This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft File: E-KBR1t7-ND6H2adWtLeFjXowE8.mft (raw, json) Hash identifier: 2r3CLTm97CGax+vAaOtlhBwRBtbynhtq534pv4urM4w= Subject key identifier: 42:1F:DB:62:AC:08:15:40:62:B1:EA:43:88:AD:6E:7B:57:AB:7C:3B Authority key identifier: 13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F Certificate issuer: /CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f Certificate serial: 019AEC74DAC183C9F2B2BDA8C3D66A61B45B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft Manifest number: 132C Signing time: Fri 05 Dec 2025 03:01:12 +0000 Manifest this update: Fri 05 Dec 2025 03:01:12 +0000 Manifest next update: Sat 06 Dec 2025 03:01:12 +0000 Files and hashes: 1: Cbgx-BQbS0FHwmRsgonuP_y0uIw.roa (hash: LCGI3/5d7XNi/Gu71Peh/rfncJ6J664qZ+UlhSx3wTg=) 2: E-KBR1t7-ND6H2adWtLeFjXowE8.crl (hash: gp++Vs1Elo+L/LC9on7HFUfpXWQWxFDKvEuYJHGFkps=) 3: OJiEpuu19DL0DK8EqfynqGFXkQQ.roa (hash: qdWhWnRWtAIkyoxDYPJOupy3MISxIyqCu/0vET2RQjw=) 4: RV4nVFIosillQgPXUi3Rb-YOGqE.roa (hash: 0C9sINAaIPU+479WwDvqzeKATHZb5hKHHasDy8WJ6tA=) 5: W5VQv-ze_wds3sZaktK1dB3TlqA.roa (hash: 3Qbtjb177rcscniRobuAC/Kh8GJ/smUC+jFvjdESqGQ=) 6: pN5SnkQN19ou2x5UZOfTyn6_Rb0.roa (hash: KbWqEMgAWb6IcUnuvD0+WC5dIqXTlJgmk7uOCLNfK1M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ec:74:da:c1:83:c9:f2:b2:bd:a8:c3:d6:6a:61:b4:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f Validity Not Before: Dec 5 03:01:12 2025 GMT Not After : Dec 6 03:01:12 2025 GMT Subject: CN=421fdb62ac08154062b1ea4388ad6e7b57ab7c3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:48:99:85:e5:1b:0d:26:6e:13:c6:f5:ed:29: d3:9d:28:b9:dc:63:72:fb:df:d2:6e:2e:7f:dc:43: 0c:65:98:9e:64:ee:75:c6:1a:c6:87:7a:b0:b8:cf: 8c:a9:4f:15:5c:56:8b:68:a9:03:84:47:17:58:cf: b1:8a:09:39:d1:12:36:d4:21:57:fd:3a:a6:dc:ad: 05:4d:e7:62:7f:eb:dc:da:47:0c:75:b0:31:9d:21: aa:cc:67:01:9c:a3:12:c3:23:6b:e5:07:5f:c1:d1: 3e:a2:9b:b2:d7:f8:45:4c:e2:47:d8:de:b0:16:b2: 21:13:f2:c8:7b:0f:f6:9b:5b:45:5c:4d:56:97:11: 93:3b:55:8f:fb:f1:3b:be:5d:45:24:0d:5a:98:4f: 65:a6:3e:d4:0e:80:a8:57:cf:3e:0d:d0:de:7f:10: 54:55:2c:67:7d:2c:2c:48:65:e3:0e:27:02:6d:4a: 1b:df:fd:01:77:c7:f9:56:d3:aa:31:f4:bf:36:c6: 9f:44:7b:b5:c7:cd:93:c1:04:cc:c9:fb:74:1b:5a: d0:d1:59:83:50:1a:6c:f5:29:e3:43:a4:42:6c:f9: 5f:7a:3c:9b:39:62:39:26:ed:74:17:88:d2:86:77: 03:29:a6:bc:ed:fe:53:66:0f:af:d6:dc:a6:2c:1e: 20:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1F:DB:62:AC:08:15:40:62:B1:EA:43:88:AD:6E:7B:57:AB:7C:3B X509v3 Authority Key Identifier: keyid:13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:5f:c7:a8:4c:83:c5:76:f6:a5:2c:a8:b7:6d:1e:ad:28:b4: 46:6d:0f:84:6d:86:a9:38:ee:b1:ee:c0:fd:36:3a:27:f4:09: 27:04:6f:28:77:27:8a:fc:ce:ea:c5:23:1e:68:f8:c1:ea:5d: 00:8c:c1:6f:2f:a0:90:81:d4:d4:e5:2e:1e:8d:e3:6a:26:ca: 65:06:e8:a3:33:61:9f:b4:2b:58:43:2c:15:44:c4:1e:e2:a9: c5:ad:06:d1:c5:6b:be:15:c1:42:6a:30:06:fe:5a:cd:c9:6d: 26:07:cc:d9:be:c5:52:39:71:17:a0:03:ef:d5:39:96:1c:74: 63:2c:1e:de:33:0c:5c:83:d2:e7:c3:d3:f7:8f:3c:83:cd:a4: 5b:6c:75:98:80:cd:80:da:da:ca:96:37:15:be:83:e0:09:4a: 50:5c:e3:3c:c3:b3:11:c1:11:9e:bc:5b:f7:44:80:7e:cf:96: 94:ee:67:42:7a:34:bd:dd:99:29:ac:84:f9:7d:0e:94:4e:d4: b2:0a:28:83:6f:a6:24:77:65:1b:30:0f:12:ad:df:8f:3f:97: e3:c0:47:68:7a:d1:bd:d2:38:6c:5a:96:2a:13:81:59:04:f8: 98:42:98:c3:cf:c0:dc:96:8d:e6:c2:30:93:35:86:8a:a0:68: e1:dd:6f:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrsdNrBg8nysr2ow9ZqYbRbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZTI4MTQ3NWI3YmY4ZDBmYTFmNjY5ZDVhZDJkZTE2MzVl OGMwNGYwHhcNMjUxMjA1MDMwMTEyWhcNMjUxMjA2MDMwMTEyWjAzMTEwLwYDVQQD Eyg0MjFmZGI2MmFjMDgxNTQwNjJiMWVhNDM4OGFkNmU3YjU3YWI3YzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUiZheUbDSZuE8b17SnTnSi53GNy +9/Sbi5/3EMMZZieZO51xhrGh3qwuM+MqU8VXFaLaKkDhEcXWM+xigk50RI21CFX /Tqm3K0FTedif+vc2kcMdbAxnSGqzGcBnKMSwyNr5QdfwdE+opuy1/hFTOJH2N6w FrIhE/LIew/2m1tFXE1WlxGTO1WP+/E7vl1FJA1amE9lpj7UDoCoV88+DdDefxBU VSxnfSwsSGXjDicCbUob3/0Bd8f5VtOqMfS/NsafRHu1x82TwQTMyft0G1rQ0VmD UBps9SnjQ6RCbPlfejybOWI5Ju10F4jShncDKaa87f5TZg+v1tymLB4gdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIf22KsCBVAYrHqQ4itbntXq3w7MB8GA1UdIwQY MBaAFBPigUdbe/jQ+h9mnVrS3hY16MBPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRS1LQlIxdDctTkQ2SDJhZFd0TGVGalhvd0U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8wNWI1ZDgtNDU0MS00OGE5LThjMGEt NDRmZDA0MzkzZTJiLzEvRS1LQlIxdDctTkQ2SDJhZFd0TGVGalhvd0U4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS8wNWI1ZDgtNDU0MS00OGE5LThjMGEtNDRmZDA0MzkzZTJi LzEvRS1LQlIxdDctTkQ2SDJhZFd0TGVGalhvd0U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr1/HqEyD xXb2pSyot20erSi0Rm0PhG2GqTjuse7A/TY6J/QJJwRvKHcnivzO6sUjHmj4wepd AIzBby+gkIHU1OUuHo3jaibKZQboozNhn7QrWEMsFUTEHuKpxa0G0cVrvhXBQmow Bv5azcltJgfM2b7FUjlxF6AD79U5lhx0Yywe3jMMXIPS58PT9488g82kW2x1mIDN gNraypY3Fb6D4AlKUFzjPMOzEcERnrxb90SAfs+WlO5nQno0vd2ZKayE+X0OlE7U sgoog2+mJHdlGzAPEq3fjz+X48BHaHrRvdI4bFqWKhOBWQT4mEKYw8/A3JaN5sIw kzWGiqBo4d1vtQ== -----END CERTIFICATE-----Generated at Fri Dec 5 07:51:55 2025 by rpki-client