This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft File: KqGB-LCskT3cN34Z1WZLEbGXU3M.mft (raw, json) Hash identifier: DTyYWECuejkFYfuSAxTqpx+4gFxitT9dfSn+5EytVAs= Subject key identifier: F3:18:76:1B:97:03:00:EE:AB:BC:5D:40:D0:F0:7E:EA:88:2D:7D:21 Authority key identifier: 2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73 Certificate issuer: /CN=2aa181f8b0ac913ddc377e19d5664b11b1975373 Certificate serial: 019B3FECCB28759F575F642D2A53992D213D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft Manifest number: 0CFD Signing time: Sun 21 Dec 2025 08:00:41 +0000 Manifest this update: Sun 21 Dec 2025 08:00:41 +0000 Manifest next update: Mon 22 Dec 2025 08:00:41 +0000 Files and hashes: 1: KqGB-LCskT3cN34Z1WZLEbGXU3M.crl (hash: giwj2h4P266WZaq3hZVWw/MYe97ZTF0uX3onkan8H2Q=) 2: pYcNr9sVfFTE36N21zQEaYvpSC8.roa (hash: qgrqjfITSKMfgl03Ej2JSBSRB998DdmMRLl3Rj6JmrI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 08:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:cb:28:75:9f:57:5f:64:2d:2a:53:99:2d:21:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa181f8b0ac913ddc377e19d5664b11b1975373 Validity Not Before: Dec 21 08:00:41 2025 GMT Not After : Dec 22 08:00:41 2025 GMT Subject: CN=f318761b970300eeabbc5d40d0f07eea882d7d21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:80:cc:89:b4:67:21:c6:3f:4c:37:17:bf:14: d0:21:a7:2f:73:1c:52:ad:73:ca:91:33:50:c1:ab: 72:4a:8f:86:9a:f6:dd:73:90:66:bd:e9:bc:8c:ad: a2:d5:c0:b3:14:93:7c:85:98:ba:dc:fa:5d:0a:65: ac:36:c8:e4:b7:f0:7f:1c:34:99:ff:cd:34:b5:41: e8:80:a0:ac:ea:37:32:6d:c3:6a:a0:5b:d9:56:08: f2:4e:52:49:07:13:ee:1c:c4:96:56:63:ce:d1:67: 9d:6e:1b:6b:35:fd:23:29:8b:d0:79:08:02:32:66: 20:94:ec:4d:e1:dd:83:6e:84:4e:09:84:df:3e:ea: 67:20:3e:10:25:32:12:07:de:30:38:30:45:b1:10: f4:e9:8c:76:54:b2:a3:a7:a8:0f:eb:2c:2c:50:5f: 05:35:a4:cc:76:3f:ed:e4:c8:6f:61:a6:44:18:2e: 20:bc:e7:bd:9e:3e:fc:b5:24:55:3e:50:6e:9a:cb: 1b:1f:1d:c4:46:a6:34:87:80:0a:e2:b4:6e:f4:b4: e6:9b:e9:e2:36:70:79:99:c0:57:8a:4c:ce:6b:c3: c7:3a:85:67:c5:d1:03:b0:8a:42:5d:a2:1e:e8:2b: 7a:cb:63:8a:83:7e:2a:04:0e:57:2a:1b:e2:82:0e: c7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:18:76:1B:97:03:00:EE:AB:BC:5D:40:D0:F0:7E:EA:88:2D:7D:21 X509v3 Authority Key Identifier: keyid:2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:59:77:ab:fd:e1:5c:d9:c2:3c:07:97:46:1e:d9:c2:60:06: 96:26:4e:1e:55:92:9f:2c:b2:6c:fb:56:22:57:a4:f3:3b:62: 35:4d:0d:27:88:45:4a:47:de:50:6b:61:44:60:95:8c:ec:1b: 12:8d:0e:e3:17:6b:f1:4a:cb:17:ee:70:97:56:f2:7f:4a:4f: b3:63:ee:2f:64:ef:ad:c5:f4:03:1e:c4:86:ad:87:83:b3:86: 6b:1a:2c:5a:96:48:1b:da:54:c5:e7:d5:55:00:4d:50:c7:d6: 92:5c:63:f4:95:ae:af:20:73:57:be:ef:66:e6:a9:1e:6e:db: f3:55:14:04:61:4a:f0:ee:52:35:5e:07:bf:dd:b8:b3:cf:0a: 31:88:97:67:23:f7:68:a2:fe:39:7c:f8:23:f8:3a:a1:3f:73: eb:15:8d:05:57:3c:54:f7:89:8b:92:1e:a1:4a:3c:c7:e2:cb: ee:28:01:6c:96:31:7f:5c:7e:cb:c1:cb:92:74:05:f7:48:fd: 07:07:b0:15:83:e5:ac:cc:50:86:f2:49:c1:ae:b7:1a:9f:1d: 1c:fe:a0:f7:fd:ba:dd:02:b1:4d:ea:2f:78:35:de:e4:10:46: 59:d8:d5:17:ad:33:ea:c7:24:13:cc:94:11:55:be:9d:63:48: 7f:f2:b0:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7MsodZ9XX2QtKlOZLSE9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYTE4MWY4YjBhYzkxM2RkYzM3N2UxOWQ1NjY0YjExYjE5 NzUzNzMwHhcNMjUxMjIxMDgwMDQxWhcNMjUxMjIyMDgwMDQxWjAzMTEwLwYDVQQD EyhmMzE4NzYxYjk3MDMwMGVlYWJiYzVkNDBkMGYwN2VlYTg4MmQ3ZDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04DMibRnIcY/TDcXvxTQIacvcxxS rXPKkTNQwatySo+Gmvbdc5Bmvem8jK2i1cCzFJN8hZi63PpdCmWsNsjkt/B/HDSZ /800tUHogKCs6jcybcNqoFvZVgjyTlJJBxPuHMSWVmPO0WedbhtrNf0jKYvQeQgC MmYglOxN4d2DboROCYTfPupnID4QJTISB94wODBFsRD06Yx2VLKjp6gP6ywsUF8F NaTMdj/t5MhvYaZEGC4gvOe9nj78tSRVPlBumssbHx3ERqY0h4AK4rRu9LTmm+ni NnB5mcBXikzOa8PHOoVnxdEDsIpCXaIe6Ct6y2OKg34qBA5XKhvigg7HswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPMYdhuXAwDuq7xdQNDwfuqILX0hMB8GA1UdIwQY MBaAFCqhgfiwrJE93Dd+GdVmSxGxl1NzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3FHQi1MQ3NrVDNjTjM0WjFXWkxFYkdYVTNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9iOTg3NTUtNjVjNC00ZDE5LWIwNjkt YTFhNTVlOGJlZTNmLzEvS3FHQi1MQ3NrVDNjTjM0WjFXWkxFYkdYVTNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9iOTg3NTUtNjVjNC00ZDE5LWIwNjktYTFhNTVlOGJlZTNm LzEvS3FHQi1MQ3NrVDNjTjM0WjFXWkxFYkdYVTNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcFl3q/3h XNnCPAeXRh7ZwmAGliZOHlWSnyyybPtWIlek8ztiNU0NJ4hFSkfeUGthRGCVjOwb Eo0O4xdr8UrLF+5wl1byf0pPs2PuL2TvrcX0Ax7Ehq2Hg7OGaxosWpZIG9pUxefV VQBNUMfWklxj9JWuryBzV77vZuapHm7b81UUBGFK8O5SNV4Hv924s88KMYiXZyP3 aKL+OXz4I/g6oT9z6xWNBVc8VPeJi5IeoUo8x+LL7igBbJYxf1x+y8HLknQF90j9 BwewFYPlrMxQhvJJwa63Gp8dHP6g9/263QKxTeoveDXe5BBGWdjVF60z6sckE8yU EVW+nWNIf/KwRQ== -----END CERTIFICATE-----Generated at Sun Dec 21 17:21:53 2025 by rpki-client