This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft File: KV2FhrHf5iE-CywdK__BssjTUc8.mft (raw, json) Hash identifier: CSc/r15efKZG/icCoMiavDeucwiywWVQaWbii0hb++8= Subject key identifier: 35:45:E7:46:2B:4E:7A:68:B9:97:AF:C5:CC:21:0A:30:D8:BD:21:38 Authority key identifier: 29:5D:85:86:B1:DF:E6:21:3E:0B:2C:1D:2B:FF:C1:B2:C8:D3:51:CF Certificate issuer: /CN=295d8586b1dfe6213e0b2c1d2bffc1b2c8d351cf Certificate serial: 019B255329BD0096F38F646519C85905FE06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KV2FhrHf5iE-CywdK__BssjTUc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft Manifest number: 11 Signing time: Tue 16 Dec 2025 04:02:45 +0000 Manifest this update: Tue 16 Dec 2025 04:02:45 +0000 Manifest next update: Wed 17 Dec 2025 04:02:45 +0000 Files and hashes: 1: KV2FhrHf5iE-CywdK__BssjTUc8.crl (hash: ByKU9fnsqiyObYk0g5KW7W0RgCvHsvZ9haruc36PF/0=) 2: RMsG8pQVuDko30N-hzzT26RjJ9Y.asa (hash: yi02C4KYzTGBREJtJL0ti8csY3NPFrvUw9hF+6s7XDg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft rsync://rpki.ripe.net/repository/DEFAULT/KV2FhrHf5iE-CywdK__BssjTUc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 04:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:53:29:bd:00:96:f3:8f:64:65:19:c8:59:05:fe:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295d8586b1dfe6213e0b2c1d2bffc1b2c8d351cf Validity Not Before: Dec 16 04:02:45 2025 GMT Not After : Dec 17 04:02:45 2025 GMT Subject: CN=3545e7462b4e7a68b997afc5cc210a30d8bd2138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:14:1b:f1:bc:27:c0:69:43:1b:67:c4:83:86: ee:9e:77:ad:43:88:98:7e:6f:59:ce:35:9f:8a:ba: d8:fb:2f:b2:b8:1a:06:8a:56:b0:0e:27:e4:93:bf: 2c:39:0c:01:ee:3e:4d:7b:e7:e3:98:5d:05:b0:39: fa:9f:a1:80:28:7c:92:bd:6c:f6:fb:84:bd:26:a8: f6:b5:e5:ab:bc:f8:71:75:d6:4d:c1:87:55:9e:33: 5b:38:9d:3b:fe:5c:35:ba:85:dc:f8:6a:e0:9c:4a: f7:36:9d:0e:69:43:43:55:c9:58:82:99:4f:fe:58: b5:3d:33:9d:d1:70:39:fc:75:db:50:4a:1e:3e:02: d2:80:ca:bd:cc:53:98:8a:e2:bd:87:cd:ed:65:4c: 6b:4a:6b:69:a3:c7:de:b2:c5:05:8b:29:d0:3f:2b: 89:38:c4:ac:e8:d8:53:d0:70:ba:4f:6b:56:9b:0f: 35:0b:f1:68:31:42:ba:01:0b:49:93:b7:5e:f9:bc: 35:12:7f:c1:4f:96:60:e6:62:83:41:f8:83:bc:e9: 23:5e:a8:a7:41:44:43:b5:55:32:ab:42:4d:64:66: bd:53:cf:dc:6b:c5:7a:bc:3d:fe:a4:8b:f2:4a:25: 46:58:91:31:3d:38:d6:f4:c1:68:dd:ea:b6:70:2b: 7d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:45:E7:46:2B:4E:7A:68:B9:97:AF:C5:CC:21:0A:30:D8:BD:21:38 X509v3 Authority Key Identifier: keyid:29:5D:85:86:B1:DF:E6:21:3E:0B:2C:1D:2B:FF:C1:B2:C8:D3:51:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KV2FhrHf5iE-CywdK__BssjTUc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:91:b7:7a:09:fc:46:9b:a8:91:46:a9:66:bd:ea:e6:ac:fa: ce:0d:84:93:8e:4e:c7:ea:b5:91:94:8c:b5:cb:e5:71:4f:2c: 7a:d8:c3:10:ef:43:e7:00:06:a5:00:15:cd:dc:6a:ab:86:91: 49:b6:4d:f5:70:0c:e8:f1:82:09:76:cd:2a:5b:b4:44:a2:c4: 57:69:9d:5c:3e:35:99:90:d2:b9:2c:34:b4:89:8a:6e:49:b8: 4c:c5:69:8d:4f:03:d9:63:7f:38:15:02:67:0e:95:a8:c4:f3: 8d:d9:3c:42:35:89:28:6b:d5:4b:ab:f3:b5:c9:bb:f5:3f:09: b6:22:99:34:2d:59:29:d3:e7:00:ea:e0:d4:51:ed:54:60:36: 94:dc:24:3e:f8:91:72:f1:c9:ac:2c:8e:56:1f:69:5f:21:02: 5f:9d:00:f7:6d:4b:25:f9:50:38:60:3a:89:fd:30:2c:af:80: 30:42:88:37:31:d3:05:c7:34:77:d7:a9:e8:40:c0:25:46:e4: e2:94:94:89:74:a0:1e:d0:9b:fb:a0:af:1f:3c:b4:0b:4e:c5: a6:53:08:47:44:c4:8c:26:18:28:e8:57:47:95:bb:2e:0a:56: 75:8b:e9:a4:bf:13:66:cb:75:c1:ab:5e:ba:a3:be:8c:99:d0: 37:2f:44:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUym9AJbzj2RlGchZBf4GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NWQ4NTg2YjFkZmU2MjEzZTBiMmMxZDJiZmZjMWIyYzhk MzUxY2YwHhcNMjUxMjE2MDQwMjQ1WhcNMjUxMjE3MDQwMjQ1WjAzMTEwLwYDVQQD EygzNTQ1ZTc0NjJiNGU3YTY4Yjk5N2FmYzVjYzIxMGEzMGQ4YmQyMTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRQb8bwnwGlDG2fEg4bunnetQ4iY fm9ZzjWfirrY+y+yuBoGilawDifkk78sOQwB7j5Ne+fjmF0FsDn6n6GAKHySvWz2 +4S9Jqj2teWrvPhxddZNwYdVnjNbOJ07/lw1uoXc+GrgnEr3Np0OaUNDVclYgplP /li1PTOd0XA5/HXbUEoePgLSgMq9zFOYiuK9h83tZUxrSmtpo8fessUFiynQPyuJ OMSs6NhT0HC6T2tWmw81C/FoMUK6AQtJk7de+bw1En/BT5Zg5mKDQfiDvOkjXqin QURDtVUyq0JNZGa9U8/ca8V6vD3+pIvySiVGWJExPTjW9MFo3eq2cCt9awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDVF50YrTnpouZevxcwhCjDYvSE4MB8GA1UdIwQY MBaAFCldhYax3+YhPgssHSv/wbLI01HPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1YyRmhySGY1aUUtQ3l3ZEtfX0Jzc2pUVWM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC83YzM2NTQtNTcwZi00NTQ0LWFkZWIt NjZiYjMwYzI3YmMxLzEvS1YyRmhySGY1aUUtQ3l3ZEtfX0Jzc2pUVWM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC83YzM2NTQtNTcwZi00NTQ0LWFkZWItNjZiYjMwYzI3YmMx LzEvS1YyRmhySGY1aUUtQ3l3ZEtfX0Jzc2pUVWM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI5G3egn8 RpuokUapZr3q5qz6zg2Ek45Ox+q1kZSMtcvlcU8setjDEO9D5wAGpQAVzdxqq4aR SbZN9XAM6PGCCXbNKlu0RKLEV2mdXD41mZDSuSw0tImKbkm4TMVpjU8D2WN/OBUC Zw6VqMTzjdk8QjWJKGvVS6vztcm79T8JtiKZNC1ZKdPnAOrg1FHtVGA2lNwkPviR cvHJrCyOVh9pXyECX50A921LJflQOGA6if0wLK+AMEKINzHTBcc0d9ep6EDAJUbk 4pSUiXSgHtCb+6CvHzy0C07FplMIR0TEjCYYKOhXR5W7LgpWdYvppL8TZst1wate uqO+jJnQNy9EuQ== -----END CERTIFICATE-----Generated at Tue Dec 16 12:41:37 2025 by rpki-client