This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/2d11bb-5e2e-4085-a34b-359b64d709b9/1/KiZGBSRa8gGcKTw3KPal4lXYnyU.mft File: KiZGBSRa8gGcKTw3KPal4lXYnyU.mft (raw, json) Hash identifier: iTtpviy5Hk49k/sUPJXKo8qfZp7HBUhbmAPWJ8qg3e8= Subject key identifier: 00:B8:BD:B1:A6:8A:05:64:B2:79:81:C5:D4:97:AA:59:F7:BD:A1:C6 Authority key identifier: 2A:26:46:05:24:5A:F2:01:9C:29:3C:37:28:F6:A5:E2:55:D8:9F:25 Certificate issuer: /CN=2a264605245af2019c293c3728f6a5e255d89f25 Certificate serial: 019B337ACD1E848C7607CA7B8A5C7C19B250 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KiZGBSRa8gGcKTw3KPal4lXYnyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/2d11bb-5e2e-4085-a34b-359b64d709b9/1/KiZGBSRa8gGcKTw3KPal4lXYnyU.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 22:00:44 +0000 Manifest this update: Thu 18 Dec 2025 22:00:44 +0000 Manifest next update: Fri 19 Dec 2025 22:00:44 +0000 Files and hashes: 1: 3KSN_k3KfyRIpkOpKsbbz9Bqq5E.roa (hash: iHgOduhUsida+9pHg8iFsStpH/s/1dREHiJkoJW0aww=) 2: KiZGBSRa8gGcKTw3KPal4lXYnyU.crl (hash: KoPXfQ+ctnW2MEU+RYrubPxgJE4Ct7S5aulOdOKDGBY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/2d11bb-5e2e-4085-a34b-359b64d709b9/1/KiZGBSRa8gGcKTw3KPal4lXYnyU.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/2d11bb-5e2e-4085-a34b-359b64d709b9/1/KiZGBSRa8gGcKTw3KPal4lXYnyU.mft rsync://rpki.ripe.net/repository/DEFAULT/KiZGBSRa8gGcKTw3KPal4lXYnyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7a:cd:1e:84:8c:76:07:ca:7b:8a:5c:7c:19:b2:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a264605245af2019c293c3728f6a5e255d89f25 Validity Not Before: Dec 18 22:00:44 2025 GMT Not After : Dec 19 22:00:44 2025 GMT Subject: CN=00b8bdb1a68a0564b27981c5d497aa59f7bda1c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5c:36:57:52:c8:48:c2:77:32:ee:82:5b:e8: 72:96:dc:b9:28:af:4e:55:a0:bd:27:50:5c:2a:13: 4a:d8:0f:5a:24:2e:4a:39:b3:ef:aa:f2:81:d2:db: b1:a8:c3:6d:4f:51:64:c8:f2:46:c5:95:4d:76:07: 2d:da:95:8b:31:33:32:83:71:c6:8b:28:34:c5:91: d1:c1:92:a8:40:a5:78:5e:5d:90:62:93:24:7f:8b: c9:66:5b:7d:bf:8e:29:c6:37:d6:1f:ad:a7:0d:0a: 76:75:7a:fe:65:14:f2:63:04:e4:bb:33:8c:c3:1c: 81:e9:fb:14:72:e0:ed:f6:74:52:5a:de:84:8b:fe: 13:bb:f5:28:32:b4:50:10:c9:f8:be:81:ff:b3:ee: 48:85:b9:21:7e:1f:d0:e2:bc:ed:5d:56:c0:85:5f: 58:a0:c7:11:53:f9:ba:6e:7c:10:a1:42:e0:54:b5: db:46:47:7c:7c:13:0f:c8:36:ae:0d:75:43:9d:bd: bf:36:89:20:13:6a:6c:5f:f1:c1:96:cf:ea:bb:37: b8:6a:e8:f0:15:1e:59:56:78:5a:47:ac:3e:36:8d: 37:cd:77:84:fb:4f:34:86:43:cd:07:11:8b:cd:33: 2e:c4:6e:4e:08:f2:62:51:53:60:80:c5:28:98:d5: a4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:B8:BD:B1:A6:8A:05:64:B2:79:81:C5:D4:97:AA:59:F7:BD:A1:C6 X509v3 Authority Key Identifier: keyid:2A:26:46:05:24:5A:F2:01:9C:29:3C:37:28:F6:A5:E2:55:D8:9F:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KiZGBSRa8gGcKTw3KPal4lXYnyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2d11bb-5e2e-4085-a34b-359b64d709b9/1/KiZGBSRa8gGcKTw3KPal4lXYnyU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2d11bb-5e2e-4085-a34b-359b64d709b9/1/KiZGBSRa8gGcKTw3KPal4lXYnyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:11:4b:a6:f9:d7:43:89:96:96:7a:14:f1:a9:b5:f0:97:14: b0:9d:63:2a:05:ec:02:c1:4d:19:d0:ee:b3:c6:45:3e:fb:35: 35:3b:bb:b2:fc:e6:f0:cb:27:62:23:97:a4:32:71:f8:0b:28: 44:2e:35:d3:33:b9:3a:da:3e:53:4e:bd:9d:7c:94:7d:ee:98: 07:ab:ef:02:3f:88:ba:09:16:4a:e7:92:7a:fe:01:f1:73:da: 87:77:06:3e:f0:51:c5:00:09:ef:08:78:f2:a1:0d:a1:96:6d: a9:ea:f1:48:f7:31:f3:a7:d7:f6:36:88:38:4c:df:89:5d:88: 5b:b3:a2:7d:be:b5:4a:59:36:8f:29:e2:b4:b9:5a:3b:f0:da: 49:3e:4c:3e:e0:c4:6b:e3:4b:3c:75:12:4f:c7:27:34:90:f0: 28:20:46:20:fe:75:97:09:b2:3c:c2:1a:96:77:e7:4b:0e:47: dc:c0:2f:61:cc:ba:e3:bf:49:dd:a8:93:f9:a4:d4:5c:7a:0b: 3a:78:45:dc:a0:b8:c3:f5:6e:3b:ab:6d:fc:81:77:6f:a5:a3: c8:32:54:9e:63:04:83:f9:f3:6c:a2:c1:c0:0a:7d:7a:bb:7f: cc:96:83:f9:c9:e8:2b:21:72:77:92:f1:22:c8:78:51:80:0f: 4d:c6:ba:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszes0ehIx2B8p7ilx8GbJQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhMjY0NjA1MjQ1YWYyMDE5YzI5M2MzNzI4ZjZhNWUyNTVk ODlmMjUwHhcNMjUxMjE4MjIwMDQ0WhcNMjUxMjE5MjIwMDQ0WjAzMTEwLwYDVQQD EygwMGI4YmRiMWE2OGEwNTY0YjI3OTgxYzVkNDk3YWE1OWY3YmRhMWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Fw2V1LISMJ3Mu6CW+hylty5KK9O VaC9J1BcKhNK2A9aJC5KObPvqvKB0tuxqMNtT1FkyPJGxZVNdgct2pWLMTMyg3HG iyg0xZHRwZKoQKV4Xl2QYpMkf4vJZlt9v44pxjfWH62nDQp2dXr+ZRTyYwTkuzOM wxyB6fsUcuDt9nRSWt6Ei/4Tu/UoMrRQEMn4voH/s+5Ihbkhfh/Q4rztXVbAhV9Y oMcRU/m6bnwQoULgVLXbRkd8fBMPyDauDXVDnb2/NokgE2psX/HBls/quze4aujw FR5ZVnhaR6w+No03zXeE+080hkPNBxGLzTMuxG5OCPJiUVNggMUomNWklQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAC4vbGmigVksnmBxdSXqln3vaHGMB8GA1UdIwQY MBaAFComRgUkWvIBnCk8Nyj2peJV2J8lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2laR0JTUmE4Z0djS1R3M0tQYWw0bFhZbnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8yZDExYmItNWUyZS00MDg1LWEzNGIt MzU5YjY0ZDcwOWI5LzEvS2laR0JTUmE4Z0djS1R3M0tQYWw0bFhZbnlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8yZDExYmItNWUyZS00MDg1LWEzNGItMzU5YjY0ZDcwOWI5 LzEvS2laR0JTUmE4Z0djS1R3M0tQYWw0bFhZbnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAThFLpvnX Q4mWlnoU8am18JcUsJ1jKgXsAsFNGdDus8ZFPvs1NTu7svzm8MsnYiOXpDJx+Aso RC410zO5Oto+U069nXyUfe6YB6vvAj+IugkWSueSev4B8XPah3cGPvBRxQAJ7wh4 8qENoZZtqerxSPcx86fX9jaIOEzfiV2IW7Oifb61Slk2jynitLlaO/DaST5MPuDE a+NLPHUST8cnNJDwKCBGIP51lwmyPMIalnfnSw5H3MAvYcy6479J3aiT+aTUXHoL OnhF3KC4w/VuO6tt/IF3b6WjyDJUnmMEg/nzbKLBwAp9ert/zJaD+cnoKyFyd5Lx Ish4UYAPTca6Kw== -----END CERTIFICATE-----Generated at Fri Dec 19 00:09:25 2025 by rpki-client