This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft File: kGDG8B34XUoDPxJWU-Exe29Chk4.mft (raw, json) Hash identifier: 1gCgEUN5w2RGx3RsrJV2SRttOexf9VAiPmFFFdSYMlY= Subject key identifier: B2:07:48:1D:F1:DA:FA:93:D3:04:C2:7C:5E:39:D4:E6:DB:A1:49:88 Authority key identifier: 90:60:C6:F0:1D:F8:5D:4A:03:3F:12:56:53:E1:31:7B:6F:42:86:4E Certificate issuer: /CN=9060c6f01df85d4a033f125653e1317b6f42864e Certificate serial: 019AF19AEED6F85B34E71A6055C212811344 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft Manifest number: 1160 Signing time: Sat 06 Dec 2025 03:00:53 +0000 Manifest this update: Sat 06 Dec 2025 03:00:53 +0000 Manifest next update: Sun 07 Dec 2025 03:00:53 +0000 Files and hashes: 1: 1-p8SrWJ5THOyKbL_R9fZqVDF5Lg.roa (hash: Dpj5AMuFNg0086YuEbRvx4oDSlmmrMJ7GujnIQgUfaA=) 2: kGDG8B34XUoDPxJWU-Exe29Chk4.crl (hash: j//dLjBrbHVwrss97NJ6Q2DnfZsduITJI44bmhpTshQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.crl rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:ee:d6:f8:5b:34:e7:1a:60:55:c2:12:81:13:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9060c6f01df85d4a033f125653e1317b6f42864e Validity Not Before: Dec 6 03:00:53 2025 GMT Not After : Dec 7 03:00:53 2025 GMT Subject: CN=b207481df1dafa93d304c27c5e39d4e6dba14988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9b:e3:2e:3f:2b:68:72:c9:4a:59:8e:ce:0f: 9b:33:1f:90:fd:e8:8d:c7:6d:cc:d7:1d:42:af:e3: 85:0d:7e:a5:1e:71:82:94:21:8c:1e:6c:18:ce:82: cd:4e:af:5c:62:cb:3a:ce:a2:97:d8:d0:e9:37:7a: 5d:ce:e3:34:69:cc:fb:8f:ad:9e:21:97:11:ae:39: 19:00:ec:a2:20:42:75:3b:da:12:69:0d:db:7f:f1: 6c:46:ca:0d:d5:95:e8:e1:a2:ec:5a:49:a4:fd:5f: 19:da:01:2e:16:2b:ad:b4:57:c8:48:ca:7a:ef:55: e1:bf:f0:54:c3:b6:04:f0:bd:a9:84:7e:9d:2b:97: 51:b7:04:f4:3d:2f:c1:13:dd:18:e5:5a:83:14:ab: b9:8d:66:fb:e0:cc:41:37:dd:8a:3b:af:cf:1b:36: 5e:d6:4c:5c:9d:a9:10:7a:69:5f:38:48:fd:26:57: 87:81:a1:b4:bd:6c:3f:7d:5b:e9:68:c6:4d:a2:39: 1c:6e:8d:7c:b3:5e:cf:3d:ce:b2:36:48:51:33:b9: d8:71:8e:2a:6f:4a:af:e1:67:e6:11:0d:0a:c0:b1: 27:83:86:60:1f:f4:d5:47:f2:b5:a7:ac:57:37:42: 4f:bd:8b:f1:8f:43:13:5b:2a:c1:0b:b6:33:d6:62: 2f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:07:48:1D:F1:DA:FA:93:D3:04:C2:7C:5E:39:D4:E6:DB:A1:49:88 X509v3 Authority Key Identifier: keyid:90:60:C6:F0:1D:F8:5D:4A:03:3F:12:56:53:E1:31:7B:6F:42:86:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:db:ca:a2:05:7a:6e:12:6c:d1:1e:b0:3c:de:9f:60:85:cf: 5d:f6:67:1a:bb:da:61:d7:b2:67:d4:64:40:28:26:ba:c5:3a: 00:ea:34:76:9a:8b:be:3f:47:d8:99:6d:df:fb:a7:07:d8:04: 7d:0f:ef:e7:14:db:84:b0:63:5a:18:22:10:d2:db:1a:a1:79: 1e:ab:9f:91:81:d6:f6:b0:7e:5c:6a:97:44:52:dc:c1:51:13: 6d:d0:d9:16:ba:f4:70:41:8b:02:44:9f:b4:2d:e2:f4:0c:e1: 0d:d8:81:91:2e:bf:35:bf:8b:5d:c9:01:90:fc:74:c3:61:4e: 8e:93:4a:d5:0f:d7:53:c4:8f:a3:8f:30:4f:80:14:9d:1e:dd: 85:85:45:e2:64:e2:09:c4:51:0b:0a:84:f0:47:11:ba:36:a4: 82:40:ef:ff:93:93:5a:9c:28:46:5f:de:c4:d5:e5:34:3e:13: 89:9e:05:eb:9b:22:c7:3c:bf:ae:23:55:64:9d:3d:43:b7:6c: 63:54:f4:fb:ac:41:03:f0:76:ff:a5:82:15:2d:04:79:0e:71: 49:cd:4b:7d:3c:03:e9:a9:a6:05:0e:35:ad:f1:1a:dd:bd:0b: 29:b1:bc:64:7d:a4:45:2c:19:7e:dd:e9:08:5c:f1:cb:e1:2a: ec:ca:30:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmu7W+Fs05xpgVcISgRNEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwNjBjNmYwMWRmODVkNGEwMzNmMTI1NjUzZTEzMTdiNmY0 Mjg2NGUwHhcNMjUxMjA2MDMwMDUzWhcNMjUxMjA3MDMwMDUzWjAzMTEwLwYDVQQD EyhiMjA3NDgxZGYxZGFmYTkzZDMwNGMyN2M1ZTM5ZDRlNmRiYTE0OTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJvjLj8raHLJSlmOzg+bMx+Q/eiN x23M1x1Cr+OFDX6lHnGClCGMHmwYzoLNTq9cYss6zqKX2NDpN3pdzuM0acz7j62e IZcRrjkZAOyiIEJ1O9oSaQ3bf/FsRsoN1ZXo4aLsWkmk/V8Z2gEuFiuttFfISMp6 71Xhv/BUw7YE8L2phH6dK5dRtwT0PS/BE90Y5VqDFKu5jWb74MxBN92KO6/PGzZe 1kxcnakQemlfOEj9JleHgaG0vWw/fVvpaMZNojkcbo18s17PPc6yNkhRM7nYcY4q b0qv4WfmEQ0KwLEng4ZgH/TVR/K1p6xXN0JPvYvxj0MTWyrBC7Yz1mIv8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLIHSB3x2vqT0wTCfF451ObboUmIMB8GA1UdIwQY MBaAFJBgxvAd+F1KAz8SVlPhMXtvQoZOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0dERzhCMzRYVW9EUHhKV1UtRXhlMjlDaGs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82N2QwN2MtYTU2MS00NTdmLWEwNDQt Y2UwYjhhNTFhNDUxLzEva0dERzhCMzRYVW9EUHhKV1UtRXhlMjlDaGs0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS82N2QwN2MtYTU2MS00NTdmLWEwNDQtY2UwYjhhNTFhNDUx LzEva0dERzhCMzRYVW9EUHhKV1UtRXhlMjlDaGs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYdvKogV6 bhJs0R6wPN6fYIXPXfZnGrvaYdeyZ9RkQCgmusU6AOo0dpqLvj9H2Jlt3/unB9gE fQ/v5xTbhLBjWhgiENLbGqF5HqufkYHW9rB+XGqXRFLcwVETbdDZFrr0cEGLAkSf tC3i9AzhDdiBkS6/Nb+LXckBkPx0w2FOjpNK1Q/XU8SPo48wT4AUnR7dhYVF4mTi CcRRCwqE8EcRujakgkDv/5OTWpwoRl/exNXlND4TiZ4F65sixzy/riNVZJ09Q7ds Y1T0+6xBA/B2/6WCFS0EeQ5xSc1LfTwD6ammBQ41rfEa3b0LKbG8ZH2kRSwZft3p CFzxy+Eq7MowhA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:59:01 2025 by rpki-client