This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft File: KgzEYwHIsf1GOSkwGPulNlOiZbI.mft (raw, json) Hash identifier: nWSKbeTkImJkPbKii19iQGyicnYNzW2tuX3aUTMngZ8= Subject key identifier: 4E:A9:C4:5D:3A:63:7D:90:DB:2F:6C:EE:64:90:FF:C1:A7:C4:1B:3F Authority key identifier: 2A:0C:C4:63:01:C8:B1:FD:46:39:29:30:18:FB:A5:36:53:A2:65:B2 Certificate issuer: /CN=2a0cc46301c8b1fd4639293018fba53653a265b2 Certificate serial: 019AF209457F9F00074A45B11040D35BBE8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 05:01:25 +0000 Manifest this update: Sat 06 Dec 2025 05:01:25 +0000 Manifest next update: Sun 07 Dec 2025 05:01:25 +0000 Files and hashes: 1: 25LU7394eXHg-PBe4_GLTG3VIkw.roa (hash: HyP22/g9CSOKH8mPcT6JDAYedjiAUR/5O/lp9cDajCk=) 2: KgzEYwHIsf1GOSkwGPulNlOiZbI.crl (hash: 3cN7E6CCZF5MxVDNbTV1qMUEBDkiyo/HI553oHQZCdE=) 3: VUqvat4WtfuUczhMBY4TDvxEK_s.roa (hash: Zqzw2dEApvnq4zRqyWAKudIEokzGJ+rSfWzcaKX+at0=) 4: jfIFCuUZlCfoxkAB48zp-OMBSv0.roa (hash: tfMbXizXQYE7ANVbZs7KN2qDtk5wxuAhU53t/l8imds=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.crl rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:45:7f:9f:00:07:4a:45:b1:10:40:d3:5b:be:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a0cc46301c8b1fd4639293018fba53653a265b2 Validity Not Before: Dec 6 05:01:25 2025 GMT Not After : Dec 7 05:01:25 2025 GMT Subject: CN=4ea9c45d3a637d90db2f6cee6490ffc1a7c41b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:83:33:0c:62:ee:4c:2f:3d:b2:f5:75:4e:28: aa:30:e0:48:df:b5:c9:49:5e:78:fc:e5:dc:7e:2f: a4:74:91:50:87:26:cb:e6:bf:3f:0b:ed:7f:af:78: 5b:33:8e:af:9b:64:33:5f:73:51:a3:2d:5a:1f:f3: de:3d:35:92:33:2e:a4:8e:9b:87:e5:c2:34:0e:20: e7:48:dc:9f:5b:98:f8:e6:52:60:ea:11:1b:50:80: 01:78:84:ae:9b:c4:31:83:78:ee:c3:8b:41:fb:e5: ab:0c:aa:f8:d8:56:58:6c:2b:49:be:d1:9f:99:81: 80:ac:6d:e5:41:f5:2b:28:ef:1e:4a:40:4f:a2:5a: f2:e7:ef:40:1a:f8:54:88:77:b0:20:88:95:44:0d: 97:b4:9d:e2:24:92:4a:46:c1:a4:a5:9d:fd:11:1b: a0:3c:37:67:b5:ce:e8:f2:e0:98:4f:13:73:4b:33: ae:4f:95:c8:8d:1b:3e:7d:73:87:47:3a:f0:91:70: 45:7d:75:09:85:f9:db:33:8b:bf:db:d8:38:0a:b9: f9:cd:b1:52:d5:9f:c9:b2:48:84:eb:86:c8:d9:e2: a0:64:d8:d2:08:a9:a2:4f:81:f9:b8:e0:34:38:f7: a5:9b:2b:20:71:70:1e:5d:e6:f0:95:34:42:4f:ee: 64:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A9:C4:5D:3A:63:7D:90:DB:2F:6C:EE:64:90:FF:C1:A7:C4:1B:3F X509v3 Authority Key Identifier: keyid:2A:0C:C4:63:01:C8:B1:FD:46:39:29:30:18:FB:A5:36:53:A2:65:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:cd:a2:4c:b4:aa:38:b1:6d:d8:26:e5:58:c3:a2:fb:08:ec: b3:0e:da:2b:30:0a:3b:06:f2:61:b3:df:10:05:42:27:e8:a2: c3:c4:c7:b2:a0:c3:2b:3f:66:c0:13:cc:c9:8d:86:87:c1:85: fc:f2:58:16:0c:a8:17:53:b3:94:e7:c5:18:76:ce:b7:7f:21: 98:96:c6:1d:35:66:a3:54:ba:fd:3f:e7:ca:a0:bf:25:ae:e9: 9c:7c:d9:40:94:70:fa:e2:57:21:7d:4e:56:a9:ed:b6:be:07: cd:c3:24:e4:a2:57:ac:84:01:dc:48:ec:af:bd:1b:59:b7:0f: b0:40:f9:b7:dd:b5:22:c6:b3:82:13:bb:71:fe:9e:26:e6:6e: ac:d4:22:72:28:96:76:ea:b2:f6:09:f8:e5:fa:d8:fc:74:10: 79:a7:98:9d:68:7b:04:38:a6:12:3a:db:9a:7b:d9:16:49:0b: bb:92:91:88:18:ca:cd:2d:e9:ad:51:7b:65:7f:94:03:6a:73: d0:dd:5a:27:1a:c5:20:b3:35:fe:9c:d2:f6:1a:3d:28:31:c8: c8:e2:c1:3d:f3:17:8d:15:3c:9a:bc:91:7e:65:a1:5f:01:1e: 74:80:6c:3e:f0:ec:aa:50:fe:78:75:34:45:2a:1f:78:bf:e1: b4:35:d1:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUV/nwAHSkWxEEDTW76PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhMGNjNDYzMDFjOGIxZmQ0NjM5MjkzMDE4ZmJhNTM2NTNh MjY1YjIwHhcNMjUxMjA2MDUwMTI1WhcNMjUxMjA3MDUwMTI1WjAzMTEwLwYDVQQD Eyg0ZWE5YzQ1ZDNhNjM3ZDkwZGIyZjZjZWU2NDkwZmZjMWE3YzQxYjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoMzDGLuTC89svV1TiiqMOBI37XJ SV54/OXcfi+kdJFQhybL5r8/C+1/r3hbM46vm2QzX3NRoy1aH/PePTWSMy6kjpuH 5cI0DiDnSNyfW5j45lJg6hEbUIABeISum8Qxg3juw4tB++WrDKr42FZYbCtJvtGf mYGArG3lQfUrKO8eSkBPolry5+9AGvhUiHewIIiVRA2XtJ3iJJJKRsGkpZ39ERug PDdntc7o8uCYTxNzSzOuT5XIjRs+fXOHRzrwkXBFfXUJhfnbM4u/29g4Crn5zbFS 1Z/JskiE64bI2eKgZNjSCKmiT4H5uOA0OPelmysgcXAeXebwlTRCT+5kLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE6pxF06Y32Q2y9s7mSQ/8GnxBs/MB8GA1UdIwQY MBaAFCoMxGMByLH9RjkpMBj7pTZTomWyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2d6RVl3SElzZjFHT1Nrd0dQdWxObE9pWmJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8yODYyZDEtMmNjOS00NTY1LTg2YzIt MmJiNTU5N2EyNDM1LzEvS2d6RVl3SElzZjFHT1Nrd0dQdWxObE9pWmJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8yODYyZDEtMmNjOS00NTY1LTg2YzItMmJiNTU5N2EyNDM1 LzEvS2d6RVl3SElzZjFHT1Nrd0dQdWxObE9pWmJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJs2iTLSq OLFt2CblWMOi+wjssw7aKzAKOwbyYbPfEAVCJ+iiw8THsqDDKz9mwBPMyY2Gh8GF /PJYFgyoF1OzlOfFGHbOt38hmJbGHTVmo1S6/T/nyqC/Ja7pnHzZQJRw+uJXIX1O Vqnttr4HzcMk5KJXrIQB3Ejsr70bWbcPsED5t921IsazghO7cf6eJuZurNQiciiW duqy9gn45frY/HQQeaeYnWh7BDimEjrbmnvZFkkLu5KRiBjKzS3prVF7ZX+UA2pz 0N1aJxrFILM1/pzS9ho9KDHIyOLBPfMXjRU8mryRfmWhXwEedIBsPvDsqlD+eHU0 RSofeL/htDXRPw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:39 2025 by rpki-client