This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft File: KUv7SsSIYBHwbZ3E79RVMyZO14g.mft (raw, json) Hash identifier: cnzI8lbSCUzJTiyUL37hCDGszyZrWdlTI7t58jclbUM= Subject key identifier: 37:06:D9:36:7D:1C:79:81:18:36:6D:10:E2:6A:1A:A5:ED:93:96:03 Authority key identifier: 29:4B:FB:4A:C4:88:60:11:F0:6D:9D:C4:EF:D4:55:33:26:4E:D7:88 Certificate issuer: /CN=294bfb4ac4886011f06d9dc4efd45533264ed788 Certificate serial: 019B41DB5F5F85E9C7195D5EBBE017AC6434 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft Manifest number: 1184 Signing time: Sun 21 Dec 2025 17:00:54 +0000 Manifest this update: Sun 21 Dec 2025 17:00:54 +0000 Manifest next update: Mon 22 Dec 2025 17:00:54 +0000 Files and hashes: 1: KUv7SsSIYBHwbZ3E79RVMyZO14g.crl (hash: R2CiDY4vntoSHD8aRXzGMib77zQ3Oz23Q4zHGdCcXVg=) 2: vUzTxQRZNE5WBxRpFY_1BvR6nb8.roa (hash: 4IGQdOA0rNIT3SYgWTgAAmM5+gTsF90wOn17b+OWr8A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:5f:5f:85:e9:c7:19:5d:5e:bb:e0:17:ac:64:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=294bfb4ac4886011f06d9dc4efd45533264ed788 Validity Not Before: Dec 21 17:00:54 2025 GMT Not After : Dec 22 17:00:54 2025 GMT Subject: CN=3706d9367d1c798118366d10e26a1aa5ed939603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:a7:56:77:a9:59:94:dd:af:68:4c:06:2a:51: be:1e:a6:fd:ac:71:d4:f9:e0:b4:07:31:dc:63:b6: d7:50:56:c4:94:22:e4:4e:ed:d5:d6:3e:fe:19:9b: 5b:bf:c5:90:03:29:2b:88:74:82:45:a5:f7:c7:13: 54:6f:e3:32:35:97:27:bd:cd:36:57:ba:3e:20:ea: 8b:a7:bf:ef:2c:c7:51:cc:49:30:b2:4c:b9:bc:04: 34:e6:92:5a:fa:56:65:e3:6a:ec:39:7b:d1:1c:64: e7:c1:c8:07:80:6b:38:77:c8:10:bc:7a:5e:3b:c9: 37:e5:fd:c4:1d:fb:fb:01:fb:75:ec:e2:9a:ff:57: 1f:12:9c:d1:6e:20:39:18:38:b0:c4:97:40:bb:e5: 85:53:ae:2c:a1:ef:b5:41:85:c5:59:cf:33:6d:07: 5f:52:26:60:f3:aa:6d:f0:1c:4f:cb:c1:28:54:74: 3f:8f:ab:d5:1b:b2:8e:92:bf:03:7b:16:2b:ca:45: 3b:1d:e3:b4:3f:b6:8d:3f:70:1b:9d:aa:a5:d6:ff: 0f:50:aa:23:72:7c:7f:f1:29:5f:81:18:4f:0c:b5: eb:2a:f3:b7:44:a5:0a:64:cb:44:a4:23:68:6b:ca: 17:47:08:d3:e5:57:47:73:a2:03:d7:03:dd:64:2d: 6b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:06:D9:36:7D:1C:79:81:18:36:6D:10:E2:6A:1A:A5:ED:93:96:03 X509v3 Authority Key Identifier: keyid:29:4B:FB:4A:C4:88:60:11:F0:6D:9D:C4:EF:D4:55:33:26:4E:D7:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:06:e1:c8:38:d2:22:22:d9:c6:00:ba:35:92:b5:6d:01:5c: 5c:9f:f7:bf:76:cb:d0:8b:4f:bc:7a:c6:c2:15:66:05:b1:f2: 57:b9:50:f1:2d:86:57:81:6c:b5:18:bd:2c:3b:e4:e8:ac:af: f4:5e:98:be:ee:9a:d1:a9:d7:f9:67:a6:64:0e:90:fc:01:ea: f7:8c:37:37:9f:05:35:a2:dc:4f:55:87:ab:94:60:f2:44:f6: 88:d1:9a:c7:a1:81:44:97:5f:91:0a:80:b4:13:1f:df:43:c4: ff:2a:cf:d1:df:52:56:e5:3a:3d:0d:c8:52:08:40:4b:c2:7e: 31:02:78:a4:ac:31:19:78:f5:c7:5e:22:b5:c9:5a:60:af:2c: f8:56:95:bf:2b:23:b4:a4:23:8d:fd:eb:42:68:c4:52:53:52: c3:11:8d:08:a6:be:8f:7b:b6:c0:5f:17:90:f9:b9:27:85:2c: 6a:bd:8f:01:c1:7d:ab:7b:7a:7b:69:58:26:b9:96:26:21:b2: c9:43:27:9a:ca:5c:a9:00:6e:42:3c:6e:1a:24:b7:0a:e8:a0: bd:bf:cb:27:a7:45:29:b4:61:54:54:6a:b8:0e:80:ae:94:3d: f9:66:55:ec:8f:88:5e:ef:83:2b:82:88:aa:ff:13:b7:39:ba: 08:85:d6:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB219fhenHGV1eu+AXrGQ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NGJmYjRhYzQ4ODYwMTFmMDZkOWRjNGVmZDQ1NTMzMjY0 ZWQ3ODgwHhcNMjUxMjIxMTcwMDU0WhcNMjUxMjIyMTcwMDU0WjAzMTEwLwYDVQQD EygzNzA2ZDkzNjdkMWM3OTgxMTgzNjZkMTBlMjZhMWFhNWVkOTM5NjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8qdWd6lZlN2vaEwGKlG+Hqb9rHHU +eC0BzHcY7bXUFbElCLkTu3V1j7+GZtbv8WQAykriHSCRaX3xxNUb+MyNZcnvc02 V7o+IOqLp7/vLMdRzEkwsky5vAQ05pJa+lZl42rsOXvRHGTnwcgHgGs4d8gQvHpe O8k35f3EHfv7Aft17OKa/1cfEpzRbiA5GDiwxJdAu+WFU64soe+1QYXFWc8zbQdf UiZg86pt8BxPy8EoVHQ/j6vVG7KOkr8DexYrykU7HeO0P7aNP3Abnaql1v8PUKoj cnx/8SlfgRhPDLXrKvO3RKUKZMtEpCNoa8oXRwjT5VdHc6ID1wPdZC1rWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDcG2TZ9HHmBGDZtEOJqGqXtk5YDMB8GA1UdIwQY MBaAFClL+0rEiGAR8G2dxO/UVTMmTteIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1V2N1NzU0lZQkh3YlozRTc5UlZNeVpPMTRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iMGRhMDYtMWJhNy00OWYwLWE1Njkt OTA5ZmU3YzgwZDk4LzEvS1V2N1NzU0lZQkh3YlozRTc5UlZNeVpPMTRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9iMGRhMDYtMWJhNy00OWYwLWE1NjktOTA5ZmU3YzgwZDk4 LzEvS1V2N1NzU0lZQkh3YlozRTc5UlZNeVpPMTRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADAbhyDjS IiLZxgC6NZK1bQFcXJ/3v3bL0ItPvHrGwhVmBbHyV7lQ8S2GV4FstRi9LDvk6Kyv 9F6Yvu6a0anX+WemZA6Q/AHq94w3N58FNaLcT1WHq5Rg8kT2iNGax6GBRJdfkQqA tBMf30PE/yrP0d9SVuU6PQ3IUghAS8J+MQJ4pKwxGXj1x14itclaYK8s+FaVvysj tKQjjf3rQmjEUlNSwxGNCKa+j3u2wF8XkPm5J4Usar2PAcF9q3t6e2lYJrmWJiGy yUMnmspcqQBuQjxuGiS3Cuigvb/LJ6dFKbRhVFRquA6ArpQ9+WZV7I+IXu+DK4KI qv8Ttzm6CIXWUg== -----END CERTIFICATE-----Generated at Sun Dec 21 19:14:33 2025 by rpki-client