This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft File: kg6KqqAOJVZRVcWbjMO42BuhSSA.mft (raw, json) Hash identifier: TUXR4Sd2YLzOWZcgFYaSj6sy6zwOADk2U7Zht2BE4VE= Subject key identifier: A0:3F:66:84:F4:7C:10:9D:77:E8:A9:82:F2:37:4B:3E:55:0E:BE:2D Authority key identifier: 92:0E:8A:AA:A0:0E:25:56:51:55:C5:9B:8C:C3:B8:D8:1B:A1:49:20 Certificate issuer: /CN=920e8aaaa00e25565155c59b8cc3b8d81ba14920 Certificate serial: 019B61D45DBB4A39E5F841C14319B9428E90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kg6KqqAOJVZRVcWbjMO42BuhSSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft Manifest number: 0660 Signing time: Sat 27 Dec 2025 22:01:06 +0000 Manifest this update: Sat 27 Dec 2025 22:01:06 +0000 Manifest next update: Sun 28 Dec 2025 22:01:06 +0000 Files and hashes: 1: kg6KqqAOJVZRVcWbjMO42BuhSSA.crl (hash: AXLVpuhqMH64csYsu/wU3EIaJKsFlYr9P0Fkk3Iat7A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft rsync://rpki.ripe.net/repository/DEFAULT/kg6KqqAOJVZRVcWbjMO42BuhSSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:d4:5d:bb:4a:39:e5:f8:41:c1:43:19:b9:42:8e:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=920e8aaaa00e25565155c59b8cc3b8d81ba14920 Validity Not Before: Dec 27 22:01:06 2025 GMT Not After : Dec 28 22:01:06 2025 GMT Subject: CN=a03f6684f47c109d77e8a982f2374b3e550ebe2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0d:37:cd:23:b6:5c:d4:47:98:14:9f:a7:69: 42:ab:8c:46:92:9e:65:97:b1:6e:3e:92:7a:78:1e: 0a:17:74:94:28:68:73:36:cb:dc:aa:30:10:0a:d4: fa:90:79:46:61:bf:98:27:1a:2d:12:be:05:25:cf: ce:e3:3f:93:0b:d8:46:e7:48:55:9d:1c:93:f5:36: 70:cf:95:a2:ed:ed:87:a8:1b:a6:c5:5f:fc:64:23: a7:35:54:6e:ec:06:0f:81:7e:ec:16:b9:8c:a2:ff: 16:2d:2e:46:12:8c:87:00:75:45:c5:fd:1f:69:e4: e9:3e:12:9a:0c:35:b7:05:2c:c1:72:5f:5a:b9:a6: e2:52:65:c1:14:24:b4:84:4d:6e:9b:e1:52:bd:33: ec:c9:47:dd:1c:bc:b1:24:07:ca:1d:54:b7:2e:82: 7a:be:0e:72:e3:ec:90:cd:d9:5f:b5:75:72:35:fc: 39:69:5c:f0:b0:82:18:d4:43:25:5d:ea:fd:c4:d6: e9:a9:88:2d:80:65:41:41:8c:4b:be:ac:78:a2:26: 98:14:13:53:ac:c4:33:2f:c2:5f:27:2b:45:9d:ec: 87:d5:37:e9:20:7a:42:d4:33:f4:6c:45:8a:89:50: a2:41:c8:47:b8:03:df:1b:c9:4e:da:3f:58:b4:8a: 5c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:3F:66:84:F4:7C:10:9D:77:E8:A9:82:F2:37:4B:3E:55:0E:BE:2D X509v3 Authority Key Identifier: keyid:92:0E:8A:AA:A0:0E:25:56:51:55:C5:9B:8C:C3:B8:D8:1B:A1:49:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kg6KqqAOJVZRVcWbjMO42BuhSSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:30:df:2d:aa:27:02:18:28:0f:53:8f:28:6f:13:4c:52:80: 5e:be:c7:41:c2:bd:a3:2f:21:68:4d:26:14:6c:fc:07:92:d2: 8d:2b:0d:58:ca:3b:2a:34:3c:e8:ee:c4:23:8a:f2:a1:a2:bc: f4:36:9e:18:d2:f0:f4:21:25:f5:ef:d2:79:22:06:7e:98:9c: 93:6e:57:a3:3e:1f:c7:28:3b:cf:f8:fd:ac:07:ff:b1:88:70: 9b:54:27:24:68:95:63:eb:3e:e2:60:0d:43:d8:89:87:2e:53: 8a:ac:b0:86:66:64:35:2b:d5:f5:71:bb:90:f7:c2:dd:5e:c5: 5f:bc:d6:c6:4a:8f:13:68:0e:0b:da:a2:76:c0:e8:39:5a:1b: df:6c:f2:8f:ce:bf:ff:01:a4:8c:f6:ef:b1:e2:4f:35:98:c2: f7:15:14:ca:c3:50:27:e0:4f:89:ca:05:9d:a4:4e:31:3b:50: d6:c8:73:33:ab:21:67:b1:3d:b1:00:69:7c:d3:58:07:40:f3: b0:21:47:ff:9f:7d:9b:aa:b2:80:ad:70:55:38:de:06:e8:98: 31:1b:2d:b6:b4:e5:e9:f8:c0:2a:ca:c7:85:16:62:00:99:49: 17:4d:b3:35:ad:5c:54:1a:6d:3d:d3:b0:4d:f4:96:e0:6d:fe: 5f:0e:ea:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZth1F27Sjnl+EHBQxm5Qo6QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMGU4YWFhYTAwZTI1NTY1MTU1YzU5YjhjYzNiOGQ4MWJh MTQ5MjAwHhcNMjUxMjI3MjIwMTA2WhcNMjUxMjI4MjIwMTA2WjAzMTEwLwYDVQQD EyhhMDNmNjY4NGY0N2MxMDlkNzdlOGE5ODJmMjM3NGIzZTU1MGViZTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyg03zSO2XNRHmBSfp2lCq4xGkp5l l7FuPpJ6eB4KF3SUKGhzNsvcqjAQCtT6kHlGYb+YJxotEr4FJc/O4z+TC9hG50hV nRyT9TZwz5Wi7e2HqBumxV/8ZCOnNVRu7AYPgX7sFrmMov8WLS5GEoyHAHVFxf0f aeTpPhKaDDW3BSzBcl9auabiUmXBFCS0hE1um+FSvTPsyUfdHLyxJAfKHVS3LoJ6 vg5y4+yQzdlftXVyNfw5aVzwsIIY1EMlXer9xNbpqYgtgGVBQYxLvqx4oiaYFBNT rMQzL8JfJytFneyH1TfpIHpC1DP0bEWKiVCiQchHuAPfG8lO2j9YtIpc/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKA/ZoT0fBCdd+ipgvI3Sz5VDr4tMB8GA1UdIwQY MBaAFJIOiqqgDiVWUVXFm4zDuNgboUkgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2c2S3FxQU9KVlpSVmNXYmpNTzQyQnVoU1NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8xZmMyNjQtODg1Zi00OWU0LTg0NTEt ODFhY2ZlMTc1ZGY3LzEva2c2S3FxQU9KVlpSVmNXYmpNTzQyQnVoU1NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8xZmMyNjQtODg1Zi00OWU0LTg0NTEtODFhY2ZlMTc1ZGY3 LzEva2c2S3FxQU9KVlpSVmNXYmpNTzQyQnVoU1NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXjDfLaon AhgoD1OPKG8TTFKAXr7HQcK9oy8haE0mFGz8B5LSjSsNWMo7KjQ86O7EI4ryoaK8 9DaeGNLw9CEl9e/SeSIGfpick25Xoz4fxyg7z/j9rAf/sYhwm1QnJGiVY+s+4mAN Q9iJhy5TiqywhmZkNSvV9XG7kPfC3V7FX7zWxkqPE2gOC9qidsDoOVob32zyj86/ /wGkjPbvseJPNZjC9xUUysNQJ+BPicoFnaROMTtQ1shzM6shZ7E9sQBpfNNYB0Dz sCFH/599m6qygK1wVTjeBuiYMRsttrTl6fjAKsrHhRZiAJlJF02zNa1cVBptPdOw TfSW4G3+Xw7qTA== -----END CERTIFICATE-----Generated at Sun Dec 28 03:18:45 2025 by rpki-client