This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft File: kbP11vQ-gwcfp35tPru3k1L5YbU.mft (raw, json) Hash identifier: 0iLF/bFHNDF4v4jZrIb81MAbjCr4X6jo59EruxeoObI= Subject key identifier: 8E:45:68:0C:7D:73:B4:CC:8C:71:56:58:97:49:A0:80:BC:F9:05:74 Authority key identifier: 91:B3:F5:D6:F4:3E:83:07:1F:A7:7E:6D:3E:BB:B7:93:52:F9:61:B5 Certificate issuer: /CN=91b3f5d6f43e83071fa77e6d3ebbb79352f961b5 Certificate serial: 019B2399CD5B4F9E9A2500E55B3C04605646 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft Manifest number: 1058 Signing time: Mon 15 Dec 2025 20:00:40 +0000 Manifest this update: Mon 15 Dec 2025 20:00:40 +0000 Manifest next update: Tue 16 Dec 2025 20:00:40 +0000 Files and hashes: 1: X8wL7IEItggqG87hU2SRjhDFo0c.roa (hash: Z7Uz5pUQbhyO7q39OnET5F24kmKZzxNrZzpSD8G3ebQ=) 2: kbP11vQ-gwcfp35tPru3k1L5YbU.crl (hash: 5XpmPiZ8EBrc5m3UoXnttUOA+0Hvf4YDfAsI6fS0ZJ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:99:cd:5b:4f:9e:9a:25:00:e5:5b:3c:04:60:56:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91b3f5d6f43e83071fa77e6d3ebbb79352f961b5 Validity Not Before: Dec 15 20:00:40 2025 GMT Not After : Dec 16 20:00:40 2025 GMT Subject: CN=8e45680c7d73b4cc8c7156589749a080bcf90574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b6:91:b8:3e:03:f2:28:e2:10:dc:7e:9b:e7: 8d:da:79:24:dd:4d:6c:e3:3e:43:cd:50:87:df:90: 6c:6e:1a:36:33:6d:c8:63:4b:66:38:a5:4e:1b:62: 8e:12:e4:dc:5e:27:1e:2a:01:ea:54:32:2c:a5:79: 67:a5:b7:1a:45:77:35:d3:0b:cd:73:99:f4:cd:b7: 08:43:f8:ff:3d:d3:90:55:28:ce:ff:72:8a:d4:30: 11:12:ad:b2:07:8b:82:40:03:2a:ce:f4:ee:ec:e0: df:61:77:7a:50:99:f0:29:56:ce:59:a8:d0:4f:d4: b7:68:47:05:a2:7a:2a:76:d1:b3:c5:6d:59:3c:d8: 0e:a8:15:c2:2a:9e:5a:09:19:d1:56:f5:72:c5:5a: 38:70:dd:30:21:d7:a3:c5:d7:4f:19:8b:22:d8:f8: df:c3:12:2d:5e:12:78:50:fd:78:9a:99:81:f9:c4: ed:28:88:7a:89:0c:ef:45:12:d3:7e:a5:28:2c:d7: 54:93:1e:c8:50:1a:25:7e:16:c2:96:91:da:44:67: 19:33:c2:14:c6:39:9d:d0:40:b1:e3:f1:4f:aa:3e: 5c:c4:31:8b:a9:38:75:7f:49:ff:76:75:88:6b:7b: 03:55:91:8a:f0:b4:f6:13:90:53:a0:b6:76:24:45: 6f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:45:68:0C:7D:73:B4:CC:8C:71:56:58:97:49:A0:80:BC:F9:05:74 X509v3 Authority Key Identifier: keyid:91:B3:F5:D6:F4:3E:83:07:1F:A7:7E:6D:3E:BB:B7:93:52:F9:61:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:98:69:49:3a:cf:3f:df:6f:09:4c:e3:a5:42:30:a4:ea:2a: ef:81:b6:33:9f:ff:28:36:f9:55:71:b2:db:ad:3f:0a:44:60: 20:f4:32:e6:c3:ae:a1:14:6d:16:81:88:ce:56:55:5c:ed:da: 6f:73:8f:cf:15:22:84:2a:07:cb:62:21:81:d9:40:76:e8:f1: 60:f0:97:24:f8:5b:d2:da:e9:5a:57:23:51:9d:3d:d7:20:b4: b6:d4:c2:95:a7:00:9d:a3:89:42:e7:a7:75:93:08:78:ee:35: 1c:d5:9b:24:26:d6:cb:39:45:f6:83:61:bd:42:d2:cd:48:f9: 6a:63:92:83:2b:b4:44:e3:1c:b3:fc:5c:70:5d:41:6d:a8:0f: 88:d3:b6:4e:d7:d6:c2:06:73:db:19:1c:4f:1f:23:18:1a:e9: 00:72:6b:e6:1d:7a:e5:b9:15:19:a7:64:8a:ba:89:86:8e:b6: dd:13:a0:c6:27:22:05:ff:78:02:07:83:72:40:a1:c8:e8:3a: 63:27:3f:7e:72:76:e6:9c:d3:c2:82:29:b2:b7:37:4c:16:c4: 11:aa:cc:56:72:0b:3a:36:d1:55:c3:f5:39:78:7d:8d:0e:ee: 6e:f5:ea:e0:6c:7e:e6:b9:46:43:af:12:cf:ae:a1:7a:d7:c4: cd:17:5a:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjmc1bT56aJQDlWzwEYFZGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxYjNmNWQ2ZjQzZTgzMDcxZmE3N2U2ZDNlYmJiNzkzNTJm OTYxYjUwHhcNMjUxMjE1MjAwMDQwWhcNMjUxMjE2MjAwMDQwWjAzMTEwLwYDVQQD Eyg4ZTQ1NjgwYzdkNzNiNGNjOGM3MTU2NTg5NzQ5YTA4MGJjZjkwNTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17aRuD4D8ijiENx+m+eN2nkk3U1s 4z5DzVCH35Bsbho2M23IY0tmOKVOG2KOEuTcXiceKgHqVDIspXlnpbcaRXc10wvN c5n0zbcIQ/j/PdOQVSjO/3KK1DAREq2yB4uCQAMqzvTu7ODfYXd6UJnwKVbOWajQ T9S3aEcFonoqdtGzxW1ZPNgOqBXCKp5aCRnRVvVyxVo4cN0wIdejxddPGYsi2Pjf wxItXhJ4UP14mpmB+cTtKIh6iQzvRRLTfqUoLNdUkx7IUBolfhbClpHaRGcZM8IU xjmd0ECx4/FPqj5cxDGLqTh1f0n/dnWIa3sDVZGK8LT2E5BToLZ2JEVvrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI5FaAx9c7TMjHFWWJdJoIC8+QV0MB8GA1UdIwQY MBaAFJGz9db0PoMHH6d+bT67t5NS+WG1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2JQMTF2US1nd2NmcDM1dFBydTNrMUw1WWJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84N2E4NjMtZGE2Zi00OTgxLTkzNzgt YjJjZDRlNTgxMDBlLzEva2JQMTF2US1nd2NmcDM1dFBydTNrMUw1WWJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS84N2E4NjMtZGE2Zi00OTgxLTkzNzgtYjJjZDRlNTgxMDBl LzEva2JQMTF2US1nd2NmcDM1dFBydTNrMUw1WWJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM5hpSTrP P99vCUzjpUIwpOoq74G2M5//KDb5VXGy260/CkRgIPQy5sOuoRRtFoGIzlZVXO3a b3OPzxUihCoHy2IhgdlAdujxYPCXJPhb0trpWlcjUZ091yC0ttTClacAnaOJQuen dZMIeO41HNWbJCbWyzlF9oNhvULSzUj5amOSgyu0ROMcs/xccF1BbagPiNO2TtfW wgZz2xkcTx8jGBrpAHJr5h165bkVGadkirqJho623ROgxiciBf94AgeDckChyOg6 Yyc/fnJ25pzTwoIpsrc3TBbEEarMVnILOjbRVcP1OXh9jQ7ubvXq4Gx+5rlGQ68S z66hetfEzRda5Q== -----END CERTIFICATE-----Generated at Tue Dec 16 00:22:08 2025 by rpki-client