This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft File: KBeCQ6CGawkSctHh60UeceQTuZo.mft (raw, json) Hash identifier: Ehj8rSRQUyqKzrt41Fuj9Ld/BFpZu9uoouFw8pWXqQI= Subject key identifier: CD:20:41:40:38:3A:5C:EF:FD:02:58:65:03:71:7F:F2:81:91:A8:4A Authority key identifier: 28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A Certificate issuer: /CN=28178243a0866b091272d1e1eb451e71e413b99a Certificate serial: 019B0F37616B8C09ACB19D6A813CEB290FB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft Manifest number: 07B3 Signing time: Thu 11 Dec 2025 21:00:46 +0000 Manifest this update: Thu 11 Dec 2025 21:00:46 +0000 Manifest next update: Fri 12 Dec 2025 21:00:46 +0000 Files and hashes: 1: 9b2tSpH9I_YDuaAeaEvrPjYTSYA.roa (hash: CQ+HO3gorMuwRRve3+ZDJ9LD5LzYPKSs3rQmvQ37N3I=) 2: KBeCQ6CGawkSctHh60UeceQTuZo.crl (hash: 7s/K0l4/xXROnOlO6oY6UUCTJ8plWxCPSiCstPTbhvA=) 3: aXUaEE4Rc3FPn930-LUjFOMalKE.roa (hash: k4xvVX6CkM3fxWMUWFx76Dj4mkNerIxARf8E+Dyy4rw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:61:6b:8c:09:ac:b1:9d:6a:81:3c:eb:29:0f:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28178243a0866b091272d1e1eb451e71e413b99a Validity Not Before: Dec 11 21:00:46 2025 GMT Not After : Dec 12 21:00:46 2025 GMT Subject: CN=cd204140383a5ceffd02586503717ff28191a84a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5a:5d:5a:04:cc:c6:0a:6a:7c:a0:98:02:d5: 46:07:ff:12:0e:4d:51:61:f2:8c:d0:80:33:9c:15: d4:12:ea:18:0d:da:26:42:72:65:ab:18:a4:a0:ce: 01:2d:18:7d:5e:b2:4a:73:76:ba:f4:32:71:59:df: d8:ea:6b:9a:e7:48:4e:3c:c4:6f:65:49:5f:87:d1: 6e:1f:1e:e2:07:48:68:16:a1:49:c2:d5:4a:7b:b3: eb:9f:04:0c:f9:bc:a0:7d:c8:0e:90:9e:ce:73:e8: 47:48:aa:6f:53:2a:a2:bd:5e:d1:76:9e:75:b6:f2: ce:4f:f3:2e:ba:53:3a:5d:bb:61:6e:64:ea:39:85: d8:88:0d:fc:d0:f3:7f:4f:81:cc:64:6c:49:4c:29: ec:4f:db:9b:68:86:f5:ee:70:6c:a6:4a:f5:22:30: b8:6f:56:97:86:fa:e3:78:45:c0:ff:7e:12:e0:8e: d7:7c:c4:d1:10:69:5a:a8:2c:5b:e0:22:a8:f7:f4: 78:56:53:b6:1c:40:44:07:84:14:82:f1:df:25:01: 38:72:e4:d0:c1:52:04:76:1b:ce:90:59:fc:7f:15: 3f:fc:24:cc:7b:6e:d3:9f:c7:32:48:32:84:a3:9e: cb:70:88:2e:c9:23:0c:1b:55:64:c6:d7:8a:eb:dd: bf:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:20:41:40:38:3A:5C:EF:FD:02:58:65:03:71:7F:F2:81:91:A8:4A X509v3 Authority Key Identifier: keyid:28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:11:52:42:79:44:38:22:4b:3f:e2:26:d9:29:e2:f0:f3:a6: f3:39:73:e2:7f:36:7c:29:d7:92:32:82:58:06:7f:8f:a1:5b: a2:c2:29:f4:82:cb:88:30:f8:1b:5f:11:12:86:8d:6e:17:b7: 48:45:34:ff:72:40:ac:70:0a:90:cd:c8:6e:a1:02:2c:97:f5: be:cd:e8:7a:69:0e:21:5a:64:10:1c:00:a1:d1:85:06:19:b0: 1d:9d:0a:c2:cf:71:40:c3:81:20:5b:7e:88:26:91:f0:09:40: d1:3d:0f:a2:f4:7b:72:a1:86:16:a8:03:f6:f7:ab:48:33:17: 2a:58:31:81:75:16:6f:18:2f:32:a6:9e:e5:61:95:4f:3f:32: 62:97:21:2b:9f:dc:03:a7:22:24:53:c1:8b:86:3c:16:0e:c8: 4f:74:70:a4:49:b3:58:66:3c:e4:2d:09:6e:c4:fe:e1:53:6e: 76:3f:b4:79:8a:5f:28:c5:11:df:0a:ed:4b:0e:64:8c:62:40: 25:a9:f6:32:e2:a7:7d:5d:11:74:78:d5:af:ad:f0:41:23:9e: c2:e0:58:ce:d7:4a:e7:0d:7c:87:21:fb:e9:21:4e:96:2c:5d: 33:7d:40:e7:4e:73:d5:d4:b9:b3:74:65:2e:34:70:82:f7:1f: 47:6a:4a:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN2FrjAmssZ1qgTzrKQ+3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MTc4MjQzYTA4NjZiMDkxMjcyZDFlMWViNDUxZTcxZTQx M2I5OWEwHhcNMjUxMjExMjEwMDQ2WhcNMjUxMjEyMjEwMDQ2WjAzMTEwLwYDVQQD EyhjZDIwNDE0MDM4M2E1Y2VmZmQwMjU4NjUwMzcxN2ZmMjgxOTFhODRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFpdWgTMxgpqfKCYAtVGB/8SDk1R YfKM0IAznBXUEuoYDdomQnJlqxikoM4BLRh9XrJKc3a69DJxWd/Y6mua50hOPMRv ZUlfh9FuHx7iB0hoFqFJwtVKe7PrnwQM+bygfcgOkJ7Oc+hHSKpvUyqivV7Rdp51 tvLOT/MuulM6XbthbmTqOYXYiA380PN/T4HMZGxJTCnsT9ubaIb17nBspkr1IjC4 b1aXhvrjeEXA/34S4I7XfMTREGlaqCxb4CKo9/R4VlO2HEBEB4QUgvHfJQE4cuTQ wVIEdhvOkFn8fxU//CTMe27Tn8cySDKEo57LcIguySMMG1VkxteK692/9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM0gQUA4Olzv/QJYZQNxf/KBkahKMB8GA1UdIwQY MBaAFCgXgkOghmsJEnLR4etFHnHkE7maMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0JlQ1E2Q0dhd2tTY3RIaDYwVWVjZVFUdVpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS83NDdkYjgtYWM1Ny00NmE4LWI2MzIt NmNlM2MwM2ExMzRjLzEvS0JlQ1E2Q0dhd2tTY3RIaDYwVWVjZVFUdVpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS83NDdkYjgtYWM1Ny00NmE4LWI2MzItNmNlM2MwM2ExMzRj LzEvS0JlQ1E2Q0dhd2tTY3RIaDYwVWVjZVFUdVpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIRFSQnlE OCJLP+Im2Sni8POm8zlz4n82fCnXkjKCWAZ/j6FbosIp9ILLiDD4G18REoaNbhe3 SEU0/3JArHAKkM3IbqECLJf1vs3oemkOIVpkEBwAodGFBhmwHZ0Kws9xQMOBIFt+ iCaR8AlA0T0PovR7cqGGFqgD9verSDMXKlgxgXUWbxgvMqae5WGVTz8yYpchK5/c A6ciJFPBi4Y8Fg7IT3RwpEmzWGY85C0JbsT+4VNudj+0eYpfKMUR3wrtSw5kjGJA Jan2MuKnfV0RdHjVr63wQSOewuBYztdK5w18hyH76SFOlixdM31A505z1dS5s3Rl LjRwgvcfR2pKIA== -----END CERTIFICATE-----Generated at Fri Dec 12 00:11:17 2025 by rpki-client