This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft File: kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft (raw, json) Hash identifier: hzDkbbcAD36IjGDFlShbGqctpe3zdihOvUVvhfVbmTs= Subject key identifier: C3:2A:0A:BB:EC:C6:D3:A7:0B:84:F4:02:6E:F4:80:77:52:90:60:09 Authority key identifier: 92:F8:56:22:E2:2F:C9:6C:EA:CF:73:11:4D:89:0F:4F:3A:A7:D4:95 Certificate issuer: /CN=92f85622e22fc96ceacf73114d890f4f3aa7d495 Certificate serial: 019B2D0CBB703B3BAB8E8B95CA10AE6C8316 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft Manifest number: 0E9B Signing time: Wed 17 Dec 2025 16:02:47 +0000 Manifest this update: Wed 17 Dec 2025 16:02:47 +0000 Manifest next update: Thu 18 Dec 2025 16:02:47 +0000 Files and hashes: 1: kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl (hash: aiCe4yXyIcHPre1AeLmlBPtC8QzSp5cJ62nMRuOvmuE=) 2: o0NNJAdQ09Zlx7io8L7w4JsxeRk.roa (hash: GHDYyjn7cWOGvu2PuaUkyCHLa21ud2IleT+Ydwgziyc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 16:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0c:bb:70:3b:3b:ab:8e:8b:95:ca:10:ae:6c:83:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92f85622e22fc96ceacf73114d890f4f3aa7d495 Validity Not Before: Dec 17 16:02:47 2025 GMT Not After : Dec 18 16:02:47 2025 GMT Subject: CN=c32a0abbecc6d3a70b84f4026ef4807752906009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:34:41:eb:02:fc:51:54:56:ee:3d:50:91:ee: 24:5e:61:dc:69:59:1b:5c:2c:1e:f0:6a:6d:ec:7e: b0:10:d5:b4:d6:d8:dd:14:d0:77:23:1a:62:c9:a7: e3:29:f0:95:c7:44:8f:7f:6a:90:ce:9e:2c:5c:f6: db:37:13:c3:c8:91:25:59:64:7e:92:d9:08:d4:55: b2:a9:c1:90:32:90:21:1b:94:78:a3:2b:51:84:a5: 1e:e3:ff:44:54:65:10:b4:1e:10:95:26:e4:11:f8: 75:20:6f:b3:5a:78:a0:05:d4:1d:88:50:9b:99:41: b5:51:73:75:9a:b6:5b:9e:65:58:5d:30:88:7f:94: f6:c3:8a:96:fe:9f:0c:bc:00:f9:9e:92:05:ad:fb: 71:5f:fa:0c:11:89:16:11:e0:ae:c5:46:22:dd:59: 8f:cd:71:98:68:e6:96:cd:4d:1d:94:b3:68:03:27: 64:55:9a:01:24:be:4e:88:21:d3:c3:89:7c:37:37: d7:3c:5c:7b:80:e2:22:a0:4e:3c:49:6f:4b:a0:5f: e1:74:07:4b:b4:fa:79:70:5f:3b:ac:5e:31:56:76: 27:b6:fa:99:fa:93:69:96:80:a6:fc:f3:3d:a8:dc: 6b:e4:1b:97:8e:95:69:07:2a:b5:ea:7d:80:45:db: 2c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:2A:0A:BB:EC:C6:D3:A7:0B:84:F4:02:6E:F4:80:77:52:90:60:09 X509v3 Authority Key Identifier: keyid:92:F8:56:22:E2:2F:C9:6C:EA:CF:73:11:4D:89:0F:4F:3A:A7:D4:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:da:87:61:41:8c:f5:78:21:b5:a7:8b:79:51:d7:1b:99:fe: 39:4a:5d:db:6e:5a:40:c7:3e:d7:c0:da:7d:86:70:9f:7f:f1: 4d:e3:81:1b:c8:ae:bf:01:23:6f:0b:30:32:62:44:e5:ad:0b: 79:39:51:69:96:4c:db:f8:76:75:0d:23:c4:a1:b3:8c:82:f7: cd:e5:5b:cc:fa:8d:15:32:f9:2b:0e:ee:fa:bf:26:07:fc:5c: 08:6b:d4:2b:18:97:21:ad:6d:f9:9f:06:65:40:d2:cb:f0:17: 40:bc:4e:34:a8:aa:f6:c7:95:c5:19:f6:0e:ea:9b:8c:4d:19: a6:8b:03:9f:b2:c4:17:b6:ce:d5:e9:f6:f4:7f:49:03:d9:b1: 2f:0f:03:27:1a:78:7b:3c:c0:60:2d:d6:71:ae:d9:39:c9:07: 68:b2:a6:b4:0d:d0:97:eb:cc:7e:81:28:76:fd:6c:ec:2e:51: dc:91:27:12:8d:2e:ea:74:44:4b:35:3c:e8:d5:ad:cf:76:05: 6b:9e:c3:55:4e:cd:42:78:fa:d7:74:32:b4:5b:6b:31:05:c3: 8e:d6:e8:ce:69:4a:86:8c:04:eb:f1:d3:9a:9e:ea:e3:2f:e9: f6:34:99:0c:53:1c:0f:a0:e9:19:6f:95:9e:ac:64:83:5d:06: 8d:15:5f:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstDLtwOzurjouVyhCubIMWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZjg1NjIyZTIyZmM5NmNlYWNmNzMxMTRkODkwZjRmM2Fh N2Q0OTUwHhcNMjUxMjE3MTYwMjQ3WhcNMjUxMjE4MTYwMjQ3WjAzMTEwLwYDVQQD EyhjMzJhMGFiYmVjYzZkM2E3MGI4NGY0MDI2ZWY0ODA3NzUyOTA2MDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+jRB6wL8UVRW7j1Qke4kXmHcaVkb XCwe8Gpt7H6wENW01tjdFNB3IxpiyafjKfCVx0SPf2qQzp4sXPbbNxPDyJElWWR+ ktkI1FWyqcGQMpAhG5R4oytRhKUe4/9EVGUQtB4QlSbkEfh1IG+zWnigBdQdiFCb mUG1UXN1mrZbnmVYXTCIf5T2w4qW/p8MvAD5npIFrftxX/oMEYkWEeCuxUYi3VmP zXGYaOaWzU0dlLNoAydkVZoBJL5OiCHTw4l8NzfXPFx7gOIioE48SW9LoF/hdAdL tPp5cF87rF4xVnYntvqZ+pNploCm/PM9qNxr5BuXjpVpByq16n2ARdss4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMMqCrvsxtOnC4T0Am70gHdSkGAJMB8GA1UdIwQY MBaAFJL4ViLiL8ls6s9zEU2JD086p9SVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3ZoV0l1SXZ5V3pxejNNUlRZa1BUenFuMUpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8xMDAwZWItZmZkMC00ZmUzLWI3YWYt MDczOGMyMzM0ZTdmLzEva3ZoV0l1SXZ5V3pxejNNUlRZa1BUenFuMUpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8xMDAwZWItZmZkMC00ZmUzLWI3YWYtMDczOGMyMzM0ZTdm LzEva3ZoV0l1SXZ5V3pxejNNUlRZa1BUenFuMUpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPNqHYUGM 9XghtaeLeVHXG5n+OUpd225aQMc+18DafYZwn3/xTeOBG8iuvwEjbwswMmJE5a0L eTlRaZZM2/h2dQ0jxKGzjIL3zeVbzPqNFTL5Kw7u+r8mB/xcCGvUKxiXIa1t+Z8G ZUDSy/AXQLxONKiq9seVxRn2DuqbjE0ZposDn7LEF7bO1en29H9JA9mxLw8DJxp4 ezzAYC3Wca7ZOckHaLKmtA3Ql+vMfoEodv1s7C5R3JEnEo0u6nRESzU86NWtz3YF a57DVU7NQnj613QytFtrMQXDjtbozmlKhowE6/HTmp7q4y/p9jSZDFMcD6DpGW+V nqxkg10GjRVfXw== -----END CERTIFICATE-----Generated at Wed Dec 17 22:07:43 2025 by rpki-client