This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft File: KgGcraFj42jMM2J2PyBrPerE0yA.mft (raw, json) Hash identifier: 83zUXpkY47HaSXLlRtkOOXtbdqzexHdDobFFlcGF6U8= Subject key identifier: 58:6D:1B:94:16:92:47:C6:23:0F:C2:FF:C3:97:62:3A:44:9F:D5:94 Authority key identifier: 2A:01:9C:AD:A1:63:E3:68:CC:33:62:76:3F:20:6B:3D:EA:C4:D3:20 Certificate issuer: /CN=2a019cada163e368cc3362763f206b3deac4d320 Certificate serial: 019AF051582D0AD83E14D2A2A1D14F83698C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft Manifest number: 0CCF Signing time: Fri 05 Dec 2025 21:00:53 +0000 Manifest this update: Fri 05 Dec 2025 21:00:53 +0000 Manifest next update: Sat 06 Dec 2025 21:00:53 +0000 Files and hashes: 1: KgGcraFj42jMM2J2PyBrPerE0yA.crl (hash: bzikGhzOXkMxrI4feh/9fbkNFN++GJg+WggNkvEzQo8=) 2: aZtA3Tb82BUczOl9SsTYverE7lI.roa (hash: LK8Z2BqrNCcDSNuABGRySwkLhGqKgLJf/sHl1VyEOIw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:58:2d:0a:d8:3e:14:d2:a2:a1:d1:4f:83:69:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a019cada163e368cc3362763f206b3deac4d320 Validity Not Before: Dec 5 21:00:53 2025 GMT Not After : Dec 6 21:00:53 2025 GMT Subject: CN=586d1b94169247c6230fc2ffc397623a449fd594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ec:ac:ae:21:b3:91:a4:c9:75:56:83:85:b2: 07:72:8f:0f:5a:78:90:df:42:4d:86:c3:c4:89:0d: a9:65:9d:43:4c:0e:b8:ae:28:b4:77:0c:8a:95:0c: 33:2d:ff:e7:f5:cd:98:16:23:4e:de:1d:12:9e:aa: f0:01:b1:f2:2a:e1:4e:47:64:58:87:33:d9:53:0d: 77:bd:90:da:3e:e4:ed:8b:4f:ae:24:c2:6b:73:00: f6:54:3e:9d:10:de:74:c4:c2:ef:3f:82:20:71:f9: 4d:db:ec:ff:6a:71:64:a7:0c:fa:15:a6:c3:44:13: 34:9c:bb:70:d2:08:b6:bc:e4:44:fb:82:56:9c:c8: fd:a5:9f:6a:17:b1:ba:16:14:d9:fc:0c:2d:88:5d: 51:f4:e7:8f:8d:e2:e8:90:97:6d:46:7e:53:2b:89: 7e:53:9d:64:f7:a0:71:31:cd:c5:0a:07:5c:f6:6f: 9c:00:47:6b:9e:a8:95:0f:ca:68:ad:1a:99:95:b2: 23:53:72:82:d9:2c:c6:e0:e4:e0:65:13:a0:06:59: 7f:81:27:9a:3d:aa:92:2c:35:42:22:a5:12:0b:16: 7c:de:11:83:fe:bc:0c:d5:52:4c:0a:cd:25:a9:24: 11:8e:e9:3c:17:34:1d:74:d5:71:6f:c1:5d:73:0b: 80:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:6D:1B:94:16:92:47:C6:23:0F:C2:FF:C3:97:62:3A:44:9F:D5:94 X509v3 Authority Key Identifier: keyid:2A:01:9C:AD:A1:63:E3:68:CC:33:62:76:3F:20:6B:3D:EA:C4:D3:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:c9:e1:d3:39:a3:a7:7e:34:8d:a7:28:bd:4b:f1:fb:32:5d: 07:79:e5:3a:51:bb:43:37:54:50:a4:2c:ef:53:a8:71:46:bf: e0:7a:6c:55:64:3d:d5:95:56:aa:27:3c:8d:11:dc:45:97:2a: 7c:e8:ad:f0:30:96:29:99:3a:1d:01:11:bc:61:40:47:7f:e8: 77:c0:f3:3c:35:65:45:e6:67:3d:4a:f5:ff:8d:3b:56:69:57: 59:1d:8a:20:47:fc:c8:83:ec:2c:bf:f3:c1:0c:c7:cf:8d:e7: d7:a5:27:32:90:22:1b:34:7e:ef:31:24:e0:3e:b9:a4:e0:76: 4b:2c:dc:22:79:7b:27:fa:f7:04:91:d8:75:9b:bb:76:55:94: 9f:6d:35:3a:2b:bc:6f:dd:2e:c6:f9:d3:0d:33:d2:42:2d:f7: cc:c8:f1:af:90:ee:16:93:4f:d8:9a:15:e5:00:47:72:da:96: 0f:e3:55:d3:38:bc:c4:39:1f:05:a4:25:90:d5:09:42:42:3e: 83:5f:93:44:12:c7:7a:fe:c5:9a:d4:f6:79:50:0e:82:d7:cd: 13:f9:b0:cc:c0:f7:58:9c:c4:9f:fe:f1:38:d0:67:a5:18:ec: 25:c7:14:03:b5:c0:44:d7:67:39:31:40:28:f3:84:1b:8d:93: 2e:14:98:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUVgtCtg+FNKiodFPg2mMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhMDE5Y2FkYTE2M2UzNjhjYzMzNjI3NjNmMjA2YjNkZWFj NGQzMjAwHhcNMjUxMjA1MjEwMDUzWhcNMjUxMjA2MjEwMDUzWjAzMTEwLwYDVQQD Eyg1ODZkMWI5NDE2OTI0N2M2MjMwZmMyZmZjMzk3NjIzYTQ0OWZkNTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+ysriGzkaTJdVaDhbIHco8PWniQ 30JNhsPEiQ2pZZ1DTA64rii0dwyKlQwzLf/n9c2YFiNO3h0SnqrwAbHyKuFOR2RY hzPZUw13vZDaPuTti0+uJMJrcwD2VD6dEN50xMLvP4IgcflN2+z/anFkpwz6FabD RBM0nLtw0gi2vORE+4JWnMj9pZ9qF7G6FhTZ/AwtiF1R9OePjeLokJdtRn5TK4l+ U51k96BxMc3FCgdc9m+cAEdrnqiVD8porRqZlbIjU3KC2SzG4OTgZROgBll/gSea PaqSLDVCIqUSCxZ83hGD/rwM1VJMCs0lqSQRjuk8FzQddNVxb8FdcwuAvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFhtG5QWkkfGIw/C/8OXYjpEn9WUMB8GA1UdIwQY MBaAFCoBnK2hY+NozDNidj8gaz3qxNMgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2dHY3JhRmo0MmpNTTJKMlB5QnJQZXJFMHlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80M2E2NzItZDE1MS00YzRlLTk4MDkt MTQ5ZjYzNjVmZmRhLzEvS2dHY3JhRmo0MmpNTTJKMlB5QnJQZXJFMHlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80M2E2NzItZDE1MS00YzRlLTk4MDktMTQ5ZjYzNjVmZmRh LzEvS2dHY3JhRmo0MmpNTTJKMlB5QnJQZXJFMHlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ8nh0zmj p340jacovUvx+zJdB3nlOlG7QzdUUKQs71OocUa/4HpsVWQ91ZVWqic8jRHcRZcq fOit8DCWKZk6HQERvGFAR3/od8DzPDVlReZnPUr1/407VmlXWR2KIEf8yIPsLL/z wQzHz43n16UnMpAiGzR+7zEk4D65pOB2SyzcInl7J/r3BJHYdZu7dlWUn201Oiu8 b90uxvnTDTPSQi33zMjxr5DuFpNP2JoV5QBHctqWD+NV0zi8xDkfBaQlkNUJQkI+ g1+TRBLHev7FmtT2eVAOgtfNE/mwzMD3WJzEn/7xONBnpRjsJccUA7XARNdnOTFA KPOEG42TLhSYeQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:26 2025 by rpki-client