This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/208c15-bf0d-4fbc-a0e6-a393dc7dec58/1/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.mft File: kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.mft (raw, json) Hash identifier: ylbqEqHc9BEPOVzgVLI3S4S6+53dR3lrXgoGW3GI+mY= Subject key identifier: 67:DD:C9:98:E1:17:78:A9:73:CF:F6:37:3F:AE:4A:B9:08:46:A9:70 Authority key identifier: 91:52:1B:D6:2C:46:E9:94:3E:C8:0C:B7:74:12:6D:1D:A8:39:3F:3A Certificate issuer: /CN=91521bd62c46e9943ec80cb774126d1da8393f3a Certificate serial: 019B36B43AC7B5B4602547165D2398933ED9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/208c15-bf0d-4fbc-a0e6-a393dc7dec58/1/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.mft Manifest number: 04 Signing time: Fri 19 Dec 2025 13:02:19 +0000 Manifest this update: Fri 19 Dec 2025 13:02:19 +0000 Manifest next update: Sat 20 Dec 2025 13:02:19 +0000 Files and hashes: 1: IMJ8PXjvHYp3sYM7pTt44j4iGz0.roa (hash: LK6FVEoC2H6z0sxVVFHHBKDtB1R0GqA07BwIefhcGkk=) 2: kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.crl (hash: 8wbtxPWAYnIwDHIb9CJkQNU/BBeQKV/41XTDFmcsWOA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/208c15-bf0d-4fbc-a0e6-a393dc7dec58/1/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/208c15-bf0d-4fbc-a0e6-a393dc7dec58/1/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.mft rsync://rpki.ripe.net/repository/DEFAULT/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b4:3a:c7:b5:b4:60:25:47:16:5d:23:98:93:3e:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91521bd62c46e9943ec80cb774126d1da8393f3a Validity Not Before: Dec 19 13:02:19 2025 GMT Not After : Dec 20 13:02:19 2025 GMT Subject: CN=67ddc998e11778a973cff6373fae4ab90846a970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:aa:5e:85:11:04:ac:0e:1d:e7:9b:bd:6b:24: 77:78:1b:5f:a1:82:39:e8:ae:e7:a6:09:7f:2e:2a: 89:87:5a:d3:a9:8f:b1:20:51:fc:0e:84:d9:3d:01: 90:45:73:fb:b9:53:72:a4:f0:7a:b8:dd:0f:a6:4d: ce:d8:2a:6e:b7:11:d1:cf:6a:94:a8:69:a4:63:1d: be:97:8e:d5:23:2f:ed:22:b7:43:30:5e:bf:ce:63: 9b:56:7b:92:a9:39:47:f8:2a:26:46:24:6a:70:12: 3d:26:0d:3b:15:8a:d8:cb:42:fc:cc:de:1a:ca:07: 63:91:46:73:76:bb:55:42:7b:44:56:48:1a:00:d7: f2:07:dd:8c:fa:63:bd:be:14:59:ea:54:e1:9e:1a: e9:a9:84:eb:58:1c:d5:47:df:3d:a0:c7:c0:eb:2d: 8e:f4:99:df:db:fe:fd:c9:be:b2:87:dc:63:22:09: f3:4e:a3:82:26:2f:64:4c:5f:1f:16:1d:5d:73:df: 53:16:d8:06:e8:52:f5:e0:60:29:61:78:d4:28:be: b9:7c:ad:e3:a4:69:3d:67:ed:91:1e:0f:a5:13:74: c2:08:df:49:12:20:da:f0:94:0c:7d:d4:b4:81:7e: a5:90:5e:51:82:06:67:de:e0:6d:3f:46:45:11:38: 5e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:DD:C9:98:E1:17:78:A9:73:CF:F6:37:3F:AE:4A:B9:08:46:A9:70 X509v3 Authority Key Identifier: keyid:91:52:1B:D6:2C:46:E9:94:3E:C8:0C:B7:74:12:6D:1D:A8:39:3F:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/208c15-bf0d-4fbc-a0e6-a393dc7dec58/1/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/208c15-bf0d-4fbc-a0e6-a393dc7dec58/1/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:82:d3:cd:f2:ec:ea:a4:c4:4d:6e:05:3d:8a:51:1e:16:73: f1:96:e8:26:dd:00:a9:20:4b:a9:c3:ac:75:f2:53:04:f1:5f: a9:73:cf:51:f8:41:c3:c6:09:f5:3c:fb:82:ae:33:1a:94:22: a5:17:1a:b5:91:23:f3:75:35:52:8b:c7:38:14:14:ec:b0:dd: 4d:8c:0f:72:86:3e:6d:a6:cc:5d:56:0c:8c:de:af:01:4c:75: b7:95:56:f5:4a:39:90:e8:33:b7:ca:a8:b0:b1:15:de:86:5f: 8b:2f:c0:77:d3:cd:d0:0e:d3:ee:8c:93:20:c6:83:92:c4:41: b3:51:9e:97:8c:e8:ae:8b:e7:fb:81:61:39:50:fc:18:37:a0: c4:ad:1a:e8:5d:34:b6:5e:df:6c:9b:13:f7:a8:70:b0:78:0f: 7c:8b:ca:5e:ab:e1:9d:66:d5:a5:79:e8:4c:e7:29:b6:16:51: 84:03:32:70:aa:d2:20:6d:b9:a3:b3:ff:2b:9a:95:f2:05:5e: 4f:1c:9f:9f:de:da:65:f3:fd:4d:10:f1:10:5d:84:4d:cf:bf: 62:b4:91:ec:9a:1b:27:39:b8:38:68:07:a7:d4:6f:b7:3d:75: b5:e8:96:70:44:d9:62:be:24:6e:23:8b:a6:1d:5e:5d:1d:14: 00:da:c8:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2tDrHtbRgJUcWXSOYkz7ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxNTIxYmQ2MmM0NmU5OTQzZWM4MGNiNzc0MTI2ZDFkYTgz OTNmM2EwHhcNMjUxMjE5MTMwMjE5WhcNMjUxMjIwMTMwMjE5WjAzMTEwLwYDVQQD Eyg2N2RkYzk5OGUxMTc3OGE5NzNjZmY2MzczZmFlNGFiOTA4NDZhOTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqpehREErA4d55u9ayR3eBtfoYI5 6K7npgl/LiqJh1rTqY+xIFH8DoTZPQGQRXP7uVNypPB6uN0Ppk3O2CputxHRz2qU qGmkYx2+l47VIy/tIrdDMF6/zmObVnuSqTlH+ComRiRqcBI9Jg07FYrYy0L8zN4a ygdjkUZzdrtVQntEVkgaANfyB92M+mO9vhRZ6lThnhrpqYTrWBzVR989oMfA6y2O 9Jnf2/79yb6yh9xjIgnzTqOCJi9kTF8fFh1dc99TFtgG6FL14GApYXjUKL65fK3j pGk9Z+2RHg+lE3TCCN9JEiDa8JQMfdS0gX6lkF5RggZn3uBtP0ZFEThe6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGfdyZjhF3ipc8/2Nz+uSrkIRqlwMB8GA1UdIwQY MBaAFJFSG9YsRumUPsgMt3QSbR2oOT86MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1ZJYjFpeEc2WlEteUF5M2RCSnRIYWc1UHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8yMDhjMTUtYmYwZC00ZmJjLWEwZTYt YTM5M2RjN2RlYzU4LzEva1ZJYjFpeEc2WlEteUF5M2RCSnRIYWc1UHpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8yMDhjMTUtYmYwZC00ZmJjLWEwZTYtYTM5M2RjN2RlYzU4 LzEva1ZJYjFpeEc2WlEteUF5M2RCSnRIYWc1UHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaoLTzfLs 6qTETW4FPYpRHhZz8ZboJt0AqSBLqcOsdfJTBPFfqXPPUfhBw8YJ9Tz7gq4zGpQi pRcatZEj83U1UovHOBQU7LDdTYwPcoY+babMXVYMjN6vAUx1t5VW9Uo5kOgzt8qo sLEV3oZfiy/Ad9PN0A7T7oyTIMaDksRBs1Gel4zorovn+4FhOVD8GDegxK0a6F00 tl7fbJsT96hwsHgPfIvKXqvhnWbVpXnoTOcpthZRhAMycKrSIG25o7P/K5qV8gVe Txyfn97aZfP9TRDxEF2ETc+/YrSR7JobJzm4OGgHp9Rvtz11teiWcETZYr4kbiOL ph1eXR0UANrIhg== -----END CERTIFICATE-----Generated at Fri Dec 19 15:17:46 2025 by rpki-client