This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft File: kbP11vQ-gwcfp35tPru3k1L5YbU.mft (raw, json) Hash identifier: N/REX5af7k2sJVy9kNFWAYNpvRaq4kY3Lrydr2U03GQ= Subject key identifier: B6:82:87:FC:C7:45:33:33:69:87:95:B3:BD:0E:DD:74:1D:9B:ED:3E Authority key identifier: 91:B3:F5:D6:F4:3E:83:07:1F:A7:7E:6D:3E:BB:B7:93:52:F9:61:B5 Certificate issuer: /CN=91b3f5d6f43e83071fa77e6d3ebbb79352f961b5 Certificate serial: 019B42804962952CF2715960F87D45004512 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft Manifest number: 1068 Signing time: Sun 21 Dec 2025 20:01:02 +0000 Manifest this update: Sun 21 Dec 2025 20:01:02 +0000 Manifest next update: Mon 22 Dec 2025 20:01:02 +0000 Files and hashes: 1: X8wL7IEItggqG87hU2SRjhDFo0c.roa (hash: Z7Uz5pUQbhyO7q39OnET5F24kmKZzxNrZzpSD8G3ebQ=) 2: kbP11vQ-gwcfp35tPru3k1L5YbU.crl (hash: gBo0BvpQI7wCMs/QufOlDRfK94Ecb5faypQ9j6fhy3o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:80:49:62:95:2c:f2:71:59:60:f8:7d:45:00:45:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91b3f5d6f43e83071fa77e6d3ebbb79352f961b5 Validity Not Before: Dec 21 20:01:02 2025 GMT Not After : Dec 22 20:01:02 2025 GMT Subject: CN=b68287fcc7453333698795b3bd0edd741d9bed3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:63:ac:a8:8e:e5:a6:c1:ae:30:5f:eb:72:62: 96:a4:60:1a:e6:22:5b:e3:01:3f:58:4d:d1:88:cc: 1b:06:9e:b9:e6:a6:f5:ae:4d:5e:fa:eb:66:1d:c8: 78:e8:f1:c0:27:7c:df:99:50:2d:f4:ae:8c:0a:b5: 38:dd:8e:02:93:5f:26:34:fc:eb:1b:ac:6a:18:24: 05:a9:58:87:24:71:25:6b:89:18:80:37:7d:7a:99: a6:3b:6a:81:08:90:f9:a9:45:89:a9:99:ce:73:e5: c6:a2:69:67:10:5e:27:b2:51:df:3b:6d:1e:c2:6d: fe:17:57:1c:80:23:07:df:7f:ae:04:d7:db:1f:9d: ff:ff:6d:fd:70:f3:d7:3f:27:82:83:2a:49:de:62: b3:fc:8a:61:b4:26:27:88:5f:c4:49:e3:0e:83:3f: e9:e6:19:6a:5a:fe:db:00:40:7e:50:67:0e:bd:28: dc:c8:0c:f8:54:eb:f7:12:da:37:78:83:97:01:11: 7f:bf:e0:a0:27:12:d0:75:0f:7b:ae:27:ea:5b:28: d8:5b:6f:2d:89:1c:16:e6:84:43:11:5b:28:85:0b: 27:cb:7e:7f:fc:b1:31:8b:0c:de:d9:aa:88:0a:fb: 51:ad:5b:5d:2d:f9:73:07:60:94:0c:9b:2f:85:8f: 4f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:82:87:FC:C7:45:33:33:69:87:95:B3:BD:0E:DD:74:1D:9B:ED:3E X509v3 Authority Key Identifier: keyid:91:B3:F5:D6:F4:3E:83:07:1F:A7:7E:6D:3E:BB:B7:93:52:F9:61:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:a3:b9:88:ee:80:52:4d:c0:cc:8b:ea:16:81:22:12:7b:e7: 60:f1:21:4d:e4:7d:ff:1f:16:06:5d:70:ae:04:f2:73:1e:f9: 48:1e:a9:6b:18:c6:1e:e9:a3:0e:7f:4b:38:06:4a:d9:1a:27: 2d:3d:9b:1f:8f:29:84:14:f6:b4:4f:fe:1e:eb:4c:05:58:c7: e3:a7:49:e2:a3:ba:9e:21:4d:d0:02:39:29:46:13:ed:de:73: 06:66:b3:24:bf:9d:c5:d8:2d:46:5a:ae:ef:f6:07:c0:3e:2f: c3:19:e5:cc:5a:8a:4f:37:dc:fe:cc:2a:5b:47:17:a9:b4:f1: e6:1a:2a:3b:ac:f7:6f:22:dd:4d:58:03:24:d6:9f:08:d5:b5: 07:d2:ad:e6:af:42:c5:0f:49:ed:0c:06:bb:1a:74:a5:67:ae: 60:87:ba:48:81:9f:66:e4:e9:dc:68:90:6d:6f:e6:6d:8f:ca: 61:59:59:8a:c3:46:c7:3d:22:bb:16:4b:e7:12:2d:63:3b:57: 5c:5e:b6:7e:29:bb:09:2c:04:97:93:69:91:43:63:08:19:38: fa:a8:ab:00:69:a5:ff:bc:6e:82:a8:42:64:6e:e8:34:3b:52: 91:94:df:fe:03:57:f2:1b:12:c6:5d:bd:06:2e:80:c3:1e:9e: 8e:e1:57:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCgElilSzycVlg+H1FAEUSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxYjNmNWQ2ZjQzZTgzMDcxZmE3N2U2ZDNlYmJiNzkzNTJm OTYxYjUwHhcNMjUxMjIxMjAwMTAyWhcNMjUxMjIyMjAwMTAyWjAzMTEwLwYDVQQD EyhiNjgyODdmY2M3NDUzMzMzNjk4Nzk1YjNiZDBlZGQ3NDFkOWJlZDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mOsqI7lpsGuMF/rcmKWpGAa5iJb 4wE/WE3RiMwbBp655qb1rk1e+utmHch46PHAJ3zfmVAt9K6MCrU43Y4Ck18mNPzr G6xqGCQFqViHJHEla4kYgDd9epmmO2qBCJD5qUWJqZnOc+XGomlnEF4nslHfO20e wm3+F1ccgCMH33+uBNfbH53//239cPPXPyeCgypJ3mKz/IphtCYniF/ESeMOgz/p 5hlqWv7bAEB+UGcOvSjcyAz4VOv3Eto3eIOXARF/v+CgJxLQdQ97rifqWyjYW28t iRwW5oRDEVsohQsny35//LExiwze2aqICvtRrVtdLflzB2CUDJsvhY9PawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLaCh/zHRTMzaYeVs70O3XQdm+0+MB8GA1UdIwQY MBaAFJGz9db0PoMHH6d+bT67t5NS+WG1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2JQMTF2US1nd2NmcDM1dFBydTNrMUw1WWJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84N2E4NjMtZGE2Zi00OTgxLTkzNzgt YjJjZDRlNTgxMDBlLzEva2JQMTF2US1nd2NmcDM1dFBydTNrMUw1WWJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS84N2E4NjMtZGE2Zi00OTgxLTkzNzgtYjJjZDRlNTgxMDBl LzEva2JQMTF2US1nd2NmcDM1dFBydTNrMUw1WWJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACqO5iO6A Uk3AzIvqFoEiEnvnYPEhTeR9/x8WBl1wrgTycx75SB6paxjGHumjDn9LOAZK2Ron LT2bH48phBT2tE/+HutMBVjH46dJ4qO6niFN0AI5KUYT7d5zBmazJL+dxdgtRlqu 7/YHwD4vwxnlzFqKTzfc/swqW0cXqbTx5hoqO6z3byLdTVgDJNafCNW1B9Kt5q9C xQ9J7QwGuxp0pWeuYIe6SIGfZuTp3GiQbW/mbY/KYVlZisNGxz0iuxZL5xItYztX XF62fim7CSwEl5NpkUNjCBk4+qirAGml/7xugqhCZG7oNDtSkZTf/gNX8hsSxl29 Bi6Awx6ejuFXiw== -----END CERTIFICATE-----Generated at Mon Dec 22 06:11:46 2025 by rpki-client