This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft File: KVqSt3jt36jc2RfLuHzeMboscy8.mft (raw, json) Hash identifier: M4ehE0OAr4q4Hh7K4NkzJM0ASkBTbF0v2Kaaq+eRkvc= Subject key identifier: E2:A8:D5:65:2B:98:51:BC:5C:61:AE:24:C7:FD:5C:A0:53:E6:42:DA Authority key identifier: 29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F Certificate issuer: /CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f Certificate serial: 019B3F11EC8FE840765820D612EEBCD5CEAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 04:01:37 +0000 Manifest this update: Sun 21 Dec 2025 04:01:37 +0000 Manifest next update: Mon 22 Dec 2025 04:01:37 +0000 Files and hashes: 1: 043uSXcEwcTZgUk5_ExSgvF0TDI.roa (hash: aKMAMHw8f6Tqa+Lu83OKVpFBIm3XSWZO6zpjohL8Alg=) 2: KVqSt3jt36jc2RfLuHzeMboscy8.crl (hash: MuGN8RuoOa/9+5MaBtiAQHBMMt08iijlw8XCgCwcpl8=) 3: sqwvJOyPTCq5sZkvN5Pbfvvxhgg.roa (hash: HccEp/1nmaqHimBtUpSeAjWigFxaNTmI1UzABIZlNpU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:ec:8f:e8:40:76:58:20:d6:12:ee:bc:d5:ce:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f Validity Not Before: Dec 21 04:01:37 2025 GMT Not After : Dec 22 04:01:37 2025 GMT Subject: CN=e2a8d5652b9851bc5c61ae24c7fd5ca053e642da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0b:45:d7:16:4e:c3:b9:0a:88:94:65:6c:a3: 1c:95:ca:48:f1:fd:26:38:01:db:c9:ca:b2:b5:e1: 49:d5:04:17:f5:45:90:d3:44:5b:34:d4:c8:cb:05: 8f:56:d5:0b:be:23:d5:4a:1f:a2:6a:1f:e0:10:6c: bf:ff:6e:49:ad:f8:24:35:29:e4:34:82:0a:c4:ce: f7:c5:44:2d:26:af:a2:38:7f:d1:d3:b9:13:e3:f7: 9f:9d:ad:9f:6c:bf:ab:96:8e:d7:94:af:cd:f1:5b: dd:e3:f2:9b:eb:23:49:66:c0:9f:b5:72:fc:0a:b3: 4f:b0:54:68:50:1a:33:83:df:73:8c:c2:47:3e:c6: 0c:9a:19:93:7d:b2:0f:65:4e:db:50:cd:2a:44:e2: f6:85:5f:75:23:10:03:bc:de:d2:52:50:f5:13:df: f3:49:71:a3:45:a0:ff:4f:57:dc:c8:9a:8c:cd:e6: 50:70:82:e7:f3:d5:6f:1e:cb:6a:26:3b:ff:16:e6: c2:66:1b:b2:7b:8f:3c:4d:c3:68:72:81:5d:96:98: 5c:c8:02:9d:e6:f8:66:fa:43:24:24:6f:90:db:cb: cf:05:ee:65:44:a3:91:a1:ff:1b:c9:b6:aa:b6:db: 4d:ec:6f:7e:13:f9:af:5b:df:09:8b:f5:a9:ee:79: db:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A8:D5:65:2B:98:51:BC:5C:61:AE:24:C7:FD:5C:A0:53:E6:42:DA X509v3 Authority Key Identifier: keyid:29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:d6:fa:d5:92:bd:f1:68:50:7c:ce:ff:77:92:d4:16:64:6b: 84:57:b6:ce:25:be:ed:c7:31:a3:f9:c0:33:9d:70:47:86:74: 63:a9:9c:8b:be:a0:07:97:ce:ad:fd:94:c7:d9:23:e7:4f:25: e3:39:38:59:27:d7:c0:63:a5:88:ed:e7:1a:ff:82:e5:b9:5f: c6:d5:68:3b:ad:22:8d:e0:68:f9:1c:87:5e:60:12:08:13:53: 69:e2:a0:0b:cd:fc:08:93:10:99:5d:a3:df:31:07:58:50:a5: 06:1d:2b:6e:22:db:b0:ac:6d:f1:32:14:85:7f:8f:3a:c9:11: 05:9c:54:97:68:93:f5:89:8a:d2:43:95:c5:01:e2:cf:cd:62: 57:70:ab:a1:cc:f7:d4:99:1c:f9:fa:0b:2e:07:e3:91:ff:78: a9:8e:18:0e:2d:bb:c4:86:55:d4:38:62:c0:56:d2:04:95:b9: 2d:0c:8b:2e:11:bc:de:be:90:b4:c2:f7:ee:10:db:c5:61:7b: 2f:5b:ef:27:7c:10:6e:2d:47:f0:95:79:18:ea:63:61:01:37: e8:ae:eb:d1:22:66:06:da:88:3d:f9:5b:36:45:fc:27:49:af: af:f7:79:9a:08:30:80:c8:e8:55:ca:95:4f:96:df:d2:cf:1c: 8c:47:99:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EeyP6EB2WCDWEu681c6qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NWE5MmI3NzhlZGRmYThkY2Q5MTdjYmI4N2NkZTMxYmEy YzczMmYwHhcNMjUxMjIxMDQwMTM3WhcNMjUxMjIyMDQwMTM3WjAzMTEwLwYDVQQD EyhlMmE4ZDU2NTJiOTg1MWJjNWM2MWFlMjRjN2ZkNWNhMDUzZTY0MmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQtF1xZOw7kKiJRlbKMclcpI8f0m OAHbycqyteFJ1QQX9UWQ00RbNNTIywWPVtULviPVSh+iah/gEGy//25JrfgkNSnk NIIKxM73xUQtJq+iOH/R07kT4/efna2fbL+rlo7XlK/N8Vvd4/Kb6yNJZsCftXL8 CrNPsFRoUBozg99zjMJHPsYMmhmTfbIPZU7bUM0qROL2hV91IxADvN7SUlD1E9/z SXGjRaD/T1fcyJqMzeZQcILn89VvHstqJjv/FubCZhuye488TcNocoFdlphcyAKd 5vhm+kMkJG+Q28vPBe5lRKORof8bybaqtttN7G9+E/mvW98Ji/Wp7nnbgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOKo1WUrmFG8XGGuJMf9XKBT5kLaMB8GA1UdIwQY MBaAFClakrd47d+o3NkXy7h83jG6LHMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1ZxU3QzanQzNmpjMlJmTHVIemVNYm9zY3k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83NTcwZTEtYWUzZC00OTAxLTljODUt ZGNkYzVjZWUyNzZmLzEvS1ZxU3QzanQzNmpjMlJmTHVIemVNYm9zY3k4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy83NTcwZTEtYWUzZC00OTAxLTljODUtZGNkYzVjZWUyNzZm LzEvS1ZxU3QzanQzNmpjMlJmTHVIemVNYm9zY3k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAItb61ZK9 8WhQfM7/d5LUFmRrhFe2ziW+7ccxo/nAM51wR4Z0Y6mci76gB5fOrf2Ux9kj508l 4zk4WSfXwGOliO3nGv+C5blfxtVoO60ijeBo+RyHXmASCBNTaeKgC838CJMQmV2j 3zEHWFClBh0rbiLbsKxt8TIUhX+POskRBZxUl2iT9YmK0kOVxQHiz81iV3Crocz3 1Jkc+foLLgfjkf94qY4YDi27xIZV1DhiwFbSBJW5LQyLLhG83r6QtML37hDbxWF7 L1vvJ3wQbi1H8JV5GOpjYQE36K7r0SJmBtqIPflbNkX8J0mvr/d5mggwgMjoVcqV T5bf0s8cjEeZfA== -----END CERTIFICATE-----Generated at Sun Dec 21 09:01:27 2025 by rpki-client