This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft File: KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft (raw, json) Hash identifier: 95Gp5sed3FVtlyP6FeGnd1upejCaClT3gd44Hggs8RM= Subject key identifier: C7:AA:CE:28:85:4D:4C:3E:2C:4D:68:D9:06:88:2A:AB:19:8D:92:B3 Authority key identifier: 28:11:81:8F:95:BE:66:90:E8:AA:BC:5B:EF:A2:17:34:6A:BC:D5:74 Certificate issuer: /CN=2811818f95be6690e8aabc5befa217346abcd574 Certificate serial: 019AF0F5E65394F7CA3BDE4D88F6B6972280 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBGBj5W-ZpDoqrxb76IXNGq81XQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft Manifest number: 0146 Signing time: Sat 06 Dec 2025 00:00:38 +0000 Manifest this update: Sat 06 Dec 2025 00:00:38 +0000 Manifest next update: Sun 07 Dec 2025 00:00:38 +0000 Files and hashes: 1: KBGBj5W-ZpDoqrxb76IXNGq81XQ.crl (hash: nvs+xwLP/SPGBCPPhPLUhChQPvdeaoRbFv5MYQIVoBk=) 2: n-Wmrebr6lzK0J6ASQgmm9zQzw8.roa (hash: gSUCEOpCYsWN0Xnm1rGEL1t6dJaB8XsJukmiSO9QmS0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KBGBj5W-ZpDoqrxb76IXNGq81XQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:e6:53:94:f7:ca:3b:de:4d:88:f6:b6:97:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2811818f95be6690e8aabc5befa217346abcd574 Validity Not Before: Dec 6 00:00:38 2025 GMT Not After : Dec 7 00:00:38 2025 GMT Subject: CN=c7aace28854d4c3e2c4d68d906882aab198d92b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:12:eb:d0:ad:7d:62:b3:6b:f1:71:8e:30:d7: 01:5c:b7:ad:73:ba:5d:70:39:5a:0f:26:42:a3:23: c6:4f:32:f9:97:83:fd:e0:59:c2:e3:ba:0a:68:7b: dd:ac:7c:ff:c7:da:9c:ad:d6:2e:b8:c7:7e:3f:e1: 31:c9:b0:26:32:50:69:07:18:85:1d:13:23:39:93: b3:7e:3e:64:54:81:12:f4:26:92:fe:1b:cd:57:06: 56:b7:77:0e:d3:77:07:3d:a9:a3:2c:20:b5:88:11: 4a:b8:5b:c9:c7:bb:ea:10:70:27:12:84:1f:af:9d: 5d:c8:42:3b:2e:8d:f1:9d:28:6b:c0:db:c2:15:2e: 55:60:3a:a3:3d:ea:3e:11:a5:50:bb:38:6e:4b:d1: c9:9d:5f:47:82:35:8e:c3:a4:9c:a3:d7:e3:00:74: 2b:85:82:0a:02:56:d0:bd:b6:b9:36:64:67:e2:cb: 3a:60:df:4d:35:39:f2:73:f6:e6:0c:97:cd:c2:de: 71:92:5b:96:39:f5:a7:af:c6:e8:68:39:40:53:72: 05:a2:c3:8e:47:20:7c:09:2a:c1:f5:4c:c2:e0:49: 4c:06:2f:68:ad:31:31:af:80:7e:35:61:52:80:40: 10:fb:3b:b4:31:ec:87:96:2f:cf:03:71:68:f9:c5: 7f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:AA:CE:28:85:4D:4C:3E:2C:4D:68:D9:06:88:2A:AB:19:8D:92:B3 X509v3 Authority Key Identifier: keyid:28:11:81:8F:95:BE:66:90:E8:AA:BC:5B:EF:A2:17:34:6A:BC:D5:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBGBj5W-ZpDoqrxb76IXNGq81XQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:54:44:5f:9f:92:6e:2d:c9:56:09:43:01:37:62:10:f8:5a: 8c:30:6b:e3:d6:b9:27:45:29:33:7e:b2:cd:1c:1d:48:ab:fa: d6:a0:9f:3f:d9:68:4f:2a:bf:c4:2d:55:3a:13:19:0a:15:2f: a5:95:92:0a:a1:e6:96:c1:b2:2a:43:f0:2f:21:da:45:09:a0: 62:74:b9:29:e5:90:e4:9e:0d:9e:34:21:00:e6:9b:bc:b5:23: d3:38:85:27:06:4e:9d:2f:31:33:a9:c6:a2:8f:53:8d:1b:2e: f8:a5:a0:36:1c:84:3b:63:4e:60:94:e4:0a:fa:39:ca:d9:d4: 07:3b:86:99:99:c9:77:18:2b:97:84:7b:39:ae:e1:16:eb:08: a9:4d:95:53:49:35:f1:03:4a:8d:3a:60:e7:26:05:ae:59:92: 12:5b:33:b3:eb:67:8f:34:46:28:b5:5c:fc:54:dd:e0:86:21: 0c:d1:3d:ac:ff:a0:4b:57:75:41:df:ff:85:97:80:22:77:65: 10:db:2f:bf:9c:4c:f5:3e:e6:60:05:d0:72:75:58:9c:0e:dc: 84:dd:b6:64:c6:60:df:41:a9:f7:ba:5d:40:00:a3:9c:75:a6: 43:f8:06:5f:c9:2a:b6:5b:41:24:39:c3:2c:c5:c3:a7:b9:18: 64:17:ad:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9eZTlPfKO95NiPa2lyKAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MTE4MThmOTViZTY2OTBlOGFhYmM1YmVmYTIxNzM0NmFi Y2Q1NzQwHhcNMjUxMjA2MDAwMDM4WhcNMjUxMjA3MDAwMDM4WjAzMTEwLwYDVQQD EyhjN2FhY2UyODg1NGQ0YzNlMmM0ZDY4ZDkwNjg4MmFhYjE5OGQ5MmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BLr0K19YrNr8XGOMNcBXLetc7pd cDlaDyZCoyPGTzL5l4P94FnC47oKaHvdrHz/x9qcrdYuuMd+P+ExybAmMlBpBxiF HRMjOZOzfj5kVIES9CaS/hvNVwZWt3cO03cHPamjLCC1iBFKuFvJx7vqEHAnEoQf r51dyEI7Lo3xnShrwNvCFS5VYDqjPeo+EaVQuzhuS9HJnV9HgjWOw6Sco9fjAHQr hYIKAlbQvba5NmRn4ss6YN9NNTnyc/bmDJfNwt5xkluWOfWnr8boaDlAU3IFosOO RyB8CSrB9UzC4ElMBi9orTExr4B+NWFSgEAQ+zu0MeyHli/PA3Fo+cV/wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMeqziiFTUw+LE1o2QaIKqsZjZKzMB8GA1UdIwQY MBaAFCgRgY+VvmaQ6Kq8W++iFzRqvNV0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0JHQmo1Vy1acERvcXJ4Yjc2SVhOR3E4MVhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS84OWU2NTUtYmQ3OS00OTg0LWI2NDkt NDJlNTdlZjYwMDBhLzEvS0JHQmo1Vy1acERvcXJ4Yjc2SVhOR3E4MVhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS84OWU2NTUtYmQ3OS00OTg0LWI2NDktNDJlNTdlZjYwMDBh LzEvS0JHQmo1Vy1acERvcXJ4Yjc2SVhOR3E4MVhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYFREX5+S bi3JVglDATdiEPhajDBr49a5J0UpM36yzRwdSKv61qCfP9loTyq/xC1VOhMZChUv pZWSCqHmlsGyKkPwLyHaRQmgYnS5KeWQ5J4NnjQhAOabvLUj0ziFJwZOnS8xM6nG oo9TjRsu+KWgNhyEO2NOYJTkCvo5ytnUBzuGmZnJdxgrl4R7Oa7hFusIqU2VU0k1 8QNKjTpg5yYFrlmSElszs+tnjzRGKLVc/FTd4IYhDNE9rP+gS1d1Qd//hZeAIndl ENsvv5xM9T7mYAXQcnVYnA7chN22ZMZg30Gp97pdQACjnHWmQ/gGX8kqtltBJDnD LMXDp7kYZBetRw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:16 2025 by rpki-client