This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft File: kt2u3zcPNa-LXut_hubPr6zojU4.mft (raw, json) Hash identifier: bcKBttnxlmzIdGD3Aq80duLhPK07Os1FEkzV+OhaCL0= Subject key identifier: 5E:88:00:7B:5E:74:30:A9:19:6A:B1:31:C6:3A:84:61:2A:9A:85:CE Authority key identifier: 92:DD:AE:DF:37:0F:35:AF:8B:5E:EB:7F:86:E6:CF:AF:AC:E8:8D:4E Certificate issuer: /CN=92ddaedf370f35af8b5eeb7f86e6cfaface88d4e Certificate serial: 019B5AF6694961943AEEF52D8ECC560FDC9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kt2u3zcPNa-LXut_hubPr6zojU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft Manifest number: 07EA Signing time: Fri 26 Dec 2025 14:00:56 +0000 Manifest this update: Fri 26 Dec 2025 14:00:56 +0000 Manifest next update: Sat 27 Dec 2025 14:00:56 +0000 Files and hashes: 1: dqOSF9Ies6urS5k4Ct3cQtw5VN8.roa (hash: J3BiGkZdoL6h6rfESwdaItaaKVovQQqfeD9nGDkL6og=) 2: kt2u3zcPNa-LXut_hubPr6zojU4.crl (hash: Dbir2wzKeNhNkYpBeahdtemAcHURiO2yL4tvZx+FbT4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.crl rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft rsync://rpki.ripe.net/repository/DEFAULT/kt2u3zcPNa-LXut_hubPr6zojU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:69:49:61:94:3a:ee:f5:2d:8e:cc:56:0f:dc:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92ddaedf370f35af8b5eeb7f86e6cfaface88d4e Validity Not Before: Dec 26 14:00:56 2025 GMT Not After : Dec 27 14:00:56 2025 GMT Subject: CN=5e88007b5e7430a9196ab131c63a84612a9a85ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:58:64:30:60:a4:39:a5:90:81:a4:42:6f:31: ab:55:a8:5c:a6:f9:d6:c6:f2:41:22:d5:20:db:cd: dd:cd:e2:02:d3:b8:a2:ac:55:db:6f:be:df:8e:43: d0:dd:8c:df:0d:3a:1f:64:6b:f7:bc:ba:fc:57:98: 48:79:23:f2:4d:63:8a:de:e4:fb:5c:04:01:c6:df: d1:99:3b:c4:4f:f0:df:44:68:f5:a3:67:1f:f7:ea: a0:7e:c2:85:70:c2:4a:a3:d0:2a:44:2c:b8:54:77: 2a:dd:2f:d9:ef:14:61:ba:d4:c3:d8:58:32:7a:7f: 7a:18:52:5e:35:59:ee:60:c3:40:7a:8a:a4:06:1d: d5:74:ae:12:7f:4a:80:b6:ac:77:1b:93:7c:51:8f: 70:47:a0:c8:ba:6a:bd:66:32:05:e1:f0:19:2e:1d: fa:e5:ef:b2:fc:0c:a8:d9:32:ac:0d:79:35:97:dd: 11:49:76:f0:21:09:0e:97:0f:e6:b8:94:f5:1c:d6: 70:17:b9:90:58:27:bc:2a:b2:92:3f:3a:7b:cc:f4: 9e:a4:7b:2b:3e:7b:8b:26:17:26:64:6c:7f:fe:14: 4b:a7:4a:af:1f:e5:c3:aa:7e:02:c7:67:ab:d7:29: 47:6d:1f:e3:e4:c5:0d:bb:be:71:27:4d:3a:c1:58: d6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:88:00:7B:5E:74:30:A9:19:6A:B1:31:C6:3A:84:61:2A:9A:85:CE X509v3 Authority Key Identifier: keyid:92:DD:AE:DF:37:0F:35:AF:8B:5E:EB:7F:86:E6:CF:AF:AC:E8:8D:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kt2u3zcPNa-LXut_hubPr6zojU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:88:bf:be:85:2b:77:68:d5:33:ca:2c:69:20:a6:2c:65:c1: 59:fd:be:ff:a7:12:4f:a3:c1:bd:ba:71:e0:86:e8:e9:16:2c: d0:c6:d4:7a:36:9e:63:58:1c:f0:52:eb:e3:81:d3:12:ad:7b: 6e:bc:ff:c2:4e:ed:b2:bc:02:77:d5:bd:78:f2:f7:66:a1:d7: 09:33:75:5b:db:0c:cc:ea:a2:e5:fa:d9:ac:20:b7:d9:c4:72: 93:60:a1:78:c1:d2:50:f4:a1:78:0c:92:0b:72:b5:67:c1:ce: cd:c4:f0:7a:8c:24:3e:84:85:dc:17:88:6b:17:9f:86:42:a4: 7b:89:b9:5e:ba:68:10:95:0c:30:f1:cb:cb:0c:ec:fc:49:15: 44:01:0d:30:bf:ee:53:68:77:54:18:7e:04:a3:04:b4:f8:82: ec:79:66:83:d6:a2:7a:1e:a8:f8:61:e8:4a:8e:7f:4c:dc:83: 3e:07:54:2d:db:35:ec:b4:ac:38:58:2e:1a:8e:64:e7:82:36: df:77:05:4b:77:57:76:9c:3e:8a:21:ad:3d:d5:7b:5f:dc:8a: fa:0a:80:8f:22:48:d8:b3:4d:e0:09:0b:37:73:da:42:e5:f9: 4f:43:96:4f:1b:a5:9c:05:f9:4a:77:53:db:31:74:d1:9d:60: 84:dd:fa:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9mlJYZQ67vUtjsxWD9ydMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZGRhZWRmMzcwZjM1YWY4YjVlZWI3Zjg2ZTZjZmFmYWNl ODhkNGUwHhcNMjUxMjI2MTQwMDU2WhcNMjUxMjI3MTQwMDU2WjAzMTEwLwYDVQQD Eyg1ZTg4MDA3YjVlNzQzMGE5MTk2YWIxMzFjNjNhODQ2MTJhOWE4NWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFhkMGCkOaWQgaRCbzGrVahcpvnW xvJBItUg283dzeIC07iirFXbb77fjkPQ3YzfDTofZGv3vLr8V5hIeSPyTWOK3uT7 XAQBxt/RmTvET/DfRGj1o2cf9+qgfsKFcMJKo9AqRCy4VHcq3S/Z7xRhutTD2Fgy en96GFJeNVnuYMNAeoqkBh3VdK4Sf0qAtqx3G5N8UY9wR6DIumq9ZjIF4fAZLh36 5e+y/Ayo2TKsDXk1l90RSXbwIQkOlw/muJT1HNZwF7mQWCe8KrKSPzp7zPSepHsr PnuLJhcmZGx//hRLp0qvH+XDqn4Cx2er1ylHbR/j5MUNu75xJ006wVjWNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF6IAHtedDCpGWqxMcY6hGEqmoXOMB8GA1UdIwQY MBaAFJLdrt83DzWvi17rf4bmz6+s6I1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3QydTN6Y1BOYS1MWHV0X2h1YlByNnpvalU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84NGMzZDUtOGFiMi00NGFjLTk0MmIt YzRiOWM1Mzk0MDdiLzEva3QydTN6Y1BOYS1MWHV0X2h1YlByNnpvalU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My84NGMzZDUtOGFiMi00NGFjLTk0MmItYzRiOWM1Mzk0MDdi LzEva3QydTN6Y1BOYS1MWHV0X2h1YlByNnpvalU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC4i/voUr d2jVM8osaSCmLGXBWf2+/6cST6PBvbpx4Ibo6RYs0MbUejaeY1gc8FLr44HTEq17 brz/wk7tsrwCd9W9ePL3ZqHXCTN1W9sMzOqi5frZrCC32cRyk2CheMHSUPSheAyS C3K1Z8HOzcTweowkPoSF3BeIaxefhkKke4m5XrpoEJUMMPHLywzs/EkVRAENML/u U2h3VBh+BKMEtPiC7Hlmg9aieh6o+GHoSo5/TNyDPgdULds17LSsOFguGo5k54I2 33cFS3dXdpw+iiGtPdV7X9yK+gqAjyJI2LNN4AkLN3PaQuX5T0OWTxulnAX5SndT 2zF00Z1ghN36DA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:04:01 2025 by rpki-client