This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft File: kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft (raw, json) Hash identifier: GSO4uU97YGxQ+1LNYfdipqpUXnWBUns3ej2t0bltXFA= Subject key identifier: 2E:C5:F3:9C:8F:07:21:6F:7B:39:F6:B0:9C:A8:2F:B8:7F:2F:AB:47 Authority key identifier: 91:4B:7D:1E:6E:72:D5:5C:8D:1C:4A:3E:82:41:D7:1D:CF:8E:3B:F1 Certificate issuer: /CN=914b7d1e6e72d55c8d1c4a3e8241d71dcf8e3bf1 Certificate serial: 019B1E739679172AE410221C34A4604A69AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft Manifest number: 1613 Signing time: Sun 14 Dec 2025 20:00:50 +0000 Manifest this update: Sun 14 Dec 2025 20:00:50 +0000 Manifest next update: Mon 15 Dec 2025 20:00:50 +0000 Files and hashes: 1: SX3vKCIesg7brXNXKPon4jGBLVQ.roa (hash: QbCrUZtkCCzMgLc9gxL+FBpDYE7YV20lMwm2mk5wzSk=) 2: kUt9Hm5y1VyNHEo-gkHXHc-OO_E.crl (hash: UH4/aBur3oM0z1DMT5RzZs0nF8btUwGcbaC5MQEMpeU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft rsync://rpki.ripe.net/repository/DEFAULT/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 20:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:73:96:79:17:2a:e4:10:22:1c:34:a4:60:4a:69:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914b7d1e6e72d55c8d1c4a3e8241d71dcf8e3bf1 Validity Not Before: Dec 14 20:00:50 2025 GMT Not After : Dec 15 20:00:50 2025 GMT Subject: CN=2ec5f39c8f07216f7b39f6b09ca82fb87f2fab47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:82:0e:39:d7:83:6c:2e:28:87:1b:0f:91:d6: 85:da:60:46:25:ea:42:e6:10:0a:f9:c1:0f:62:59: d3:8e:09:84:96:2b:c5:d7:46:e3:9f:b1:7a:32:68: 13:08:a1:99:18:02:3b:85:df:34:94:de:30:60:f8: 74:83:7d:53:88:4f:b1:d1:ef:81:89:10:7a:06:aa: 25:c4:04:51:f0:5b:51:46:4c:44:bc:b3:28:21:57: f1:d8:79:05:ab:ea:32:a3:50:28:32:29:34:1f:a2: fd:0f:6c:ac:97:65:c2:70:56:46:04:20:3e:a6:66: fa:60:80:28:90:e2:33:84:fc:e8:51:10:4a:6b:4c: af:c0:0a:fb:35:1d:20:cd:bc:d2:3f:70:bf:b2:c2: 33:e2:dd:99:df:76:6c:1b:0d:01:54:d1:75:07:52: 74:da:df:f9:6b:ee:7d:e3:03:39:b3:f1:f4:4e:15: b5:c2:26:78:2e:da:30:3e:4f:fe:70:e5:55:c8:b0: 61:6a:a4:de:8d:32:ef:b7:6a:00:4b:4b:1e:61:65: 21:28:1b:a0:51:e8:c5:66:2e:b9:d7:c4:9d:98:bb: 16:62:96:0d:8d:5c:42:77:30:b7:0b:24:63:c0:a7: fc:14:a3:74:0a:6a:98:14:08:1e:67:2e:a8:ea:ff: d0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:C5:F3:9C:8F:07:21:6F:7B:39:F6:B0:9C:A8:2F:B8:7F:2F:AB:47 X509v3 Authority Key Identifier: keyid:91:4B:7D:1E:6E:72:D5:5C:8D:1C:4A:3E:82:41:D7:1D:CF:8E:3B:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:44:50:2a:18:9f:3a:80:0f:86:21:72:52:a4:8b:42:72:32: 8b:d5:1f:c1:a0:de:92:12:51:3f:82:ca:d0:9d:d1:a3:ac:88: 24:6f:5f:16:5f:45:9b:6a:26:de:5b:96:1c:38:1c:7d:68:4e: e7:db:c4:2f:6c:b4:bc:57:d5:2a:ef:66:13:0a:4f:ad:ce:5c: 16:44:b0:e0:55:c8:66:81:90:18:37:76:b9:11:d2:32:af:73: c7:aa:0b:f5:56:cd:81:e3:a9:ea:09:cf:ff:4b:81:e3:52:79: f6:4c:38:a3:d3:37:c7:d9:40:2a:22:79:a7:af:ac:a8:42:d3: fb:3c:11:f7:36:60:47:02:e4:81:47:31:6d:6f:12:dd:ad:8a: 6d:6e:34:f8:9b:bb:8d:23:99:41:35:63:cd:77:58:34:67:07: 63:1d:c4:91:45:ed:a9:78:93:3a:40:57:4c:f3:d0:e8:a4:98: 0f:4c:85:3f:62:6b:f5:94:91:36:38:0e:f6:33:04:94:53:84: 6f:85:ea:33:9c:43:60:2a:7e:e0:94:46:47:ce:58:96:d1:e8: f9:68:6d:db:a3:3e:52:db:6e:6f:0e:fb:7a:b7:43:da:21:6a: 29:90:90:fd:d8:32:1a:0f:ef:10:70:75:5a:9e:81:78:b9:b1: 48:af:5a:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsec5Z5FyrkECIcNKRgSmmuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxNGI3ZDFlNmU3MmQ1NWM4ZDFjNGEzZTgyNDFkNzFkY2Y4 ZTNiZjEwHhcNMjUxMjE0MjAwMDUwWhcNMjUxMjE1MjAwMDUwWjAzMTEwLwYDVQQD EygyZWM1ZjM5YzhmMDcyMTZmN2IzOWY2YjA5Y2E4MmZiODdmMmZhYjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IIOOdeDbC4ohxsPkdaF2mBGJepC 5hAK+cEPYlnTjgmElivF10bjn7F6MmgTCKGZGAI7hd80lN4wYPh0g31TiE+x0e+B iRB6BqolxARR8FtRRkxEvLMoIVfx2HkFq+oyo1AoMik0H6L9D2ysl2XCcFZGBCA+ pmb6YIAokOIzhPzoURBKa0yvwAr7NR0gzbzSP3C/ssIz4t2Z33ZsGw0BVNF1B1J0 2t/5a+594wM5s/H0ThW1wiZ4LtowPk/+cOVVyLBhaqTejTLvt2oAS0seYWUhKBug UejFZi6518SdmLsWYpYNjVxCdzC3CyRjwKf8FKN0CmqYFAgeZy6o6v/QgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7F85yPByFvezn2sJyoL7h/L6tHMB8GA1UdIwQY MBaAFJFLfR5uctVcjRxKPoJB1x3PjjvxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1V0OUhtNXkxVnlOSEVvLWdrSFhIYy1PT19FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy84MzQ5ZTQtNjljYy00MTQwLWE3NDQt YWJlZDc0NDE1YjhmLzEva1V0OUhtNXkxVnlOSEVvLWdrSFhIYy1PT19FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy84MzQ5ZTQtNjljYy00MTQwLWE3NDQtYWJlZDc0NDE1Yjhm LzEva1V0OUhtNXkxVnlOSEVvLWdrSFhIYy1PT19FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp0RQKhif OoAPhiFyUqSLQnIyi9UfwaDekhJRP4LK0J3Ro6yIJG9fFl9Fm2om3luWHDgcfWhO 59vEL2y0vFfVKu9mEwpPrc5cFkSw4FXIZoGQGDd2uRHSMq9zx6oL9VbNgeOp6gnP /0uB41J59kw4o9M3x9lAKiJ5p6+sqELT+zwR9zZgRwLkgUcxbW8S3a2KbW40+Ju7 jSOZQTVjzXdYNGcHYx3EkUXtqXiTOkBXTPPQ6KSYD0yFP2Jr9ZSRNjgO9jMElFOE b4XqM5xDYCp+4JRGR85YltHo+Wht26M+Uttubw77erdD2iFqKZCQ/dgyGg/vEHB1 Wp6BeLmxSK9apA== -----END CERTIFICATE-----Generated at Mon Dec 15 06:49:27 2025 by rpki-client