This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.mft File: KgV9tw5HTrSgd_oT875N17Y4C1Q.mft (raw, json) Hash identifier: kcu5rD1WmZKgZAmp7gH/wSxgf4yzaNxy7/iNL8gxR5A= Subject key identifier: 5C:A2:92:F7:25:14:90:10:25:1D:7D:18:AB:46:A8:F8:A2:13:AE:94 Authority key identifier: 2A:05:7D:B7:0E:47:4E:B4:A0:77:FA:13:F3:BE:4D:D7:B6:38:0B:54 Certificate issuer: /CN=2a057db70e474eb4a077fa13f3be4dd7b6380b54 Certificate serial: 019B5373A0C31FD5C97BE6C1AE5037939A13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgV9tw5HTrSgd_oT875N17Y4C1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.mft Manifest number: 118C Signing time: Thu 25 Dec 2025 03:00:45 +0000 Manifest this update: Thu 25 Dec 2025 03:00:45 +0000 Manifest next update: Fri 26 Dec 2025 03:00:45 +0000 Files and hashes: 1: KgV9tw5HTrSgd_oT875N17Y4C1Q.crl (hash: 4ebzsRhcfpdED1Qqw6zu0jXR/gEAoEP1IY2XsUnz3UU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/KgV9tw5HTrSgd_oT875N17Y4C1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:73:a0:c3:1f:d5:c9:7b:e6:c1:ae:50:37:93:9a:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a057db70e474eb4a077fa13f3be4dd7b6380b54 Validity Not Before: Dec 25 03:00:45 2025 GMT Not After : Dec 26 03:00:45 2025 GMT Subject: CN=5ca292f725149010251d7d18ab46a8f8a213ae94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:87:23:5b:c7:27:4c:47:70:5f:e8:46:2e:c9: 13:d1:43:c1:c0:49:4a:e7:ea:41:7b:65:97:79:19: a0:4d:f3:cc:c4:ff:ec:0d:cd:da:db:ec:43:d2:32: 8e:74:f2:5b:e6:b3:f0:e9:7d:36:23:9b:80:ae:f8: 5c:35:cc:30:23:7b:2c:a8:1b:40:e2:44:f1:7b:64: 53:aa:96:24:ae:d3:09:0c:3b:7b:61:a4:ed:78:76: c2:f3:f9:b1:61:18:44:66:cc:87:5b:ac:ee:d8:8b: 27:31:ae:40:f0:0e:77:fd:e8:57:98:61:36:a6:d7: 87:2f:2c:d9:eb:3c:de:2c:c1:c3:9a:a8:82:83:1f: 16:ce:3a:7e:21:ad:a4:a2:88:36:f6:89:0e:2e:7b: 32:52:a1:70:5e:84:9f:bd:f7:2f:19:f3:63:d3:b0: 12:70:00:52:12:8b:5e:6a:bc:fd:45:6e:c0:2b:e7: 92:ea:81:73:63:5e:26:d0:4a:ab:a7:ef:80:c4:d2: 9e:62:d0:35:1d:21:1d:e4:f5:84:11:89:16:54:c8: b1:44:36:c6:92:d7:92:b8:92:bd:bf:79:2b:94:89: 42:41:d9:73:81:ec:55:2b:c5:ef:e2:c3:6d:84:86: a0:49:ae:e7:88:22:96:88:78:5b:b7:3b:b6:02:1c: dc:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A2:92:F7:25:14:90:10:25:1D:7D:18:AB:46:A8:F8:A2:13:AE:94 X509v3 Authority Key Identifier: keyid:2A:05:7D:B7:0E:47:4E:B4:A0:77:FA:13:F3:BE:4D:D7:B6:38:0B:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgV9tw5HTrSgd_oT875N17Y4C1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:1e:45:6d:12:0d:62:4d:c7:9d:1a:f3:f3:8a:55:63:4b:80: f5:f2:e6:e9:3d:83:27:f9:09:93:4a:62:d7:7c:57:e2:87:89: 34:60:fd:ec:16:f5:e4:87:e9:f3:e1:c5:61:8b:e6:01:09:bd: 40:0a:f4:9b:20:25:e7:f3:b2:c7:49:47:cf:68:11:ff:cb:43: 2e:3a:d2:76:8b:7b:72:ec:4c:43:7a:c8:5b:99:56:e3:e8:b7: 5e:70:a7:95:c6:e3:09:ce:5f:45:a2:76:38:1e:5a:39:3c:12: db:4d:3c:17:ce:04:ae:dc:9b:0d:84:42:8d:80:dd:8d:63:42: 2f:9a:de:75:fb:e8:de:6d:c9:f7:c5:9d:1a:0d:e7:02:49:bb: 69:cb:6a:9f:89:48:4c:51:37:f4:be:0f:51:c8:b8:39:6c:73: 38:13:de:e9:77:0c:58:fd:9b:be:01:5c:d6:3b:6f:0d:4a:ea: b4:35:8e:f3:bb:69:17:84:3e:18:b6:ec:f1:0d:dc:67:93:3e: 31:c3:f3:5c:5c:f5:b2:8f:99:60:1f:77:6f:a7:94:32:82:26: 45:16:8c:0c:88:84:52:aa:4d:28:ba:e5:6e:46:4c:8c:a2:eb: 95:80:1f:56:4a:98:ad:fb:fd:5c:36:14:53:d4:a6:1e:60:0e: 02:4b:4c:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTc6DDH9XJe+bBrlA3k5oTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhMDU3ZGI3MGU0NzRlYjRhMDc3ZmExM2YzYmU0ZGQ3YjYz ODBiNTQwHhcNMjUxMjI1MDMwMDQ1WhcNMjUxMjI2MDMwMDQ1WjAzMTEwLwYDVQQD Eyg1Y2EyOTJmNzI1MTQ5MDEwMjUxZDdkMThhYjQ2YThmOGEyMTNhZTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IcjW8cnTEdwX+hGLskT0UPBwElK 5+pBe2WXeRmgTfPMxP/sDc3a2+xD0jKOdPJb5rPw6X02I5uArvhcNcwwI3ssqBtA 4kTxe2RTqpYkrtMJDDt7YaTteHbC8/mxYRhEZsyHW6zu2IsnMa5A8A53/ehXmGE2 pteHLyzZ6zzeLMHDmqiCgx8Wzjp+Ia2koog29okOLnsyUqFwXoSfvfcvGfNj07AS cABSEotearz9RW7AK+eS6oFzY14m0Eqrp++AxNKeYtA1HSEd5PWEEYkWVMixRDbG kteSuJK9v3krlIlCQdlzgexVK8Xv4sNthIagSa7niCKWiHhbtzu2AhzcpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFyikvclFJAQJR19GKtGqPiiE66UMB8GA1UdIwQY MBaAFCoFfbcOR060oHf6E/O+Tde2OAtUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2dWOXR3NUhUclNnZF9vVDg3NU4xN1k0QzFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kOTc4ZmYtNzRhMS00OTE1LTk1OWEt YzAzNTY4ZGMwOGIzLzEvS2dWOXR3NUhUclNnZF9vVDg3NU4xN1k0QzFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9kOTc4ZmYtNzRhMS00OTE1LTk1OWEtYzAzNTY4ZGMwOGIz LzEvS2dWOXR3NUhUclNnZF9vVDg3NU4xN1k0QzFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHx5FbRIN Yk3HnRrz84pVY0uA9fLm6T2DJ/kJk0pi13xX4oeJNGD97Bb15Ifp8+HFYYvmAQm9 QAr0myAl5/Oyx0lHz2gR/8tDLjrSdot7cuxMQ3rIW5lW4+i3XnCnlcbjCc5fRaJ2 OB5aOTwS2008F84ErtybDYRCjYDdjWNCL5redfvo3m3J98WdGg3nAkm7actqn4lI TFE39L4PUci4OWxzOBPe6XcMWP2bvgFc1jtvDUrqtDWO87tpF4Q+GLbs8Q3cZ5M+ McPzXFz1so+ZYB93b6eUMoImRRaMDIiEUqpNKLrlbkZMjKLrlYAfVkqYrfv9XDYU U9SmHmAOAktM+A== -----END CERTIFICATE-----Generated at Thu Dec 25 07:11:42 2025 by rpki-client