This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft File: KGaH-2SnfwEAuvI9TzQezndZUOU.mft (raw, json) Hash identifier: ymDM6dd9uhK2N1UsDAbIO9TAD5slDc11s/2OohYj6ro= Subject key identifier: 2C:5C:C4:F9:64:D7:43:B3:D3:13:CB:B2:6F:42:8C:99:32:7F:BC:97 Authority key identifier: 28:66:87:FB:64:A7:7F:01:00:BA:F2:3D:4F:34:1E:CE:77:59:50:E5 Certificate issuer: /CN=286687fb64a77f0100baf23d4f341ece775950e5 Certificate serial: 019AF2ADA1E5BA6EFCABA24660972C7B76B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 08:00:56 +0000 Manifest this update: Sat 06 Dec 2025 08:00:56 +0000 Manifest next update: Sun 07 Dec 2025 08:00:56 +0000 Files and hashes: 1: KGaH-2SnfwEAuvI9TzQezndZUOU.crl (hash: gt22DbMMEgwCvg+pEzLFUJ725D2ChwzP5nG9CdrrBes=) 2: LM876MaYaB8OnXBNDWvDIMOdaT0.roa (hash: dBnZE66nMAqtp/XETbnr6kLTMtvYsN54cnJkvnD4onk=) 3: SQmwwlkRfmzsbR8yXHtAP1cuD78.roa (hash: 70vEBGHpH3D42IAnxJUAJiHSfSkzd3seVU45VJv3ZjU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:a1:e5:ba:6e:fc:ab:a2:46:60:97:2c:7b:76:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286687fb64a77f0100baf23d4f341ece775950e5 Validity Not Before: Dec 6 08:00:56 2025 GMT Not After : Dec 7 08:00:56 2025 GMT Subject: CN=2c5cc4f964d743b3d313cbb26f428c99327fbc97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f1:d4:84:0b:bc:3a:31:f1:5d:98:7e:81:f2: 31:84:97:b8:e3:89:d1:b1:97:a9:3b:f4:c3:04:e8: d2:9c:8f:99:de:bb:74:e5:e1:7b:08:5f:42:60:89: 44:c4:aa:43:a9:b8:02:32:ef:6e:5d:d1:65:90:41: fa:36:a7:db:29:85:94:29:55:70:95:df:9f:db:f4: b0:a5:2a:05:33:97:3e:c1:79:6d:14:2f:c1:81:77: 93:4a:7e:62:32:c6:8c:6d:ad:0c:50:6e:82:57:05: da:b3:d4:75:10:63:75:24:2f:c9:c2:e2:1a:06:f0: 8f:42:cb:96:2d:75:dc:89:98:a3:a7:88:90:30:02: 90:6c:1c:26:1f:aa:cf:e3:d0:dd:7e:df:91:92:90: 08:93:4b:86:ff:0a:8f:71:15:9e:97:41:a3:86:d3: c6:fa:89:da:70:1d:d6:d1:df:85:39:b5:81:d4:ed: 4a:44:eb:72:d8:52:98:9b:b4:81:16:03:10:ab:8b: 4f:89:44:d8:ab:e2:4f:f8:77:6a:94:37:f1:81:32: b1:92:4f:0f:cc:ce:e1:b3:c9:b2:80:94:a9:26:79: 67:f5:6f:79:6f:45:cd:f2:ae:5f:c6:56:36:37:57: 74:49:e5:3c:83:24:03:43:cd:ba:39:31:7c:17:14: 07:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:5C:C4:F9:64:D7:43:B3:D3:13:CB:B2:6F:42:8C:99:32:7F:BC:97 X509v3 Authority Key Identifier: keyid:28:66:87:FB:64:A7:7F:01:00:BA:F2:3D:4F:34:1E:CE:77:59:50:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:7f:cd:0d:0f:cb:12:2f:bd:20:71:1c:79:61:1a:a3:1a:0a: 8a:f4:b4:e3:1a:75:d7:1f:19:cd:b1:2f:9f:3f:d6:df:9e:cc: c0:b8:d4:df:07:23:f9:f2:7f:ae:25:38:5d:7f:dc:48:a6:d7: 1c:fb:e9:c0:c8:05:70:33:1c:0c:28:1c:b0:e1:a9:07:ce:22: 4e:29:70:ca:8e:c1:a1:24:c0:e6:d0:1a:4e:04:2c:9f:ff:b5: 58:47:e6:38:e3:24:b3:20:e8:00:98:20:be:17:c0:76:41:ec: 97:80:21:1b:c0:49:30:fa:8a:5b:dd:6b:74:19:1a:66:04:ad: 03:30:0e:7e:94:25:a3:eb:84:40:22:6f:a7:d4:2f:06:27:35: 13:4f:6e:0c:1e:c5:44:e5:56:22:d0:91:f0:c4:52:f4:03:fd: c6:95:e1:ac:2d:0e:fe:d5:50:d6:59:7e:8b:d3:34:05:b4:24: 99:c0:ed:94:73:64:a0:68:05:6e:f9:9b:25:49:c1:f1:d3:86: 6f:4f:1e:2c:7b:d4:21:0f:b2:df:3c:44:43:33:ca:0a:ee:bd: 58:db:ba:a2:c1:da:15:9f:f1:b0:a9:0c:e6:57:08:29:fd:0d: f7:1d:c7:d6:1f:05:4d:09:0d:be:03:ad:55:d5:fa:fc:c3:23: 19:3b:d0:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryraHlum78q6JGYJcse3a3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4NjY4N2ZiNjRhNzdmMDEwMGJhZjIzZDRmMzQxZWNlNzc1 OTUwZTUwHhcNMjUxMjA2MDgwMDU2WhcNMjUxMjA3MDgwMDU2WjAzMTEwLwYDVQQD EygyYzVjYzRmOTY0ZDc0M2IzZDMxM2NiYjI2ZjQyOGM5OTMyN2ZiYzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPHUhAu8OjHxXZh+gfIxhJe444nR sZepO/TDBOjSnI+Z3rt05eF7CF9CYIlExKpDqbgCMu9uXdFlkEH6NqfbKYWUKVVw ld+f2/SwpSoFM5c+wXltFC/BgXeTSn5iMsaMba0MUG6CVwXas9R1EGN1JC/JwuIa BvCPQsuWLXXciZijp4iQMAKQbBwmH6rP49Ddft+RkpAIk0uG/wqPcRWel0GjhtPG +onacB3W0d+FObWB1O1KROty2FKYm7SBFgMQq4tPiUTYq+JP+HdqlDfxgTKxkk8P zM7hs8mygJSpJnln9W95b0XN8q5fxlY2N1d0SeU8gyQDQ826OTF8FxQH6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCxcxPlk10Oz0xPLsm9CjJkyf7yXMB8GA1UdIwQY MBaAFChmh/tkp38BALryPU80Hs53WVDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0dhSC0yU25md0VBdXZJOVR6UWV6bmRaVU9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8yMDUyYWQtM2Q0MS00NWRhLTg0NzQt NjMzOWY2YjM2YmNiLzEvS0dhSC0yU25md0VBdXZJOVR6UWV6bmRaVU9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8yMDUyYWQtM2Q0MS00NWRhLTg0NzQtNjMzOWY2YjM2YmNi LzEvS0dhSC0yU25md0VBdXZJOVR6UWV6bmRaVU9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMX/NDQ/L Ei+9IHEceWEaoxoKivS04xp11x8ZzbEvnz/W357MwLjU3wcj+fJ/riU4XX/cSKbX HPvpwMgFcDMcDCgcsOGpB84iTilwyo7BoSTA5tAaTgQsn/+1WEfmOOMksyDoAJgg vhfAdkHsl4AhG8BJMPqKW91rdBkaZgStAzAOfpQlo+uEQCJvp9QvBic1E09uDB7F ROVWItCR8MRS9AP9xpXhrC0O/tVQ1ll+i9M0BbQkmcDtlHNkoGgFbvmbJUnB8dOG b08eLHvUIQ+y3zxEQzPKCu69WNu6osHaFZ/xsKkM5lcIKf0N9x3H1h8FTQkNvgOt VdX6/MMjGTvQ+w== -----END CERTIFICATE-----Generated at Sat Dec 6 14:53:30 2025 by rpki-client