This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft File: E-KBR1t7-ND6H2adWtLeFjXowE8.mft (raw, json) Hash identifier: aIrfcvrdyafGjmur+AfdOJqpkJa89m1hmdwbV5cGyE4= Subject key identifier: DD:A0:94:36:0C:50:D5:54:8B:F2:A2:D1:D7:DF:34:AD:09:6A:62:F3 Authority key identifier: 13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F Certificate issuer: /CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f Certificate serial: 019B3BA21CC827696284E16A6B8E4541D061 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft Manifest number: 1355 Signing time: Sat 20 Dec 2025 12:00:38 +0000 Manifest this update: Sat 20 Dec 2025 12:00:38 +0000 Manifest next update: Sun 21 Dec 2025 12:00:38 +0000 Files and hashes: 1: Cbgx-BQbS0FHwmRsgonuP_y0uIw.roa (hash: LCGI3/5d7XNi/Gu71Peh/rfncJ6J664qZ+UlhSx3wTg=) 2: E-KBR1t7-ND6H2adWtLeFjXowE8.crl (hash: s48FJcCmx/3L5Z6Xxnc4Z0XkQZBeHfnaMliUJjpLrf4=) 3: OJiEpuu19DL0DK8EqfynqGFXkQQ.roa (hash: qdWhWnRWtAIkyoxDYPJOupy3MISxIyqCu/0vET2RQjw=) 4: RV4nVFIosillQgPXUi3Rb-YOGqE.roa (hash: 0C9sINAaIPU+479WwDvqzeKATHZb5hKHHasDy8WJ6tA=) 5: W5VQv-ze_wds3sZaktK1dB3TlqA.roa (hash: 3Qbtjb177rcscniRobuAC/Kh8GJ/smUC+jFvjdESqGQ=) 6: pN5SnkQN19ou2x5UZOfTyn6_Rb0.roa (hash: KbWqEMgAWb6IcUnuvD0+WC5dIqXTlJgmk7uOCLNfK1M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:1c:c8:27:69:62:84:e1:6a:6b:8e:45:41:d0:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f Validity Not Before: Dec 20 12:00:38 2025 GMT Not After : Dec 21 12:00:38 2025 GMT Subject: CN=dda094360c50d5548bf2a2d1d7df34ad096a62f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:40:8c:ba:ac:90:ba:2e:d7:b8:34:40:35:0a: c3:6e:ce:4d:38:c9:d2:b4:1a:e4:7c:36:7d:4d:2f: 82:dc:43:27:47:a5:c4:da:15:c7:a2:f1:c5:40:b7: cd:44:82:fd:a2:32:d3:ec:b2:b9:91:2f:20:bc:1b: 2c:02:fb:3e:8c:2a:2a:bc:e3:f9:e3:3c:e4:02:2d: 1f:e2:a7:a0:cd:76:bc:f7:66:c8:63:58:74:8d:c0: 20:7c:66:e8:da:ca:2b:b0:0c:17:83:a1:ca:0c:11: 45:de:5e:98:4c:f2:1a:d7:60:6f:ad:a3:19:2e:a8: 7d:86:b8:2e:ed:7d:37:e1:5a:ec:01:01:2e:53:68: df:42:05:ac:ff:96:77:21:06:d9:53:ee:e0:c5:5d: 28:8e:81:9c:e8:79:1b:89:ed:e7:89:dd:5b:d4:b4: 74:0a:58:2d:54:8a:aa:b4:50:cd:80:35:78:aa:b6: 29:a7:20:00:dd:9a:22:82:df:02:b5:89:a1:2a:11: 6e:7d:cb:b2:9c:e3:a6:a4:53:5a:2a:91:43:c2:f3: 31:36:53:d2:56:ad:44:38:2a:de:f8:b8:f5:17:f5: a4:ca:8e:d5:07:58:d6:e2:c8:1e:95:38:9d:f0:70: 66:c1:e5:6a:18:c4:d6:1d:58:92:f0:5a:3c:8a:0e: 1a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A0:94:36:0C:50:D5:54:8B:F2:A2:D1:D7:DF:34:AD:09:6A:62:F3 X509v3 Authority Key Identifier: keyid:13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:2b:eb:53:e6:e4:bd:b2:0c:7e:05:b2:66:c4:e9:da:a7:a9: 84:31:63:49:29:52:b2:67:f8:c8:50:a7:31:38:8e:51:47:df: 29:86:46:eb:66:f8:24:c6:b0:bc:5e:b3:20:6b:df:41:e8:89: ff:e6:9b:7d:2a:a6:75:76:15:e8:7e:be:4b:bc:5c:81:dd:e0: b2:8b:f1:4e:7c:1e:97:dd:15:11:c7:ab:4d:4a:c4:b5:2a:a2: 1d:ca:3d:90:0c:77:20:29:a1:9c:ad:58:a3:06:c9:3d:84:1c: 01:77:a2:20:da:c9:a8:29:ee:8a:59:6e:c6:64:4f:68:f7:95: e1:13:e4:38:4a:66:cf:2f:eb:c2:14:c8:f6:c6:3f:0e:7e:99: 9c:51:67:81:29:61:dd:74:4e:f5:e7:91:f6:c3:f1:18:8a:67: 3d:6d:10:99:e2:33:d9:5e:7b:38:82:12:d6:ec:79:89:ea:1a: bb:c8:b0:70:21:cd:05:dd:57:5e:de:58:49:96:c6:40:cb:68: 1a:57:1d:af:19:df:e7:f6:a9:a9:d3:b0:3b:55:15:34:56:d3: c7:ef:dd:97:03:47:2e:0c:b3:5e:6f:04:0e:e6:77:a6:77:b3: 79:b9:23:e9:7c:d2:5e:7f:87:0c:1d:22:e5:07:c4:73:d2:3e: dd:07:cc:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ohzIJ2lihOFqa45FQdBhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZTI4MTQ3NWI3YmY4ZDBmYTFmNjY5ZDVhZDJkZTE2MzVl OGMwNGYwHhcNMjUxMjIwMTIwMDM4WhcNMjUxMjIxMTIwMDM4WjAzMTEwLwYDVQQD EyhkZGEwOTQzNjBjNTBkNTU0OGJmMmEyZDFkN2RmMzRhZDA5NmE2MmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0CMuqyQui7XuDRANQrDbs5NOMnS tBrkfDZ9TS+C3EMnR6XE2hXHovHFQLfNRIL9ojLT7LK5kS8gvBssAvs+jCoqvOP5 4zzkAi0f4qegzXa892bIY1h0jcAgfGbo2sorsAwXg6HKDBFF3l6YTPIa12BvraMZ Lqh9hrgu7X034VrsAQEuU2jfQgWs/5Z3IQbZU+7gxV0ojoGc6Hkbie3nid1b1LR0 ClgtVIqqtFDNgDV4qrYppyAA3Zoigt8CtYmhKhFufcuynOOmpFNaKpFDwvMxNlPS Vq1EOCre+Lj1F/Wkyo7VB1jW4sgelTid8HBmweVqGMTWHViS8Fo8ig4auwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN2glDYMUNVUi/Ki0dffNK0JamLzMB8GA1UdIwQY MBaAFBPigUdbe/jQ+h9mnVrS3hY16MBPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRS1LQlIxdDctTkQ2SDJhZFd0TGVGalhvd0U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8wNWI1ZDgtNDU0MS00OGE5LThjMGEt NDRmZDA0MzkzZTJiLzEvRS1LQlIxdDctTkQ2SDJhZFd0TGVGalhvd0U4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS8wNWI1ZDgtNDU0MS00OGE5LThjMGEtNDRmZDA0MzkzZTJi LzEvRS1LQlIxdDctTkQ2SDJhZFd0TGVGalhvd0U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmivrU+bk vbIMfgWyZsTp2qephDFjSSlSsmf4yFCnMTiOUUffKYZG62b4JMawvF6zIGvfQeiJ /+abfSqmdXYV6H6+S7xcgd3gsovxTnwel90VEcerTUrEtSqiHco9kAx3ICmhnK1Y owbJPYQcAXeiINrJqCnuilluxmRPaPeV4RPkOEpmzy/rwhTI9sY/Dn6ZnFFngSlh 3XRO9eeR9sPxGIpnPW0QmeIz2V57OIIS1ux5ieoau8iwcCHNBd1XXt5YSZbGQMto Glcdrxnf5/apqdOwO1UVNFbTx+/dlwNHLgyzXm8EDuZ3pnezebkj6XzSXn+HDB0i 5QfEc9I+3QfMow== -----END CERTIFICATE-----Generated at Sat Dec 20 13:18:46 2025 by rpki-client