This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft File: KBeCQ6CGawkSctHh60UeceQTuZo.mft (raw, json) Hash identifier: V6lfRmTq92ckM0Ujc5Wn2m8BHmDe9GNoUADgQbW2V14= Subject key identifier: 76:77:67:FC:E5:31:E2:27:10:90:71:D9:87:8B:E0:5B:26:27:0A:FC Authority key identifier: 28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A Certificate issuer: /CN=28178243a0866b091272d1e1eb451e71e413b99a Certificate serial: 019B435BDDA9AA5C86F4B56D51E1F4D87C05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft Manifest number: 07CE Signing time: Mon 22 Dec 2025 00:00:52 +0000 Manifest this update: Mon 22 Dec 2025 00:00:52 +0000 Manifest next update: Tue 23 Dec 2025 00:00:52 +0000 Files and hashes: 1: 9b2tSpH9I_YDuaAeaEvrPjYTSYA.roa (hash: CQ+HO3gorMuwRRve3+ZDJ9LD5LzYPKSs3rQmvQ37N3I=) 2: KBeCQ6CGawkSctHh60UeceQTuZo.crl (hash: ukgIqMwgEDLKe5dlJoZhBfMlCo8Q04VAQuVI4wkc09I=) 3: aXUaEE4Rc3FPn930-LUjFOMalKE.roa (hash: k4xvVX6CkM3fxWMUWFx76Dj4mkNerIxARf8E+Dyy4rw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5b:dd:a9:aa:5c:86:f4:b5:6d:51:e1:f4:d8:7c:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28178243a0866b091272d1e1eb451e71e413b99a Validity Not Before: Dec 22 00:00:52 2025 GMT Not After : Dec 23 00:00:52 2025 GMT Subject: CN=767767fce531e227109071d9878be05b26270afc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:77:5c:ee:ac:a2:30:23:a1:9c:35:db:f5:f3: 70:7d:90:e9:68:1e:db:df:cb:8c:00:aa:a0:a5:f5: f7:e8:a0:bc:9d:82:f7:62:77:c5:0c:b7:7e:48:79: e0:00:9d:c2:4b:d7:67:fc:03:f2:aa:2e:b5:8f:32: fc:bb:b8:5f:ea:d9:11:13:94:2e:25:ae:de:81:ed: 24:e1:b4:7b:41:ed:27:5c:ca:b5:48:9a:62:75:b6: 69:ed:92:ad:79:03:66:5a:48:fa:71:88:a4:b0:89: 6f:1f:05:b5:fc:83:6f:3f:e1:68:20:63:9b:01:5b: 90:7c:fb:5d:12:63:3c:b5:48:10:df:61:7d:7c:b7: 89:c4:fd:9a:e3:74:bf:c9:d7:ee:f3:bf:a5:e5:f1: 2c:ef:be:1e:e2:71:3e:26:f2:cd:2d:a0:40:26:ce: da:84:14:b7:33:2f:9b:3d:65:6e:b7:fc:0a:e3:14: 23:e1:f3:89:c7:e4:27:b6:ed:8f:35:6b:fb:68:d9: fe:c4:fe:33:0e:44:c2:33:a1:91:53:fc:10:68:f5: 7b:a9:6f:c6:7b:b8:16:c7:ec:e3:1a:e7:fb:0a:e6: 95:e2:79:27:ba:b9:19:2f:7e:f1:3d:4d:c3:c5:d4: 69:42:23:2d:a8:1a:15:a3:61:2a:bb:7e:fb:01:46: bf:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:77:67:FC:E5:31:E2:27:10:90:71:D9:87:8B:E0:5B:26:27:0A:FC X509v3 Authority Key Identifier: keyid:28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:e4:3e:00:55:f8:d1:c5:9b:3e:e4:a1:7c:4c:18:9d:c1:d0: e1:f5:dd:b1:89:e7:ff:37:cf:1d:6d:e3:64:5a:71:3f:f4:78: 0a:e9:eb:27:ba:3b:4d:ed:4e:ea:4c:bf:21:7a:2c:da:fe:8c: b7:40:3b:aa:90:7f:6b:92:21:0a:9f:8c:59:a2:af:23:30:35: 99:81:d3:de:e5:81:e5:0f:67:19:69:1d:8f:f1:4b:31:1a:46: 2c:b6:ca:e6:e1:a2:42:7f:7e:a2:e8:c3:13:fd:e9:04:65:3d: 3b:5f:c9:ac:a4:fc:57:18:95:be:93:58:d2:d9:48:be:64:48: 6e:4f:3b:0f:01:72:1b:e1:83:b9:f8:57:66:9b:e3:47:fc:86: 4f:7f:2a:4f:c2:1f:0b:60:09:cc:04:91:f5:5a:3e:a9:48:92: 82:34:7a:aa:aa:f0:fa:83:0f:e2:89:23:d4:dc:f9:09:4a:76: 44:a4:67:8b:21:97:aa:eb:31:8d:2b:47:f6:cb:dd:08:fc:1f: 3e:73:f5:70:0e:e6:ba:09:61:97:2a:ef:63:3e:c0:08:57:c6: 5d:ba:43:0e:2e:e2:31:77:bf:1a:9d:65:be:f9:35:e5:f9:42: af:b1:24:df:59:8e:04:e2:7e:8b:c9:a2:7b:ff:bc:c5:7a:20: 1e:79:8e:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDW92pqlyG9LVtUeH02HwFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MTc4MjQzYTA4NjZiMDkxMjcyZDFlMWViNDUxZTcxZTQx M2I5OWEwHhcNMjUxMjIyMDAwMDUyWhcNMjUxMjIzMDAwMDUyWjAzMTEwLwYDVQQD Eyg3Njc3NjdmY2U1MzFlMjI3MTA5MDcxZDk4NzhiZTA1YjI2MjcwYWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Hdc7qyiMCOhnDXb9fNwfZDpaB7b 38uMAKqgpfX36KC8nYL3YnfFDLd+SHngAJ3CS9dn/APyqi61jzL8u7hf6tkRE5Qu Ja7ege0k4bR7Qe0nXMq1SJpidbZp7ZKteQNmWkj6cYiksIlvHwW1/INvP+FoIGOb AVuQfPtdEmM8tUgQ32F9fLeJxP2a43S/ydfu87+l5fEs774e4nE+JvLNLaBAJs7a hBS3My+bPWVut/wK4xQj4fOJx+Qntu2PNWv7aNn+xP4zDkTCM6GRU/wQaPV7qW/G e7gWx+zjGuf7CuaV4nknurkZL37xPU3DxdRpQiMtqBoVo2Equ377AUa/3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHZ3Z/zlMeInEJBx2YeL4FsmJwr8MB8GA1UdIwQY MBaAFCgXgkOghmsJEnLR4etFHnHkE7maMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0JlQ1E2Q0dhd2tTY3RIaDYwVWVjZVFUdVpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS83NDdkYjgtYWM1Ny00NmE4LWI2MzIt NmNlM2MwM2ExMzRjLzEvS0JlQ1E2Q0dhd2tTY3RIaDYwVWVjZVFUdVpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS83NDdkYjgtYWM1Ny00NmE4LWI2MzItNmNlM2MwM2ExMzRj LzEvS0JlQ1E2Q0dhd2tTY3RIaDYwVWVjZVFUdVpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWeQ+AFX4 0cWbPuShfEwYncHQ4fXdsYnn/zfPHW3jZFpxP/R4CunrJ7o7Te1O6ky/IXos2v6M t0A7qpB/a5IhCp+MWaKvIzA1mYHT3uWB5Q9nGWkdj/FLMRpGLLbK5uGiQn9+oujD E/3pBGU9O1/JrKT8VxiVvpNY0tlIvmRIbk87DwFyG+GDufhXZpvjR/yGT38qT8If C2AJzASR9Vo+qUiSgjR6qqrw+oMP4okj1Nz5CUp2RKRniyGXqusxjStH9svdCPwf PnP1cA7muglhlyrvYz7ACFfGXbpDDi7iMXe/Gp1lvvk15flCr7Ek31mOBOJ+i8mi e/+8xXogHnmOLQ== -----END CERTIFICATE-----Generated at Mon Dec 22 06:27:02 2025 by rpki-client