This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft File: KqGB-LCskT3cN34Z1WZLEbGXU3M.mft (raw, json) Hash identifier: uvetKccSya7fagcjZOsI23sAQyaesSNWGKEAe3G+2oU= Subject key identifier: FE:A6:1F:53:24:E8:17:6C:FB:50:5A:76:42:B8:3A:8A:B8:FD:FC:7C Authority key identifier: 2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73 Certificate issuer: /CN=2aa181f8b0ac913ddc377e19d5664b11b1975373 Certificate serial: 019AF0BF1AB34A2673541081655341E63778 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft Manifest number: 0CD4 Signing time: Fri 05 Dec 2025 23:00:47 +0000 Manifest this update: Fri 05 Dec 2025 23:00:47 +0000 Manifest next update: Sat 06 Dec 2025 23:00:47 +0000 Files and hashes: 1: KqGB-LCskT3cN34Z1WZLEbGXU3M.crl (hash: vHr7b1lB4JpGvrJDVwOadjZ4Pv3X1W4DFBOUddkXEYo=) 2: pYcNr9sVfFTE36N21zQEaYvpSC8.roa (hash: qgrqjfITSKMfgl03Ej2JSBSRB998DdmMRLl3Rj6JmrI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:1a:b3:4a:26:73:54:10:81:65:53:41:e6:37:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa181f8b0ac913ddc377e19d5664b11b1975373 Validity Not Before: Dec 5 23:00:47 2025 GMT Not After : Dec 6 23:00:47 2025 GMT Subject: CN=fea61f5324e8176cfb505a7642b83a8ab8fdfc7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a3:3f:8e:97:d4:42:7e:50:59:5a:f0:b8:54: ee:f6:f9:5c:95:53:e2:21:31:51:ad:fc:1a:a3:a6: 81:8b:7c:68:78:bc:67:94:6a:56:17:cd:df:72:f6: 6e:f2:4d:84:2d:b7:07:73:f8:b3:67:ba:66:c3:47: b4:df:dd:68:4b:e2:27:40:20:b7:5a:fc:8b:48:f0: be:b3:94:1c:f0:aa:29:e6:07:6d:6b:4a:45:5d:e8: 9b:05:3e:6e:dd:66:7f:8b:cd:66:00:16:c3:4a:9a: 2f:ac:25:69:5d:b6:ed:d5:6e:75:36:0d:de:ec:2f: ad:3b:66:4b:01:1b:a0:69:3f:16:d2:b0:37:92:58: 77:80:f4:a4:b3:89:ea:3d:ee:3c:08:3c:15:7f:62: 8f:88:7a:e9:11:c1:43:8a:ef:22:44:7d:17:4c:f4: 89:f8:f8:01:72:1f:da:38:0e:d1:1e:8e:6a:37:08: b3:77:92:cb:ed:a6:25:0b:16:80:93:e7:68:1f:ee: e7:62:16:50:6f:03:c0:a0:6d:50:a8:ed:97:b7:72: 83:00:74:3b:2c:c6:84:64:f1:cf:97:b4:a0:dc:5b: 9b:8f:55:bb:74:a2:78:da:46:0d:cc:c4:d2:32:ea: 93:da:f3:cc:18:c5:2f:86:b4:9c:c1:aa:ca:dc:82: a3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:A6:1F:53:24:E8:17:6C:FB:50:5A:76:42:B8:3A:8A:B8:FD:FC:7C X509v3 Authority Key Identifier: keyid:2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:d5:13:ec:6d:50:06:33:5f:e8:6c:02:74:8f:47:93:8c:37: a6:88:f8:bd:1e:d2:dc:be:cf:b8:00:e8:be:3e:39:2f:bb:20: 9c:b4:6f:9f:d0:b1:ae:ee:93:ed:ee:02:02:21:fc:1e:77:42: 3b:eb:74:68:8f:51:73:c7:ff:22:fd:60:03:2d:a6:f1:9f:e3: ea:be:46:dd:90:c3:ec:02:0e:22:84:8d:ad:10:2b:fd:bc:60: 07:0b:43:9e:52:48:75:61:ce:97:cf:17:9a:02:c9:78:66:de: 9d:60:1f:97:c1:c0:6b:c6:e2:b5:6e:a7:cf:cf:3c:42:f4:36: b6:35:31:df:e7:0e:88:60:42:71:42:60:5a:a5:a7:09:08:96: b8:24:b7:b6:fd:1c:86:4d:81:03:39:ee:23:91:72:69:fa:0c: 46:51:45:bf:4f:bd:fa:54:0e:8a:6a:f9:fe:77:26:c6:6a:10: ae:c5:6b:22:f9:ea:79:2f:51:75:a9:b7:15:84:14:98:98:bb: 95:29:fb:e8:33:1e:c0:28:6b:59:38:a4:6b:58:94:f6:40:ae: c1:15:21:fd:7f:06:a9:4e:50:43:c2:d2:fb:b1:4b:20:a4:05: 36:42:c5:ea:93:3c:68:e1:fd:56:62:50:0c:96:b0:13:53:96: 48:e5:23:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvxqzSiZzVBCBZVNB5jd4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYTE4MWY4YjBhYzkxM2RkYzM3N2UxOWQ1NjY0YjExYjE5 NzUzNzMwHhcNMjUxMjA1MjMwMDQ3WhcNMjUxMjA2MjMwMDQ3WjAzMTEwLwYDVQQD EyhmZWE2MWY1MzI0ZTgxNzZjZmI1MDVhNzY0MmI4M2E4YWI4ZmRmYzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6M/jpfUQn5QWVrwuFTu9vlclVPi ITFRrfwao6aBi3xoeLxnlGpWF83fcvZu8k2ELbcHc/izZ7pmw0e0391oS+InQCC3 WvyLSPC+s5Qc8Kop5gdta0pFXeibBT5u3WZ/i81mABbDSpovrCVpXbbt1W51Ng3e 7C+tO2ZLARugaT8W0rA3klh3gPSks4nqPe48CDwVf2KPiHrpEcFDiu8iRH0XTPSJ +PgBch/aOA7RHo5qNwizd5LL7aYlCxaAk+doH+7nYhZQbwPAoG1QqO2Xt3KDAHQ7 LMaEZPHPl7Sg3Fubj1W7dKJ42kYNzMTSMuqT2vPMGMUvhrScwarK3IKjnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP6mH1Mk6Bds+1BadkK4Ooq4/fx8MB8GA1UdIwQY MBaAFCqhgfiwrJE93Dd+GdVmSxGxl1NzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3FHQi1MQ3NrVDNjTjM0WjFXWkxFYkdYVTNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9iOTg3NTUtNjVjNC00ZDE5LWIwNjkt YTFhNTVlOGJlZTNmLzEvS3FHQi1MQ3NrVDNjTjM0WjFXWkxFYkdYVTNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9iOTg3NTUtNjVjNC00ZDE5LWIwNjktYTFhNTVlOGJlZTNm LzEvS3FHQi1MQ3NrVDNjTjM0WjFXWkxFYkdYVTNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj9UT7G1Q BjNf6GwCdI9Hk4w3poj4vR7S3L7PuADovj45L7sgnLRvn9Cxru6T7e4CAiH8HndC O+t0aI9Rc8f/Iv1gAy2m8Z/j6r5G3ZDD7AIOIoSNrRAr/bxgBwtDnlJIdWHOl88X mgLJeGbenWAfl8HAa8bitW6nz888QvQ2tjUx3+cOiGBCcUJgWqWnCQiWuCS3tv0c hk2BAznuI5FyafoMRlFFv0+9+lQOimr5/ncmxmoQrsVrIvnqeS9Rdam3FYQUmJi7 lSn76DMewChrWTika1iU9kCuwRUh/X8GqU5QQ8LS+7FLIKQFNkLF6pM8aOH9VmJQ DJawE1OWSOUjiQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:20:53 2025 by rpki-client