This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft File: KbeTgP5AdDnMLs0_rBgVfbNs92g.mft (raw, json) Hash identifier: iHKlDqcKqM0xQ2bfCU62G1L2Q/z01ZPUHiLey0Gb+xs= Subject key identifier: BD:96:E4:4E:84:E6:59:31:C1:B8:A4:7F:27:C0:F8:BA:A4:B7:80:06 Authority key identifier: 29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68 Certificate issuer: /CN=29b79380fe407439cc2ecd3fac18157db36cf768 Certificate serial: 019B0F3769EED75DFBDD0F1AB6364613DA72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft Manifest number: 12EF Signing time: Thu 11 Dec 2025 21:00:48 +0000 Manifest this update: Thu 11 Dec 2025 21:00:48 +0000 Manifest next update: Fri 12 Dec 2025 21:00:48 +0000 Files and hashes: 1: KbeTgP5AdDnMLs0_rBgVfbNs92g.crl (hash: rR1HQHL5OSX3NwvCJ9eY0Jk77oqsgFt2qzYBocoxuDg=) 2: Ws1LWb_h0GdqsfQHLiAshnKaTNY.roa (hash: Uptxk6RyuEDjV95/pWCt6r7aqnAlPu42fj+GVRxV0LQ=) 3: eJ1JUPisPyGRK8rwksI89SjAgW8.roa (hash: Yc8bpcgXGDfpskRZN1u08QJJzwCYTMenRq0PHCEk9iU=) 4: foMqTIfk3NGRU1ECjEYc0FzWeHQ.roa (hash: 8/tSFYSbydeBOM5cDt+MQjefx680IbM6wdc9EqGW/uQ=) 5: qOJSirqIZF030lDaiDlLOLszAqo.roa (hash: cceSZV5tbmDVcXVgGl8UFbkLxF9VVoz+OhMvXa1/dFw=) 6: zAPwb7bovDcweikHvlN-q4fyaQM.roa (hash: B1QW0kYW/vc9myo+dQ6hlc6KwNH6CLoF8DBlRQKFt8o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:69:ee:d7:5d:fb:dd:0f:1a:b6:36:46:13:da:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29b79380fe407439cc2ecd3fac18157db36cf768 Validity Not Before: Dec 11 21:00:48 2025 GMT Not After : Dec 12 21:00:48 2025 GMT Subject: CN=bd96e44e84e65931c1b8a47f27c0f8baa4b78006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:dc:86:60:5d:2c:1b:84:c4:38:d4:d3:dc:7d: 73:22:ed:23:b7:6e:4e:cd:06:5b:c7:07:56:50:e2: 2c:c6:36:27:f4:b3:6e:29:f9:15:64:c2:71:5a:74: 62:a9:3f:38:c0:d8:1b:40:9d:8d:94:cd:a9:f6:9b: 35:f9:51:1d:ea:e3:6a:09:87:a8:1a:8b:a3:df:20: 5a:a7:99:65:6d:86:32:48:b5:81:f4:63:50:9b:2d: b0:f8:19:ca:2d:ee:a3:10:8d:8d:89:64:45:f3:ce: 73:06:f3:43:02:e8:45:e8:d9:d1:74:d2:f0:36:fd: 4d:8e:46:b1:c9:ea:ce:72:ed:0d:d8:8e:74:dc:58: 45:c2:68:e9:28:40:0b:dc:e4:f2:1f:4f:5d:a3:92: 8c:f0:61:b0:13:e1:da:16:63:5a:76:67:4d:98:ce: 71:64:25:9f:90:2d:0a:bb:06:70:c8:d0:f2:21:a0: ce:4a:87:b4:e6:60:77:a6:98:08:8b:18:6e:85:39: 32:8e:51:27:a9:c5:4e:55:63:ec:ae:e5:5a:0d:c8: d1:28:78:76:68:28:23:b5:40:c9:71:32:19:2d:4a: 7c:73:d7:41:55:f3:07:9d:22:ad:5e:8d:54:c3:b0: 9e:13:9d:32:fc:53:61:35:74:65:22:7b:f8:07:0d: 69:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:96:E4:4E:84:E6:59:31:C1:B8:A4:7F:27:C0:F8:BA:A4:B7:80:06 X509v3 Authority Key Identifier: keyid:29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ff:3b:c7:1c:67:36:76:d6:ae:5d:dd:dd:2e:05:c3:23:57: 4b:7a:88:0c:30:6c:40:d7:c0:6a:64:23:84:d0:70:3d:49:9d: 85:22:93:ae:54:c3:73:87:02:83:42:90:a0:4e:54:58:2d:f3: 6d:eb:30:2e:f3:01:cb:3d:f5:96:4f:f1:3c:fa:a3:da:97:5e: 7d:fe:c1:63:a0:26:f0:93:79:ab:d3:12:fe:91:f4:37:1d:14: 15:25:07:56:a0:72:48:5c:6d:5a:04:f8:f6:bd:d6:9d:34:39: 6e:fb:c1:4e:26:d9:77:cd:62:23:6f:d7:e7:70:e2:d6:2f:73: 3a:71:ed:36:b9:92:44:57:b6:fe:9a:98:20:01:04:cb:99:a7: ec:b4:9a:0c:ce:c4:ec:2b:5a:e8:4a:cc:63:45:8b:e9:af:71: 54:17:49:7e:76:53:4f:d1:e1:8f:34:4f:1b:f9:b6:5a:8d:30: 06:d6:07:69:9a:8f:49:34:ab:c7:d5:38:11:7f:08:f1:fd:5f: 5d:bc:8b:dd:ed:be:c4:0c:c4:d8:b3:b6:4e:21:4d:f4:22:44: 27:c4:f1:92:b1:6f:69:8f:6b:36:be:ac:49:fe:3e:45:b4:0e: 3b:72:c4:d7:dc:0f:5e:53:88:87:11:0c:01:2b:4d:17:fb:df: b9:e6:f5:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN2nu11373Q8atjZGE9pyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5Yjc5MzgwZmU0MDc0MzljYzJlY2QzZmFjMTgxNTdkYjM2 Y2Y3NjgwHhcNMjUxMjExMjEwMDQ4WhcNMjUxMjEyMjEwMDQ4WjAzMTEwLwYDVQQD EyhiZDk2ZTQ0ZTg0ZTY1OTMxYzFiOGE0N2YyN2MwZjhiYWE0Yjc4MDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudyGYF0sG4TEONTT3H1zIu0jt25O zQZbxwdWUOIsxjYn9LNuKfkVZMJxWnRiqT84wNgbQJ2NlM2p9ps1+VEd6uNqCYeo Gouj3yBap5llbYYySLWB9GNQmy2w+BnKLe6jEI2NiWRF885zBvNDAuhF6NnRdNLw Nv1NjkaxyerOcu0N2I503FhFwmjpKEAL3OTyH09do5KM8GGwE+HaFmNadmdNmM5x ZCWfkC0KuwZwyNDyIaDOSoe05mB3ppgIixhuhTkyjlEnqcVOVWPsruVaDcjRKHh2 aCgjtUDJcTIZLUp8c9dBVfMHnSKtXo1Uw7CeE50y/FNhNXRlInv4Bw1p6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2W5E6E5lkxwbikfyfA+Lqkt4AGMB8GA1UdIwQY MBaAFCm3k4D+QHQ5zC7NP6wYFX2zbPdoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2JlVGdQNUFkRG5NTHMwX3JCZ1ZmYk5zOTJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zOTM4NDItZTdlZi00ODkzLTljMWIt MWU4NDIxMThkYjZmLzEvS2JlVGdQNUFkRG5NTHMwX3JCZ1ZmYk5zOTJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8zOTM4NDItZTdlZi00ODkzLTljMWItMWU4NDIxMThkYjZm LzEvS2JlVGdQNUFkRG5NTHMwX3JCZ1ZmYk5zOTJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD/87xxxn NnbWrl3d3S4FwyNXS3qIDDBsQNfAamQjhNBwPUmdhSKTrlTDc4cCg0KQoE5UWC3z beswLvMByz31lk/xPPqj2pdeff7BY6Am8JN5q9MS/pH0Nx0UFSUHVqBySFxtWgT4 9r3WnTQ5bvvBTibZd81iI2/X53Di1i9zOnHtNrmSRFe2/pqYIAEEy5mn7LSaDM7E 7Cta6ErMY0WL6a9xVBdJfnZTT9HhjzRPG/m2Wo0wBtYHaZqPSTSrx9U4EX8I8f1f XbyL3e2+xAzE2LO2TiFN9CJEJ8TxkrFvaY9rNr6sSf4+RbQOO3LE19wPXlOIhxEM AStNF/vfueb1QA== -----END CERTIFICATE-----Generated at Fri Dec 12 01:32:52 2025 by rpki-client