This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft File: KqGB-LCskT3cN34Z1WZLEbGXU3M.mft (raw, json) Hash identifier: 75mJ5e/wqQzzPSA9MYRYszvgoEqAvevEgkNmOShdwTE= Subject key identifier: 47:4A:F8:B7:E8:EE:00:66:7A:A7:C5:C2:64:5D:50:4C:31:37:1B:D0 Authority key identifier: 2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73 Certificate issuer: /CN=2aa181f8b0ac913ddc377e19d5664b11b1975373 Certificate serial: 019B36451EFF0C69B2ED92EDFF0E014786A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft Manifest number: 0CF8 Signing time: Fri 19 Dec 2025 11:00:58 +0000 Manifest this update: Fri 19 Dec 2025 11:00:58 +0000 Manifest next update: Sat 20 Dec 2025 11:00:58 +0000 Files and hashes: 1: KqGB-LCskT3cN34Z1WZLEbGXU3M.crl (hash: ExulqhlzvaInUS/p+Nczxft8A96RhohKTGFZghm0ix4=) 2: pYcNr9sVfFTE36N21zQEaYvpSC8.roa (hash: qgrqjfITSKMfgl03Ej2JSBSRB998DdmMRLl3Rj6JmrI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 11:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:45:1e:ff:0c:69:b2:ed:92:ed:ff:0e:01:47:86:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa181f8b0ac913ddc377e19d5664b11b1975373 Validity Not Before: Dec 19 11:00:58 2025 GMT Not After : Dec 20 11:00:58 2025 GMT Subject: CN=474af8b7e8ee00667aa7c5c2645d504c31371bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c1:c2:c0:66:14:19:cd:bd:58:70:6d:68:04: e1:c6:75:ea:63:73:88:5c:e7:f0:0c:f3:b1:18:86: 8b:4f:40:d7:f3:92:00:9e:00:0b:6b:d4:97:e8:b1: 22:1e:f4:7c:de:17:1c:91:82:eb:c1:77:30:98:fb: d8:4b:e6:9b:99:2e:b9:4e:c7:23:76:b0:16:0a:f2: 34:2d:1d:74:d6:9a:d3:e2:3b:6e:33:83:49:65:e8: 96:51:d1:c4:80:43:37:f6:19:d9:1e:dc:10:40:63: d9:68:98:8e:5f:ab:39:e6:6d:6f:ce:95:c3:67:64: 2f:04:2a:12:e6:ff:de:ae:4b:9e:ff:75:36:7c:d1: 97:e9:c3:4e:53:42:03:78:25:ae:78:62:bd:8e:68: b9:ab:71:6a:85:2e:2d:40:d7:d9:e1:e1:fe:36:df: ae:ef:fa:46:10:14:1c:7a:4b:1c:3b:c0:7a:72:a5: 11:5a:2b:0e:21:3d:bd:39:19:09:7d:c8:e7:46:36: 4d:ca:54:66:d2:b0:99:2f:e7:3a:7f:5e:50:bd:1d: 3e:a9:c8:1c:39:2e:7e:1f:0f:07:64:e5:9c:04:22: 61:de:8a:ef:fc:52:6a:5f:06:02:6e:09:68:c8:6d: 57:cc:38:54:ad:73:51:1b:95:37:7c:0d:5e:b8:69: d5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:4A:F8:B7:E8:EE:00:66:7A:A7:C5:C2:64:5D:50:4C:31:37:1B:D0 X509v3 Authority Key Identifier: keyid:2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:92:9e:4d:8c:49:c7:66:40:79:ed:e5:d1:94:f6:70:c0:1c: 1b:95:5a:eb:c8:1a:ac:75:7f:f9:1a:6c:60:a5:8a:91:06:58: 60:ae:20:91:ee:3e:35:f5:78:86:70:2b:b5:34:60:15:be:67: a0:4f:31:33:e2:fe:c8:10:b7:44:1c:a4:c2:e4:6b:31:05:4c: b4:4b:05:0a:1d:20:25:1a:0a:dc:fb:3a:65:de:b6:07:19:b8: 77:55:5f:15:57:53:c5:4d:10:69:e1:9b:ca:42:eb:ae:b4:a2: 9a:8b:dc:6d:f1:66:4e:53:de:db:d0:10:9a:48:8d:7c:16:7e: 3f:28:c3:e3:5b:f6:d5:a0:bf:d9:db:5a:14:36:5e:3d:6b:61: 9f:11:6c:f0:20:c5:d6:79:e5:c7:4c:d5:4f:39:82:5f:23:62: 69:6b:0b:7d:ff:3f:c3:30:69:55:c4:85:f4:10:57:07:ef:cf: bf:6c:49:95:3a:da:8d:10:2f:ae:05:5f:44:12:d7:bf:af:65: 47:e8:38:c4:6a:6e:2a:ff:e9:00:dc:c4:93:32:ad:1a:a9:96: c5:d9:aa:21:e9:dc:9f:4b:6f:fe:63:65:a3:04:85:13:ba:83: 95:79:69:79:3e:65:20:b3:0b:26:2a:ab:53:45:90:05:fd:35: 74:03:cf:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2RR7/DGmy7ZLt/w4BR4akMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYTE4MWY4YjBhYzkxM2RkYzM3N2UxOWQ1NjY0YjExYjE5 NzUzNzMwHhcNMjUxMjE5MTEwMDU4WhcNMjUxMjIwMTEwMDU4WjAzMTEwLwYDVQQD Eyg0NzRhZjhiN2U4ZWUwMDY2N2FhN2M1YzI2NDVkNTA0YzMxMzcxYmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7cHCwGYUGc29WHBtaAThxnXqY3OI XOfwDPOxGIaLT0DX85IAngALa9SX6LEiHvR83hcckYLrwXcwmPvYS+abmS65Tscj drAWCvI0LR101prT4jtuM4NJZeiWUdHEgEM39hnZHtwQQGPZaJiOX6s55m1vzpXD Z2QvBCoS5v/erkue/3U2fNGX6cNOU0IDeCWueGK9jmi5q3FqhS4tQNfZ4eH+Nt+u 7/pGEBQcekscO8B6cqURWisOIT29ORkJfcjnRjZNylRm0rCZL+c6f15QvR0+qcgc OS5+Hw8HZOWcBCJh3orv/FJqXwYCbgloyG1XzDhUrXNRG5U3fA1euGnVSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEdK+Lfo7gBmeqfFwmRdUEwxNxvQMB8GA1UdIwQY MBaAFCqhgfiwrJE93Dd+GdVmSxGxl1NzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3FHQi1MQ3NrVDNjTjM0WjFXWkxFYkdYVTNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9iOTg3NTUtNjVjNC00ZDE5LWIwNjkt YTFhNTVlOGJlZTNmLzEvS3FHQi1MQ3NrVDNjTjM0WjFXWkxFYkdYVTNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9iOTg3NTUtNjVjNC00ZDE5LWIwNjktYTFhNTVlOGJlZTNm LzEvS3FHQi1MQ3NrVDNjTjM0WjFXWkxFYkdYVTNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbJKeTYxJ x2ZAee3l0ZT2cMAcG5Va68garHV/+RpsYKWKkQZYYK4gke4+NfV4hnArtTRgFb5n oE8xM+L+yBC3RBykwuRrMQVMtEsFCh0gJRoK3Ps6Zd62Bxm4d1VfFVdTxU0QaeGb ykLrrrSimovcbfFmTlPe29AQmkiNfBZ+PyjD41v21aC/2dtaFDZePWthnxFs8CDF 1nnlx0zVTzmCXyNiaWsLff8/wzBpVcSF9BBXB+/Pv2xJlTrajRAvrgVfRBLXv69l R+g4xGpuKv/pANzEkzKtGqmWxdmqIencn0tv/mNlowSFE7qDlXlpeT5lILMLJiqr U0WQBf01dAPP+Q== -----END CERTIFICATE-----Generated at Fri Dec 19 20:10:53 2025 by rpki-client