This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/43d7fb-4c9b-4263-be15-988ee7fe70a9/1/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.mft File: KgP8wEA8wUCsF8yUq_ZLpxlU5_w.mft (raw, json) Hash identifier: mEYQWC7IcIPTG1bYOo1kYoZUEWoNNsFqfYBtW30JVhU= Subject key identifier: 9A:70:D9:A7:B7:77:CB:DA:26:1D:69:BE:F0:77:46:6B:9E:26:CB:F5 Authority key identifier: 2A:03:FC:C0:40:3C:C1:40:AC:17:CC:94:AB:F6:4B:A7:19:54:E7:FC Certificate issuer: /CN=2a03fcc0403cc140ac17cc94abf64ba71954e7fc Certificate serial: 019B5AF606472C02302F7292B0FC20C00367 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/43d7fb-4c9b-4263-be15-988ee7fe70a9/1/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.mft Manifest number: 011D Signing time: Fri 26 Dec 2025 14:00:31 +0000 Manifest this update: Fri 26 Dec 2025 14:00:31 +0000 Manifest next update: Sat 27 Dec 2025 14:00:31 +0000 Files and hashes: 1: KgP8wEA8wUCsF8yUq_ZLpxlU5_w.crl (hash: YgJaUUU1DEnIZWrQP7Rr4OGV3xnpusQ1Y+exx5IKdZ8=) 2: j8yR2SwKtsWVLSNz7q_UM4Rt1zM.roa (hash: SRAkp7Ly8eQqtuMXaM0/J+PtXueSbryqz6yBP5HCAks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/43d7fb-4c9b-4263-be15-988ee7fe70a9/1/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.crl rsync://rpki.ripe.net/repository/DEFAULT/26/43d7fb-4c9b-4263-be15-988ee7fe70a9/1/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.mft rsync://rpki.ripe.net/repository/DEFAULT/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:06:47:2c:02:30:2f:72:92:b0:fc:20:c0:03:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a03fcc0403cc140ac17cc94abf64ba71954e7fc Validity Not Before: Dec 26 14:00:31 2025 GMT Not After : Dec 27 14:00:31 2025 GMT Subject: CN=9a70d9a7b777cbda261d69bef077466b9e26cbf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fa:40:3c:0d:0d:1f:09:c2:d5:bb:2b:ab:d8: a3:cb:b2:5f:80:01:25:90:51:3f:63:55:a5:74:94: f8:a5:b3:9a:c6:67:cb:b9:50:b0:f3:89:6e:d9:16: 03:80:bf:94:09:bf:80:8c:37:9d:96:47:29:da:35: c2:df:77:1e:62:a3:8c:85:0a:71:2e:bb:e0:0c:e1: 12:a0:28:bf:d7:76:f2:1b:40:fb:6c:02:fd:44:43: 50:f8:bf:1e:70:db:a9:ba:f7:1e:b7:5a:32:84:71: 59:b3:b8:f6:42:0a:2e:c7:85:24:89:b0:ba:bd:28: 5e:43:50:06:9f:92:5d:cb:0f:8d:7e:57:ac:48:84: f5:7a:f0:ab:e8:31:68:10:f2:cc:c8:3a:4c:23:e5: 05:a1:86:93:56:47:94:3c:41:6c:01:bc:30:54:bf: 66:79:64:3f:04:9c:26:6d:55:8d:0a:73:80:f2:45: c8:7b:41:64:d4:b3:2b:c0:15:47:d0:dc:a2:b8:19: 5b:12:de:a0:2f:8e:73:6b:43:d0:c8:a1:76:83:65: 42:bc:e7:72:4e:ad:64:e0:78:d3:47:b8:3e:c7:51: 67:f5:d4:2a:3d:af:d3:4c:78:71:9f:4d:70:23:74: 41:7a:6e:21:ca:92:a5:a1:a1:29:d5:d2:b0:61:9d: b2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:70:D9:A7:B7:77:CB:DA:26:1D:69:BE:F0:77:46:6B:9E:26:CB:F5 X509v3 Authority Key Identifier: keyid:2A:03:FC:C0:40:3C:C1:40:AC:17:CC:94:AB:F6:4B:A7:19:54:E7:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/43d7fb-4c9b-4263-be15-988ee7fe70a9/1/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/43d7fb-4c9b-4263-be15-988ee7fe70a9/1/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:bd:77:bc:5d:74:6f:25:a6:48:88:70:b5:81:92:a7:74:4c: 63:ab:a4:14:c6:5e:9d:57:2a:d3:b4:74:be:da:60:8e:12:49: ae:04:42:f5:f8:0d:9a:30:b5:07:16:ce:a1:17:81:50:c9:0c: d9:44:dd:d5:8d:01:c7:63:e0:7c:01:c5:66:8c:5c:b8:a5:34: c7:90:ad:07:de:8e:5b:fa:c4:a4:c4:ad:ff:91:86:23:13:12: a3:b0:ee:e0:b2:d8:cb:f5:0a:6d:fa:de:0c:df:47:a0:9a:18: 63:52:62:77:31:59:5e:a2:29:c0:fb:37:43:d3:9a:13:b9:02: c8:09:c9:d2:e5:6c:88:37:d0:85:e1:3b:13:1a:cf:a0:59:97: f0:bc:ca:a2:a3:e6:c6:2f:02:5e:ad:b6:12:33:a1:2d:87:48: 6f:6a:37:29:3d:c2:e4:68:4b:8f:ab:06:a9:58:da:37:7a:bb: 9c:0d:c8:09:98:8e:49:01:83:6e:9e:81:33:bd:e5:ca:ad:3e: 59:57:27:60:2a:ac:7d:6b:c0:b2:ef:0e:78:b1:a0:04:a1:a6: a0:69:1c:b4:2f:48:a2:86:44:dd:8a:13:86:c1:de:67:66:23: 4d:ef:ae:41:b3:28:1e:33:b6:a0:1e:1d:55:3b:48:ac:95:f9: bf:0b:9d:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9gZHLAIwL3KSsPwgwANnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhMDNmY2MwNDAzY2MxNDBhYzE3Y2M5NGFiZjY0YmE3MTk1 NGU3ZmMwHhcNMjUxMjI2MTQwMDMxWhcNMjUxMjI3MTQwMDMxWjAzMTEwLwYDVQQD Eyg5YTcwZDlhN2I3NzdjYmRhMjYxZDY5YmVmMDc3NDY2YjllMjZjYmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfpAPA0NHwnC1bsrq9ijy7JfgAEl kFE/Y1WldJT4pbOaxmfLuVCw84lu2RYDgL+UCb+AjDedlkcp2jXC33ceYqOMhQpx LrvgDOESoCi/13byG0D7bAL9RENQ+L8ecNupuvcet1oyhHFZs7j2Qgoux4UkibC6 vSheQ1AGn5Jdyw+NflesSIT1evCr6DFoEPLMyDpMI+UFoYaTVkeUPEFsAbwwVL9m eWQ/BJwmbVWNCnOA8kXIe0Fk1LMrwBVH0NyiuBlbEt6gL45za0PQyKF2g2VCvOdy Tq1k4HjTR7g+x1Fn9dQqPa/TTHhxn01wI3RBem4hypKloaEp1dKwYZ2yxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJpw2ae3d8vaJh1pvvB3RmueJsv1MB8GA1UdIwQY MBaAFCoD/MBAPMFArBfMlKv2S6cZVOf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2dQOHdFQTh3VUNzRjh5VXFfWkxweGxVNV93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi80M2Q3ZmItNGM5Yi00MjYzLWJlMTUt OTg4ZWU3ZmU3MGE5LzEvS2dQOHdFQTh3VUNzRjh5VXFfWkxweGxVNV93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi80M2Q3ZmItNGM5Yi00MjYzLWJlMTUtOTg4ZWU3ZmU3MGE5 LzEvS2dQOHdFQTh3VUNzRjh5VXFfWkxweGxVNV93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPb13vF10 byWmSIhwtYGSp3RMY6ukFMZenVcq07R0vtpgjhJJrgRC9fgNmjC1BxbOoReBUMkM 2UTd1Y0Bx2PgfAHFZoxcuKU0x5CtB96OW/rEpMSt/5GGIxMSo7Du4LLYy/UKbfre DN9HoJoYY1JidzFZXqIpwPs3Q9OaE7kCyAnJ0uVsiDfQheE7ExrPoFmX8LzKoqPm xi8CXq22EjOhLYdIb2o3KT3C5GhLj6sGqVjaN3q7nA3ICZiOSQGDbp6BM73lyq0+ WVcnYCqsfWvAsu8OeLGgBKGmoGkctC9IooZE3YoThsHeZ2YjTe+uQbMoHjO2oB4d VTtIrJX5vwudkw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:25 2025 by rpki-client