This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.mft File: KGURKILY5sctAiwsPaF7UsKtsHs.mft (raw, json) Hash identifier: 3HBF+3PihK7lLYhJXbOrgMwZnqIkgtzy1O9USiOeFP8= Subject key identifier: 95:1F:42:90:73:8E:00:BE:32:C7:B8:80:AA:13:B6:2D:57:AC:6B:7E Authority key identifier: 28:65:11:28:82:D8:E6:C7:2D:02:2C:2C:3D:A1:7B:52:C2:AD:B0:7B Certificate issuer: /CN=2865112882d8e6c72d022c2c3da17b52c2adb07b Certificate serial: 019AF12DAC194B12B5C53FDE7C959197F303 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGURKILY5sctAiwsPaF7UsKtsHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.mft Manifest number: 0A2E Signing time: Sat 06 Dec 2025 01:01:33 +0000 Manifest this update: Sat 06 Dec 2025 01:01:33 +0000 Manifest next update: Sun 07 Dec 2025 01:01:33 +0000 Files and hashes: 1: KGURKILY5sctAiwsPaF7UsKtsHs.crl (hash: EnjeA+wXFASkYwpy+b5o7gkR3quToSPF2UQZ5/DHTAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.mft rsync://rpki.ripe.net/repository/DEFAULT/KGURKILY5sctAiwsPaF7UsKtsHs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:ac:19:4b:12:b5:c5:3f:de:7c:95:91:97:f3:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2865112882d8e6c72d022c2c3da17b52c2adb07b Validity Not Before: Dec 6 01:01:33 2025 GMT Not After : Dec 7 01:01:33 2025 GMT Subject: CN=951f4290738e00be32c7b880aa13b62d57ac6b7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3b:d7:a3:88:72:cb:1d:a2:24:1a:2a:98:a5: 3d:9c:61:13:0c:62:ba:f6:8d:fb:32:51:34:a2:2f: 49:12:bd:69:fb:0b:ea:d9:89:f4:eb:0f:53:f6:e9: 6c:d5:88:77:b8:7e:e9:23:09:e2:c7:4e:36:b6:01: 0a:1a:3d:a5:7a:cb:f7:e2:c2:7b:65:70:b3:16:8c: a7:30:ed:de:83:6d:b2:35:01:a6:4d:46:dc:cd:0a: ff:c1:54:30:2a:eb:8b:ce:6b:ef:5e:22:e6:15:ff: 2f:76:6a:1c:4b:c1:9b:30:25:cf:e3:47:a2:82:34: bf:90:75:8e:65:08:03:44:76:d9:27:b0:12:30:b6: 71:1d:1e:98:c2:10:41:2f:99:bb:3e:98:3f:22:1a: 5d:94:c2:97:0c:08:cb:9c:85:e4:fc:c9:e2:c8:a5: 92:61:b7:9a:e1:36:e0:85:74:13:7e:aa:fe:69:52: fe:40:7a:a7:a6:74:b0:9d:b3:96:7b:59:92:b5:a1: 39:57:e9:16:95:68:f9:82:33:7a:a5:5b:5a:5f:fa: 2c:91:a8:26:fb:f1:39:4d:e0:f3:e1:78:fa:76:0a: 19:de:7a:ab:73:03:56:57:9b:ff:0b:b0:91:d3:3e: 85:aa:ca:c7:d3:eb:db:78:fa:1d:2d:30:15:49:67: e8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:1F:42:90:73:8E:00:BE:32:C7:B8:80:AA:13:B6:2D:57:AC:6B:7E X509v3 Authority Key Identifier: keyid:28:65:11:28:82:D8:E6:C7:2D:02:2C:2C:3D:A1:7B:52:C2:AD:B0:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGURKILY5sctAiwsPaF7UsKtsHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:d6:dd:05:ef:f4:a4:1c:6c:e8:bb:a1:e6:a0:e5:3d:a1:17: 1d:70:10:bd:e7:60:98:22:2a:81:eb:1c:b4:4a:1f:4a:f7:7c: 42:84:3d:83:80:f2:ae:b4:b9:6f:79:10:94:d7:bd:ca:f8:04: db:c4:0f:d3:69:58:79:83:e2:d1:0e:36:63:94:0b:49:51:38: ec:3f:3d:19:a9:ea:d5:f4:da:8d:4f:d8:7c:7c:f7:0e:ca:ac: 92:9c:5d:bc:cb:2a:12:88:a4:ea:52:67:b2:49:21:48:ee:f8: 83:cc:75:bf:ee:0c:f7:f8:7a:5e:74:3c:51:b3:77:cc:c5:03: 36:aa:ab:2a:b5:0d:bb:a2:8c:6e:0b:31:62:d4:e2:f4:56:93: 19:b6:67:69:44:dc:3d:d7:fc:42:98:76:5f:89:9a:af:30:c0: 1e:53:cf:63:a0:2c:20:28:5a:f5:88:09:53:95:32:e7:25:36: 3c:c9:76:e8:6c:10:59:98:ec:86:e0:f0:84:72:d9:5a:ad:34: a3:b3:5b:a8:9e:ff:f0:8f:78:0c:f9:a9:14:7a:42:6a:bf:19: dc:ad:da:cb:9e:47:43:5c:b4:9c:05:b1:c7:f3:eb:24:b5:f3: 31:5d:14:72:62:98:23:cb:13:f5:93:20:62:13:dd:73:af:08: 8e:c2:89:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLawZSxK1xT/efJWRl/MDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4NjUxMTI4ODJkOGU2YzcyZDAyMmMyYzNkYTE3YjUyYzJh ZGIwN2IwHhcNMjUxMjA2MDEwMTMzWhcNMjUxMjA3MDEwMTMzWjAzMTEwLwYDVQQD Eyg5NTFmNDI5MDczOGUwMGJlMzJjN2I4ODBhYTEzYjYyZDU3YWM2YjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjvXo4hyyx2iJBoqmKU9nGETDGK6 9o37MlE0oi9JEr1p+wvq2Yn06w9T9uls1Yh3uH7pIwnix042tgEKGj2lesv34sJ7 ZXCzFoynMO3eg22yNQGmTUbczQr/wVQwKuuLzmvvXiLmFf8vdmocS8GbMCXP40ei gjS/kHWOZQgDRHbZJ7ASMLZxHR6YwhBBL5m7Ppg/IhpdlMKXDAjLnIXk/MniyKWS Ybea4TbghXQTfqr+aVL+QHqnpnSwnbOWe1mStaE5V+kWlWj5gjN6pVtaX/oskagm +/E5TeDz4Xj6dgoZ3nqrcwNWV5v/C7CR0z6FqsrH0+vbePodLTAVSWfoPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJUfQpBzjgC+Mse4gKoTti1XrGt+MB8GA1UdIwQY MBaAFChlESiC2ObHLQIsLD2he1LCrbB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0dVUktJTFk1c2N0QWl3c1BhRjdVc0t0c0hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hZDhkMDktMzllOS00MDhmLWEzNzAt OWJiM2Y1N2MwZWYwLzEvS0dVUktJTFk1c2N0QWl3c1BhRjdVc0t0c0hzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9hZDhkMDktMzllOS00MDhmLWEzNzAtOWJiM2Y1N2MwZWYw LzEvS0dVUktJTFk1c2N0QWl3c1BhRjdVc0t0c0hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM9bdBe/0 pBxs6Luh5qDlPaEXHXAQvedgmCIqgesctEofSvd8QoQ9g4DyrrS5b3kQlNe9yvgE 28QP02lYeYPi0Q42Y5QLSVE47D89Ganq1fTajU/YfHz3DsqskpxdvMsqEoik6lJn skkhSO74g8x1v+4M9/h6XnQ8UbN3zMUDNqqrKrUNu6KMbgsxYtTi9FaTGbZnaUTc Pdf8Qph2X4marzDAHlPPY6AsICha9YgJU5Uy5yU2PMl26GwQWZjshuDwhHLZWq00 o7NbqJ7/8I94DPmpFHpCar8Z3K3ay55HQ1y0nAWxx/PrJLXzMV0UcmKYI8sT9ZMg YhPdc68IjsKJSw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:14:53 2025 by rpki-client