This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft File: kg6KqqAOJVZRVcWbjMO42BuhSSA.mft (raw, json) Hash identifier: 4xInWKur6H6gTldmxQzG/rxE1Ouaq3a67uoGTYL5ozA= Subject key identifier: 06:04:13:01:77:17:F6:AF:61:5B:3B:91:CE:F0:E6:F8:7E:B3:C4:8A Authority key identifier: 92:0E:8A:AA:A0:0E:25:56:51:55:C5:9B:8C:C3:B8:D8:1B:A1:49:20 Certificate issuer: /CN=920e8aaaa00e25565155c59b8cc3b8d81ba14920 Certificate serial: 019AF1D215813A9832B7CD18BACD28FBA84B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kg6KqqAOJVZRVcWbjMO42BuhSSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft Manifest number: 0626 Signing time: Sat 06 Dec 2025 04:01:08 +0000 Manifest this update: Sat 06 Dec 2025 04:01:08 +0000 Manifest next update: Sun 07 Dec 2025 04:01:08 +0000 Files and hashes: 1: kg6KqqAOJVZRVcWbjMO42BuhSSA.crl (hash: wBf/sGpY3kQV0kFo6slTo+HojvZo3YSqw8IFxHosv/M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft rsync://rpki.ripe.net/repository/DEFAULT/kg6KqqAOJVZRVcWbjMO42BuhSSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:15:81:3a:98:32:b7:cd:18:ba:cd:28:fb:a8:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=920e8aaaa00e25565155c59b8cc3b8d81ba14920 Validity Not Before: Dec 6 04:01:08 2025 GMT Not After : Dec 7 04:01:08 2025 GMT Subject: CN=060413017717f6af615b3b91cef0e6f87eb3c48a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d9:ad:60:bd:db:85:68:e6:c7:6a:d0:f1:b9: 17:3b:0b:97:85:73:b9:41:92:6a:f9:66:ee:4f:a9: 73:af:10:74:88:78:35:a5:9d:0b:e5:a6:b8:4f:57: 12:9a:e2:4d:5c:5b:b6:ca:d4:1c:2e:4c:64:84:24: b8:4a:da:6e:8f:ec:1a:f9:20:81:3b:3c:33:9c:96: 06:c6:a7:4e:44:a8:c1:09:d2:00:7c:69:bc:46:10: aa:64:9a:23:d9:f9:1a:46:e9:63:f3:26:d2:fe:b6: 78:cf:47:57:f8:9c:08:87:a8:e0:db:1a:6d:e4:75: a2:db:f8:98:e2:ea:5d:43:73:93:4f:f1:4f:1b:7c: fd:73:92:86:eb:ca:35:e4:c7:fc:ee:6f:8e:79:e8: 48:3e:9f:63:f9:2c:c5:e5:26:b8:36:c0:9d:d6:98: 8e:75:06:b7:d5:57:85:58:dc:41:67:ec:fe:d3:f9: a7:4e:71:23:c4:95:bc:41:70:8c:47:b2:d8:72:6c: ba:29:05:4f:35:1f:3f:59:ed:16:76:3d:7e:a6:f0: b4:fa:31:15:3b:99:92:15:92:64:c5:96:6e:35:19: 66:be:88:3b:38:ed:cb:e6:ac:2a:c4:ad:e8:cd:99: 41:11:25:dc:42:bd:7d:a1:2d:8a:8b:a9:11:32:af: 67:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:04:13:01:77:17:F6:AF:61:5B:3B:91:CE:F0:E6:F8:7E:B3:C4:8A X509v3 Authority Key Identifier: keyid:92:0E:8A:AA:A0:0E:25:56:51:55:C5:9B:8C:C3:B8:D8:1B:A1:49:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kg6KqqAOJVZRVcWbjMO42BuhSSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:1a:ec:99:b9:49:a9:35:21:e4:f5:17:da:fb:4e:48:fe:e1: 06:ed:e2:fb:7b:36:fa:59:09:ae:b1:07:27:a3:82:f2:87:ab: 0d:c7:23:80:3e:21:78:74:98:26:92:a3:38:f5:e4:cd:e2:15: 3c:3c:48:92:47:b0:8b:d7:10:df:fd:32:c3:42:69:a8:74:d2: 5d:87:2f:bd:0a:27:67:c0:aa:83:bf:97:10:75:34:01:92:b6: b4:6f:6c:02:e3:1c:c9:ca:d6:d4:a2:c1:f9:64:45:1b:81:b1: a1:e9:64:72:a0:f6:09:ac:00:58:f2:16:c5:4e:c7:55:b3:73: 5b:2a:87:b7:ab:c8:ba:f6:30:77:aa:f2:8f:6a:35:91:da:c0: 1c:12:36:2f:ff:26:d0:12:ef:af:f8:f0:af:94:76:f2:61:13: 7d:e8:fa:59:c6:e3:b9:cb:fa:a9:29:5f:fc:e6:87:3c:08:7b: 25:3a:91:b1:48:21:dc:03:6f:c0:10:ab:9f:c6:72:29:db:0c: 82:91:7b:b2:33:36:e3:31:7c:69:6e:5e:a4:43:60:bb:fd:dc: 35:4d:b5:47:36:c8:21:40:d6:66:16:b5:89:bc:57:7a:23:9b: 6c:39:2e:51:3c:8e:89:a7:c8:9f:e0:0d:f9:63:27:b1:ac:94: 07:bf:70:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0hWBOpgyt80Yus0o+6hLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMGU4YWFhYTAwZTI1NTY1MTU1YzU5YjhjYzNiOGQ4MWJh MTQ5MjAwHhcNMjUxMjA2MDQwMTA4WhcNMjUxMjA3MDQwMTA4WjAzMTEwLwYDVQQD EygwNjA0MTMwMTc3MTdmNmFmNjE1YjNiOTFjZWYwZTZmODdlYjNjNDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dmtYL3bhWjmx2rQ8bkXOwuXhXO5 QZJq+WbuT6lzrxB0iHg1pZ0L5aa4T1cSmuJNXFu2ytQcLkxkhCS4Stpuj+wa+SCB OzwznJYGxqdORKjBCdIAfGm8RhCqZJoj2fkaRulj8ybS/rZ4z0dX+JwIh6jg2xpt 5HWi2/iY4updQ3OTT/FPG3z9c5KG68o15Mf87m+OeehIPp9j+SzF5Sa4NsCd1piO dQa31VeFWNxBZ+z+0/mnTnEjxJW8QXCMR7LYcmy6KQVPNR8/We0Wdj1+pvC0+jEV O5mSFZJkxZZuNRlmvog7OO3L5qwqxK3ozZlBESXcQr19oS2Ki6kRMq9nMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAYEEwF3F/avYVs7kc7w5vh+s8SKMB8GA1UdIwQY MBaAFJIOiqqgDiVWUVXFm4zDuNgboUkgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2c2S3FxQU9KVlpSVmNXYmpNTzQyQnVoU1NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8xZmMyNjQtODg1Zi00OWU0LTg0NTEt ODFhY2ZlMTc1ZGY3LzEva2c2S3FxQU9KVlpSVmNXYmpNTzQyQnVoU1NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8xZmMyNjQtODg1Zi00OWU0LTg0NTEtODFhY2ZlMTc1ZGY3 LzEva2c2S3FxQU9KVlpSVmNXYmpNTzQyQnVoU1NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPRrsmblJ qTUh5PUX2vtOSP7hBu3i+3s2+lkJrrEHJ6OC8oerDccjgD4heHSYJpKjOPXkzeIV PDxIkkewi9cQ3/0yw0JpqHTSXYcvvQonZ8Cqg7+XEHU0AZK2tG9sAuMcycrW1KLB +WRFG4GxoelkcqD2CawAWPIWxU7HVbNzWyqHt6vIuvYwd6ryj2o1kdrAHBI2L/8m 0BLvr/jwr5R28mETfej6Wcbjucv6qSlf/OaHPAh7JTqRsUgh3ANvwBCrn8ZyKdsM gpF7sjM24zF8aW5epENgu/3cNU21RzbIIUDWZha1ibxXeiObbDkuUTyOiafIn+AN +WMnsayUB79wuQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:21:44 2025 by rpki-client