This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft File: kucgRlxc0NqcahO0T6DYb2SeUFU.mft (raw, json) Hash identifier: rDkYlYqQI0NkudzXcfVCe5K5Ra0CEvv/XmD1HZKUHW8= Subject key identifier: D9:4C:13:B5:A4:D0:E5:43:B0:A4:5C:A0:11:A9:EB:68:5A:F5:3B:66 Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Certificate serial: 019B3CEC9C4E50F83D512A47332E11AD107B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft Manifest number: 17B2 Signing time: Sat 20 Dec 2025 18:01:38 +0000 Manifest this update: Sat 20 Dec 2025 18:01:38 +0000 Manifest next update: Sun 21 Dec 2025 18:01:38 +0000 Files and hashes: 1: 1Is4Dx2b4hAEbNi2pJoiESDUUOg.roa (hash: Iq8BDLkXu6DWvDv/qAdFA5wJ/wndBJHGHruYEfWId0I=) 2: 5SbiNIlOSo5rSNp1qoSW-dXTShg.roa (hash: uVc4NzR1mD0S0EgbWMAzbFbtAKv13hqUCRgnRLw7Bjw=) 3: Jds9VOdsrBFbfq4zn6-y356BGP4.roa (hash: HezTqg7qCIYcC14zyjNtznQH/Br2gzRPiHXceTw8UGg=) 4: Nc2fha0lLWlvc6xMAIxXT07_q2w.roa (hash: mO6BTT3XjIVWSygzqP8zo/wWNxMwAbGXuPNN6vNEhUE=) 5: W0wwe8SBgrorcIdIh1C6dywoblE.roa (hash: o7y7OudSu2OxvsqJQhdu7LZqt6SiNfP9ooVaizbrRo4=) 6: ZR5HRzEqKWtKpqmMzL4r6DgJHWw.roa (hash: VJyDWQzVLgkrKXE4tqLoSvO15wkiKpkLd3L7U2g60hg=) 7: ZSEuWCd4gz5EACBqGI7knKtFPDU.roa (hash: Lhv+eepu21/9g4OYQmyhCGNfB7JIPz2YX1sB52VBsGQ=) 8: kucgRlxc0NqcahO0T6DYb2SeUFU.crl (hash: uZd5EnMOlbVd+yqznCl/4epA4X/fPZ6ZqcpmII/L6Lk=) 9: qpIHRqhd7Nb3PZWHKXegTOoXNV4.roa (hash: Zo5QxFaHcYek6dzqi+zquJFUfLpMRdJYYo05MF+VngU=) 10: swmwnpHGQQ_MAJYmDfyapkyOrco.roa (hash: tPimhTpohNCgbw9pSvdpk8DZxmGSBfS96JkOf5fTibk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:9c:4e:50:f8:3d:51:2a:47:33:2e:11:ad:10:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Validity Not Before: Dec 20 18:01:38 2025 GMT Not After : Dec 21 18:01:38 2025 GMT Subject: CN=d94c13b5a4d0e543b0a45ca011a9eb685af53b66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:34:32:53:19:40:d4:16:09:ba:8d:91:81:5d: 4b:bb:2e:53:73:4e:9a:af:e6:5b:15:4f:fa:cb:26: 01:ae:04:0a:fd:5b:77:39:a6:d6:f9:f4:46:ce:52: cb:af:6e:cd:04:fb:2d:db:11:51:72:da:73:cf:81: a2:74:c9:6d:48:98:32:8f:53:37:98:ff:67:44:9d: b1:2f:97:8d:22:96:3e:37:19:21:ff:e8:e9:88:0d: 1e:8c:89:b5:21:12:42:10:04:28:5d:92:ed:f8:0f: 6a:46:1a:b2:26:91:0f:34:a8:d5:b5:35:dc:01:50: af:0a:96:34:fa:ab:a1:91:9b:c6:6c:a2:79:f2:a0: 3a:17:8b:6d:6b:0e:d0:cf:d5:7b:fd:c9:10:f0:d3: 8e:0a:87:73:cb:4c:48:35:98:40:df:fe:1a:66:de: 69:ed:98:ae:98:03:0e:bf:f0:76:8f:53:e2:59:93: 07:aa:48:cf:c4:d6:40:d2:1f:6d:bb:35:2d:d7:7f: ea:1c:da:cf:80:5b:9a:47:ea:10:b7:50:73:cf:32: fe:0c:a2:be:d8:f0:7a:9e:64:3f:9f:eb:0f:c2:12: 4c:15:70:52:6a:84:85:27:6d:4d:0e:25:8c:8d:16: 44:71:8b:38:2c:e4:31:0e:dc:c8:b2:11:ae:cb:7f: 12:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:4C:13:B5:A4:D0:E5:43:B0:A4:5C:A0:11:A9:EB:68:5A:F5:3B:66 X509v3 Authority Key Identifier: keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:34:c7:5f:c4:83:2b:6a:aa:9c:cd:c6:77:9a:f5:aa:38:40: 8d:99:8c:8a:6e:26:2d:71:d2:fd:ed:56:15:fa:19:ba:3f:b9: bb:f5:b3:59:aa:d1:fa:df:53:5a:b1:45:87:20:76:d9:55:07: 75:b6:e3:5d:5e:df:1f:98:91:7a:bf:2f:54:d1:58:ee:bc:69: 32:31:63:e6:4f:fb:11:e7:96:ce:04:fd:f8:f6:91:38:50:77: a1:2d:7a:fb:b7:4c:7b:04:e6:f7:8b:35:73:b6:36:14:2c:f8: 8e:c6:17:0f:13:45:14:68:f6:ef:6c:e5:77:7c:58:54:88:a4: df:ec:d1:60:d1:8b:b8:c7:60:98:b2:b8:b3:05:de:fb:23:0a: e5:32:25:8b:ca:99:0c:f9:1e:b3:c0:c4:14:92:62:65:c2:5d: 61:b1:f9:55:25:39:8e:c2:85:00:8b:8f:e8:eb:d2:3f:4a:58: 98:9e:4b:84:75:d2:00:f0:d9:56:06:e1:71:c2:ce:ca:28:e4: 4a:8f:7d:45:a0:1c:92:08:80:ee:70:68:53:d6:61:96:19:f2: 83:3a:56:53:20:e6:39:b1:89:ed:15:37:92:a0:d0:42:e1:7a: 70:87:25:d3:26:e0:c1:32:e5:f5:37:f7:d5:06:c8:f6:da:db: f5:1a:0c:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87JxOUPg9USpHMy4RrRB7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZTcyMDQ2NWM1Y2QwZGE5YzZhMTNiNDRmYTBkODZmNjQ5 ZTUwNTUwHhcNMjUxMjIwMTgwMTM4WhcNMjUxMjIxMTgwMTM4WjAzMTEwLwYDVQQD EyhkOTRjMTNiNWE0ZDBlNTQzYjBhNDVjYTAxMWE5ZWI2ODVhZjUzYjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTQyUxlA1BYJuo2RgV1Luy5Tc06a r+ZbFU/6yyYBrgQK/Vt3OabW+fRGzlLLr27NBPst2xFRctpzz4GidMltSJgyj1M3 mP9nRJ2xL5eNIpY+Nxkh/+jpiA0ejIm1IRJCEAQoXZLt+A9qRhqyJpEPNKjVtTXc AVCvCpY0+quhkZvGbKJ58qA6F4ttaw7Qz9V7/ckQ8NOOCodzy0xINZhA3/4aZt5p 7ZiumAMOv/B2j1PiWZMHqkjPxNZA0h9tuzUt13/qHNrPgFuaR+oQt1BzzzL+DKK+ 2PB6nmQ/n+sPwhJMFXBSaoSFJ21NDiWMjRZEcYs4LOQxDtzIshGuy38SOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNlME7Wk0OVDsKRcoBGp62ha9TtmMB8GA1UdIwQY MBaAFJLnIEZcXNDanGoTtE+g2G9knlBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDkt OTA5NmUxNjc0ZTIyLzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDktOTA5NmUxNjc0ZTIy LzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnjTHX8SD K2qqnM3Gd5r1qjhAjZmMim4mLXHS/e1WFfoZuj+5u/WzWarR+t9TWrFFhyB22VUH dbbjXV7fH5iRer8vVNFY7rxpMjFj5k/7EeeWzgT9+PaROFB3oS16+7dMewTm94s1 c7Y2FCz4jsYXDxNFFGj272zld3xYVIik3+zRYNGLuMdgmLK4swXe+yMK5TIli8qZ DPkes8DEFJJiZcJdYbH5VSU5jsKFAIuP6OvSP0pYmJ5LhHXSAPDZVgbhccLOyijk So99RaAckgiA7nBoU9ZhlhnygzpWUyDmObGJ7RU3kqDQQuF6cIcl0ybgwTLl9Tf3 1QbI9trb9RoMNg== -----END CERTIFICATE-----Generated at Sat Dec 20 22:37:02 2025 by rpki-client