This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.mft File: KGDxXSeDeUg6qgYTy_WS5yzIHkg.mft (raw, json) Hash identifier: apuJ0be1s83lv1ipCubKx2t6PKSOBsoCzJyuekZKzDA= Subject key identifier: 3D:D7:26:C5:A9:51:A4:E4:C4:0C:8D:C5:B8:D8:EF:40:21:9A:C1:CE Authority key identifier: 28:60:F1:5D:27:83:79:48:3A:AA:06:13:CB:F5:92:E7:2C:C8:1E:48 Certificate issuer: /CN=2860f15d278379483aaa0613cbf592e72cc81e48 Certificate serial: 019AF3C0779F1974B0C4235FAF242C427E9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGDxXSeDeUg6qgYTy_WS5yzIHkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.mft Manifest number: 0A7F Signing time: Sat 06 Dec 2025 13:01:08 +0000 Manifest this update: Sat 06 Dec 2025 13:01:08 +0000 Manifest next update: Sun 07 Dec 2025 13:01:08 +0000 Files and hashes: 1: KGDxXSeDeUg6qgYTy_WS5yzIHkg.crl (hash: LsE0DELTP5j7FxW3e78JN36dm1C+d4wQUG20fY8sPH4=) 2: vDGDX2wIiExO6AcsphzPX7w0rD8.roa (hash: 6H+fcKSw03UJYZabhwRmpHlYumXXGe9flqc+/pdyWXc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.crl rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.mft rsync://rpki.ripe.net/repository/DEFAULT/KGDxXSeDeUg6qgYTy_WS5yzIHkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:77:9f:19:74:b0:c4:23:5f:af:24:2c:42:7e:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2860f15d278379483aaa0613cbf592e72cc81e48 Validity Not Before: Dec 6 13:01:08 2025 GMT Not After : Dec 7 13:01:08 2025 GMT Subject: CN=3dd726c5a951a4e4c40c8dc5b8d8ef40219ac1ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:10:e0:cb:ac:aa:57:f8:01:0b:94:2a:50:0f: 4c:f1:ae:12:40:dd:94:38:d9:30:d5:91:66:6d:87: 40:95:a4:3c:13:d9:03:26:2e:6d:fa:37:a2:02:99: 7e:95:c9:54:52:e1:c9:5c:df:97:7e:23:6e:a6:d9: 10:e8:12:f5:73:89:ae:54:25:40:e2:a6:57:fa:72: 7c:58:c7:fe:9e:0f:50:d6:f6:32:b4:d3:c8:0a:33: 42:e5:01:08:25:7d:c4:94:76:00:83:b0:40:74:0a: 60:06:89:bc:cb:cb:48:32:68:49:0e:07:b1:ac:95: 24:8b:1c:c4:13:cd:be:0a:b1:4a:23:cc:38:3d:78: 9c:49:ad:68:3b:75:ee:54:4a:bf:cc:d6:26:94:58: 81:ac:4c:1e:77:16:9b:44:b1:05:bd:37:a6:2d:06: df:b9:20:d0:39:36:f1:55:c3:31:e7:99:62:1c:f7: b3:73:cb:83:01:f1:bd:dd:61:64:f3:68:0a:f9:13: 14:ef:f6:dc:a5:f9:0a:c2:4b:28:d3:10:e4:b3:87: 12:76:7e:2b:18:a8:56:46:3d:ea:08:42:6f:f7:40: 73:d0:ff:22:dd:98:58:71:ff:d4:75:52:aa:13:a7: ae:9e:bb:1b:9c:cf:8c:a9:fa:8b:92:47:3e:f5:20: 29:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D7:26:C5:A9:51:A4:E4:C4:0C:8D:C5:B8:D8:EF:40:21:9A:C1:CE X509v3 Authority Key Identifier: keyid:28:60:F1:5D:27:83:79:48:3A:AA:06:13:CB:F5:92:E7:2C:C8:1E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGDxXSeDeUg6qgYTy_WS5yzIHkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:8d:79:99:6c:68:01:7e:1e:67:93:ed:b8:4a:68:1b:d7:a6: fa:02:22:0f:48:53:00:14:5a:87:22:d4:36:e2:0a:89:41:13: 82:c9:4b:dd:c2:f0:fe:8f:9c:76:0f:1d:d7:c3:79:55:75:f2: e9:07:aa:e3:ee:80:31:75:cb:d1:15:f9:d5:ba:07:31:f6:af: 7f:56:23:59:96:2f:2e:97:3f:65:04:66:25:17:5d:c4:78:41: 45:1b:bc:15:fa:1c:9e:66:5c:c5:c7:2e:c2:af:ff:30:c5:42: 04:43:3d:25:47:fb:1e:24:58:6c:62:ec:9a:88:03:6d:e7:29: 31:e6:b0:33:3e:01:5e:81:02:bd:4e:8b:03:84:01:e8:58:bd: 34:c9:8e:8e:5e:fe:a3:e0:8c:6b:1c:68:a8:ce:fe:b7:f8:69: d1:ee:16:e3:e0:eb:17:20:92:8a:15:06:9c:d6:32:76:bd:b1: b2:0b:6b:e1:67:c4:03:2a:06:a6:95:9b:29:60:3a:eb:53:07: cd:d3:93:d5:8b:c7:67:01:3c:a4:b2:b9:15:bc:2d:5c:35:2e: 13:45:4c:96:ee:5b:2e:ed:c6:d7:30:93:b0:30:47:ed:cb:b1: 98:8b:b1:d9:d4:8d:d9:d3:21:f4:b0:b5:c8:90:1b:40:0c:c6: 08:56:8f:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwHefGXSwxCNfryQsQn6fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4NjBmMTVkMjc4Mzc5NDgzYWFhMDYxM2NiZjU5MmU3MmNj ODFlNDgwHhcNMjUxMjA2MTMwMTA4WhcNMjUxMjA3MTMwMTA4WjAzMTEwLwYDVQQD EygzZGQ3MjZjNWE5NTFhNGU0YzQwYzhkYzViOGQ4ZWY0MDIxOWFjMWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBDgy6yqV/gBC5QqUA9M8a4SQN2U ONkw1ZFmbYdAlaQ8E9kDJi5t+jeiApl+lclUUuHJXN+XfiNuptkQ6BL1c4muVCVA 4qZX+nJ8WMf+ng9Q1vYytNPICjNC5QEIJX3ElHYAg7BAdApgBom8y8tIMmhJDgex rJUkixzEE82+CrFKI8w4PXicSa1oO3XuVEq/zNYmlFiBrEwedxabRLEFvTemLQbf uSDQOTbxVcMx55liHPezc8uDAfG93WFk82gK+RMU7/bcpfkKwkso0xDks4cSdn4r GKhWRj3qCEJv90Bz0P8i3ZhYcf/UdVKqE6eunrsbnM+MqfqLkkc+9SAp2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD3XJsWpUaTkxAyNxbjY70AhmsHOMB8GA1UdIwQY MBaAFChg8V0ng3lIOqoGE8v1kucsyB5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0dEeFhTZURlVWc2cWdZVHlfV1M1eXpJSGtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xZDFiNzItOGJjZi00NTAwLTkxMjUt MzIxYzE0ZGQ0NjM5LzEvS0dEeFhTZURlVWc2cWdZVHlfV1M1eXpJSGtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8xZDFiNzItOGJjZi00NTAwLTkxMjUtMzIxYzE0ZGQ0NjM5 LzEvS0dEeFhTZURlVWc2cWdZVHlfV1M1eXpJSGtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdY15mWxo AX4eZ5PtuEpoG9em+gIiD0hTABRahyLUNuIKiUETgslL3cLw/o+cdg8d18N5VXXy 6Qeq4+6AMXXL0RX51boHMfavf1YjWZYvLpc/ZQRmJRddxHhBRRu8FfocnmZcxccu wq//MMVCBEM9JUf7HiRYbGLsmogDbecpMeawMz4BXoECvU6LA4QB6Fi9NMmOjl7+ o+CMaxxoqM7+t/hp0e4W4+DrFyCSihUGnNYydr2xsgtr4WfEAyoGppWbKWA661MH zdOT1YvHZwE8pLK5FbwtXDUuE0VMlu5bLu3G1zCTsDBH7cuxmIux2dSN2dMh9LC1 yJAbQAzGCFaPpg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:37:59 2025 by rpki-client