This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft File: KqGB-LCskT3cN34Z1WZLEbGXU3M.mft (raw, json) Hash identifier: kq2RynxSdvUlBYIXJkjVpfiD1Nf3a9ioWsqa31irFOQ= Subject key identifier: 9D:09:DD:AA:93:99:D3:2A:24:6C:FC:A7:02:FB:D1:98:6A:80:C6:00 Authority key identifier: 2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73 Certificate issuer: /CN=2aa181f8b0ac913ddc377e19d5664b11b1975373 Certificate serial: 019B3C101FB2F231A41FE893F980A82080F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft Manifest number: 0CFB Signing time: Sat 20 Dec 2025 14:00:48 +0000 Manifest this update: Sat 20 Dec 2025 14:00:48 +0000 Manifest next update: Sun 21 Dec 2025 14:00:48 +0000 Files and hashes: 1: KqGB-LCskT3cN34Z1WZLEbGXU3M.crl (hash: yHI3coDMrQe9JxmhLEsksRVxLAapYnVzVdjYlz0KwUk=) 2: pYcNr9sVfFTE36N21zQEaYvpSC8.roa (hash: qgrqjfITSKMfgl03Ej2JSBSRB998DdmMRLl3Rj6JmrI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:1f:b2:f2:31:a4:1f:e8:93:f9:80:a8:20:80:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa181f8b0ac913ddc377e19d5664b11b1975373 Validity Not Before: Dec 20 14:00:48 2025 GMT Not After : Dec 21 14:00:48 2025 GMT Subject: CN=9d09ddaa9399d32a246cfca702fbd1986a80c600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:57:82:7f:e8:f9:ae:0c:be:6f:92:74:ab:c9: 8c:9c:7d:85:4e:6a:18:ca:ec:d4:3f:ea:7b:39:9b: ba:6e:ad:2e:65:a2:a0:12:07:c3:2c:bf:d0:85:c6: ad:9c:78:8a:d1:72:ac:8f:76:d7:18:12:d3:f1:54: 8e:60:ab:1b:fd:eb:dd:75:49:ae:a6:7d:f6:07:e8: 6f:8f:da:18:f0:99:8c:95:e2:f1:98:43:4a:12:86: 37:07:e3:71:d2:89:d3:e0:a4:34:02:43:41:52:92: 58:f2:7b:9f:61:b3:0a:43:8f:98:90:0a:b0:45:a5: 75:18:48:70:00:5b:ca:4d:5c:ae:7a:be:f2:b3:ed: 22:4c:e0:26:8f:5a:08:98:da:20:7b:cf:95:0d:a3: ab:5c:a4:76:2f:48:82:3b:89:cd:0a:90:58:7f:59: 06:02:2f:b0:4a:08:ca:5c:c1:09:85:70:07:5b:69: f2:38:dc:5b:46:86:5e:34:8f:f9:d9:b5:68:c3:28: db:b3:89:57:9f:ca:aa:60:fc:ac:39:44:bc:ab:24: c8:63:b8:94:bc:e9:68:41:cf:d0:7c:c8:72:33:c2: 29:09:69:cf:14:6d:97:c0:e0:98:96:e9:65:6d:82: b1:b2:78:d7:70:2d:e1:77:fd:71:44:47:76:da:ad: 16:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:09:DD:AA:93:99:D3:2A:24:6C:FC:A7:02:FB:D1:98:6A:80:C6:00 X509v3 Authority Key Identifier: keyid:2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:36:e7:77:c8:8c:84:78:72:72:53:c5:54:67:72:31:db:2e: 69:82:5e:61:93:51:a1:d1:a3:6b:3c:47:9f:58:75:2f:8b:76: 68:43:5f:9b:cf:21:bd:e9:1a:70:fa:80:c5:d4:59:dd:52:3f: 50:eb:1d:89:3b:28:67:3c:dc:4b:0f:7e:c2:8f:a7:08:81:4c: ee:fc:11:09:7e:d4:a0:4a:81:5c:99:c5:10:dc:1b:c3:f1:fa: 0b:bc:68:8e:4c:b4:1d:5b:ca:c3:7b:e7:63:62:b5:97:45:45: 26:6d:06:94:66:d8:ca:5c:46:b8:1d:ab:bb:88:42:ef:24:35: a7:9c:99:1c:25:a1:e9:51:c6:79:62:97:37:82:22:95:0c:be: c3:49:4d:e7:88:75:9f:c6:a4:12:d9:66:25:cd:76:91:7e:03: c2:87:c7:8a:b2:66:97:77:a5:88:41:43:5e:d8:64:d1:2e:47: 7d:38:e1:be:90:32:92:a5:83:1f:1f:15:40:6a:ba:c2:3f:c5: 07:bb:dd:d1:a3:fa:35:85:69:3b:d3:05:89:d4:82:dc:fd:13: 04:1c:29:1b:86:03:7a:6d:79:9d:37:a0:32:24:40:93:27:68: ee:fe:1f:ff:23:98:4b:86:12:28:8c:b5:70:6f:91:b8:76:04: 80:e2:0b:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EB+y8jGkH+iT+YCoIID3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYTE4MWY4YjBhYzkxM2RkYzM3N2UxOWQ1NjY0YjExYjE5 NzUzNzMwHhcNMjUxMjIwMTQwMDQ4WhcNMjUxMjIxMTQwMDQ4WjAzMTEwLwYDVQQD Eyg5ZDA5ZGRhYTkzOTlkMzJhMjQ2Y2ZjYTcwMmZiZDE5ODZhODBjNjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyleCf+j5rgy+b5J0q8mMnH2FTmoY yuzUP+p7OZu6bq0uZaKgEgfDLL/QhcatnHiK0XKsj3bXGBLT8VSOYKsb/evddUmu pn32B+hvj9oY8JmMleLxmENKEoY3B+Nx0onT4KQ0AkNBUpJY8nufYbMKQ4+YkAqw RaV1GEhwAFvKTVyuer7ys+0iTOAmj1oImNoge8+VDaOrXKR2L0iCO4nNCpBYf1kG Ai+wSgjKXMEJhXAHW2nyONxbRoZeNI/52bVowyjbs4lXn8qqYPysOUS8qyTIY7iU vOloQc/QfMhyM8IpCWnPFG2XwOCYlullbYKxsnjXcC3hd/1xREd22q0WmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ0J3aqTmdMqJGz8pwL70ZhqgMYAMB8GA1UdIwQY MBaAFCqhgfiwrJE93Dd+GdVmSxGxl1NzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3FHQi1MQ3NrVDNjTjM0WjFXWkxFYkdYVTNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9iOTg3NTUtNjVjNC00ZDE5LWIwNjkt YTFhNTVlOGJlZTNmLzEvS3FHQi1MQ3NrVDNjTjM0WjFXWkxFYkdYVTNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9iOTg3NTUtNjVjNC00ZDE5LWIwNjktYTFhNTVlOGJlZTNm LzEvS3FHQi1MQ3NrVDNjTjM0WjFXWkxFYkdYVTNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPDbnd8iM hHhyclPFVGdyMdsuaYJeYZNRodGjazxHn1h1L4t2aENfm88hvekacPqAxdRZ3VI/ UOsdiTsoZzzcSw9+wo+nCIFM7vwRCX7UoEqBXJnFENwbw/H6C7xojky0HVvKw3vn Y2K1l0VFJm0GlGbYylxGuB2ru4hC7yQ1p5yZHCWh6VHGeWKXN4IilQy+w0lN54h1 n8akEtlmJc12kX4DwofHirJml3eliEFDXthk0S5HfTjhvpAykqWDHx8VQGq6wj/F B7vd0aP6NYVpO9MFidSC3P0TBBwpG4YDem15nTegMiRAkydo7v4f/yOYS4YSKIy1 cG+RuHYEgOILaw== -----END CERTIFICATE-----Generated at Sat Dec 20 18:42:15 2025 by rpki-client