This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft File: KVV59bZz2-LrujSM-w9WEkzecEg.mft (raw, json) Hash identifier: amPEN4fJ0bZw/O86ijX4L5TC4SNqmWSk1KvNyTQBB44= Subject key identifier: 5A:95:31:0A:91:E1:22:BA:42:35:B9:F5:42:EC:F5:36:4D:1B:DF:FB Authority key identifier: 29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48 Certificate issuer: /CN=295579f5b673dbe2ebba348cfb0f56124cde7048 Certificate serial: 019B3BD9AC0CD91FE604A704E0F1611646CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 13:01:19 +0000 Manifest this update: Sat 20 Dec 2025 13:01:19 +0000 Manifest next update: Sun 21 Dec 2025 13:01:19 +0000 Files and hashes: 1: GLETZPGAzgEdqr3_Ju2Hw5dfeCc.roa (hash: 1ZSMTZbayji0IpT4/tlfR8iOgQX8cgSQ3hZYI5R5pYA=) 2: JVzuM8B6ofXxJRTwKSOh4uQnHZ8.roa (hash: 6kzBk5+13Ftt6UqtqHrn3x6NbCUjc2KzWe2+5j/AkQM=) 3: KVV59bZz2-LrujSM-w9WEkzecEg.crl (hash: 2tpiyyAXOMZ+WhnCZcR/qcAOkg/FkMeehSwmc/9jHdw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:ac:0c:d9:1f:e6:04:a7:04:e0:f1:61:16:46:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295579f5b673dbe2ebba348cfb0f56124cde7048 Validity Not Before: Dec 20 13:01:19 2025 GMT Not After : Dec 21 13:01:19 2025 GMT Subject: CN=5a95310a91e122ba4235b9f542ecf5364d1bdffb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:80:3e:52:f2:b4:ed:2e:18:82:16:f7:72:82: 01:5e:45:55:3b:6c:bc:77:16:7b:5b:94:10:fe:8a: 4b:d6:3c:3f:b3:29:8d:62:a1:79:6e:7e:e2:e5:93: be:3d:2c:70:e5:07:8b:46:49:4c:45:64:00:f9:8f: 2e:ed:83:12:e5:a7:2b:52:5f:b9:49:6f:10:a7:db: 39:3c:7c:f1:b0:03:35:10:b7:0f:42:0f:16:f3:a8: f1:59:97:62:ee:9e:83:c5:a6:00:23:70:21:2b:16: fe:df:ef:51:3a:c7:2e:c5:f7:77:e6:90:a9:42:d0: 16:3f:0f:d3:52:56:a7:80:d7:34:f5:58:db:c1:6c: a2:31:60:57:c8:9f:9c:c5:46:0a:17:91:f9:24:da: 3b:86:9d:4d:47:1e:f1:4c:cb:aa:5e:4e:20:a5:a9: a9:cf:d3:6b:62:aa:42:10:65:12:5a:2a:12:6a:98: 3a:08:33:27:5e:6b:de:b5:a7:98:7d:50:28:82:6a: f9:35:48:bc:cd:20:a6:d0:c8:09:9d:e3:59:4d:af: 95:26:c9:cf:d3:aa:33:40:48:fe:73:9e:60:f3:84: e0:4d:3f:5c:37:3d:af:56:35:a3:1c:28:91:f8:63: fd:68:3f:ac:3a:08:0f:d6:64:69:eb:08:f1:26:bb: c3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:95:31:0A:91:E1:22:BA:42:35:B9:F5:42:EC:F5:36:4D:1B:DF:FB X509v3 Authority Key Identifier: keyid:29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ad:21:c7:dd:26:72:1b:ed:02:f6:11:45:ad:38:9b:a0:23: e2:e6:13:83:93:e0:eb:2a:60:0c:04:c3:e2:06:56:12:5d:47: 33:f3:b9:73:86:99:38:5d:d8:19:a2:e8:d8:bc:42:71:69:eb: d1:85:99:65:30:38:44:8f:37:90:b6:ce:e2:85:38:2d:03:5e: 45:f3:85:c5:58:83:c8:d4:ae:f7:79:92:8f:5c:c2:35:88:41: 4b:24:14:01:d1:10:4a:78:a7:2d:cd:5d:07:dc:55:08:bc:ad: 66:2e:13:4b:b4:0b:b2:f2:64:b0:a6:96:31:3d:5e:33:0d:d3: 45:b5:d4:b7:78:a0:90:a3:51:91:9e:6f:70:e5:03:fa:a3:e1: 31:33:63:8a:fc:30:2c:0b:5b:f3:d9:69:e1:3d:53:9e:4e:9d: ae:be:69:1c:a2:0b:dc:a5:67:f7:b4:c9:ad:fd:ea:b8:9a:55: 0f:c3:50:d0:5f:25:6c:2b:7e:bf:e2:5a:df:da:4c:da:4e:04: 80:ed:bd:cb:e0:17:34:ae:3e:63:64:9d:ff:6f:93:2f:bd:2e: e5:0b:0f:4c:ea:92:4b:53:e7:a4:9f:c2:ab:cb:4c:5b:6a:07: a1:09:df:11:af:c6:32:6d:63:77:72:94:95:dc:e8:fa:0d:9c: ae:5d:09:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72awM2R/mBKcE4PFhFkbOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NTU3OWY1YjY3M2RiZTJlYmJhMzQ4Y2ZiMGY1NjEyNGNk ZTcwNDgwHhcNMjUxMjIwMTMwMTE5WhcNMjUxMjIxMTMwMTE5WjAzMTEwLwYDVQQD Eyg1YTk1MzEwYTkxZTEyMmJhNDIzNWI5ZjU0MmVjZjUzNjRkMWJkZmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IA+UvK07S4Yghb3coIBXkVVO2y8 dxZ7W5QQ/opL1jw/symNYqF5bn7i5ZO+PSxw5QeLRklMRWQA+Y8u7YMS5acrUl+5 SW8Qp9s5PHzxsAM1ELcPQg8W86jxWZdi7p6DxaYAI3AhKxb+3+9ROscuxfd35pCp QtAWPw/TUlangNc09VjbwWyiMWBXyJ+cxUYKF5H5JNo7hp1NRx7xTMuqXk4gpamp z9NrYqpCEGUSWioSapg6CDMnXmvetaeYfVAogmr5NUi8zSCm0MgJneNZTa+VJsnP 06ozQEj+c55g84TgTT9cNz2vVjWjHCiR+GP9aD+sOggP1mRp6wjxJrvDnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFqVMQqR4SK6QjW59ULs9TZNG9/7MB8GA1UdIwQY MBaAFClVefW2c9vi67o0jPsPVhJM3nBIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1ZWNTliWnoyLUxydWpTTS13OVdFa3plY0VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8xNTc0YzktMDFkNS00OGZkLTk4MGYt MzQzYzRkMjRjMjNiLzEvS1ZWNTliWnoyLUxydWpTTS13OVdFa3plY0VnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS8xNTc0YzktMDFkNS00OGZkLTk4MGYtMzQzYzRkMjRjMjNi LzEvS1ZWNTliWnoyLUxydWpTTS13OVdFa3plY0VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD60hx90m chvtAvYRRa04m6Aj4uYTg5Pg6ypgDATD4gZWEl1HM/O5c4aZOF3YGaLo2LxCcWnr 0YWZZTA4RI83kLbO4oU4LQNeRfOFxViDyNSu93mSj1zCNYhBSyQUAdEQSninLc1d B9xVCLytZi4TS7QLsvJksKaWMT1eMw3TRbXUt3igkKNRkZ5vcOUD+qPhMTNjivww LAtb89lp4T1Tnk6drr5pHKIL3KVn97TJrf3quJpVD8NQ0F8lbCt+v+Ja39pM2k4E gO29y+AXNK4+Y2Sd/2+TL70u5QsPTOqSS1PnpJ/Cq8tMW2oHoQnfEa/GMm1jd3KU ldzo+g2crl0JIg== -----END CERTIFICATE-----Generated at Sat Dec 20 21:27:26 2025 by rpki-client