This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft File: KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft (raw, json) Hash identifier: XUxfsWmfDGFtUFviUvbzyCc909XllAgoHVZRVYnR84k= Subject key identifier: C3:64:BC:F4:06:1D:9B:EA:89:F5:8C:3D:80:90:C4:84:F2:A3:36:54 Authority key identifier: 28:36:48:AF:F8:86:18:5F:FC:E3:62:6F:09:0F:11:9A:3E:4E:DE:35 Certificate issuer: /CN=283648aff886185ffce3626f090f119a3e4ede35 Certificate serial: 019B41DB5561975D693F45212C270C8D1695 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KDZIr_iGGF_842JvCQ8Rmj5O3jU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 17:00:51 +0000 Manifest this update: Sun 21 Dec 2025 17:00:51 +0000 Manifest next update: Mon 22 Dec 2025 17:00:51 +0000 Files and hashes: 1: KDZIr_iGGF_842JvCQ8Rmj5O3jU.crl (hash: szAWXT62kc6VHurq48/MRpczeD9wLqMOyNpvAcpfx1o=) 2: XhkT1eFNXwGFl9CWLS9N7T67Cu4.roa (hash: 48Vc4tJA9v+KllK28V53zCHphJsA0bfyopYkodUcdk4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.crl rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft rsync://rpki.ripe.net/repository/DEFAULT/KDZIr_iGGF_842JvCQ8Rmj5O3jU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 17:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:55:61:97:5d:69:3f:45:21:2c:27:0c:8d:16:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=283648aff886185ffce3626f090f119a3e4ede35 Validity Not Before: Dec 21 17:00:51 2025 GMT Not After : Dec 22 17:00:51 2025 GMT Subject: CN=c364bcf4061d9bea89f58c3d8090c484f2a33654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:23:38:6e:87:10:b3:36:64:df:d1:5e:e1:5a: 92:13:d4:89:37:ef:ef:86:56:16:c6:58:9d:00:c8: 8d:e7:66:50:a9:c6:52:01:0f:34:2a:e8:9a:66:ad: 70:a5:ae:ac:29:f6:13:05:ef:d1:2e:9f:c9:e8:d7: 32:98:90:57:4c:a8:1d:4a:7a:52:35:3f:be:9b:f3: da:5f:e6:fa:cc:59:6d:2b:69:7b:f1:a8:8e:d1:28: 0c:1f:fb:12:a6:2e:9e:30:18:b0:f4:b3:b8:34:cd: 64:1c:3d:0c:32:fd:b8:4a:c6:b9:0f:0f:5d:75:41: f0:e9:55:7e:b6:ce:31:5c:bb:b5:a8:70:5f:f5:e3: 3c:27:17:a0:e1:8f:4c:78:b4:57:ac:e8:df:60:22: c8:f1:e8:dd:0b:22:8c:d5:a5:ee:dd:b0:4c:35:2b: 02:e4:7d:56:1b:14:5e:f9:64:cc:cb:8e:0e:bd:28: be:e1:14:ed:00:03:aa:27:f8:c8:95:db:71:d8:11: ad:99:d0:60:47:6a:ee:9c:9f:ef:b3:53:8d:a7:e2: a3:82:88:c3:4e:37:3e:7f:d2:35:18:a4:53:e2:cd: 3b:9a:17:38:63:56:4a:61:31:b0:93:8e:90:4b:65: df:77:f5:9e:08:d5:98:eb:27:af:f2:e0:44:f9:27: e5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:64:BC:F4:06:1D:9B:EA:89:F5:8C:3D:80:90:C4:84:F2:A3:36:54 X509v3 Authority Key Identifier: keyid:28:36:48:AF:F8:86:18:5F:FC:E3:62:6F:09:0F:11:9A:3E:4E:DE:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KDZIr_iGGF_842JvCQ8Rmj5O3jU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:f2:8b:2c:13:76:f8:3a:56:e3:25:ce:86:f3:3b:59:0d:9f: 12:8c:b7:70:cc:41:5b:7f:c9:be:d7:8d:01:b0:7b:36:d2:5c: 9e:71:76:3d:59:10:ba:1f:cd:53:0e:22:fc:e5:e1:36:d7:49: 3e:64:81:87:b2:c3:1f:02:0c:8a:c2:39:46:d9:ee:94:45:6b: e1:ed:f9:7c:35:af:17:23:e9:f3:96:88:a9:02:b9:d9:0e:c9: 02:97:19:eb:67:e1:ae:0e:fe:fc:a2:36:64:2c:bf:c9:2c:23: 74:e6:fb:b1:56:71:7d:88:b3:7d:22:89:1e:fe:9f:55:be:0c: 25:09:51:a9:7f:24:ce:42:52:63:19:ee:a9:d1:74:f8:2d:50: 48:3d:85:9c:83:d1:6b:2f:9e:e9:fb:ce:00:0d:8d:08:f2:57: 80:39:8e:c2:92:d8:ea:b4:b3:f7:c7:bb:c3:e3:c2:26:24:28: 48:f3:32:f2:4b:24:ba:01:29:19:b3:9a:01:bd:15:90:e2:52: 57:b4:e6:e3:81:e9:cc:a6:22:21:c6:43:84:f7:12:5e:0b:dd: 97:19:99:94:27:e8:a5:2d:7d:dd:e5:65:2b:9f:a4:1a:2c:a2: 39:ad:78:73:77:d6:eb:bf:61:77:62:29:c6:cd:b6:6c:ea:88: cd:b7:42:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB21Vhl11pP0UhLCcMjRaVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MzY0OGFmZjg4NjE4NWZmY2UzNjI2ZjA5MGYxMTlhM2U0 ZWRlMzUwHhcNMjUxMjIxMTcwMDUxWhcNMjUxMjIyMTcwMDUxWjAzMTEwLwYDVQQD EyhjMzY0YmNmNDA2MWQ5YmVhODlmNThjM2Q4MDkwYzQ4NGYyYTMzNjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyM4bocQszZk39Fe4VqSE9SJN+/v hlYWxlidAMiN52ZQqcZSAQ80KuiaZq1wpa6sKfYTBe/RLp/J6NcymJBXTKgdSnpS NT++m/PaX+b6zFltK2l78aiO0SgMH/sSpi6eMBiw9LO4NM1kHD0MMv24Ssa5Dw9d dUHw6VV+ts4xXLu1qHBf9eM8Jxeg4Y9MeLRXrOjfYCLI8ejdCyKM1aXu3bBMNSsC 5H1WGxRe+WTMy44OvSi+4RTtAAOqJ/jIldtx2BGtmdBgR2runJ/vs1ONp+KjgojD Tjc+f9I1GKRT4s07mhc4Y1ZKYTGwk46QS2Xfd/WeCNWY6yev8uBE+SfldQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMNkvPQGHZvqifWMPYCQxITyozZUMB8GA1UdIwQY MBaAFCg2SK/4hhhf/ONibwkPEZo+Tt41MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0RaSXJfaUdHRl84NDJKdkNROFJtajVPM2pVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9iOGJkM2ItMDAyNi00ZDU2LWJiMjUt NmE1YzljMGQ5MWU5LzEvS0RaSXJfaUdHRl84NDJKdkNROFJtajVPM2pVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9iOGJkM2ItMDAyNi00ZDU2LWJiMjUtNmE1YzljMGQ5MWU5 LzEvS0RaSXJfaUdHRl84NDJKdkNROFJtajVPM2pVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVfKLLBN2 +DpW4yXOhvM7WQ2fEoy3cMxBW3/JvteNAbB7NtJcnnF2PVkQuh/NUw4i/OXhNtdJ PmSBh7LDHwIMisI5RtnulEVr4e35fDWvFyPp85aIqQK52Q7JApcZ62fhrg7+/KI2 ZCy/ySwjdOb7sVZxfYizfSKJHv6fVb4MJQlRqX8kzkJSYxnuqdF0+C1QSD2FnIPR ay+e6fvOAA2NCPJXgDmOwpLY6rSz98e7w+PCJiQoSPMy8kskugEpGbOaAb0VkOJS V7Tm44HpzKYiIcZDhPcSXgvdlxmZlCfopS193eVlK5+kGiyiOa14c3fW679hd2Ip xs22bOqIzbdCnA== -----END CERTIFICATE-----Generated at Mon Dec 22 00:26:26 2025 by rpki-client