This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft File: KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft (raw, json) Hash identifier: nCMV3FKzjnYq7z/c8WwTn17udWqKOHWv5EbbAu0veBc= Subject key identifier: 2A:AF:7B:C9:7B:95:9A:1C:4D:55:57:0D:CF:32:05:1B:F2:34:E9:00 Authority key identifier: 28:1A:0B:BF:52:D8:D2:D4:85:94:34:3A:55:40:9F:C1:0B:B7:B7:1A Certificate issuer: /CN=281a0bbf52d8d2d48594343a55409fc10bb7b71a Certificate serial: 019B4C27D80A7B483F1E25D442177C13C77E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft Manifest number: 1792 Signing time: Tue 23 Dec 2025 17:00:38 +0000 Manifest this update: Tue 23 Dec 2025 17:00:38 +0000 Manifest next update: Wed 24 Dec 2025 17:00:38 +0000 Files and hashes: 1: KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl (hash: +bib8TSG7YmCnLw7ovsdngBq+RGvNzOJIfXapRyaqH0=) 2: VL0JqwmqF16Z9vYeG0MjePH-HaI.roa (hash: pSsEMVRtkWy4MtHaQ+2yZDRrd+dgM8mCSpJI0iLDlbM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:27:d8:0a:7b:48:3f:1e:25:d4:42:17:7c:13:c7:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=281a0bbf52d8d2d48594343a55409fc10bb7b71a Validity Not Before: Dec 23 17:00:38 2025 GMT Not After : Dec 24 17:00:38 2025 GMT Subject: CN=2aaf7bc97b959a1c4d55570dcf32051bf234e900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cb:34:03:54:dd:ee:69:de:e9:75:ef:40:2c: aa:44:a3:c0:95:62:89:b2:90:11:79:45:f6:c4:1e: d9:03:5f:35:a2:2f:6c:88:74:90:96:92:bf:fd:de: 1c:3b:be:ec:1b:be:5a:08:f3:79:44:b8:7b:32:b5: c2:61:d6:61:d4:aa:d3:19:8a:ac:d4:f9:bf:b5:84: 9b:c7:73:53:bc:ca:3f:ce:63:f5:3e:c7:8c:0a:e8: 55:19:20:c6:1a:ac:d8:5f:d6:3d:37:1a:6e:74:d4: ff:5a:72:9a:20:ff:5e:78:ba:00:d5:b5:48:e6:9b: be:0c:6d:cc:59:fa:b8:9c:b9:ff:6e:94:f9:70:be: 2c:7b:31:6f:95:d8:ab:f8:74:e7:6f:58:30:4b:ab: 8c:a4:84:b5:2c:49:09:3a:be:2d:36:62:3b:19:e5: 46:1b:b9:68:61:9c:c7:26:ea:7e:4c:15:82:11:de: 8a:9e:63:a3:ef:11:b4:f2:e0:0a:65:5f:3f:a4:dd: f0:57:4c:d2:9a:19:1d:99:ee:8f:8f:6c:9c:ba:6a: f3:3c:33:e6:9b:65:fe:f1:ea:ab:a7:45:38:36:ef: 32:e1:a2:9c:43:5c:66:14:c8:05:cf:4b:0b:ab:f0: 55:48:82:e9:65:bb:5a:8e:fc:f1:f9:cc:1f:8b:1e: 9a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:AF:7B:C9:7B:95:9A:1C:4D:55:57:0D:CF:32:05:1B:F2:34:E9:00 X509v3 Authority Key Identifier: keyid:28:1A:0B:BF:52:D8:D2:D4:85:94:34:3A:55:40:9F:C1:0B:B7:B7:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:a1:96:6e:26:76:ef:3b:68:51:f1:ff:a1:bc:29:2e:12:bd: fe:13:05:7a:71:c3:fc:c7:da:2a:7c:f5:70:fc:d5:91:d7:11: aa:c3:55:1f:bf:e0:4b:e4:ef:0a:1d:2b:6a:ee:7f:f3:d7:81: 91:9c:d8:fe:ba:81:90:3b:69:71:cb:47:68:d9:d1:c7:29:67: 93:bd:6d:04:2d:56:db:74:af:b5:2d:00:9c:4f:8f:90:ad:89: 54:03:6c:02:93:bf:7f:3e:a4:ec:e8:e3:62:c7:ce:51:a3:79: 6f:f1:e9:fe:3a:c3:8f:e0:b3:ee:f2:ba:59:82:65:64:ac:5f: 43:cf:af:86:35:1c:2a:5c:4f:1a:c3:19:e3:43:82:08:21:49: 6f:bb:66:85:6a:55:69:7a:19:77:15:79:9a:22:1a:29:48:e3: 06:e5:3a:d7:09:3b:1e:05:0f:98:52:e4:96:27:fb:11:c3:b2: cf:63:17:de:63:b7:bc:13:45:d0:40:ed:85:12:2f:41:7b:35: 74:64:0b:ba:48:33:1c:08:b3:d8:4d:30:e4:dc:f9:db:f9:7d: 2d:dc:fc:b5:4a:fd:e6:ff:b8:35:bf:51:54:fb:8d:b7:9b:b8: 2f:f0:cf:bf:21:95:d3:4c:e8:dd:54:40:d6:97:f1:0f:ed:e7: 4b:d7:c7:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMJ9gKe0g/HiXUQhd8E8d+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MWEwYmJmNTJkOGQyZDQ4NTk0MzQzYTU1NDA5ZmMxMGJi N2I3MWEwHhcNMjUxMjIzMTcwMDM4WhcNMjUxMjI0MTcwMDM4WjAzMTEwLwYDVQQD EygyYWFmN2JjOTdiOTU5YTFjNGQ1NTU3MGRjZjMyMDUxYmYyMzRlOTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMs0A1Td7mne6XXvQCyqRKPAlWKJ spAReUX2xB7ZA181oi9siHSQlpK//d4cO77sG75aCPN5RLh7MrXCYdZh1KrTGYqs 1Pm/tYSbx3NTvMo/zmP1PseMCuhVGSDGGqzYX9Y9NxpudNT/WnKaIP9eeLoA1bVI 5pu+DG3MWfq4nLn/bpT5cL4sezFvldir+HTnb1gwS6uMpIS1LEkJOr4tNmI7GeVG G7loYZzHJup+TBWCEd6KnmOj7xG08uAKZV8/pN3wV0zSmhkdme6Pj2ycumrzPDPm m2X+8eqrp0U4Nu8y4aKcQ1xmFMgFz0sLq/BVSILpZbtajvzx+cwfix6aXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCqve8l7lZocTVVXDc8yBRvyNOkAMB8GA1UdIwQY MBaAFCgaC79S2NLUhZQ0OlVAn8ELt7caMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0JvTHYxTFkwdFNGbERRNlZVQ2Z3UXUzdHhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8zZjUxNTQtNjNkOC00YTRiLTlhNDgt MWM5YzRhMWJiZDQzLzEvS0JvTHYxTFkwdFNGbERRNlZVQ2Z3UXUzdHhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS8zZjUxNTQtNjNkOC00YTRiLTlhNDgtMWM5YzRhMWJiZDQz LzEvS0JvTHYxTFkwdFNGbERRNlZVQ2Z3UXUzdHhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA6GWbiZ2 7ztoUfH/obwpLhK9/hMFenHD/MfaKnz1cPzVkdcRqsNVH7/gS+TvCh0rau5/89eB kZzY/rqBkDtpcctHaNnRxylnk71tBC1W23SvtS0AnE+PkK2JVANsApO/fz6k7Ojj YsfOUaN5b/Hp/jrDj+Cz7vK6WYJlZKxfQ8+vhjUcKlxPGsMZ40OCCCFJb7tmhWpV aXoZdxV5miIaKUjjBuU61wk7HgUPmFLklif7EcOyz2MX3mO3vBNF0EDthRIvQXs1 dGQLukgzHAiz2E0w5Nz52/l9Ldz8tUr95v+4Nb9RVPuNt5u4L/DPvyGV00zo3VRA 1pfxD+3nS9fHXw== -----END CERTIFICATE-----Generated at Tue Dec 23 22:24:56 2025 by rpki-client