This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft File: KVV59bZz2-LrujSM-w9WEkzecEg.mft (raw, json) Hash identifier: cHutkoh2zyA3sH+3rNtV6jXwuvwxWMnFP1H3D4eeE38= Subject key identifier: D9:62:43:D2:6F:51:D9:C7:25:0B:6D:C6:4B:91:7E:B3:47:A7:E7:59 Authority key identifier: 29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48 Certificate issuer: /CN=295579f5b673dbe2ebba348cfb0f56124cde7048 Certificate serial: 019B39EB4DEE8EFE966D0DCA683620C0B282 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 04:01:20 +0000 Manifest this update: Sat 20 Dec 2025 04:01:20 +0000 Manifest next update: Sun 21 Dec 2025 04:01:20 +0000 Files and hashes: 1: GLETZPGAzgEdqr3_Ju2Hw5dfeCc.roa (hash: 1ZSMTZbayji0IpT4/tlfR8iOgQX8cgSQ3hZYI5R5pYA=) 2: JVzuM8B6ofXxJRTwKSOh4uQnHZ8.roa (hash: 6kzBk5+13Ftt6UqtqHrn3x6NbCUjc2KzWe2+5j/AkQM=) 3: KVV59bZz2-LrujSM-w9WEkzecEg.crl (hash: X62r8ICV5Xn1Tetp1PLL4UI+ZmPkyJAqpnXw0KfBBQM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:4d:ee:8e:fe:96:6d:0d:ca:68:36:20:c0:b2:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295579f5b673dbe2ebba348cfb0f56124cde7048 Validity Not Before: Dec 20 04:01:20 2025 GMT Not After : Dec 21 04:01:20 2025 GMT Subject: CN=d96243d26f51d9c7250b6dc64b917eb347a7e759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:76:10:a7:9c:c5:e7:94:e7:3e:67:65:b5:43: 1e:72:d4:6b:88:1f:dd:a9:81:8e:a7:f7:a2:38:ab: 68:2b:5a:13:02:94:34:27:9e:16:17:15:76:75:e9: 80:4b:76:14:80:9c:35:76:1d:60:d0:fc:3f:20:e9: df:a1:f7:1b:c8:ff:a2:e7:bf:64:a9:55:33:97:c3: 7f:3d:c2:be:b7:87:61:f5:a1:78:fb:13:b2:9a:c0: 63:af:90:38:b9:0f:57:0f:cf:8d:02:23:a6:ff:fa: 4c:68:c3:1f:53:d7:80:72:89:f7:4a:cd:31:87:47: ab:b9:f2:c1:24:b0:72:04:1f:b2:49:d2:9b:3e:fd: 09:d0:c4:4d:a5:60:84:22:a9:fe:7b:4a:15:cf:2a: 02:a4:7a:8c:30:4e:f2:2b:69:b3:78:9b:c6:40:ce: 54:92:74:74:85:61:08:e7:3b:6c:4d:ec:49:57:97: a2:0e:f8:f2:e1:83:68:e4:75:df:31:a2:88:ec:36: b1:20:28:61:cf:5b:c9:86:cc:e3:6f:34:49:12:62: ba:58:83:9d:74:21:5d:50:11:9e:f5:82:fc:0a:e8: 11:69:b6:c0:c3:b1:60:03:ec:f3:39:3e:9f:23:6d: 74:b8:6d:0e:7e:9f:fd:f2:d9:1d:a5:03:67:94:95: cf:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:62:43:D2:6F:51:D9:C7:25:0B:6D:C6:4B:91:7E:B3:47:A7:E7:59 X509v3 Authority Key Identifier: keyid:29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:20:7e:07:8f:e3:1a:f5:5d:9e:dc:8f:6e:ff:87:84:c2:b3: 1e:be:3e:ab:e1:99:21:8d:89:33:e6:33:06:ca:7c:16:5a:07: 93:49:4e:10:29:a8:64:8f:97:2c:1b:60:a3:3a:6b:b2:1f:79: 99:b7:57:43:40:0a:e8:c5:da:d8:4f:95:76:e4:7b:ce:5a:a9: d4:75:d8:8b:b4:9d:47:48:21:8f:a2:d1:4e:f9:99:a5:b4:50: 18:a3:e9:12:34:3a:88:0b:e4:92:f8:15:4e:41:8b:32:b2:bf: 7c:09:30:57:1c:02:f6:88:81:86:13:50:3f:fa:27:aa:24:ea: 17:27:a1:c5:9b:7d:3f:b7:aa:07:6b:aa:b0:ca:41:fd:09:be: c9:0b:dd:1a:04:54:5a:7e:04:9c:06:e9:dd:28:eb:da:c8:31: 5c:c2:b4:36:3b:70:a8:b1:21:69:c4:b2:4d:cc:08:75:dc:42: d2:bc:5a:db:6b:b3:3c:2e:b3:72:0c:e1:0f:7c:51:37:fa:11: 8b:03:80:31:db:78:1b:53:a4:d8:38:71:f7:12:5d:f0:9a:ff: d1:e9:58:e7:3c:69:1b:07:67:84:57:94:1f:12:39:3f:4d:74: 26:56:01:0c:66:bc:d6:2a:38:eb:a1:9c:fa:09:ab:5e:f2:ea: 08:f7:8e:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5603ujv6WbQ3KaDYgwLKCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NTU3OWY1YjY3M2RiZTJlYmJhMzQ4Y2ZiMGY1NjEyNGNk ZTcwNDgwHhcNMjUxMjIwMDQwMTIwWhcNMjUxMjIxMDQwMTIwWjAzMTEwLwYDVQQD EyhkOTYyNDNkMjZmNTFkOWM3MjUwYjZkYzY0YjkxN2ViMzQ3YTdlNzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXYQp5zF55TnPmdltUMectRriB/d qYGOp/eiOKtoK1oTApQ0J54WFxV2demAS3YUgJw1dh1g0Pw/IOnfofcbyP+i579k qVUzl8N/PcK+t4dh9aF4+xOymsBjr5A4uQ9XD8+NAiOm//pMaMMfU9eAcon3Ss0x h0erufLBJLByBB+ySdKbPv0J0MRNpWCEIqn+e0oVzyoCpHqMME7yK2mzeJvGQM5U knR0hWEI5ztsTexJV5eiDvjy4YNo5HXfMaKI7DaxIChhz1vJhszjbzRJEmK6WIOd dCFdUBGe9YL8CugRabbAw7FgA+zzOT6fI210uG0Ofp/98tkdpQNnlJXPNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNliQ9JvUdnHJQttxkuRfrNHp+dZMB8GA1UdIwQY MBaAFClVefW2c9vi67o0jPsPVhJM3nBIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1ZWNTliWnoyLUxydWpTTS13OVdFa3plY0VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8xNTc0YzktMDFkNS00OGZkLTk4MGYt MzQzYzRkMjRjMjNiLzEvS1ZWNTliWnoyLUxydWpTTS13OVdFa3plY0VnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS8xNTc0YzktMDFkNS00OGZkLTk4MGYtMzQzYzRkMjRjMjNi LzEvS1ZWNTliWnoyLUxydWpTTS13OVdFa3plY0VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABiB+B4/j GvVdntyPbv+HhMKzHr4+q+GZIY2JM+YzBsp8FloHk0lOECmoZI+XLBtgozprsh95 mbdXQ0AK6MXa2E+VduR7zlqp1HXYi7SdR0ghj6LRTvmZpbRQGKPpEjQ6iAvkkvgV TkGLMrK/fAkwVxwC9oiBhhNQP/onqiTqFyehxZt9P7eqB2uqsMpB/Qm+yQvdGgRU Wn4EnAbp3Sjr2sgxXMK0NjtwqLEhacSyTcwIddxC0rxa22uzPC6zcgzhD3xRN/oR iwOAMdt4G1Ok2Dhx9xJd8Jr/0elY5zxpGwdnhFeUHxI5P010JlYBDGa81io466Gc +gmrXvLqCPeOMQ== -----END CERTIFICATE-----Generated at Sat Dec 20 07:29:29 2025 by rpki-client