This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft File: kbP11vQ-gwcfp35tPru3k1L5YbU.mft (raw, json) Hash identifier: fH+hDrIvQupJ74T901WhDrtJozwQnlaypYHoy56gVy8= Subject key identifier: 48:0B:9C:D9:B7:1A:0C:7B:93:B2:B4:7D:06:89:A4:67:A6:30:54:F7 Authority key identifier: 91:B3:F5:D6:F4:3E:83:07:1F:A7:7E:6D:3E:BB:B7:93:52:F9:61:B5 Certificate issuer: /CN=91b3f5d6f43e83071fa77e6d3ebbb79352f961b5 Certificate serial: 019B3CB55F9E19CA7F5599EA79E4A2D76184 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft Manifest number: 1065 Signing time: Sat 20 Dec 2025 17:01:17 +0000 Manifest this update: Sat 20 Dec 2025 17:01:17 +0000 Manifest next update: Sun 21 Dec 2025 17:01:17 +0000 Files and hashes: 1: X8wL7IEItggqG87hU2SRjhDFo0c.roa (hash: Z7Uz5pUQbhyO7q39OnET5F24kmKZzxNrZzpSD8G3ebQ=) 2: kbP11vQ-gwcfp35tPru3k1L5YbU.crl (hash: /r5ndExvQNacenqGZvwVDsEOr85d8AvrW3u9F8+KeiU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:5f:9e:19:ca:7f:55:99:ea:79:e4:a2:d7:61:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91b3f5d6f43e83071fa77e6d3ebbb79352f961b5 Validity Not Before: Dec 20 17:01:17 2025 GMT Not After : Dec 21 17:01:17 2025 GMT Subject: CN=480b9cd9b71a0c7b93b2b47d0689a467a63054f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c2:e7:72:a8:45:c2:bc:2a:de:b8:50:2d:ee: 08:4f:b4:b0:dc:b5:13:45:05:c8:cb:25:7f:53:16: f7:6a:0a:87:01:02:db:75:e2:3a:c8:96:63:3a:8b: 46:c7:37:ee:64:2a:bc:12:21:e6:86:fc:ba:fe:63: d6:4a:ee:d8:ef:07:3f:b6:b8:56:61:b1:4e:05:a2: bc:c2:c6:1f:43:5d:05:68:ba:02:d4:25:46:ff:c3: 69:34:af:ca:83:0f:b6:57:1a:33:6c:e3:a0:37:65: 74:ef:3a:64:26:7f:ba:77:35:50:c1:a6:4a:42:ec: c9:69:eb:40:a0:9b:32:c4:a3:c9:58:ef:34:0f:7e: 75:6e:e3:21:54:56:0c:60:9c:5f:b3:97:cc:f4:d5: cd:f0:1c:c7:c6:f6:82:34:4b:47:ab:39:73:42:b3: 88:3c:34:22:70:c5:23:3c:c5:92:a8:80:f5:10:01: c7:47:d5:e8:f5:47:f4:d4:34:71:56:06:80:a0:50: e7:ea:1a:b6:0c:e3:bc:ca:cf:35:24:ac:d2:0b:00: 51:0f:a1:3a:55:71:ff:17:4c:72:2e:0c:a0:35:b3: e4:ad:22:2e:84:4d:c6:4e:2a:c7:7b:43:81:56:2e: db:ff:eb:85:5d:ea:b5:7e:c6:d2:5c:0a:1e:c8:d9: 4f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:0B:9C:D9:B7:1A:0C:7B:93:B2:B4:7D:06:89:A4:67:A6:30:54:F7 X509v3 Authority Key Identifier: keyid:91:B3:F5:D6:F4:3E:83:07:1F:A7:7E:6D:3E:BB:B7:93:52:F9:61:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:a9:97:73:74:fd:84:29:ad:d8:e0:ec:96:ab:90:8b:21:0f: 1e:ab:f9:10:93:05:01:40:e8:29:26:86:6b:75:c1:49:e8:41: f0:2b:5e:e8:a1:d0:d7:f1:14:85:fb:34:0c:4b:a5:47:2c:d4: 8f:3a:2c:ee:e3:1e:65:96:17:77:d0:65:e9:03:b7:df:51:ad: d5:37:56:be:dc:84:a7:e3:92:57:3d:a1:36:92:5a:7c:c8:2c: c3:e6:a7:84:b9:c3:2e:61:47:34:43:83:a5:44:1b:96:d0:73: 72:fc:b3:55:72:31:6d:24:c2:a2:fe:50:fb:dc:7c:ed:fe:46: a2:05:4c:50:90:6c:b7:9b:6a:c0:f7:29:c8:47:f6:7f:a0:04: 11:ee:7b:91:f2:a2:d6:b8:1f:71:ae:28:d6:c7:d2:ef:bd:98: c9:d4:3e:f5:04:47:f9:db:7d:5b:56:9e:14:0b:ed:c2:4b:ca: 92:78:fc:07:75:0e:6c:15:40:c8:76:87:9f:0e:64:80:1d:31: 6c:df:bc:b2:62:e3:65:63:18:80:6c:4a:7f:ae:3c:d8:83:c3: 63:8b:c5:a2:66:27:c7:f5:dd:40:70:29:3b:50:73:18:76:a1: 68:c1:98:ee:cc:1e:a8:1d:10:67:19:8f:98:25:37:62:02:55: 8e:40:f1:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tV+eGcp/VZnqeeSi12GEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxYjNmNWQ2ZjQzZTgzMDcxZmE3N2U2ZDNlYmJiNzkzNTJm OTYxYjUwHhcNMjUxMjIwMTcwMTE3WhcNMjUxMjIxMTcwMTE3WjAzMTEwLwYDVQQD Eyg0ODBiOWNkOWI3MWEwYzdiOTNiMmI0N2QwNjg5YTQ2N2E2MzA1NGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8LncqhFwrwq3rhQLe4IT7Sw3LUT RQXIyyV/Uxb3agqHAQLbdeI6yJZjOotGxzfuZCq8EiHmhvy6/mPWSu7Y7wc/trhW YbFOBaK8wsYfQ10FaLoC1CVG/8NpNK/Kgw+2VxozbOOgN2V07zpkJn+6dzVQwaZK QuzJaetAoJsyxKPJWO80D351buMhVFYMYJxfs5fM9NXN8BzHxvaCNEtHqzlzQrOI PDQicMUjPMWSqID1EAHHR9Xo9Uf01DRxVgaAoFDn6hq2DOO8ys81JKzSCwBRD6E6 VXH/F0xyLgygNbPkrSIuhE3GTirHe0OBVi7b/+uFXeq1fsbSXAoeyNlPMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEgLnNm3Ggx7k7K0fQaJpGemMFT3MB8GA1UdIwQY MBaAFJGz9db0PoMHH6d+bT67t5NS+WG1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2JQMTF2US1nd2NmcDM1dFBydTNrMUw1WWJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84N2E4NjMtZGE2Zi00OTgxLTkzNzgt YjJjZDRlNTgxMDBlLzEva2JQMTF2US1nd2NmcDM1dFBydTNrMUw1WWJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS84N2E4NjMtZGE2Zi00OTgxLTkzNzgtYjJjZDRlNTgxMDBl LzEva2JQMTF2US1nd2NmcDM1dFBydTNrMUw1WWJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtKmXc3T9 hCmt2ODslquQiyEPHqv5EJMFAUDoKSaGa3XBSehB8Cte6KHQ1/EUhfs0DEulRyzU jzos7uMeZZYXd9Bl6QO331Gt1TdWvtyEp+OSVz2hNpJafMgsw+anhLnDLmFHNEOD pUQbltBzcvyzVXIxbSTCov5Q+9x87f5GogVMUJBst5tqwPcpyEf2f6AEEe57kfKi 1rgfca4o1sfS772YydQ+9QRH+dt9W1aeFAvtwkvKknj8B3UObBVAyHaHnw5kgB0x bN+8smLjZWMYgGxKf6482IPDY4vFomYnx/XdQHApO1BzGHahaMGY7sweqB0QZxmP mCU3YgJVjkDxUg== -----END CERTIFICATE-----Generated at Sun Dec 21 01:37:07 2025 by rpki-client