This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft File: kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft (raw, json) Hash identifier: NL6Y0bwQHZRngPRIGz+QAFY6CHOtaVyw1TYNGWWofB4= Subject key identifier: B3:92:46:31:A1:8F:79:08:6B:35:46:9F:53:BE:96:6C:0C:DC:D4:1B Authority key identifier: 91:4B:7D:1E:6E:72:D5:5C:8D:1C:4A:3E:82:41:D7:1D:CF:8E:3B:F1 Certificate issuer: /CN=914b7d1e6e72d55c8d1c4a3e8241d71dcf8e3bf1 Certificate serial: 019B6DA106C1558E2D002818060C39C86FF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft Manifest number: 163C Signing time: Tue 30 Dec 2025 05:00:28 +0000 Manifest this update: Tue 30 Dec 2025 05:00:28 +0000 Manifest next update: Wed 31 Dec 2025 05:00:28 +0000 Files and hashes: 1: SX3vKCIesg7brXNXKPon4jGBLVQ.roa (hash: QbCrUZtkCCzMgLc9gxL+FBpDYE7YV20lMwm2mk5wzSk=) 2: kUt9Hm5y1VyNHEo-gkHXHc-OO_E.crl (hash: iUeQWJULltitSNwr7XklKNRogG7es4kCOeRAXsPj8Z0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft rsync://rpki.ripe.net/repository/DEFAULT/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 05:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:a1:06:c1:55:8e:2d:00:28:18:06:0c:39:c8:6f:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914b7d1e6e72d55c8d1c4a3e8241d71dcf8e3bf1 Validity Not Before: Dec 30 05:00:28 2025 GMT Not After : Dec 31 05:00:28 2025 GMT Subject: CN=b3924631a18f79086b35469f53be966c0cdcd41b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d3:f5:e1:40:e2:61:ba:b7:d8:26:87:6a:fa: 59:13:4a:d6:96:fb:a0:ff:64:5f:44:7a:d0:7d:7d: 2e:69:39:43:ba:90:20:ea:8d:de:18:4d:18:5b:58: a3:ae:9d:28:2b:d4:bc:48:ae:7c:9a:5e:23:28:db: f8:37:41:29:af:ee:84:9b:48:35:c4:d5:c1:19:3f: f6:93:86:57:c9:4a:f3:2a:ab:95:b3:4e:86:90:a6: 49:b5:a0:a8:93:83:02:03:21:3b:0f:f9:36:17:21: b3:7f:0c:8b:bf:16:a3:ac:8b:e8:34:6b:f9:46:5a: 7a:c1:62:fb:ed:ab:7b:b7:ec:fb:cc:e7:d5:7c:ea: 46:77:6e:df:6f:48:f3:f4:c8:0c:ea:19:4b:10:54: a2:c0:a6:f5:03:36:e1:4f:fd:43:a1:13:af:61:d1: e4:23:66:b1:f3:2d:72:16:89:57:7d:cd:52:61:45: 3f:07:30:7e:ea:6d:1d:88:38:73:77:da:6e:f5:db: 1d:32:3a:0a:18:09:f4:f3:57:eb:a2:38:70:ac:fa: fb:97:83:a9:2e:15:9c:2a:53:8a:a7:ac:f0:a6:ee: 05:eb:da:d7:4c:dd:0f:a5:ea:ba:39:a8:95:a3:99: f8:fc:12:e2:a3:44:d1:00:5e:43:73:50:0a:6c:58: a2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:92:46:31:A1:8F:79:08:6B:35:46:9F:53:BE:96:6C:0C:DC:D4:1B X509v3 Authority Key Identifier: keyid:91:4B:7D:1E:6E:72:D5:5C:8D:1C:4A:3E:82:41:D7:1D:CF:8E:3B:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:82:a3:b7:88:1f:ac:17:86:53:10:d3:ae:fd:44:a2:30:cb: 42:3f:e9:65:16:a0:5b:cb:10:1b:91:83:5f:44:1a:17:ea:f7: 27:8b:4e:6a:c9:4d:da:c8:34:c3:45:0d:6d:0e:40:ec:d7:b4: 11:8b:7f:ed:7f:bf:95:e4:3a:e8:36:d6:7a:98:27:21:93:4b: 5b:08:94:29:d3:6a:53:1e:c3:51:79:2c:69:ed:72:15:47:62: 6c:28:53:c8:f5:5b:c2:a9:57:b2:3c:fc:2b:c9:7e:31:61:67: e6:36:26:fb:72:8f:5f:cd:3e:c2:c9:aa:bb:2f:9c:68:45:e8: ae:6c:34:af:26:f3:55:46:0a:e0:9c:fb:dc:e8:f1:f3:23:78: 12:5e:f7:2b:d0:08:a4:cd:97:51:c2:a4:77:b1:66:11:e3:c2: d9:30:ee:52:4c:91:2f:bc:f3:24:a9:7b:41:66:aa:f4:68:22: 53:76:82:ea:62:4f:b4:73:f9:ff:59:75:51:f5:8e:50:8e:3f: 8d:16:8b:be:c6:52:32:01:b2:93:39:e2:3b:dd:6a:7e:b1:33: 92:5b:00:ac:b3:5b:b0:a9:7c:66:01:03:36:23:df:fe:90:be: 26:7b:5f:bc:40:f3:2b:85:09:eb:df:dd:97:68:ba:37:49:a1: 3f:8d:82:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttoQbBVY4tACgYBgw5yG/wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxNGI3ZDFlNmU3MmQ1NWM4ZDFjNGEzZTgyNDFkNzFkY2Y4 ZTNiZjEwHhcNMjUxMjMwMDUwMDI4WhcNMjUxMjMxMDUwMDI4WjAzMTEwLwYDVQQD EyhiMzkyNDYzMWExOGY3OTA4NmIzNTQ2OWY1M2JlOTY2YzBjZGNkNDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstP14UDiYbq32CaHavpZE0rWlvug /2RfRHrQfX0uaTlDupAg6o3eGE0YW1ijrp0oK9S8SK58ml4jKNv4N0Epr+6Em0g1 xNXBGT/2k4ZXyUrzKquVs06GkKZJtaCok4MCAyE7D/k2FyGzfwyLvxajrIvoNGv5 Rlp6wWL77at7t+z7zOfVfOpGd27fb0jz9MgM6hlLEFSiwKb1AzbhT/1DoROvYdHk I2ax8y1yFolXfc1SYUU/BzB+6m0diDhzd9pu9dsdMjoKGAn081frojhwrPr7l4Op LhWcKlOKp6zwpu4F69rXTN0Ppeq6OaiVo5n4/BLio0TRAF5Dc1AKbFiirQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLOSRjGhj3kIazVGn1O+lmwM3NQbMB8GA1UdIwQY MBaAFJFLfR5uctVcjRxKPoJB1x3PjjvxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1V0OUhtNXkxVnlOSEVvLWdrSFhIYy1PT19FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy84MzQ5ZTQtNjljYy00MTQwLWE3NDQt YWJlZDc0NDE1YjhmLzEva1V0OUhtNXkxVnlOSEVvLWdrSFhIYy1PT19FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy84MzQ5ZTQtNjljYy00MTQwLWE3NDQtYWJlZDc0NDE1Yjhm LzEva1V0OUhtNXkxVnlOSEVvLWdrSFhIYy1PT19FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfIKjt4gf rBeGUxDTrv1EojDLQj/pZRagW8sQG5GDX0QaF+r3J4tOaslN2sg0w0UNbQ5A7Ne0 EYt/7X+/leQ66DbWepgnIZNLWwiUKdNqUx7DUXksae1yFUdibChTyPVbwqlXsjz8 K8l+MWFn5jYm+3KPX80+wsmquy+caEXormw0rybzVUYK4Jz73Ojx8yN4El73K9AI pM2XUcKkd7FmEePC2TDuUkyRL7zzJKl7QWaq9GgiU3aC6mJPtHP5/1l1UfWOUI4/ jRaLvsZSMgGykzniO91qfrEzklsArLNbsKl8ZgEDNiPf/pC+JntfvEDzK4UJ69/d l2i6N0mhP42CWQ== -----END CERTIFICATE-----Generated at Tue Dec 30 12:15:11 2025 by rpki-client