This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft File: KBeCQ6CGawkSctHh60UeceQTuZo.mft (raw, json) Hash identifier: j3i1wvcqwT6AWe60FOqrFpiJ79GDpTFIOuNUoWX4Cjk= Subject key identifier: FC:9E:E2:7E:21:07:08:68:F7:23:AC:05:FC:8C:55:04:4F:DB:33:26 Authority key identifier: 28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A Certificate issuer: /CN=28178243a0866b091272d1e1eb451e71e413b99a Certificate serial: 019B3BA2536D283F8AC227F828D81C1FF170 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft Manifest number: 07CA Signing time: Sat 20 Dec 2025 12:00:52 +0000 Manifest this update: Sat 20 Dec 2025 12:00:52 +0000 Manifest next update: Sun 21 Dec 2025 12:00:52 +0000 Files and hashes: 1: 9b2tSpH9I_YDuaAeaEvrPjYTSYA.roa (hash: CQ+HO3gorMuwRRve3+ZDJ9LD5LzYPKSs3rQmvQ37N3I=) 2: KBeCQ6CGawkSctHh60UeceQTuZo.crl (hash: ZbZ7eYgmO8XscMwWIMpzwKTOYsCaz6eGlhjcVvC+noc=) 3: aXUaEE4Rc3FPn930-LUjFOMalKE.roa (hash: k4xvVX6CkM3fxWMUWFx76Dj4mkNerIxARf8E+Dyy4rw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 12:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:53:6d:28:3f:8a:c2:27:f8:28:d8:1c:1f:f1:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28178243a0866b091272d1e1eb451e71e413b99a Validity Not Before: Dec 20 12:00:52 2025 GMT Not After : Dec 21 12:00:52 2025 GMT Subject: CN=fc9ee27e21070868f723ac05fc8c55044fdb3326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d8:9a:a8:1e:77:cc:02:ec:85:8e:3a:50:9d: c2:b1:bb:02:42:89:02:7d:92:d4:c7:3d:f5:6e:25: 4e:c2:c8:8a:33:3d:a1:82:e1:d1:e9:4e:f9:f9:d2: fe:cd:0f:01:92:5d:80:f1:44:60:9d:33:51:50:7c: 19:51:b0:27:11:84:03:f6:65:fd:10:87:cf:38:7c: 57:84:75:ff:eb:a0:e9:2b:a9:f6:6b:30:92:26:4e: 3e:39:d2:17:38:9d:98:c3:cf:e4:2f:52:01:3f:79: 88:40:63:38:e0:ff:b0:99:66:e0:fc:f1:be:e6:4c: b0:30:41:94:3d:c0:70:a0:a2:fb:06:50:19:ed:5d: c5:7f:66:bf:d6:9a:f8:72:07:32:c7:24:1c:9e:e4: 25:37:aa:de:66:41:58:df:ba:61:e5:24:a8:17:2d: 5f:e4:87:b0:db:17:7d:70:21:5b:a8:d0:9e:3c:16: 20:6c:94:d5:16:79:86:8b:e3:21:ca:3d:fe:78:b0: da:42:fb:03:bb:aa:b1:fb:0f:8c:e8:dd:c3:10:f4: f4:5d:8d:34:d8:f8:ea:bc:eb:a9:03:38:20:69:01: 9a:2b:0d:87:5b:c0:f3:ba:2a:28:eb:3c:9d:dd:0e: 1b:16:b6:ce:d4:37:36:dd:50:13:2f:1d:bd:9a:33: 13:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:9E:E2:7E:21:07:08:68:F7:23:AC:05:FC:8C:55:04:4F:DB:33:26 X509v3 Authority Key Identifier: keyid:28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:b9:b8:5a:5a:5b:72:7c:cc:a2:6f:b5:94:72:78:5c:ee:e0: 2d:6c:a7:16:6e:ff:d0:cd:d1:fd:84:78:83:e5:4c:b3:38:b7: a5:30:f8:8c:b8:96:08:2b:db:8e:af:89:dc:f9:6f:1a:dd:a9: 1d:c2:5c:cc:ac:38:dd:49:59:01:6d:9e:b8:1c:ce:2a:b8:db: 01:59:74:9c:20:75:0d:13:9f:dd:ec:ba:fd:c1:80:3d:18:62: 3e:44:63:74:77:d6:c6:04:bf:51:45:11:cf:c1:33:d6:c5:0e: 2c:72:a5:de:f7:43:c8:2c:e2:75:9b:93:58:d3:de:4b:bb:5c: 31:b4:da:6f:c1:64:b0:22:23:6b:97:71:d6:38:d1:d1:f3:b5: a5:42:8b:5f:e9:58:44:83:e5:f5:83:f3:d6:4b:ee:a6:3b:ee: e6:f3:4a:52:5b:d5:97:a0:ad:d3:3c:61:b3:7e:a0:8a:e2:b6: 1f:bb:2f:eb:a2:c9:fa:3e:da:e8:55:c3:6b:43:03:b9:03:49: 94:0d:a3:6a:8a:23:a2:6b:99:29:41:99:de:9b:0d:76:8b:e3: 27:9c:99:3c:73:00:a5:72:0f:19:8a:c2:dc:6d:3a:e5:2b:ea: 25:eb:f4:30:69:d7:3a:51:e1:b2:63:a9:47:b6:33:c3:ad:29: be:bb:1b:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7olNtKD+Kwif4KNgcH/FwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MTc4MjQzYTA4NjZiMDkxMjcyZDFlMWViNDUxZTcxZTQx M2I5OWEwHhcNMjUxMjIwMTIwMDUyWhcNMjUxMjIxMTIwMDUyWjAzMTEwLwYDVQQD EyhmYzllZTI3ZTIxMDcwODY4ZjcyM2FjMDVmYzhjNTUwNDRmZGIzMzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdiaqB53zALshY46UJ3CsbsCQokC fZLUxz31biVOwsiKMz2hguHR6U75+dL+zQ8Bkl2A8URgnTNRUHwZUbAnEYQD9mX9 EIfPOHxXhHX/66DpK6n2azCSJk4+OdIXOJ2Yw8/kL1IBP3mIQGM44P+wmWbg/PG+ 5kywMEGUPcBwoKL7BlAZ7V3Ff2a/1pr4cgcyxyQcnuQlN6reZkFY37ph5SSoFy1f 5Iew2xd9cCFbqNCePBYgbJTVFnmGi+Mhyj3+eLDaQvsDu6qx+w+M6N3DEPT0XY00 2PjqvOupAzggaQGaKw2HW8Dzuioo6zyd3Q4bFrbO1Dc23VATLx29mjMTVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPye4n4hBwho9yOsBfyMVQRP2zMmMB8GA1UdIwQY MBaAFCgXgkOghmsJEnLR4etFHnHkE7maMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0JlQ1E2Q0dhd2tTY3RIaDYwVWVjZVFUdVpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS83NDdkYjgtYWM1Ny00NmE4LWI2MzIt NmNlM2MwM2ExMzRjLzEvS0JlQ1E2Q0dhd2tTY3RIaDYwVWVjZVFUdVpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS83NDdkYjgtYWM1Ny00NmE4LWI2MzItNmNlM2MwM2ExMzRj LzEvS0JlQ1E2Q0dhd2tTY3RIaDYwVWVjZVFUdVpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHrm4Wlpb cnzMom+1lHJ4XO7gLWynFm7/0M3R/YR4g+VMszi3pTD4jLiWCCvbjq+J3PlvGt2p HcJczKw43UlZAW2euBzOKrjbAVl0nCB1DROf3ey6/cGAPRhiPkRjdHfWxgS/UUUR z8Ez1sUOLHKl3vdDyCzidZuTWNPeS7tcMbTab8FksCIja5dx1jjR0fO1pUKLX+lY RIPl9YPz1kvupjvu5vNKUlvVl6Ct0zxhs36giuK2H7sv66LJ+j7a6FXDa0MDuQNJ lA2jaoojomuZKUGZ3psNdovjJ5yZPHMApXIPGYrC3G065SvqJev0MGnXOlHhsmOp R7Yzw60pvrsbBg== -----END CERTIFICATE-----Generated at Sat Dec 20 21:31:23 2025 by rpki-client