This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.mft File: KGk7AFbeh9hLrM3YBdA2X6xg9nw.mft (raw, json) Hash identifier: LQtqt4q8CVP3Flrj2EOWE6BhIBt/RYb/tvDFjopy81c= Subject key identifier: 26:46:BA:60:B2:0B:26:EA:61:DF:F6:02:5A:43:35:A5:8A:D4:C7:56 Authority key identifier: 28:69:3B:00:56:DE:87:D8:4B:AC:CD:D8:05:D0:36:5F:AC:60:F6:7C Certificate issuer: /CN=28693b0056de87d84baccdd805d0365fac60f67c Certificate serial: 019B300BCF17D8B31CEA6388D99284A8F900 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGk7AFbeh9hLrM3YBdA2X6xg9nw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.mft Manifest number: 03C2 Signing time: Thu 18 Dec 2025 06:00:38 +0000 Manifest this update: Thu 18 Dec 2025 06:00:38 +0000 Manifest next update: Fri 19 Dec 2025 06:00:38 +0000 Files and hashes: 1: KGk7AFbeh9hLrM3YBdA2X6xg9nw.crl (hash: wnCX7nO4Cp6L1G0gBe2rLwJkH+9je/DwC/Fc6os+GeE=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:0b:cf:17:d8:b3:1c:ea:63:88:d9:92:84:a8:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28693b0056de87d84baccdd805d0365fac60f67c Validity Not Before: Dec 18 06:00:38 2025 GMT Not After : Dec 19 06:00:38 2025 GMT Subject: CN=2646ba60b20b26ea61dff6025a4335a58ad4c756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:da:12:88:21:d9:02:f7:1b:28:80:55:a5:f7: 98:46:9d:d9:a3:a5:03:81:dc:ca:44:d2:2f:5d:b2: 58:60:7b:36:fc:40:88:ba:9f:d6:9d:d9:37:38:2e: 8f:14:06:44:83:43:27:58:03:5d:15:44:39:b4:08: cd:a2:e8:17:b8:b3:b8:80:f2:25:26:a0:81:6e:71: af:36:ca:d1:93:49:0b:79:d4:cb:d9:14:29:78:15: 51:4a:57:d0:6c:2e:a8:1d:f3:08:1d:9a:63:c1:ad: 98:83:3e:11:f3:74:19:de:c2:60:52:19:a4:f6:6c: 7d:f9:1f:14:e9:d3:05:79:c4:1f:6b:17:1c:8d:ed: 81:69:59:7f:82:30:dc:09:c5:7a:ae:90:d6:b3:46: 36:58:a0:e5:34:da:1a:9c:f3:34:8a:50:23:dc:8b: bb:e5:5e:3a:c2:5f:c9:8b:28:6b:c7:60:f1:f3:1d: 2e:b5:13:43:c1:d7:9a:25:79:f1:97:22:a6:20:22: a9:26:fc:a0:03:06:cc:2e:31:71:ad:93:73:65:f4: 36:92:cc:70:8f:e8:a1:a9:e5:27:46:25:0f:f8:63: 0f:9d:53:4a:49:ec:ef:d3:41:95:41:0b:49:96:c4: a0:e8:1e:da:82:c9:27:52:3b:3e:c2:12:a0:d1:bb: 78:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:46:BA:60:B2:0B:26:EA:61:DF:F6:02:5A:43:35:A5:8A:D4:C7:56 X509v3 Authority Key Identifier: keyid:28:69:3B:00:56:DE:87:D8:4B:AC:CD:D8:05:D0:36:5F:AC:60:F6:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGk7AFbeh9hLrM3YBdA2X6xg9nw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:e9:be:d8:25:ce:5f:2c:3d:85:55:3a:d1:49:0c:5e:64:e4: 83:72:28:31:5d:df:57:c1:b0:22:fe:0e:0d:5f:38:13:45:88: d2:cb:c7:31:2b:b0:66:a9:19:92:a4:bb:e8:21:12:b1:b6:67: b2:f4:9a:27:76:d0:4a:62:3c:d4:29:84:af:a7:2d:9e:80:7b: a4:1d:37:aa:ee:71:72:26:06:79:ce:2f:dc:d6:db:03:2d:52: 31:de:b3:72:12:87:9e:78:3a:f0:4c:14:c3:8d:09:07:be:58: 32:8e:fd:fe:d6:5f:16:97:9d:ea:7e:23:a7:94:33:fe:cd:7a: 74:a7:92:af:39:88:5b:54:e4:7a:5a:e0:10:96:5f:44:16:81: c3:ea:45:05:f1:0f:7d:54:60:3f:02:21:c2:99:df:b5:f8:d5: b8:91:1e:ae:1b:3d:db:03:84:92:01:20:eb:87:10:69:cd:a6: 94:d8:05:e3:dd:6f:ae:e5:1c:cc:24:be:fc:63:b5:dd:58:cf: 59:9f:27:ba:e3:66:2f:59:c8:00:fd:67:7d:c1:fd:eb:2c:06: ea:09:84:ae:b4:6d:1f:7e:f7:63:27:64:18:e4:74:18:5a:04: 1e:fe:fd:3b:12:db:40:b5:97:16:99:bd:77:c3:d6:94:81:a4: e8:e9:84:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswC88X2LMc6mOI2ZKEqPkAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4NjkzYjAwNTZkZTg3ZDg0YmFjY2RkODA1ZDAzNjVmYWM2 MGY2N2MwHhcNMjUxMjE4MDYwMDM4WhcNMjUxMjE5MDYwMDM4WjAzMTEwLwYDVQQD EygyNjQ2YmE2MGIyMGIyNmVhNjFkZmY2MDI1YTQzMzVhNThhZDRjNzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9oSiCHZAvcbKIBVpfeYRp3Zo6UD gdzKRNIvXbJYYHs2/ECIup/Wndk3OC6PFAZEg0MnWANdFUQ5tAjNougXuLO4gPIl JqCBbnGvNsrRk0kLedTL2RQpeBVRSlfQbC6oHfMIHZpjwa2Ygz4R83QZ3sJgUhmk 9mx9+R8U6dMFecQfaxccje2BaVl/gjDcCcV6rpDWs0Y2WKDlNNoanPM0ilAj3Iu7 5V46wl/Jiyhrx2Dx8x0utRNDwdeaJXnxlyKmICKpJvygAwbMLjFxrZNzZfQ2ksxw j+ihqeUnRiUP+GMPnVNKSezv00GVQQtJlsSg6B7agsknUjs+whKg0bt48QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCZGumCyCybqYd/2AlpDNaWK1MdWMB8GA1UdIwQY MBaAFChpOwBW3ofYS6zN2AXQNl+sYPZ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0drN0FGYmVoOWhMck0zWUJkQTJYNnhnOW53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi85ODFmMmEtNzRjMC00MGI3LThjMzct MTUwN2I4NTNkZmM5LzEvS0drN0FGYmVoOWhMck0zWUJkQTJYNnhnOW53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi85ODFmMmEtNzRjMC00MGI3LThjMzctMTUwN2I4NTNkZmM5 LzEvS0drN0FGYmVoOWhMck0zWUJkQTJYNnhnOW53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQOm+2CXO Xyw9hVU60UkMXmTkg3IoMV3fV8GwIv4ODV84E0WI0svHMSuwZqkZkqS76CESsbZn svSaJ3bQSmI81CmEr6ctnoB7pB03qu5xciYGec4v3NbbAy1SMd6zchKHnng68EwU w40JB75YMo79/tZfFped6n4jp5Qz/s16dKeSrzmIW1TkelrgEJZfRBaBw+pFBfEP fVRgPwIhwpnftfjVuJEerhs92wOEkgEg64cQac2mlNgF491vruUczCS+/GO13VjP WZ8nuuNmL1nIAP1nfcH96ywG6gmErrRtH373YydkGOR0GFoEHv79OxLbQLWXFpm9 d8PWlIGk6OmEhw== -----END CERTIFICATE-----Generated at Tue Dec 23 10:48:02 2025 by rpki-client