This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft File: KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft (raw, json) Hash identifier: 1NVIstKrxS99DXCSDqoTgmIdlbEEhVx77sAhMRa+9LM= Subject key identifier: 68:47:A2:37:37:53:1A:9B:A0:1C:B2:20:1E:A5:8A:4E:05:58:AB:AB Authority key identifier: 28:36:48:AF:F8:86:18:5F:FC:E3:62:6F:09:0F:11:9A:3E:4E:DE:35 Certificate issuer: /CN=283648aff886185ffce3626f090f119a3e4ede35 Certificate serial: 019B32685BA27C41436109D547C67572B8D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KDZIr_iGGF_842JvCQ8Rmj5O3jU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 17:00:58 +0000 Manifest this update: Thu 18 Dec 2025 17:00:58 +0000 Manifest next update: Fri 19 Dec 2025 17:00:58 +0000 Files and hashes: 1: KDZIr_iGGF_842JvCQ8Rmj5O3jU.crl (hash: Cs+iQg73dVzlr8UcO4CBinOUShHNqAxiynKiRqcB8nM=) 2: XhkT1eFNXwGFl9CWLS9N7T67Cu4.roa (hash: 48Vc4tJA9v+KllK28V53zCHphJsA0bfyopYkodUcdk4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.crl rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft rsync://rpki.ripe.net/repository/DEFAULT/KDZIr_iGGF_842JvCQ8Rmj5O3jU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 17:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:5b:a2:7c:41:43:61:09:d5:47:c6:75:72:b8:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=283648aff886185ffce3626f090f119a3e4ede35 Validity Not Before: Dec 18 17:00:58 2025 GMT Not After : Dec 19 17:00:58 2025 GMT Subject: CN=6847a23737531a9ba01cb2201ea58a4e0558abab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:08:1b:e4:e5:2f:3c:90:a6:4f:25:fa:bb:c3: 88:13:46:d6:1d:3d:35:72:5f:54:98:fa:bd:83:c6: 33:7a:b7:02:f0:46:1f:3a:2f:be:81:fb:24:d6:e6: a2:ae:19:e9:1e:71:1a:0d:09:fd:20:d0:05:a0:68: 8c:8d:00:47:22:f5:53:4a:10:5b:e2:72:73:70:8a: 49:fe:5a:70:08:ed:b1:bf:13:4e:26:40:54:99:a6: 4d:6e:4e:ba:96:be:67:01:6d:dd:1e:04:f6:08:a1: fb:a1:eb:c2:81:d3:70:1d:83:5d:0b:e7:0b:e2:fc: 73:27:ef:83:77:a9:60:fc:c9:1e:e4:c2:e3:47:80: 6a:f0:6d:6b:df:12:f3:47:5d:c1:db:51:98:f8:b7: 8c:aa:86:b1:a7:35:30:ca:9b:22:62:88:c3:88:1a: 67:b5:c3:25:20:f9:97:df:cd:42:c9:61:e5:07:79: de:19:7e:69:3b:6a:ae:80:33:a2:03:4a:9c:5e:55: ed:c3:6b:c0:df:d8:ec:e9:61:97:fe:ae:ac:fb:ec: 60:2a:d0:d7:fa:54:88:13:48:bb:24:89:56:7a:35: 89:1d:16:0a:07:ed:49:23:23:f1:6e:70:f8:1b:45: f5:da:84:19:79:3e:72:2e:c1:8e:ca:ae:1a:81:d3: 53:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:47:A2:37:37:53:1A:9B:A0:1C:B2:20:1E:A5:8A:4E:05:58:AB:AB X509v3 Authority Key Identifier: keyid:28:36:48:AF:F8:86:18:5F:FC:E3:62:6F:09:0F:11:9A:3E:4E:DE:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KDZIr_iGGF_842JvCQ8Rmj5O3jU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:89:dc:54:51:38:08:9f:5f:b7:0f:9e:bd:fb:c7:c7:82:6d: de:f8:ad:81:db:57:cb:a7:ac:c0:37:ad:e7:50:f4:89:fd:cc: b1:e0:c7:bb:2d:1e:e3:61:0a:79:d5:ae:20:8b:7d:e7:99:32: 17:4e:d4:fb:7c:4f:df:94:cc:b0:bd:ad:5b:a7:b9:f5:00:18: 50:cb:52:39:a8:76:69:72:69:4c:42:aa:1e:31:53:03:77:eb: e1:f4:2d:d9:bc:71:f4:4e:0c:e9:11:1a:58:35:cc:22:cd:c3: 92:32:43:5d:f9:5f:81:72:b2:ed:54:fc:bd:fc:22:3a:7b:be: ee:59:0b:b8:06:88:c1:34:2a:1c:ca:b0:8d:06:0f:47:dc:0d: d3:ce:d9:5f:14:a4:18:65:b5:90:ce:a0:e8:a7:15:0b:12:b9: e9:9f:b9:4e:15:f6:6f:70:ca:88:99:07:f9:89:5a:e5:80:0d: fe:84:2d:8e:c0:fb:cd:72:84:3e:e9:59:5f:d4:c2:c3:87:ba: 49:b3:4e:c3:60:1c:5c:9b:88:b7:28:90:e8:b6:da:97:36:72: 07:5c:1e:6d:e7:d2:b9:80:7c:88:80:0a:a6:43:a5:d4:65:94: 53:79:f5:77:5f:3d:38:5d:63:90:77:18:6a:41:1c:c9:39:22: 8a:b0:cd:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaFuifEFDYQnVR8Z1crjRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MzY0OGFmZjg4NjE4NWZmY2UzNjI2ZjA5MGYxMTlhM2U0 ZWRlMzUwHhcNMjUxMjE4MTcwMDU4WhcNMjUxMjE5MTcwMDU4WjAzMTEwLwYDVQQD Eyg2ODQ3YTIzNzM3NTMxYTliYTAxY2IyMjAxZWE1OGE0ZTA1NThhYmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgggb5OUvPJCmTyX6u8OIE0bWHT01 cl9UmPq9g8YzercC8EYfOi++gfsk1uairhnpHnEaDQn9INAFoGiMjQBHIvVTShBb 4nJzcIpJ/lpwCO2xvxNOJkBUmaZNbk66lr5nAW3dHgT2CKH7oevCgdNwHYNdC+cL 4vxzJ++Dd6lg/Mke5MLjR4Bq8G1r3xLzR13B21GY+LeMqoaxpzUwypsiYojDiBpn tcMlIPmX381CyWHlB3neGX5pO2qugDOiA0qcXlXtw2vA39js6WGX/q6s++xgKtDX +lSIE0i7JIlWejWJHRYKB+1JIyPxbnD4G0X12oQZeT5yLsGOyq4agdNTXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGhHojc3UxqboByyIB6lik4FWKurMB8GA1UdIwQY MBaAFCg2SK/4hhhf/ONibwkPEZo+Tt41MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0RaSXJfaUdHRl84NDJKdkNROFJtajVPM2pVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9iOGJkM2ItMDAyNi00ZDU2LWJiMjUt NmE1YzljMGQ5MWU5LzEvS0RaSXJfaUdHRl84NDJKdkNROFJtajVPM2pVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9iOGJkM2ItMDAyNi00ZDU2LWJiMjUtNmE1YzljMGQ5MWU5 LzEvS0RaSXJfaUdHRl84NDJKdkNROFJtajVPM2pVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA4ncVFE4 CJ9ftw+evfvHx4Jt3vitgdtXy6eswDet51D0if3MseDHuy0e42EKedWuIIt955ky F07U+3xP35TMsL2tW6e59QAYUMtSOah2aXJpTEKqHjFTA3fr4fQt2bxx9E4M6REa WDXMIs3DkjJDXflfgXKy7VT8vfwiOnu+7lkLuAaIwTQqHMqwjQYPR9wN087ZXxSk GGW1kM6g6KcVCxK56Z+5ThX2b3DKiJkH+Yla5YAN/oQtjsD7zXKEPulZX9TCw4e6 SbNOw2AcXJuItyiQ6LbalzZyB1webefSuYB8iIAKpkOl1GWUU3n1d189OF1jkHcY akEcyTkiirDNtw== -----END CERTIFICATE-----Generated at Thu Dec 18 23:17:20 2025 by rpki-client