This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/43d7fb-4c9b-4263-be15-988ee7fe70a9/1/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.mft File: KgP8wEA8wUCsF8yUq_ZLpxlU5_w.mft (raw, json) Hash identifier: lcxokq+V5HrgvqVaE7mOTCviqYcPlYP0KXIKfchR+to= Subject key identifier: AF:F7:D3:8D:FE:0C:EC:F0:DD:17:A3:88:7A:80:C1:AA:DC:FE:41:81 Authority key identifier: 2A:03:FC:C0:40:3C:C1:40:AC:17:CC:94:AB:F6:4B:A7:19:54:E7:FC Certificate issuer: /CN=2a03fcc0403cc140ac17cc94abf64ba71954e7fc Certificate serial: 019AF2ADBD6CD67B714C557B7F1F835C1BA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/43d7fb-4c9b-4263-be15-988ee7fe70a9/1/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.mft Manifest number: E7 Signing time: Sat 06 Dec 2025 08:01:03 +0000 Manifest this update: Sat 06 Dec 2025 08:01:03 +0000 Manifest next update: Sun 07 Dec 2025 08:01:03 +0000 Files and hashes: 1: KgP8wEA8wUCsF8yUq_ZLpxlU5_w.crl (hash: F2cJIyStEJwC7GUBhS13FvjiPVqld/Q+QBiZznHX16Q=) 2: j8yR2SwKtsWVLSNz7q_UM4Rt1zM.roa (hash: SRAkp7Ly8eQqtuMXaM0/J+PtXueSbryqz6yBP5HCAks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/43d7fb-4c9b-4263-be15-988ee7fe70a9/1/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.crl rsync://rpki.ripe.net/repository/DEFAULT/26/43d7fb-4c9b-4263-be15-988ee7fe70a9/1/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.mft rsync://rpki.ripe.net/repository/DEFAULT/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:bd:6c:d6:7b:71:4c:55:7b:7f:1f:83:5c:1b:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a03fcc0403cc140ac17cc94abf64ba71954e7fc Validity Not Before: Dec 6 08:01:03 2025 GMT Not After : Dec 7 08:01:03 2025 GMT Subject: CN=aff7d38dfe0cecf0dd17a3887a80c1aadcfe4181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a8:f4:d8:a8:8e:8e:a0:35:c2:cf:23:c7:65: bd:a4:ae:b0:54:49:af:e5:09:ff:9d:b9:b7:1b:05: f9:64:a8:7c:ba:75:46:b2:df:8e:eb:8a:93:5d:ca: b0:63:52:ad:63:61:b3:28:3e:92:55:02:6b:98:c1: 1d:c9:da:d9:6c:4c:d0:2f:7c:8e:ff:25:e0:22:08: ed:7f:7e:95:a8:88:49:cd:d8:dd:1f:86:99:c6:ec: 62:c2:bc:08:0c:99:89:1f:9f:e2:ec:74:ed:58:20: f5:66:bb:97:39:c7:56:a6:1e:6a:e5:f3:8b:a8:a5: d4:ee:5b:ec:28:7c:57:82:9d:b0:59:56:1f:19:da: f6:73:71:40:c3:48:d3:ff:bd:15:e2:22:04:65:f6: 90:46:b4:2a:2c:c2:38:99:54:05:e9:a4:9d:42:0f: ff:a1:04:f4:ee:fb:d6:2b:e0:ac:d3:49:30:04:09: 82:29:86:3d:6d:3e:82:b3:f8:85:ee:ea:d3:26:f8: 4d:0c:80:51:35:5a:37:c0:00:43:87:19:5e:9e:b7: 21:c8:df:6c:ac:d3:47:69:f7:b0:10:69:4b:82:26: ee:20:f8:9b:c0:17:55:8f:06:a4:c1:3b:2c:49:cd: 64:ff:da:51:18:2e:ff:ad:a2:db:86:e6:bc:76:79: 73:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:F7:D3:8D:FE:0C:EC:F0:DD:17:A3:88:7A:80:C1:AA:DC:FE:41:81 X509v3 Authority Key Identifier: keyid:2A:03:FC:C0:40:3C:C1:40:AC:17:CC:94:AB:F6:4B:A7:19:54:E7:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/43d7fb-4c9b-4263-be15-988ee7fe70a9/1/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/43d7fb-4c9b-4263-be15-988ee7fe70a9/1/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:55:eb:2e:e8:63:9e:79:23:87:34:b5:ef:03:b2:54:c4:05: a1:af:1e:2c:de:44:7b:aa:e3:96:3c:c3:96:df:49:25:3f:93: 0a:7d:79:e7:f4:75:5f:d8:41:e0:f4:07:73:63:a6:22:6d:cb: 8c:74:e8:f9:fd:73:83:37:b6:b7:e8:55:af:93:07:d4:c7:2f: c4:72:4a:a5:3a:f4:3b:93:ef:e1:e7:7b:04:82:5c:88:c3:31: 34:08:df:ac:ba:e1:a2:fd:31:92:b3:39:38:c5:fd:50:09:77: aa:8a:39:46:29:aa:9d:7e:2d:3c:93:b6:05:cf:05:00:ac:c8: ef:57:55:9c:45:8f:4f:a4:1e:b3:c0:f8:04:94:9b:55:56:7e: 1b:41:20:42:36:dc:93:f5:a6:91:4e:08:45:12:7a:7f:7e:e0: cb:ed:3d:e7:01:7e:ca:0a:fd:6f:b3:f2:f1:e2:3b:c4:c2:97: 85:3a:bb:dc:9a:cc:db:f7:29:e9:76:e6:84:22:0c:ec:8a:10: 46:b0:b2:e8:4e:ae:0d:14:00:3c:dd:d0:c7:6c:3b:34:68:86: 3b:9f:f1:ee:9f:6f:d4:f4:50:f7:fe:51:35:1f:d9:13:ab:b9: c5:80:b0:6a:08:b1:b1:73:27:31:11:42:08:a2:30:1b:44:73: f5:e7:9c:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrb1s1ntxTFV7fx+DXBumMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhMDNmY2MwNDAzY2MxNDBhYzE3Y2M5NGFiZjY0YmE3MTk1 NGU3ZmMwHhcNMjUxMjA2MDgwMTAzWhcNMjUxMjA3MDgwMTAzWjAzMTEwLwYDVQQD EyhhZmY3ZDM4ZGZlMGNlY2YwZGQxN2EzODg3YTgwYzFhYWRjZmU0MTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6j02KiOjqA1ws8jx2W9pK6wVEmv 5Qn/nbm3GwX5ZKh8unVGst+O64qTXcqwY1KtY2GzKD6SVQJrmMEdydrZbEzQL3yO /yXgIgjtf36VqIhJzdjdH4aZxuxiwrwIDJmJH5/i7HTtWCD1ZruXOcdWph5q5fOL qKXU7lvsKHxXgp2wWVYfGdr2c3FAw0jT/70V4iIEZfaQRrQqLMI4mVQF6aSdQg// oQT07vvWK+Cs00kwBAmCKYY9bT6Cs/iF7urTJvhNDIBRNVo3wABDhxlenrchyN9s rNNHafewEGlLgibuIPibwBdVjwakwTssSc1k/9pRGC7/raLbhua8dnlzRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/3043+DOzw3RejiHqAwarc/kGBMB8GA1UdIwQY MBaAFCoD/MBAPMFArBfMlKv2S6cZVOf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2dQOHdFQTh3VUNzRjh5VXFfWkxweGxVNV93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi80M2Q3ZmItNGM5Yi00MjYzLWJlMTUt OTg4ZWU3ZmU3MGE5LzEvS2dQOHdFQTh3VUNzRjh5VXFfWkxweGxVNV93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi80M2Q3ZmItNGM5Yi00MjYzLWJlMTUtOTg4ZWU3ZmU3MGE5 LzEvS2dQOHdFQTh3VUNzRjh5VXFfWkxweGxVNV93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsFXrLuhj nnkjhzS17wOyVMQFoa8eLN5Ee6rjljzDlt9JJT+TCn155/R1X9hB4PQHc2OmIm3L jHTo+f1zgze2t+hVr5MH1McvxHJKpTr0O5Pv4ed7BIJciMMxNAjfrLrhov0xkrM5 OMX9UAl3qoo5RimqnX4tPJO2Bc8FAKzI71dVnEWPT6Qes8D4BJSbVVZ+G0EgQjbc k/WmkU4IRRJ6f37gy+095wF+ygr9b7Py8eI7xMKXhTq73JrM2/cp6XbmhCIM7IoQ RrCy6E6uDRQAPN3Qx2w7NGiGO5/x7p9v1PRQ9/5RNR/ZE6u5xYCwagixsXMnMRFC CKIwG0Rz9eeceQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:17:39 2025 by rpki-client