This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/KMIgKkQ1N_uPsoBWehdIXxIwxBE.mft File: KMIgKkQ1N_uPsoBWehdIXxIwxBE.mft (raw, json) Hash identifier: gC4iIJcAIazV8IBhkmgWxH9Bd4FQhmRxpS+wYAcCVZE= Subject key identifier: F5:FD:3D:24:2C:C4:71:BD:16:97:4F:23:77:86:E1:28:AE:4B:FE:5A Authority key identifier: 28:C2:20:2A:44:35:37:FB:8F:B2:80:56:7A:17:48:5F:12:30:C4:11 Certificate issuer: /CN=28c2202a443537fb8fb280567a17485f1230c411 Certificate serial: 019AF163DC78AFFB9CE24E7060EF2B533F1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMIgKkQ1N_uPsoBWehdIXxIwxBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/KMIgKkQ1N_uPsoBWehdIXxIwxBE.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 02:00:44 +0000 Manifest this update: Sat 06 Dec 2025 02:00:44 +0000 Manifest next update: Sun 07 Dec 2025 02:00:44 +0000 Files and hashes: 1: KMIgKkQ1N_uPsoBWehdIXxIwxBE.crl (hash: 4E0SFOqNO5kBe95S2v6278V4ydXSDPrOFMO473Y/5cw=) 2: rzOkydR3EHFZXD3XEkRebB02-_4.roa (hash: df7jTqxQL8Sw059sbRTkyG9ltt5KtHFaW+BfP29wPTk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/KMIgKkQ1N_uPsoBWehdIXxIwxBE.crl rsync://rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/KMIgKkQ1N_uPsoBWehdIXxIwxBE.mft rsync://rpki.ripe.net/repository/DEFAULT/KMIgKkQ1N_uPsoBWehdIXxIwxBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:dc:78:af:fb:9c:e2:4e:70:60:ef:2b:53:3f:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28c2202a443537fb8fb280567a17485f1230c411 Validity Not Before: Dec 6 02:00:44 2025 GMT Not After : Dec 7 02:00:44 2025 GMT Subject: CN=f5fd3d242cc471bd16974f237786e128ae4bfe5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:7c:5d:b7:9e:1f:a3:86:dd:56:9c:76:31:4d: 0c:06:fb:0c:44:d3:ed:7a:d9:27:cc:2f:46:1d:1f: 73:18:4e:18:71:b7:ba:a3:e8:ea:fd:3b:25:66:46: 17:21:45:98:73:7c:65:85:3d:b3:a9:86:ec:18:13: c9:44:f8:ca:97:f4:08:6c:f7:50:6d:20:ae:57:ef: 23:7f:3c:ca:be:52:4b:42:fa:38:dc:4b:1d:d9:38: 40:73:24:43:8d:3d:21:fc:a3:43:f3:5f:c0:c0:82: 09:e6:ad:2c:02:40:d6:33:61:ef:59:7d:05:6e:ea: 6c:53:68:68:c8:85:f9:a9:53:bb:be:19:ff:79:e4: f3:f8:44:44:db:59:85:bb:a1:e6:f1:4c:7b:a4:92: 17:d4:08:5e:d7:75:92:00:4e:fa:fb:6e:b8:3a:62: 01:17:66:fc:ac:be:07:75:02:60:e9:df:4d:60:07: b0:cf:7a:fb:ae:f2:f2:e9:fd:16:dc:e3:76:df:d0: 6c:7d:3c:c7:b5:eb:a6:52:32:f9:c9:db:94:a4:9d: be:55:7c:d5:3c:7d:38:8f:ba:7c:1e:32:91:79:5d: d1:16:84:b2:0b:c1:7c:75:4d:9e:9c:0e:d0:b4:87: 59:f1:1a:80:50:56:ac:85:58:27:15:d9:7a:42:1e: 80:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:FD:3D:24:2C:C4:71:BD:16:97:4F:23:77:86:E1:28:AE:4B:FE:5A X509v3 Authority Key Identifier: keyid:28:C2:20:2A:44:35:37:FB:8F:B2:80:56:7A:17:48:5F:12:30:C4:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMIgKkQ1N_uPsoBWehdIXxIwxBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/KMIgKkQ1N_uPsoBWehdIXxIwxBE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/KMIgKkQ1N_uPsoBWehdIXxIwxBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:35:23:7e:fe:bb:4c:6c:59:6b:42:25:88:e9:91:9e:9b:48: 85:47:d6:a2:3c:b6:84:64:29:28:4f:e3:79:34:00:6a:78:04: e4:b3:b6:30:3f:d1:e9:e5:a9:52:c0:80:6e:85:9d:25:80:c0: 7f:28:a9:1a:7a:34:15:0a:57:d9:f2:c2:e2:f5:6f:34:fb:40: 64:4f:7c:e7:eb:3b:06:03:f7:d1:4e:9a:bd:8c:47:0f:11:08: 12:f1:07:b9:46:8f:3d:e1:30:2c:9a:7b:12:1e:61:e4:42:1d: dc:7c:bf:d3:3a:ac:b8:aa:da:1e:14:4e:44:d2:5c:47:04:01: 88:e8:df:ee:c1:48:47:4f:31:80:b2:7e:c3:4c:52:d7:67:97: 90:8f:dc:99:8e:96:8e:15:17:ba:ca:6c:ba:bd:7c:6c:43:96: ef:c6:df:ab:84:d1:ca:e5:7a:d7:d9:06:ae:3e:26:a0:17:c6: 42:c1:fc:4b:f5:35:25:6b:c2:40:4d:99:d3:5d:e0:1a:59:bb: c1:cd:87:52:25:53:bb:f2:22:8d:80:2b:78:26:2d:ff:33:ef: 1b:ea:59:9e:ab:44:6c:6d:07:6a:8f:ec:87:b2:84:86:0d:a0: 16:14:f0:9f:6f:44:35:36:d7:b2:6a:46:e5:5e:63:d0:c9:8c: ca:da:49:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY9x4r/uc4k5wYO8rUz8fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4YzIyMDJhNDQzNTM3ZmI4ZmIyODA1NjdhMTc0ODVmMTIz MGM0MTEwHhcNMjUxMjA2MDIwMDQ0WhcNMjUxMjA3MDIwMDQ0WjAzMTEwLwYDVQQD EyhmNWZkM2QyNDJjYzQ3MWJkMTY5NzRmMjM3Nzg2ZTEyOGFlNGJmZTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9nxdt54fo4bdVpx2MU0MBvsMRNPt etknzC9GHR9zGE4Ycbe6o+jq/TslZkYXIUWYc3xlhT2zqYbsGBPJRPjKl/QIbPdQ bSCuV+8jfzzKvlJLQvo43Esd2ThAcyRDjT0h/KND81/AwIIJ5q0sAkDWM2HvWX0F bupsU2hoyIX5qVO7vhn/eeTz+ERE21mFu6Hm8Ux7pJIX1Ahe13WSAE76+264OmIB F2b8rL4HdQJg6d9NYAewz3r7rvLy6f0W3ON239BsfTzHteumUjL5yduUpJ2+VXzV PH04j7p8HjKReV3RFoSyC8F8dU2enA7QtIdZ8RqAUFashVgnFdl6Qh6AbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPX9PSQsxHG9FpdPI3eG4SiuS/5aMB8GA1UdIwQY MBaAFCjCICpENTf7j7KAVnoXSF8SMMQRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS01JZ0trUTFOX3VQc29CV2VoZElYeEl3eEJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9hMmNlNjQtMzNhZi00NWZlLTkwZWIt ODlkMjYxMWE5NWRiLzEvS01JZ0trUTFOX3VQc29CV2VoZElYeEl3eEJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9hMmNlNjQtMzNhZi00NWZlLTkwZWItODlkMjYxMWE5NWRi LzEvS01JZ0trUTFOX3VQc29CV2VoZElYeEl3eEJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFzUjfv67 TGxZa0IliOmRnptIhUfWojy2hGQpKE/jeTQAangE5LO2MD/R6eWpUsCAboWdJYDA fyipGno0FQpX2fLC4vVvNPtAZE985+s7BgP30U6avYxHDxEIEvEHuUaPPeEwLJp7 Eh5h5EId3Hy/0zqsuKraHhRORNJcRwQBiOjf7sFIR08xgLJ+w0xS12eXkI/cmY6W jhUXuspsur18bEOW78bfq4TRyuV619kGrj4moBfGQsH8S/U1JWvCQE2Z013gGlm7 wc2HUiVTu/IijYAreCYt/zPvG+pZnqtEbG0Hao/sh7KEhg2gFhTwn29ENTbXsmpG 5V5j0MmMytpJOQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:51:03 2025 by rpki-client