This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft File: kGDG8B34XUoDPxJWU-Exe29Chk4.mft (raw, json) Hash identifier: l8MLtqiyAJ3D8nqO7KQAT1V/GTReenYNsSWqvIQ2HyI= Subject key identifier: F7:68:A3:8F:91:F0:DC:CD:91:6E:38:A7:0C:8B:05:92:8D:E4:C4:C5 Authority key identifier: 90:60:C6:F0:1D:F8:5D:4A:03:3F:12:56:53:E1:31:7B:6F:42:86:4E Certificate issuer: /CN=9060c6f01df85d4a033f125653e1317b6f42864e Certificate serial: 019B3CEC63B24BA0B854899F494600A533F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft Manifest number: 1187 Signing time: Sat 20 Dec 2025 18:01:23 +0000 Manifest this update: Sat 20 Dec 2025 18:01:23 +0000 Manifest next update: Sun 21 Dec 2025 18:01:23 +0000 Files and hashes: 1: 1-p8SrWJ5THOyKbL_R9fZqVDF5Lg.roa (hash: Dpj5AMuFNg0086YuEbRvx4oDSlmmrMJ7GujnIQgUfaA=) 2: kGDG8B34XUoDPxJWU-Exe29Chk4.crl (hash: 3IhYPRa20pdAx7ALcCe8mU+y3PoX1GlmqcMaitLf+TU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.crl rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:63:b2:4b:a0:b8:54:89:9f:49:46:00:a5:33:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9060c6f01df85d4a033f125653e1317b6f42864e Validity Not Before: Dec 20 18:01:23 2025 GMT Not After : Dec 21 18:01:23 2025 GMT Subject: CN=f768a38f91f0dccd916e38a70c8b05928de4c4c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cb:24:5f:d0:0a:f1:dc:9b:da:19:14:3a:de: f7:68:c3:1e:c5:a3:22:f0:8c:fd:90:89:54:26:30: b8:2f:af:2d:31:d6:72:02:b5:e1:d1:f7:4a:c0:be: da:dd:25:2e:67:d3:9f:b6:ba:8a:63:a7:b6:ea:0e: 07:92:d5:0c:2e:0b:72:c5:83:1f:c2:fe:d1:4c:17: 0a:8d:b8:d9:24:32:02:8f:cb:b3:a5:9b:81:e1:fe: a5:49:96:ab:ac:02:74:af:2c:ba:6c:b0:7c:8b:7a: ab:8b:10:32:ed:8f:0a:1a:2f:d9:ea:f2:ad:e0:08: 48:6c:0e:54:7c:c2:08:05:3f:2d:63:1a:35:f8:48: 91:20:cd:45:2d:ba:04:a9:02:e6:35:7d:0c:bc:5a: 62:12:56:c4:b7:92:e0:dc:8a:75:6f:cd:5f:5b:a3: c6:69:db:e4:41:fd:b6:31:d7:c6:c4:ab:9d:ca:66: f1:a7:e5:61:72:f5:24:69:b3:59:5c:6a:95:05:58: 83:0b:8a:55:da:b8:a2:40:13:89:2e:f8:f9:a5:03: 84:ad:6c:69:d9:a6:d7:37:f3:93:f5:4a:bd:d3:f8: 92:4c:a1:4d:b3:be:3e:e1:9e:da:38:44:73:4c:16: 59:96:27:e0:76:8c:d2:e3:e7:0e:65:b0:e3:b2:9d: 51:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:68:A3:8F:91:F0:DC:CD:91:6E:38:A7:0C:8B:05:92:8D:E4:C4:C5 X509v3 Authority Key Identifier: keyid:90:60:C6:F0:1D:F8:5D:4A:03:3F:12:56:53:E1:31:7B:6F:42:86:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:b4:83:bc:b8:59:d6:dd:b7:f3:a0:e0:e8:de:b9:0a:64:d2: ee:0c:b2:01:33:db:9e:98:47:55:65:53:29:d5:fe:1a:4a:2b: e0:85:9f:4e:61:79:ae:44:43:3d:b3:05:89:f8:c5:54:25:22: 60:ed:80:ce:ce:9c:69:7c:bb:98:31:09:97:49:a0:54:77:a6: 6b:fe:bb:5d:3c:f2:05:4b:b3:35:f6:82:94:a7:7f:bd:11:42: 3c:69:82:d7:a5:8e:c9:1b:e0:4e:38:fe:d1:81:d2:69:a8:87: b8:88:80:5f:4e:1f:6a:a8:8c:6d:fe:9e:ed:22:53:1d:5d:33: 03:fb:3d:01:20:7d:34:f9:66:90:78:dd:47:bd:3d:e2:6c:2f: 9d:bc:4b:1f:c7:a4:cd:7a:28:69:37:d0:d7:3e:65:c7:68:f1: d4:be:ec:11:49:36:b8:48:40:aa:8f:15:ca:06:6c:fc:d3:2d: e5:2e:dd:a7:78:3b:1f:ee:8a:78:e3:b6:ac:37:ee:24:c8:12: 7b:52:20:f0:fb:13:e2:a1:71:99:f1:15:35:90:f9:3f:c6:be: 78:25:cf:da:ad:7b:f5:69:c8:a8:86:74:2a:1c:60:41:26:d7: 5f:03:df:48:db:ee:01:04:c6:d2:5c:76:eb:16:05:f8:db:2e: b2:87:bd:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87GOyS6C4VImfSUYApTP5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwNjBjNmYwMWRmODVkNGEwMzNmMTI1NjUzZTEzMTdiNmY0 Mjg2NGUwHhcNMjUxMjIwMTgwMTIzWhcNMjUxMjIxMTgwMTIzWjAzMTEwLwYDVQQD EyhmNzY4YTM4ZjkxZjBkY2NkOTE2ZTM4YTcwYzhiMDU5MjhkZTRjNGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMskX9AK8dyb2hkUOt73aMMexaMi 8Iz9kIlUJjC4L68tMdZyArXh0fdKwL7a3SUuZ9OftrqKY6e26g4HktUMLgtyxYMf wv7RTBcKjbjZJDICj8uzpZuB4f6lSZarrAJ0ryy6bLB8i3qrixAy7Y8KGi/Z6vKt 4AhIbA5UfMIIBT8tYxo1+EiRIM1FLboEqQLmNX0MvFpiElbEt5Lg3Ip1b81fW6PG advkQf22MdfGxKudymbxp+VhcvUkabNZXGqVBViDC4pV2riiQBOJLvj5pQOErWxp 2abXN/OT9Uq90/iSTKFNs74+4Z7aOERzTBZZlifgdozS4+cOZbDjsp1RBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPdoo4+R8NzNkW44pwyLBZKN5MTFMB8GA1UdIwQY MBaAFJBgxvAd+F1KAz8SVlPhMXtvQoZOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0dERzhCMzRYVW9EUHhKV1UtRXhlMjlDaGs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82N2QwN2MtYTU2MS00NTdmLWEwNDQt Y2UwYjhhNTFhNDUxLzEva0dERzhCMzRYVW9EUHhKV1UtRXhlMjlDaGs0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS82N2QwN2MtYTU2MS00NTdmLWEwNDQtY2UwYjhhNTFhNDUx LzEva0dERzhCMzRYVW9EUHhKV1UtRXhlMjlDaGs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxrSDvLhZ 1t2386Dg6N65CmTS7gyyATPbnphHVWVTKdX+Gkor4IWfTmF5rkRDPbMFifjFVCUi YO2Azs6caXy7mDEJl0mgVHema/67XTzyBUuzNfaClKd/vRFCPGmC16WOyRvgTjj+ 0YHSaaiHuIiAX04faqiMbf6e7SJTHV0zA/s9ASB9NPlmkHjdR7094mwvnbxLH8ek zXooaTfQ1z5lx2jx1L7sEUk2uEhAqo8VygZs/NMt5S7dp3g7H+6KeOO2rDfuJMgS e1Ig8PsT4qFxmfEVNZD5P8a+eCXP2q179WnIqIZ0KhxgQSbXXwPfSNvuAQTG0lx2 6xYF+Nsusoe9Pg== -----END CERTIFICATE-----Generated at Sun Dec 21 01:59:59 2025 by rpki-client