This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft File: KBeCQ6CGawkSctHh60UeceQTuZo.mft (raw, json) Hash identifier: m6eAKss1ioucO9z7Lho6bMM3T73mPn0KU2wVdMrck9o= Subject key identifier: 28:B3:63:19:63:E5:32:EB:44:6A:83:E0:05:2B:D4:83:27:9F:92:10 Authority key identifier: 28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A Certificate issuer: /CN=28178243a0866b091272d1e1eb451e71e413b99a Certificate serial: 019AFBE7D5FE0B6C50ED0DD6902EFBB8B8BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft Manifest number: 07A9 Signing time: Mon 08 Dec 2025 03:01:06 +0000 Manifest this update: Mon 08 Dec 2025 03:01:06 +0000 Manifest next update: Tue 09 Dec 2025 03:01:06 +0000 Files and hashes: 1: 9b2tSpH9I_YDuaAeaEvrPjYTSYA.roa (hash: CQ+HO3gorMuwRRve3+ZDJ9LD5LzYPKSs3rQmvQ37N3I=) 2: KBeCQ6CGawkSctHh60UeceQTuZo.crl (hash: yR2nEk+sN7NPe8vewvCMwz/sFvyufUN8IA4CFErn92w=) 3: aXUaEE4Rc3FPn930-LUjFOMalKE.roa (hash: k4xvVX6CkM3fxWMUWFx76Dj4mkNerIxARf8E+Dyy4rw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:e7:d5:fe:0b:6c:50:ed:0d:d6:90:2e:fb:b8:b8:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28178243a0866b091272d1e1eb451e71e413b99a Validity Not Before: Dec 8 03:01:06 2025 GMT Not After : Dec 9 03:01:06 2025 GMT Subject: CN=28b3631963e532eb446a83e0052bd483279f9210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:40:fa:fb:ca:43:a7:6b:be:27:fd:6d:9d:f6: 85:ef:96:77:88:f8:52:6e:3c:67:3b:4f:2e:93:eb: e1:42:1f:7e:b9:68:41:90:e1:62:5f:fc:1e:b1:da: 31:5f:4f:68:56:d0:69:1c:0d:e4:ac:1e:ca:58:42: 1c:74:ac:30:06:50:b6:77:e3:5a:59:bb:61:cd:4e: c0:82:70:7a:1e:5a:19:56:fc:18:d6:1c:bf:d8:53: 55:0f:82:85:96:54:fd:ef:cb:05:e4:38:8c:1c:ef: 1b:cb:67:8a:27:73:2c:05:16:ae:ca:3d:2d:56:81: 89:80:79:3f:e7:25:ff:b8:b0:69:ff:fa:71:97:9b: 07:2d:c9:05:be:e4:25:cd:dc:74:5d:c8:10:d2:6e: 19:1a:e7:26:2b:b4:3f:78:1a:ab:0d:32:5f:61:e2: a1:be:5a:17:42:06:07:bf:ca:4a:32:ac:50:c6:4e: f7:74:d5:fb:d9:80:5f:a7:d8:9b:8e:80:6d:fd:e4: 2f:93:4a:2c:45:bf:04:7a:d9:0f:f7:aa:db:c9:e3: ed:1c:3f:36:81:00:17:fa:1e:e4:30:db:d0:f5:a2: ab:82:30:40:e4:55:2a:b6:3a:35:0e:ba:ff:9e:90: cd:b5:2e:bc:55:74:29:b1:d2:cc:17:fe:8e:ee:c3: 2a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B3:63:19:63:E5:32:EB:44:6A:83:E0:05:2B:D4:83:27:9F:92:10 X509v3 Authority Key Identifier: keyid:28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:46:66:9a:28:2e:d7:88:a6:3d:5d:04:5c:20:cc:d9:31:76: 68:cb:a3:1a:fe:41:cf:cf:45:96:9e:db:db:71:bb:88:2e:69: 82:59:6c:f8:a6:14:65:f4:b7:f5:94:99:c0:fc:bf:62:f3:d2: d8:48:80:34:a0:0c:ee:13:2b:28:e5:85:f4:ca:93:2f:1a:5b: f9:56:15:f9:12:a4:0d:ef:2b:4c:f3:55:54:c5:37:45:87:c1: 29:db:ad:f3:6b:41:15:a1:28:df:3f:e6:d1:f2:c0:44:05:07: 39:fe:dd:6f:91:09:6e:40:38:bc:4f:9e:31:dc:42:82:dc:8f: 8a:64:93:ed:60:b5:53:6d:e0:62:5c:00:a7:f4:6d:63:04:0f: eb:70:cb:54:23:f0:c3:63:3c:9e:95:18:1d:16:b3:57:a2:26: 15:47:40:6f:40:08:be:70:6b:59:e1:f1:2a:d5:3d:c5:98:9c: 6e:9b:3a:ad:78:80:ab:6d:cc:fc:f5:2c:0a:a3:54:cc:e5:6b: 6e:42:49:56:73:5d:c8:9e:7f:3d:fa:98:a1:24:72:14:ac:43: 78:da:e6:eb:96:e4:73:bc:f9:5e:ac:1b:72:f6:b0:0b:a6:a3: d7:69:d4:94:75:30:f3:2d:be:3b:c9:8c:49:be:30:8d:94:b5: 6b:3e:09:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr759X+C2xQ7Q3WkC77uLi/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MTc4MjQzYTA4NjZiMDkxMjcyZDFlMWViNDUxZTcxZTQx M2I5OWEwHhcNMjUxMjA4MDMwMTA2WhcNMjUxMjA5MDMwMTA2WjAzMTEwLwYDVQQD EygyOGIzNjMxOTYzZTUzMmViNDQ2YTgzZTAwNTJiZDQ4MzI3OWY5MjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ED6+8pDp2u+J/1tnfaF75Z3iPhS bjxnO08uk+vhQh9+uWhBkOFiX/wesdoxX09oVtBpHA3krB7KWEIcdKwwBlC2d+Na WbthzU7AgnB6HloZVvwY1hy/2FNVD4KFllT978sF5DiMHO8by2eKJ3MsBRauyj0t VoGJgHk/5yX/uLBp//pxl5sHLckFvuQlzdx0XcgQ0m4ZGucmK7Q/eBqrDTJfYeKh vloXQgYHv8pKMqxQxk73dNX72YBfp9ibjoBt/eQvk0osRb8EetkP96rbyePtHD82 gQAX+h7kMNvQ9aKrgjBA5FUqtjo1Drr/npDNtS68VXQpsdLMF/6O7sMqQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCizYxlj5TLrRGqD4AUr1IMnn5IQMB8GA1UdIwQY MBaAFCgXgkOghmsJEnLR4etFHnHkE7maMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0JlQ1E2Q0dhd2tTY3RIaDYwVWVjZVFUdVpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS83NDdkYjgtYWM1Ny00NmE4LWI2MzIt NmNlM2MwM2ExMzRjLzEvS0JlQ1E2Q0dhd2tTY3RIaDYwVWVjZVFUdVpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS83NDdkYjgtYWM1Ny00NmE4LWI2MzItNmNlM2MwM2ExMzRj LzEvS0JlQ1E2Q0dhd2tTY3RIaDYwVWVjZVFUdVpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlEZmmigu 14imPV0EXCDM2TF2aMujGv5Bz89Flp7b23G7iC5pglls+KYUZfS39ZSZwPy/YvPS 2EiANKAM7hMrKOWF9MqTLxpb+VYV+RKkDe8rTPNVVMU3RYfBKdut82tBFaEo3z/m 0fLARAUHOf7db5EJbkA4vE+eMdxCgtyPimST7WC1U23gYlwAp/RtYwQP63DLVCPw w2M8npUYHRazV6ImFUdAb0AIvnBrWeHxKtU9xZicbps6rXiAq23M/PUsCqNUzOVr bkJJVnNdyJ5/PfqYoSRyFKxDeNrm65bkc7z5XqwbcvawC6aj12nUlHUw8y2+O8mM Sb4wjZS1az4J0A== -----END CERTIFICATE-----Generated at Mon Dec 8 09:36:06 2025 by rpki-client