fe:1d:e7: 77:bc:c3:76:14:3f:58:c5:5e:05:95:a0:ba:0a:1f:de:ec:13: 7b:ce:3f:c6:11:f3:16:b7:48:b5:50:8f:c7:e6:0d:ab:0c:ce: d1:26:77:2f:19:de:fc:87:7e:fe:36:e1:30:57:1d:0e:d0:0a: 2b:5f:4d:d5:5b:92:33:62:25:f5:c3:fa:2b:dc:8f:43:3a:6e: e8:f3:93:f0:46:cb:db:f2:cc:5e:a5:20:99:0c:99:03:43:37: 71:96:c0:9e:c4:42:71:60:06:3b:41:32:8f:62:00:0b:2a:9a: 6d:0d:f1:dc:22:96:38:c7:13:a1:c5:9d:a6:37:a9:a8:8f:23: c9:eb:29:a6:25:a1:d9:8b:e3:47:9f:ca:ba:43:d2:3f:c4:09: d7:70:17:ef:1a:39:b5:b7:6f:89:1a:77:ef:0b:8c:22:84:9d: 26:d3:29:40:47:aa:83:fb:64:c3:42:9a:74:0d:b5:14:cb:ec: aa:0e:ed:69:9d:45:71:8f:45:6b:2f:12:c4:72:c9:1d:3f:82: a0:ff:5d:22:da:e6:61:71:88:18:49:52:58:79:cc:a7:51:63: 36:3c:51:c2:26:3d:46:84:2b:69:e1:6b:88:82:94:91:7f:3e: 53:df:d3:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQBPor7mcjpTWylWsPdlEnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZTBjMjQ3MGViMGE2OWI0ZWZhNTg1YjljYjJjMDY3NjEy YjM3OWUwHhcNMjUxMjI0MTEwMTAyWhcNMjUxMjI1MTEwMTAyWjAzMTEwLwYDVQQD EyhjOWEwZjVhYWQzNDk5OTI4OGVjZDYxN2UyMzhhNWEwYzI4NjE1MTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeFrVctNnwRT1uie5MmvRtZW9/I4 FQbs1djSg5OtvVC31z6Uto5UgCeJZG59JFHYRWDDisaWmCw6Ezx8ezxZW/kumj2S hb4DvncfguGbpPs84NW28BYGQyN4dcpmWz+0Xt3+gMBsxeb8RmyLN88UazsuvQu3 sv+eCVG6z9dShUI0L8h3YViwsMVnWJL09f/bqKWA7n7n2xOUWSjvy53ZBAAJVTLO Usigwmda/15W5KggqH8vJvsXAqg4lm1/2SkyQmSqqi97V6/DY9U1vRiyLmSgPH+W vFpUkL5njEpSTQuw9M4zTTJety8d6UCfMoCjfgi1vVCe9IuJ5PK/K3E/6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMmg9arTSZkojs1hfiOKWgwoYVEnMB8GA1UdIwQY MBaAFJLgwkcOsKabTvpYW5yywGdhKzeeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3VEQ1J3NndwcHRPLWxoYm5MTEFaMkVyTjU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xM2IwY2QtNTk5Mi00NTYxLTk3Mjkt YjMwZmUwNThkMTYyLzEva3VEQ1J3NndwcHRPLWxoYm5MTEFaMkVyTjU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xM2IwY2QtNTk5Mi00NTYxLTk3MjktYjMwZmUwNThkMTYy LzEva3VEQ1J3NndwcHRPLWxoYm5MTEFaMkVyTjU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeH3NjLk+ yvGbe0P9f3sM/h3nd7zDdhQ/WMVeBZWgugof3uwTe84/xhHzFrdItVCPx+YNqwzO 0SZ3Lxne/Id+/jbhMFcdDtAKK19N1VuSM2Il9cP6K9yPQzpu6POT8EbL2/LMXqUg mQyZA0M3cZbAnsRCcWAGO0Eyj2IACyqabQ3x3CKWOMcTocWdpjepqI8jyesppiWh 2YvjR5/KukPSP8QJ13AX7xo5tbdviRp37wuMIoSdJtMpQEeqg/tkw0KadA21FMvs qg7taZ1FcY9Fay8SxHLJHT+CoP9dItrmYXGIGElSWHnMp1FjNjxRwiY9RoQraeFr iIKUkX8+U9/TVQ== -----END CERTIFICATE-----Generated at Wed Dec 24 15:12:10 2025 by rpki-client