This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft File: KLrBhbg_beOautz_Pf5Ic9iDxIg.mft (raw, json) Hash identifier: cUPBIYwba9M7UhyWlkfVPR/GXS/h5XOaqo/7952/O/M= Subject key identifier: D6:CD:44:6B:DA:61:36:90:DC:35:F1:4E:49:62:0D:48:7A:82:6D:36 Authority key identifier: 28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88 Certificate issuer: /CN=28bac185b83f6de39abadcff3dfe4873d883c488 Certificate serial: 019AF79CBE14B80CF65916F80A7EAC78BF19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft Manifest number: 0A9C Signing time: Sun 07 Dec 2025 07:00:35 +0000 Manifest this update: Sun 07 Dec 2025 07:00:35 +0000 Manifest next update: Mon 08 Dec 2025 07:00:35 +0000 Files and hashes: 1: KLrBhbg_beOautz_Pf5Ic9iDxIg.crl (hash: sY/+dWQWb7MRdSY5sw1PlkQlGUqzLOfpi+RM2Np7qp8=) 2: TRmQsqo38AvFLgeV_m9TBYH8n00.roa (hash: qW2qJnlmGn6g7rOMXIGst8HJCwyD3TG1rYc3G+brA8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:9c:be:14:b8:0c:f6:59:16:f8:0a:7e:ac:78:bf:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28bac185b83f6de39abadcff3dfe4873d883c488 Validity Not Before: Dec 7 07:00:35 2025 GMT Not After : Dec 8 07:00:35 2025 GMT Subject: CN=d6cd446bda613690dc35f14e49620d487a826d36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:df:05:db:f8:a7:e3:e7:d5:9e:9c:0c:95:9b: 08:2d:09:f7:73:d4:19:f7:87:7f:1a:10:cc:73:64: 77:b1:02:7c:f1:5e:89:5d:ed:fb:44:be:3f:15:cf: c8:05:f6:1a:65:8c:5f:bb:35:52:3b:2e:cc:90:7e: 13:fd:c0:24:8f:1a:dd:7b:32:11:a4:87:8e:a9:50: 9c:12:d4:ad:19:a7:c6:37:d6:bb:6d:39:76:ad:69: bd:e1:d4:06:0b:03:bb:f8:0b:bd:70:44:b2:a8:44: dd:ed:0f:b2:c5:aa:07:41:9f:fc:8c:ad:07:93:ab: 6e:83:bd:27:4a:7c:ac:08:df:7d:0f:2b:95:2e:0b: 81:8a:14:0e:47:43:34:8b:9c:37:6d:50:95:af:33: 44:40:98:9e:f0:69:07:6a:d4:66:42:33:f4:d1:c4: c9:51:f3:db:5a:9a:b1:e8:5b:8a:af:45:85:1a:4f: 15:9f:f7:10:b1:20:ba:65:38:7c:bb:2b:8c:97:d6: 85:f5:0f:c8:27:35:53:1c:f4:dd:4d:5c:8c:eb:58: 6e:85:b9:2c:ad:da:54:e2:fb:93:03:cd:3a:7f:71: b1:95:f2:ea:94:b1:09:a5:a9:f5:be:39:2c:99:e2: ef:89:7f:2c:4f:bc:3d:3c:7e:44:d7:ae:01:60:5c: f0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:CD:44:6B:DA:61:36:90:DC:35:F1:4E:49:62:0D:48:7A:82:6D:36 X509v3 Authority Key Identifier: keyid:28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:1f:63:8a:e1:a0:33:f5:71:6a:5e:2e:31:38:0f:48:92:32: 9f:b7:37:83:bb:84:37:6e:43:bb:b9:a1:fb:d2:0d:4b:4b:27: 54:45:e6:ef:aa:2e:cc:55:b1:7f:b9:35:68:25:dc:21:2a:ea: 09:23:6b:a4:3d:e7:a8:95:02:62:69:88:88:e1:e4:60:6d:27: 36:4d:47:cf:88:45:cb:93:c7:bb:12:d7:19:1a:84:bf:af:f2: 27:15:ea:ca:5e:93:13:87:a7:cb:bf:c9:8a:90:de:21:ff:c8: 9e:cc:a5:0f:f0:ca:57:91:35:3c:ec:16:55:17:ee:ca:3b:35: 20:e0:0b:7a:a8:ef:39:2e:5a:cc:3d:c8:e1:48:e5:ec:1a:f1: df:4f:17:e5:27:11:5c:0f:c3:07:91:d6:7e:9d:1b:e1:14:56: ef:3b:98:cf:c6:0e:bf:6a:b3:46:fe:4c:c3:da:f3:85:17:e3: c9:13:ca:fe:13:2c:e8:62:2a:9b:9e:d8:06:65:a3:e5:36:58: 59:34:a4:0e:5c:82:ae:5f:10:21:eb:cd:8f:f0:31:3a:34:ff: c5:a5:f2:09:b3:77:29:99:39:c3:04:60:b2:29:3c:5d:a6:2b: 98:8a:ef:23:e3:a5:88:2b:4c:13:a0:4e:c0:55:d9:70:4e:3c: 52:c8:ea:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr3nL4UuAz2WRb4Cn6seL8ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4YmFjMTg1YjgzZjZkZTM5YWJhZGNmZjNkZmU0ODczZDg4 M2M0ODgwHhcNMjUxMjA3MDcwMDM1WhcNMjUxMjA4MDcwMDM1WjAzMTEwLwYDVQQD EyhkNmNkNDQ2YmRhNjEzNjkwZGMzNWYxNGU0OTYyMGQ0ODdhODI2ZDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlN8F2/in4+fVnpwMlZsILQn3c9QZ 94d/GhDMc2R3sQJ88V6JXe37RL4/Fc/IBfYaZYxfuzVSOy7MkH4T/cAkjxrdezIR pIeOqVCcEtStGafGN9a7bTl2rWm94dQGCwO7+Au9cESyqETd7Q+yxaoHQZ/8jK0H k6tug70nSnysCN99DyuVLguBihQOR0M0i5w3bVCVrzNEQJie8GkHatRmQjP00cTJ UfPbWpqx6FuKr0WFGk8Vn/cQsSC6ZTh8uyuMl9aF9Q/IJzVTHPTdTVyM61huhbks rdpU4vuTA806f3GxlfLqlLEJpan1vjksmeLviX8sT7w9PH5E164BYFzwVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbNRGvaYTaQ3DXxTkliDUh6gm02MB8GA1UdIwQY MBaAFCi6wYW4P23jmrrc/z3+SHPYg8SIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0xyQmhiZ19iZU9hdXR6X1BmNUljOWlEeElnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mYjk0NjEtMmRiNy00MDllLWFiZWIt ZjNiMTZlZDZjMDYxLzEvS0xyQmhiZ19iZU9hdXR6X1BmNUljOWlEeElnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9mYjk0NjEtMmRiNy00MDllLWFiZWItZjNiMTZlZDZjMDYx LzEvS0xyQmhiZ19iZU9hdXR6X1BmNUljOWlEeElnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALx9jiuGg M/Vxal4uMTgPSJIyn7c3g7uEN25Du7mh+9INS0snVEXm76ouzFWxf7k1aCXcISrq CSNrpD3nqJUCYmmIiOHkYG0nNk1Hz4hFy5PHuxLXGRqEv6/yJxXqyl6TE4eny7/J ipDeIf/InsylD/DKV5E1POwWVRfuyjs1IOALeqjvOS5azD3I4Ujl7Brx308X5ScR XA/DB5HWfp0b4RRW7zuYz8YOv2qzRv5Mw9rzhRfjyRPK/hMs6GIqm57YBmWj5TZY WTSkDlyCrl8QIevNj/AxOjT/xaXyCbN3KZk5wwRgsik8XaYrmIrvI+OliCtME6BO wFXZcE48UsjqOA== -----END CERTIFICATE-----Generated at Sun Dec 7 15:29:09 2025 by rpki-client