This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/0ced58-5b1d-42e3-8da6-3db7fe8f6783/1/kiGxuiPNnBINnmfHS16SkKcq3SA.mft File: kiGxuiPNnBINnmfHS16SkKcq3SA.mft (raw, json) Hash identifier: P6qBJr9VoJKGCuexjgrWvOHVjuGFAFtKIqvbxxiIVQo= Subject key identifier: 4A:67:9C:D9:3E:C4:1C:AA:8D:94:77:97:70:F9:84:9D:8D:44:26:B7 Authority key identifier: 92:21:B1:BA:23:CD:9C:12:0D:9E:67:C7:4B:5E:92:90:A7:2A:DD:20 Certificate issuer: /CN=9221b1ba23cd9c120d9e67c74b5e9290a72add20 Certificate serial: 019AF23FC92CF90E5F6D08E5F0C88C1C40B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiGxuiPNnBINnmfHS16SkKcq3SA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ced58-5b1d-42e3-8da6-3db7fe8f6783/1/kiGxuiPNnBINnmfHS16SkKcq3SA.mft Manifest number: 013C Signing time: Sat 06 Dec 2025 06:00:57 +0000 Manifest this update: Sat 06 Dec 2025 06:00:57 +0000 Manifest next update: Sun 07 Dec 2025 06:00:57 +0000 Files and hashes: 1: kiGxuiPNnBINnmfHS16SkKcq3SA.crl (hash: 0x97i1kEs1PvjELvEn16EIlb3rBPKeEPHmjp9E8c4AM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ced58-5b1d-42e3-8da6-3db7fe8f6783/1/kiGxuiPNnBINnmfHS16SkKcq3SA.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/0ced58-5b1d-42e3-8da6-3db7fe8f6783/1/kiGxuiPNnBINnmfHS16SkKcq3SA.mft rsync://rpki.ripe.net/repository/DEFAULT/kiGxuiPNnBINnmfHS16SkKcq3SA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:c9:2c:f9:0e:5f:6d:08:e5:f0:c8:8c:1c:40:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9221b1ba23cd9c120d9e67c74b5e9290a72add20 Validity Not Before: Dec 6 06:00:57 2025 GMT Not After : Dec 7 06:00:57 2025 GMT Subject: CN=4a679cd93ec41caa8d94779770f9849d8d4426b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:41:38:16:c4:c6:48:9e:f4:6e:06:e8:83:a7: d9:37:89:f1:cd:fa:7b:db:ef:90:2b:0f:8e:0a:fc: b8:2d:5c:a2:6d:f2:3f:20:51:08:52:bb:f9:84:fc: d0:45:0b:78:9a:1f:23:ab:0b:ec:bb:30:a3:79:78: 28:1a:06:7d:2e:84:62:ec:c2:e1:fc:20:20:7c:da: e8:42:c3:b1:55:a2:17:2d:e5:2e:90:72:16:20:11: 42:a9:ab:08:db:02:cd:9e:ba:b9:b7:06:40:89:ce: bb:b0:6b:9a:32:75:19:54:7d:04:49:6f:31:10:7b: 77:ca:93:c3:30:e6:0e:ce:84:29:5c:ff:6e:f2:64: cd:8c:c7:f4:cd:67:3b:af:94:43:32:74:26:c9:c5: 56:b2:ba:49:61:58:11:65:aa:a2:56:a4:5b:83:cb: 49:2d:fa:88:70:c6:3a:b4:64:d0:ac:92:92:96:41: ae:db:47:ab:43:17:34:f6:18:74:5f:80:0e:8c:30: b8:a6:3f:1b:7a:c0:5d:48:86:ec:d7:3b:3e:07:fb: 2a:39:e8:70:9e:8b:c1:63:83:aa:64:e7:bb:6d:da: 2a:82:e7:1d:a3:3c:7b:66:6a:b3:43:4d:df:8d:7d: 2c:12:84:dd:ee:6b:a2:46:e6:fb:61:fb:4b:0f:a2: 3b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:67:9C:D9:3E:C4:1C:AA:8D:94:77:97:70:F9:84:9D:8D:44:26:B7 X509v3 Authority Key Identifier: keyid:92:21:B1:BA:23:CD:9C:12:0D:9E:67:C7:4B:5E:92:90:A7:2A:DD:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiGxuiPNnBINnmfHS16SkKcq3SA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ced58-5b1d-42e3-8da6-3db7fe8f6783/1/kiGxuiPNnBINnmfHS16SkKcq3SA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ced58-5b1d-42e3-8da6-3db7fe8f6783/1/kiGxuiPNnBINnmfHS16SkKcq3SA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:96:7c:f5:1c:be:3a:c3:32:09:f8:ae:bd:3a:97:45:68:cc: ce:0c:e0:dd:82:4b:b4:d6:95:67:60:1c:d8:18:d5:ee:03:ba: dd:3e:8f:1e:55:a2:28:cd:d3:40:e9:21:ae:71:37:77:32:ab: 54:96:f8:2e:34:03:33:ff:c2:26:a4:a1:19:93:35:bc:16:c7: f3:06:4d:10:b0:75:cb:6f:6a:0f:da:d6:c6:75:fe:6d:7a:03: 7e:42:54:ff:bc:e1:2b:53:23:23:f9:da:7c:f1:e2:b5:3b:ec: ed:9f:92:91:5b:2c:1d:f0:fd:2e:b6:e6:a5:fc:ee:7c:be:cf: 7c:c8:64:d1:2d:00:2f:52:d4:32:40:a0:01:d6:cc:26:3e:e8: af:8a:9b:7e:ca:da:1d:65:58:02:58:01:d0:9f:34:ab:5e:18: a9:e7:95:8b:eb:9b:f8:f6:7f:f0:22:53:83:0b:4b:d7:04:fa: 1f:a3:87:3d:43:9b:a4:51:13:47:16:f6:a8:71:d4:10:b7:25: 6d:b6:8d:73:94:73:5f:6f:b7:bf:8b:81:7d:d0:3a:05:97:d3: 2f:f5:68:bb:10:f3:37:f9:5e:32:c6:14:29:4e:f2:20:4c:e9: 14:fc:1a:03:f8:76:28:f4:e7:9e:60:ac:13:74:03:fd:b2:b2: 7b:a6:1b:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP8ks+Q5fbQjl8MiMHECzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMjFiMWJhMjNjZDljMTIwZDllNjdjNzRiNWU5MjkwYTcy YWRkMjAwHhcNMjUxMjA2MDYwMDU3WhcNMjUxMjA3MDYwMDU3WjAzMTEwLwYDVQQD Eyg0YTY3OWNkOTNlYzQxY2FhOGQ5NDc3OTc3MGY5ODQ5ZDhkNDQyNmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEE4FsTGSJ70bgbog6fZN4nxzfp7 2++QKw+OCvy4LVyibfI/IFEIUrv5hPzQRQt4mh8jqwvsuzCjeXgoGgZ9LoRi7MLh /CAgfNroQsOxVaIXLeUukHIWIBFCqasI2wLNnrq5twZAic67sGuaMnUZVH0ESW8x EHt3ypPDMOYOzoQpXP9u8mTNjMf0zWc7r5RDMnQmycVWsrpJYVgRZaqiVqRbg8tJ LfqIcMY6tGTQrJKSlkGu20erQxc09hh0X4AOjDC4pj8besBdSIbs1zs+B/sqOehw novBY4OqZOe7bdoqgucdozx7ZmqzQ03fjX0sEoTd7muiRub7YftLD6I7qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEpnnNk+xByqjZR3l3D5hJ2NRCa3MB8GA1UdIwQY MBaAFJIhsbojzZwSDZ5nx0tekpCnKt0gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2lHeHVpUE5uQklObm1mSFMxNlNrS2NxM1NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8wY2VkNTgtNWIxZC00MmUzLThkYTYt M2RiN2ZlOGY2NzgzLzEva2lHeHVpUE5uQklObm1mSFMxNlNrS2NxM1NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS8wY2VkNTgtNWIxZC00MmUzLThkYTYtM2RiN2ZlOGY2Nzgz LzEva2lHeHVpUE5uQklObm1mSFMxNlNrS2NxM1NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU5Z89Ry+ OsMyCfiuvTqXRWjMzgzg3YJLtNaVZ2Ac2BjV7gO63T6PHlWiKM3TQOkhrnE3dzKr VJb4LjQDM//CJqShGZM1vBbH8wZNELB1y29qD9rWxnX+bXoDfkJU/7zhK1MjI/na fPHitTvs7Z+SkVssHfD9LrbmpfzufL7PfMhk0S0AL1LUMkCgAdbMJj7or4qbfsra HWVYAlgB0J80q14YqeeVi+ub+PZ/8CJTgwtL1wT6H6OHPUObpFETRxb2qHHUELcl bbaNc5RzX2+3v4uBfdA6BZfTL/VouxDzN/leMsYUKU7yIEzpFPwaA/h2KPTnnmCs E3QD/bKye6Yb0A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:32 2025 by rpki-client