This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft File: KVqSt3jt36jc2RfLuHzeMboscy8.mft (raw, json) Hash identifier: L2MLZR6t9iAteU809dOSBoPL5VAQ0b1MisBz8q4iWo0= Subject key identifier: F2:44:AD:DA:EB:15:DD:22:F8:1F:E1:CD:61:FA:51:6A:E2:1E:B4:74 Authority key identifier: 29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F Certificate issuer: /CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f Certificate serial: 019B0ECA110150D4CD3EEF34BBD9C7972636 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft Manifest number: 1772 Signing time: Thu 11 Dec 2025 19:01:22 +0000 Manifest this update: Thu 11 Dec 2025 19:01:22 +0000 Manifest next update: Fri 12 Dec 2025 19:01:22 +0000 Files and hashes: 1: 043uSXcEwcTZgUk5_ExSgvF0TDI.roa (hash: aKMAMHw8f6Tqa+Lu83OKVpFBIm3XSWZO6zpjohL8Alg=) 2: KVqSt3jt36jc2RfLuHzeMboscy8.crl (hash: a/o/pOTiVpRGlpQ53GiK4SMlNHcqVnHG7K4f5EkysAg=) 3: sqwvJOyPTCq5sZkvN5Pbfvvxhgg.roa (hash: HccEp/1nmaqHimBtUpSeAjWigFxaNTmI1UzABIZlNpU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:ca:11:01:50:d4:cd:3e:ef:34:bb:d9:c7:97:26:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f Validity Not Before: Dec 11 19:01:22 2025 GMT Not After : Dec 12 19:01:22 2025 GMT Subject: CN=f244addaeb15dd22f81fe1cd61fa516ae21eb474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:68:3c:d7:ed:ad:3f:17:d9:c4:9a:e7:da:83: ee:a0:32:63:b1:64:96:47:0a:7b:ec:7b:7d:3d:2d: a3:d8:24:55:aa:07:cd:db:f9:e5:92:d9:0b:9e:d7: cd:3a:26:a9:32:7b:2d:ee:72:ae:c4:4f:23:20:fa: fc:3d:e9:48:f9:23:d3:bd:f9:cd:64:48:06:c2:f2: 89:65:56:e2:b6:a6:8e:64:cc:ea:f2:84:c2:d9:cf: b1:60:47:01:10:8c:42:2f:e4:d3:6a:0f:63:be:07: 28:ae:f9:08:0c:4c:6d:4d:d7:85:b8:4f:98:32:c4: ce:fc:bf:27:7f:38:bf:a6:14:e0:92:33:a7:18:89: 8f:d1:59:d4:1e:e1:8d:9c:49:57:66:98:4a:36:9e: 46:98:e5:15:fb:6d:e6:f7:13:49:ab:e1:4c:c0:c4: 02:bc:25:ce:65:69:bd:66:08:34:65:50:f9:87:9e: 19:b6:fa:4e:fb:82:ad:a1:45:bb:53:ee:23:60:8d: 32:3f:0a:83:a9:40:60:85:63:ae:d2:75:9b:8e:d9: 76:b8:0d:a7:5a:19:dd:81:fe:71:df:09:34:03:12: 77:f7:a6:ad:40:3b:7b:0c:05:ef:c2:6a:04:f8:cc: b1:cf:82:c9:2f:f0:ee:81:3b:29:64:72:17:ad:fd: 87:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:44:AD:DA:EB:15:DD:22:F8:1F:E1:CD:61:FA:51:6A:E2:1E:B4:74 X509v3 Authority Key Identifier: keyid:29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:cb:47:b8:7f:65:83:2c:3c:9b:4a:30:2d:6a:7a:8a:bc:ce: 03:8e:bf:59:34:a6:b1:84:2a:81:0d:bd:e4:31:35:e8:46:93: ea:b9:05:b9:ad:46:df:02:7b:05:de:e3:f9:a3:fa:f1:cd:ed: cc:9f:e6:0a:7b:d0:47:c0:42:20:c5:7b:07:3f:17:e7:e7:49: ec:97:ec:23:82:a3:c4:33:03:d7:49:b7:c9:bb:31:df:0f:a5: 6e:a1:c4:fb:02:91:75:89:66:76:04:bd:8b:a6:1f:fa:ee:a0: f0:d2:88:74:ef:14:7d:26:fc:0b:8e:07:21:df:ad:04:f3:a0: 0f:a5:0f:de:91:86:b4:19:5c:01:83:90:e1:20:89:79:fe:29: d4:8a:82:8c:d6:19:0b:88:6a:b3:c7:b2:3c:33:7f:48:d1:6d: 6c:16:c8:ab:5e:e2:34:35:a8:e8:09:c4:8a:96:14:df:f3:6f: 64:a5:8e:ae:2f:9e:63:3d:08:37:37:2e:b0:b1:4c:8a:d2:ad: 80:51:c8:6e:0a:b7:2c:f8:08:a6:b7:5e:da:0e:4c:36:db:cb: 6d:c1:a2:21:d6:ad:05:c3:b7:2b:25:68:69:22:d8:d9:e4:41: 0c:bb:85:7d:c6:68:82:6a:ea:17:54:3b:54:e1:50:f2:a1:a7: c6:b5:b9:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyhEBUNTNPu80u9nHlyY2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NWE5MmI3NzhlZGRmYThkY2Q5MTdjYmI4N2NkZTMxYmEy YzczMmYwHhcNMjUxMjExMTkwMTIyWhcNMjUxMjEyMTkwMTIyWjAzMTEwLwYDVQQD EyhmMjQ0YWRkYWViMTVkZDIyZjgxZmUxY2Q2MWZhNTE2YWUyMWViNDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12g81+2tPxfZxJrn2oPuoDJjsWSW Rwp77Ht9PS2j2CRVqgfN2/nlktkLntfNOiapMnst7nKuxE8jIPr8PelI+SPTvfnN ZEgGwvKJZVbitqaOZMzq8oTC2c+xYEcBEIxCL+TTag9jvgcorvkIDExtTdeFuE+Y MsTO/L8nfzi/phTgkjOnGImP0VnUHuGNnElXZphKNp5GmOUV+23m9xNJq+FMwMQC vCXOZWm9Zgg0ZVD5h54ZtvpO+4KtoUW7U+4jYI0yPwqDqUBghWOu0nWbjtl2uA2n Whndgf5x3wk0AxJ396atQDt7DAXvwmoE+Myxz4LJL/DugTspZHIXrf2HeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPJErdrrFd0i+B/hzWH6UWriHrR0MB8GA1UdIwQY MBaAFClakrd47d+o3NkXy7h83jG6LHMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1ZxU3QzanQzNmpjMlJmTHVIemVNYm9zY3k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83NTcwZTEtYWUzZC00OTAxLTljODUt ZGNkYzVjZWUyNzZmLzEvS1ZxU3QzanQzNmpjMlJmTHVIemVNYm9zY3k4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy83NTcwZTEtYWUzZC00OTAxLTljODUtZGNkYzVjZWUyNzZm LzEvS1ZxU3QzanQzNmpjMlJmTHVIemVNYm9zY3k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANctHuH9l gyw8m0owLWp6irzOA46/WTSmsYQqgQ295DE16EaT6rkFua1G3wJ7Bd7j+aP68c3t zJ/mCnvQR8BCIMV7Bz8X5+dJ7JfsI4KjxDMD10m3ybsx3w+lbqHE+wKRdYlmdgS9 i6Yf+u6g8NKIdO8UfSb8C44HId+tBPOgD6UP3pGGtBlcAYOQ4SCJef4p1IqCjNYZ C4hqs8eyPDN/SNFtbBbIq17iNDWo6AnEipYU3/NvZKWOri+eYz0INzcusLFMitKt gFHIbgq3LPgIprde2g5MNtvLbcGiIdatBcO3KyVoaSLY2eRBDLuFfcZogmrqF1Q7 VOFQ8qGnxrW5bw== -----END CERTIFICATE-----Generated at Fri Dec 12 00:29:17 2025 by rpki-client