This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft File: KgzEYwHIsf1GOSkwGPulNlOiZbI.mft (raw, json) Hash identifier: OnreFzPD411TWswh9LXMZZvz3z6nHcG9rT7W2cpvRWo= Subject key identifier: BA:36:26:5E:90:03:6D:3B:D8:39:A3:EB:7E:2F:6E:D1:A7:0B:3B:E1 Authority key identifier: 2A:0C:C4:63:01:C8:B1:FD:46:39:29:30:18:FB:A5:36:53:A2:65:B2 Certificate issuer: /CN=2a0cc46301c8b1fd4639293018fba53653a265b2 Certificate serial: 019AAC830245185D4D0CE028E67EECC80FF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft Manifest number: 1741 Signing time: Sat 22 Nov 2025 17:00:58 +0000 Manifest this update: Sat 22 Nov 2025 17:00:58 +0000 Manifest next update: Sun 23 Nov 2025 17:00:58 +0000 Files and hashes: 1: 25LU7394eXHg-PBe4_GLTG3VIkw.roa (hash: HyP22/g9CSOKH8mPcT6JDAYedjiAUR/5O/lp9cDajCk=) 2: KgzEYwHIsf1GOSkwGPulNlOiZbI.crl (hash: ui301RNfVX46KnVsh1p1eoNxr/PJOQtLIEVan/pAJc0=) 3: VUqvat4WtfuUczhMBY4TDvxEK_s.roa (hash: Zqzw2dEApvnq4zRqyWAKudIEokzGJ+rSfWzcaKX+at0=) 4: jfIFCuUZlCfoxkAB48zp-OMBSv0.roa (hash: tfMbXizXQYE7ANVbZs7KN2qDtk5wxuAhU53t/l8imds=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.crl rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:83:02:45:18:5d:4d:0c:e0:28:e6:7e:ec:c8:0f:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a0cc46301c8b1fd4639293018fba53653a265b2 Validity Not Before: Nov 22 17:00:58 2025 GMT Not After : Nov 23 17:00:58 2025 GMT Subject: CN=ba36265e90036d3bd839a3eb7e2f6ed1a70b3be1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b6:1f:8a:02:7b:b9:eb:2b:b1:ad:a1:84:f0: 9a:a4:0e:76:62:c1:5e:28:14:5f:2f:00:6f:fa:ef: fe:53:4f:67:53:07:2b:b2:12:df:dd:2c:a4:39:87: 03:59:86:f6:62:89:1f:73:d3:61:cd:18:71:8e:36: 5f:c6:97:c2:41:22:7b:dd:4b:f0:35:2e:14:3a:36: d3:4a:2d:ae:5a:28:18:7a:94:e8:70:54:67:50:64: 1e:a4:cb:60:37:16:fa:2f:d4:be:77:3a:0b:8d:8b: 8a:75:04:75:05:09:6f:36:e1:ed:93:6b:be:18:1a: 19:dc:ae:3f:45:c6:cd:be:f7:86:f0:a1:e1:75:56: 2e:ea:5c:14:1a:9a:c0:29:a2:94:d2:f5:a9:2a:c6: 89:13:dc:9b:b0:e7:b8:96:b8:e1:a3:8e:5a:97:f7: 53:88:a6:53:45:39:c5:74:b9:e9:6d:d3:45:1c:0b: 81:3c:57:93:fe:7a:d6:f0:7c:77:20:90:ea:d8:52: d3:6e:64:94:df:db:be:a8:dc:42:b5:7e:24:ec:69: 6a:f7:8e:69:b3:ff:60:87:04:f4:32:a2:fd:da:e2: 13:f0:19:3b:79:79:44:c9:5f:b1:d8:43:79:12:b0: c5:0a:8b:ea:56:3c:73:42:ab:a4:7f:e9:e7:1c:92: 45:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:36:26:5E:90:03:6D:3B:D8:39:A3:EB:7E:2F:6E:D1:A7:0B:3B:E1 X509v3 Authority Key Identifier: keyid:2A:0C:C4:63:01:C8:B1:FD:46:39:29:30:18:FB:A5:36:53:A2:65:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:7c:41:10:85:69:27:fc:8c:0e:09:4f:b6:55:3f:58:d1:aa: 8b:a8:17:67:4f:37:f5:11:ce:71:35:d0:ca:36:7a:76:34:1d: 67:36:e0:1a:55:f2:f9:99:fb:d1:4e:81:f9:6b:18:b8:64:f4: 37:c6:d5:4e:3e:9f:b6:19:2b:4e:01:57:54:42:3f:4c:c3:d7: d9:d6:85:38:80:ef:94:a4:6c:d0:fc:de:72:09:b7:a7:6b:61: 64:0a:ef:82:72:72:58:ef:0c:23:63:03:ea:94:65:51:27:0f: b4:2a:74:c8:e2:70:f8:db:8d:af:f7:2e:da:7c:41:00:8c:b2: 8e:db:71:20:09:3a:4d:87:eb:09:c7:fd:0d:c5:5f:71:b9:68: 03:94:fe:3e:53:2a:65:57:f7:25:e1:6c:ac:a2:29:23:10:44: 93:79:d2:6a:23:24:a1:bd:5d:8e:c4:92:59:43:21:f6:01:1c: 12:0c:9e:82:26:01:2c:48:13:ae:17:fd:98:3f:84:e8:98:69: 2e:c6:98:e0:d6:82:e4:0b:ff:92:ac:77:91:2b:e1:2e:7d:bd: cd:46:dd:27:66:3d:b0:50:1d:1f:b9:ea:e3:d2:72:79:37:73: 8e:b8:c9:6c:06:4e:da:d4:8e:11:ab:64:ad:f1:23:e0:6e:ca: 00:ee:1a:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsgwJFGF1NDOAo5n7syA/3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhMGNjNDYzMDFjOGIxZmQ0NjM5MjkzMDE4ZmJhNTM2NTNh MjY1YjIwHhcNMjUxMTIyMTcwMDU4WhcNMjUxMTIzMTcwMDU4WjAzMTEwLwYDVQQD EyhiYTM2MjY1ZTkwMDM2ZDNiZDgzOWEzZWI3ZTJmNmVkMWE3MGIzYmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rYfigJ7uesrsa2hhPCapA52YsFe KBRfLwBv+u/+U09nUwcrshLf3SykOYcDWYb2Yokfc9NhzRhxjjZfxpfCQSJ73Uvw NS4UOjbTSi2uWigYepTocFRnUGQepMtgNxb6L9S+dzoLjYuKdQR1BQlvNuHtk2u+ GBoZ3K4/RcbNvveG8KHhdVYu6lwUGprAKaKU0vWpKsaJE9ybsOe4lrjho45al/dT iKZTRTnFdLnpbdNFHAuBPFeT/nrW8Hx3IJDq2FLTbmSU39u+qNxCtX4k7Glq945p s/9ghwT0MqL92uIT8Bk7eXlEyV+x2EN5ErDFCovqVjxzQqukf+nnHJJFpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLo2Jl6QA2072Dmj634vbtGnCzvhMB8GA1UdIwQY MBaAFCoMxGMByLH9RjkpMBj7pTZTomWyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2d6RVl3SElzZjFHT1Nrd0dQdWxObE9pWmJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8yODYyZDEtMmNjOS00NTY1LTg2YzIt MmJiNTU5N2EyNDM1LzEvS2d6RVl3SElzZjFHT1Nrd0dQdWxObE9pWmJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8yODYyZDEtMmNjOS00NTY1LTg2YzItMmJiNTU5N2EyNDM1 LzEvS2d6RVl3SElzZjFHT1Nrd0dQdWxObE9pWmJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAHxBEIVp J/yMDglPtlU/WNGqi6gXZ0839RHOcTXQyjZ6djQdZzbgGlXy+Zn70U6B+WsYuGT0 N8bVTj6fthkrTgFXVEI/TMPX2daFOIDvlKRs0Pzecgm3p2thZArvgnJyWO8MI2MD 6pRlUScPtCp0yOJw+NuNr/cu2nxBAIyyjttxIAk6TYfrCcf9DcVfcbloA5T+PlMq ZVf3JeFsrKIpIxBEk3nSaiMkob1djsSSWUMh9gEcEgyegiYBLEgTrhf9mD+E6Jhp LsaY4NaC5Av/kqx3kSvhLn29zUbdJ2Y9sFAdH7nq49JyeTdzjrjJbAZO2tSOEatk rfEj4G7KAO4akw== -----END CERTIFICATE-----Generated at Sat Nov 22 21:44:03 2025 by rpki-client