This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9d56a3-4417-4940-baa2-9e962cd9dd82/1/kb1Yg8gq7SX-8bGNcNAhWwf3J9g.mft File: kb1Yg8gq7SX-8bGNcNAhWwf3J9g.mft (raw, json) Hash identifier: aTUAxVS5FxWrR7L+TN5hm8jAyuM5jtdKfNoeCIiSzSA= Subject key identifier: 3D:45:43:47:1C:8C:C3:E2:2E:F8:B0:61:7C:38:DD:F0:AE:07:D1:AB Authority key identifier: 91:BD:58:83:C8:2A:ED:25:FE:F1:B1:8D:70:D0:21:5B:07:F7:27:D8 Certificate issuer: /CN=91bd5883c82aed25fef1b18d70d0215b07f727d8 Certificate serial: 019B5486A335522FE6B9F166AFAB8578AB78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kb1Yg8gq7SX-8bGNcNAhWwf3J9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9d56a3-4417-4940-baa2-9e962cd9dd82/1/kb1Yg8gq7SX-8bGNcNAhWwf3J9g.mft Manifest number: 02BC Signing time: Thu 25 Dec 2025 08:01:08 +0000 Manifest this update: Thu 25 Dec 2025 08:01:08 +0000 Manifest next update: Fri 26 Dec 2025 08:01:08 +0000 Files and hashes: 1: N05LSOD5G7OCVr2R2Lk3Qm3IMnc.roa (hash: 2FUijApprdSPC+yt20CbCF23SFHyPUM/peKf0m3x+RA=) 2: kb1Yg8gq7SX-8bGNcNAhWwf3J9g.crl (hash: PUgsXCbqbB+ieJ++3hza8vLM5FuxvLIcyQAk3h6qW6U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9d56a3-4417-4940-baa2-9e962cd9dd82/1/kb1Yg8gq7SX-8bGNcNAhWwf3J9g.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9d56a3-4417-4940-baa2-9e962cd9dd82/1/kb1Yg8gq7SX-8bGNcNAhWwf3J9g.mft rsync://rpki.ripe.net/repository/DEFAULT/kb1Yg8gq7SX-8bGNcNAhWwf3J9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 08:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:86:a3:35:52:2f:e6:b9:f1:66:af:ab:85:78:ab:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91bd5883c82aed25fef1b18d70d0215b07f727d8 Validity Not Before: Dec 25 08:01:08 2025 GMT Not After : Dec 26 08:01:08 2025 GMT Subject: CN=3d4543471c8cc3e22ef8b0617c38ddf0ae07d1ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:d9:f4:b7:7a:92:d0:69:c1:5a:c0:6d:03:4f: ea:96:fd:7e:78:ce:e3:43:7e:75:14:e9:6c:80:f0: f5:ed:47:5f:55:d6:38:d2:1d:ca:fd:0c:dc:4c:2a: ea:50:3a:4d:f2:af:4b:1c:6a:ac:12:70:53:94:17: 9a:46:f2:5a:9b:f3:45:d4:ee:4e:d5:07:b1:c7:86: 5c:31:e8:00:45:fb:05:7c:17:b9:f0:b6:bd:b4:63: c0:29:51:f6:80:62:52:f8:59:02:bc:ca:d9:2e:e5: 8e:a6:1e:75:28:ca:b7:5c:3c:8e:d3:05:65:0a:79: 10:d9:37:0e:65:e8:cd:4c:18:20:99:fd:a3:ff:ce: 12:1c:73:ec:f1:a1:d2:93:51:22:94:b7:15:77:8a: 6b:98:e7:c9:96:0a:74:c1:33:a1:86:b3:8c:39:75: 0c:1c:cc:59:fd:1a:80:38:55:e3:e1:11:58:34:c4: ce:38:26:16:29:9d:36:f7:eb:87:e4:67:43:72:c4: 68:cf:df:10:a5:be:d4:7a:1f:f4:02:c3:e5:1b:50: 8f:50:60:ea:ab:21:4f:d3:f4:e0:20:a2:ce:b9:f5: b3:ce:38:8b:e4:c8:ac:f5:19:1a:07:2c:13:f4:c7: cd:a9:e4:ff:a4:f9:bb:96:dd:0d:05:4f:7b:20:cd: e9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:45:43:47:1C:8C:C3:E2:2E:F8:B0:61:7C:38:DD:F0:AE:07:D1:AB X509v3 Authority Key Identifier: keyid:91:BD:58:83:C8:2A:ED:25:FE:F1:B1:8D:70:D0:21:5B:07:F7:27:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kb1Yg8gq7SX-8bGNcNAhWwf3J9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9d56a3-4417-4940-baa2-9e962cd9dd82/1/kb1Yg8gq7SX-8bGNcNAhWwf3J9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9d56a3-4417-4940-baa2-9e962cd9dd82/1/kb1Yg8gq7SX-8bGNcNAhWwf3J9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:fe:c5:17:58:d1:2f:04:e3:10:69:55:a6:e5:bc:c7:42:f4: f8:7d:16:5a:b2:fb:7d:9f:43:26:3c:56:1d:94:ad:3b:8e:1d: b4:de:cf:39:52:7e:06:7e:65:55:00:a0:6d:1d:3c:8c:db:16: ef:cc:46:4b:69:de:f8:6b:f0:36:9d:71:50:e9:9f:ca:7a:1a: df:b0:ad:4f:db:f5:bd:9f:9a:cc:92:08:19:68:58:53:41:07: cc:d4:c0:9f:d8:c3:a0:02:1a:05:f8:4c:89:9b:26:cc:94:f4: ac:94:86:39:14:d2:93:80:93:bc:3a:32:bd:00:6c:08:80:9f: c5:91:25:a1:b5:f4:1e:71:cd:ac:23:06:5f:6e:4f:3d:ef:5e: e1:f8:bd:e2:19:a9:74:84:8a:37:10:82:37:d5:9a:b2:45:04: 45:d8:46:e5:d5:cc:fe:94:37:66:26:f7:c7:c5:2f:d0:d4:2c: 10:34:3c:bb:c9:6f:cf:71:09:bc:fe:e0:ff:9e:e1:a5:7a:9c: cf:19:45:55:bb:53:e5:b6:67:37:54:6c:c5:3b:ac:37:03:8a: ca:8d:2e:8d:54:53:97:33:a7:f6:ba:47:cf:22:e4:12:5f:e0: 6f:86:2e:2a:ee:fc:c3:e0:94:b1:a4:3e:b7:63:fa:4f:fd:78: 4e:d0:7d:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUhqM1Ui/mufFmr6uFeKt4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxYmQ1ODgzYzgyYWVkMjVmZWYxYjE4ZDcwZDAyMTViMDdm NzI3ZDgwHhcNMjUxMjI1MDgwMTA4WhcNMjUxMjI2MDgwMTA4WjAzMTEwLwYDVQQD EygzZDQ1NDM0NzFjOGNjM2UyMmVmOGIwNjE3YzM4ZGRmMGFlMDdkMWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA89n0t3qS0GnBWsBtA0/qlv1+eM7j Q351FOlsgPD17UdfVdY40h3K/QzcTCrqUDpN8q9LHGqsEnBTlBeaRvJam/NF1O5O 1Qexx4ZcMegARfsFfBe58La9tGPAKVH2gGJS+FkCvMrZLuWOph51KMq3XDyO0wVl CnkQ2TcOZejNTBggmf2j/84SHHPs8aHSk1EilLcVd4prmOfJlgp0wTOhhrOMOXUM HMxZ/RqAOFXj4RFYNMTOOCYWKZ029+uH5GdDcsRoz98Qpb7Ueh/0AsPlG1CPUGDq qyFP0/TgIKLOufWzzjiL5Mis9RkaBywT9MfNqeT/pPm7lt0NBU97IM3p1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD1FQ0ccjMPiLviwYXw43fCuB9GrMB8GA1UdIwQY MBaAFJG9WIPIKu0l/vGxjXDQIVsH9yfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2IxWWc4Z3E3U1gtOGJHTmNOQWhXd2YzSjlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ZDU2YTMtNDQxNy00OTQwLWJhYTIt OWU5NjJjZDlkZDgyLzEva2IxWWc4Z3E3U1gtOGJHTmNOQWhXd2YzSjlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85ZDU2YTMtNDQxNy00OTQwLWJhYTItOWU5NjJjZDlkZDgy LzEva2IxWWc4Z3E3U1gtOGJHTmNOQWhXd2YzSjlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHv7FF1jR LwTjEGlVpuW8x0L0+H0WWrL7fZ9DJjxWHZStO44dtN7POVJ+Bn5lVQCgbR08jNsW 78xGS2ne+GvwNp1xUOmfynoa37CtT9v1vZ+azJIIGWhYU0EHzNTAn9jDoAIaBfhM iZsmzJT0rJSGORTSk4CTvDoyvQBsCICfxZElobX0HnHNrCMGX25PPe9e4fi94hmp dISKNxCCN9WaskUERdhG5dXM/pQ3Zib3x8Uv0NQsEDQ8u8lvz3EJvP7g/57hpXqc zxlFVbtT5bZnN1RsxTusNwOKyo0ujVRTlzOn9rpHzyLkEl/gb4YuKu78w+CUsaQ+ t2P6T/14TtB91A== -----END CERTIFICATE-----Generated at Thu Dec 25 17:28:45 2025 by rpki-client