This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft File: KLrBhbg_beOautz_Pf5Ic9iDxIg.mft (raw, json) Hash identifier: 9DuNs/+9ze8K73EsFHp3//g+kHB0lDlkmzMdRIcLkMU= Subject key identifier: 4B:D2:F6:26:4E:83:0F:3B:9B:25:9A:08:5C:3B:19:A1:50:52:E8:F6 Authority key identifier: 28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88 Certificate issuer: /CN=28bac185b83f6de39abadcff3dfe4873d883c488 Certificate serial: 019AF1D18FDB2070F2205782A161A290DCAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft Manifest number: 0A99 Signing time: Sat 06 Dec 2025 04:00:34 +0000 Manifest this update: Sat 06 Dec 2025 04:00:34 +0000 Manifest next update: Sun 07 Dec 2025 04:00:34 +0000 Files and hashes: 1: KLrBhbg_beOautz_Pf5Ic9iDxIg.crl (hash: WvPRmgnCFtkePYPEHPqlps0PafUkIifOrzaFmqEII38=) 2: TRmQsqo38AvFLgeV_m9TBYH8n00.roa (hash: qW2qJnlmGn6g7rOMXIGst8HJCwyD3TG1rYc3G+brA8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:8f:db:20:70:f2:20:57:82:a1:61:a2:90:dc:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28bac185b83f6de39abadcff3dfe4873d883c488 Validity Not Before: Dec 6 04:00:34 2025 GMT Not After : Dec 7 04:00:34 2025 GMT Subject: CN=4bd2f6264e830f3b9b259a085c3b19a15052e8f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:53:16:25:76:3f:c9:5a:3c:55:7e:7a:05:a0: fd:49:9e:88:ec:1c:73:d3:99:df:20:b8:36:f3:bc: e2:dc:7c:ba:c2:6d:9a:c9:ad:24:a4:46:30:74:9e: eb:af:37:9e:32:d4:37:a7:a0:43:e8:b2:50:17:76: 00:3c:12:6a:4d:31:3e:a2:55:47:db:16:7d:ca:2e: b6:43:d7:c3:a0:5e:f2:b1:2f:ca:99:e4:9e:cb:5b: 25:2f:ab:23:6b:7a:58:e8:ac:35:85:bf:cd:a5:47: 0d:db:f5:e6:24:3f:a7:db:39:77:eb:12:d0:47:21: 54:d7:04:14:e9:c0:9d:20:b2:ca:7e:22:ce:1c:1b: d4:ca:c6:d0:fc:82:43:4a:00:3d:bc:ca:9d:53:de: 61:bf:d2:31:7f:54:fb:10:32:59:ba:c7:bd:8a:f7: 76:8f:e4:59:20:90:7f:4d:3d:e1:dd:cb:5c:2a:25: 58:be:65:56:b5:0d:08:f4:d5:95:1a:8b:75:d2:4b: 8f:8a:de:d6:d8:ce:41:51:87:c7:85:a4:01:3b:39: 3e:94:9e:35:34:4b:b6:84:86:7c:14:5e:d0:9b:69: ab:6b:dd:10:0f:0c:f9:35:f9:2e:cb:21:be:9a:57: 6e:9a:0b:d1:d2:a0:10:62:aa:99:03:2e:84:d0:b0: 92:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D2:F6:26:4E:83:0F:3B:9B:25:9A:08:5C:3B:19:A1:50:52:E8:F6 X509v3 Authority Key Identifier: keyid:28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:8f:74:ce:7b:87:66:5c:62:01:b7:5e:1a:1a:26:4e:5f:fc: 87:d7:5a:45:25:fc:58:61:e3:44:8b:2c:2e:b0:fe:a8:7c:ed: ac:b5:8a:3c:ef:75:30:69:05:90:13:cc:1a:88:c3:96:2c:31: ad:cb:30:ae:11:7d:0b:17:2b:20:3b:75:db:2f:50:15:96:3b: 2c:15:85:c1:c2:bc:d4:b4:90:19:e1:38:bb:3e:3f:5e:00:00: 7d:16:d8:b2:bf:55:ee:24:7a:b9:6b:3e:6c:03:9b:38:0b:df: 9b:bb:39:1f:1e:31:ab:95:bb:d7:58:7f:55:c6:0d:75:40:3c: a0:66:72:1f:2f:68:d4:a6:70:fb:42:a0:87:53:2b:dd:f5:f1: 6f:4f:44:d6:c8:76:36:2b:5f:17:70:03:d3:9f:e4:a6:be:ab: e5:8d:41:58:b8:0c:2b:83:5b:47:23:c7:2c:8c:4a:35:9b:f6: 0c:30:13:b4:37:bc:26:ad:c6:78:9b:05:e1:d0:5e:87:9b:80: 88:24:8d:a1:9f:b0:aa:53:ad:c3:27:8b:61:a2:64:6b:64:ef: 42:fa:3e:0b:27:8b:b7:02:fb:21:8e:6e:57:67:be:a2:a2:f5: 90:aa:ab:9a:0e:13:26:2a:b5:4f:77:fa:44:1d:4b:c2:03:b7: 25:e8:53:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0Y/bIHDyIFeCoWGikNyuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4YmFjMTg1YjgzZjZkZTM5YWJhZGNmZjNkZmU0ODczZDg4 M2M0ODgwHhcNMjUxMjA2MDQwMDM0WhcNMjUxMjA3MDQwMDM0WjAzMTEwLwYDVQQD Eyg0YmQyZjYyNjRlODMwZjNiOWIyNTlhMDg1YzNiMTlhMTUwNTJlOGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1MWJXY/yVo8VX56BaD9SZ6I7Bxz 05nfILg287zi3Hy6wm2aya0kpEYwdJ7rrzeeMtQ3p6BD6LJQF3YAPBJqTTE+olVH 2xZ9yi62Q9fDoF7ysS/KmeSey1slL6sja3pY6Kw1hb/NpUcN2/XmJD+n2zl36xLQ RyFU1wQU6cCdILLKfiLOHBvUysbQ/IJDSgA9vMqdU95hv9Ixf1T7EDJZuse9ivd2 j+RZIJB/TT3h3ctcKiVYvmVWtQ0I9NWVGot10kuPit7W2M5BUYfHhaQBOzk+lJ41 NEu2hIZ8FF7Qm2mra90QDwz5NfkuyyG+mldumgvR0qAQYqqZAy6E0LCS6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEvS9iZOgw87myWaCFw7GaFQUuj2MB8GA1UdIwQY MBaAFCi6wYW4P23jmrrc/z3+SHPYg8SIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0xyQmhiZ19iZU9hdXR6X1BmNUljOWlEeElnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mYjk0NjEtMmRiNy00MDllLWFiZWIt ZjNiMTZlZDZjMDYxLzEvS0xyQmhiZ19iZU9hdXR6X1BmNUljOWlEeElnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9mYjk0NjEtMmRiNy00MDllLWFiZWItZjNiMTZlZDZjMDYx LzEvS0xyQmhiZ19iZU9hdXR6X1BmNUljOWlEeElnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIY90znuH ZlxiAbdeGhomTl/8h9daRSX8WGHjRIssLrD+qHztrLWKPO91MGkFkBPMGojDliwx rcswrhF9CxcrIDt12y9QFZY7LBWFwcK81LSQGeE4uz4/XgAAfRbYsr9V7iR6uWs+ bAObOAvfm7s5Hx4xq5W711h/VcYNdUA8oGZyHy9o1KZw+0Kgh1Mr3fXxb09E1sh2 NitfF3AD05/kpr6r5Y1BWLgMK4NbRyPHLIxKNZv2DDATtDe8Jq3GeJsF4dBeh5uA iCSNoZ+wqlOtwyeLYaJka2TvQvo+CyeLtwL7IY5uV2e+oqL1kKqrmg4TJiq1T3f6 RB1LwgO3JehTmA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:13:54 2025 by rpki-client