This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft File: KUv7SsSIYBHwbZ3E79RVMyZO14g.mft (raw, json) Hash identifier: /CJZwu95c1GaAypzOpT39wz785CaTPALHXxxqujtaYc= Subject key identifier: 36:38:B8:A9:F3:77:38:85:2E:F5:3E:DC:EA:32:92:1C:D8:A3:0D:B8 Authority key identifier: 29:4B:FB:4A:C4:88:60:11:F0:6D:9D:C4:EF:D4:55:33:26:4E:D7:88 Certificate issuer: /CN=294bfb4ac4886011f06d9dc4efd45533264ed788 Certificate serial: 019B194D6DD4AE9CEFD6C6DB9A90A7A02568 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft Manifest number: 116F Signing time: Sat 13 Dec 2025 20:01:03 +0000 Manifest this update: Sat 13 Dec 2025 20:01:03 +0000 Manifest next update: Sun 14 Dec 2025 20:01:03 +0000 Files and hashes: 1: KUv7SsSIYBHwbZ3E79RVMyZO14g.crl (hash: uq6jLziDaB9vUdxSlFqX7rgMOsAKC9QfbQ2sR1l75vM=) 2: vUzTxQRZNE5WBxRpFY_1BvR6nb8.roa (hash: 4IGQdOA0rNIT3SYgWTgAAmM5+gTsF90wOn17b+OWr8A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:4d:6d:d4:ae:9c:ef:d6:c6:db:9a:90:a7:a0:25:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=294bfb4ac4886011f06d9dc4efd45533264ed788 Validity Not Before: Dec 13 20:01:03 2025 GMT Not After : Dec 14 20:01:03 2025 GMT Subject: CN=3638b8a9f37738852ef53edcea32921cd8a30db8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3e:9d:5b:7d:4b:86:d1:66:c9:29:19:4e:21: 07:d9:08:78:a2:ee:d1:47:c2:ab:d6:e4:59:56:b2: a2:16:aa:99:63:51:d3:0e:a5:12:c4:2b:8e:e9:82: 5a:e2:f6:c4:ab:2d:79:68:ee:11:2c:88:ae:19:55: 92:d4:46:fb:70:88:05:db:4e:53:40:38:91:d6:75: 2d:82:b8:db:4c:db:93:e2:6e:64:27:48:6f:23:5e: e5:fb:f0:9f:a8:d8:90:37:d7:15:52:42:db:aa:b4: 06:cc:8e:0c:45:61:00:a7:d0:a4:cb:bb:dd:cf:a0: f1:2f:77:50:b3:ce:69:4b:d0:e0:82:e2:b0:48:ec: a1:c6:f4:96:fb:f2:f6:be:63:ba:33:66:40:96:b3: 76:33:4b:3c:cc:71:db:8a:2b:58:61:2b:21:12:a4: da:b4:1a:8b:4a:8b:c4:b8:b3:31:41:7d:d4:20:2a: 0a:12:cc:d4:b3:d9:c4:59:36:3d:d5:96:5f:61:76: af:81:22:a3:9e:e6:74:e4:ca:39:f0:72:e5:dc:38: 30:f0:d7:61:d7:f7:6a:dc:dc:6a:c5:bd:59:75:c3: d1:03:6e:86:03:38:a1:09:aa:5d:48:c2:3b:03:9a: 78:56:82:7b:b7:90:30:7c:92:12:81:a7:a6:e9:0c: 0a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:38:B8:A9:F3:77:38:85:2E:F5:3E:DC:EA:32:92:1C:D8:A3:0D:B8 X509v3 Authority Key Identifier: keyid:29:4B:FB:4A:C4:88:60:11:F0:6D:9D:C4:EF:D4:55:33:26:4E:D7:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:8b:93:2d:07:23:df:58:5f:51:59:a5:f7:83:24:2d:66:01: 7d:25:f5:9c:56:15:87:7e:9e:03:6e:c3:7a:6d:0c:7a:b7:74: 86:c0:33:b5:da:0f:3d:46:75:8f:29:d7:ff:f4:14:b4:5d:30: fc:5a:79:74:c4:ea:33:35:8a:04:6f:18:c2:b8:85:9b:43:66: 36:1f:0a:92:aa:62:20:21:28:53:88:d6:1e:8d:2e:dd:f4:da: ad:b4:c6:99:b0:16:cd:7c:d6:a9:4b:59:d8:25:cb:eb:91:12: af:98:94:73:69:c4:15:a7:67:77:0d:f6:8f:80:c2:ce:b0:c0: 14:e6:bd:c1:7a:6f:b2:3f:b2:38:cc:ee:ea:f7:92:a7:e9:aa: 16:c1:8b:1e:d8:f7:10:f3:ad:05:b8:0b:ae:b0:f0:44:96:1b: 75:71:2d:ed:45:e5:95:6f:12:ce:59:d3:85:75:be:ac:2b:8f: 56:f0:28:97:d8:07:a4:3b:63:06:e3:b0:bb:0e:c4:b2:6e:17: ed:81:34:6b:9e:57:23:89:fa:c4:aa:0b:cf:23:90:0e:56:eb: 5b:bc:ef:af:fc:69:67:71:77:8f:82:58:b1:b0:8c:47:e6:60: 30:82:0d:b6:fa:82:c1:15:5e:94:5c:15:88:b3:9d:1e:04:b1: 2f:a3:c5:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZTW3Urpzv1sbbmpCnoCVoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NGJmYjRhYzQ4ODYwMTFmMDZkOWRjNGVmZDQ1NTMzMjY0 ZWQ3ODgwHhcNMjUxMjEzMjAwMTAzWhcNMjUxMjE0MjAwMTAzWjAzMTEwLwYDVQQD EygzNjM4YjhhOWYzNzczODg1MmVmNTNlZGNlYTMyOTIxY2Q4YTMwZGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnT6dW31LhtFmySkZTiEH2Qh4ou7R R8Kr1uRZVrKiFqqZY1HTDqUSxCuO6YJa4vbEqy15aO4RLIiuGVWS1Eb7cIgF205T QDiR1nUtgrjbTNuT4m5kJ0hvI17l+/CfqNiQN9cVUkLbqrQGzI4MRWEAp9Cky7vd z6DxL3dQs85pS9DgguKwSOyhxvSW+/L2vmO6M2ZAlrN2M0s8zHHbiitYYSshEqTa tBqLSovEuLMxQX3UICoKEszUs9nEWTY91ZZfYXavgSKjnuZ05Mo58HLl3Dgw8Ndh 1/dq3Nxqxb1ZdcPRA26GAzihCapdSMI7A5p4VoJ7t5AwfJISgaem6QwKnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDY4uKnzdziFLvU+3OoykhzYow24MB8GA1UdIwQY MBaAFClL+0rEiGAR8G2dxO/UVTMmTteIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1V2N1NzU0lZQkh3YlozRTc5UlZNeVpPMTRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iMGRhMDYtMWJhNy00OWYwLWE1Njkt OTA5ZmU3YzgwZDk4LzEvS1V2N1NzU0lZQkh3YlozRTc5UlZNeVpPMTRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9iMGRhMDYtMWJhNy00OWYwLWE1NjktOTA5ZmU3YzgwZDk4 LzEvS1V2N1NzU0lZQkh3YlozRTc5UlZNeVpPMTRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAYuTLQcj 31hfUVml94MkLWYBfSX1nFYVh36eA27Dem0Merd0hsAztdoPPUZ1jynX//QUtF0w /Fp5dMTqMzWKBG8YwriFm0NmNh8KkqpiICEoU4jWHo0u3fTarbTGmbAWzXzWqUtZ 2CXL65ESr5iUc2nEFadndw32j4DCzrDAFOa9wXpvsj+yOMzu6veSp+mqFsGLHtj3 EPOtBbgLrrDwRJYbdXEt7UXllW8SzlnThXW+rCuPVvAol9gHpDtjBuOwuw7Esm4X 7YE0a55XI4n6xKoLzyOQDlbrW7zvr/xpZ3F3j4JYsbCMR+ZgMIINtvqCwRVelFwV iLOdHgSxL6PFVg== -----END CERTIFICATE-----Generated at Sun Dec 14 03:30:00 2025 by rpki-client