This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft File: KLrBhbg_beOautz_Pf5Ic9iDxIg.mft (raw, json) Hash identifier: vOS1/cNpHZI+34OV8YOyaFdBek+SAJ3CfZ7eIDt8GHM= Subject key identifier: 02:62:7E:88:54:B7:A7:EA:A5:61:5F:2C:B9:ED:48:DB:13:F7:FD:C7 Authority key identifier: 28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88 Certificate issuer: /CN=28bac185b83f6de39abadcff3dfe4873d883c488 Certificate serial: 019B2407988E99BB86F4AE641885E1B68E24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft Manifest number: 0AB3 Signing time: Mon 15 Dec 2025 22:00:36 +0000 Manifest this update: Mon 15 Dec 2025 22:00:36 +0000 Manifest next update: Tue 16 Dec 2025 22:00:36 +0000 Files and hashes: 1: KLrBhbg_beOautz_Pf5Ic9iDxIg.crl (hash: uO1EpQ2z0d3lLtK35wtIDcHR3lR8/hVxB/1O+2uZCZM=) 2: TRmQsqo38AvFLgeV_m9TBYH8n00.roa (hash: qW2qJnlmGn6g7rOMXIGst8HJCwyD3TG1rYc3G+brA8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:07:98:8e:99:bb:86:f4:ae:64:18:85:e1:b6:8e:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28bac185b83f6de39abadcff3dfe4873d883c488 Validity Not Before: Dec 15 22:00:36 2025 GMT Not After : Dec 16 22:00:36 2025 GMT Subject: CN=02627e8854b7a7eaa5615f2cb9ed48db13f7fdc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:44:d0:d1:92:58:d8:85:b0:06:2c:9e:ef:e8: ed:61:29:4e:0a:79:71:66:20:35:bd:95:ca:81:4e: bb:74:2a:44:80:61:32:13:cf:d4:8a:3c:31:42:df: f9:3c:5f:a6:64:36:f0:ff:71:83:31:53:e5:17:e9: b8:13:77:c6:d9:b5:bd:77:0c:3d:e8:61:f5:95:1a: 46:65:c8:3f:a0:bf:95:ab:8b:6f:51:82:be:5c:d8: 4f:02:7f:6f:53:63:3a:ec:bf:ba:8e:ca:5c:69:8a: 4a:d4:3f:ff:8c:d3:1c:75:47:b5:d1:e3:5d:8f:14: 5c:ed:d0:e2:92:0e:5f:1c:50:c3:a6:a6:16:9e:f9: 61:d7:35:f1:eb:7d:af:49:8d:78:59:75:f8:47:42: 79:91:df:d9:b3:ba:28:f0:8c:40:35:05:3c:44:97: 4e:27:ff:a9:26:d7:ba:5a:4d:83:b1:c0:82:1d:23: f3:51:34:a4:cc:6a:01:ae:65:fd:86:52:8a:c4:3e: af:49:b0:45:14:a0:41:66:9c:24:c7:b3:08:70:4a: bb:1f:cb:fd:10:31:63:d4:5a:18:07:93:48:69:c4: cb:b1:de:05:b9:bf:b6:73:9c:2a:cd:ab:44:28:cb: d8:48:33:e5:eb:4f:7d:6a:42:38:0f:f0:f8:ee:07: 99:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:62:7E:88:54:B7:A7:EA:A5:61:5F:2C:B9:ED:48:DB:13:F7:FD:C7 X509v3 Authority Key Identifier: keyid:28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:8e:7e:1a:18:90:fb:3a:55:fa:d0:7b:07:6b:c6:25:cf:c2: be:b3:68:a1:0f:9d:5f:c2:08:a4:6c:9e:82:e6:ae:76:27:96: cd:1a:39:1b:ad:88:72:c7:c2:c8:8a:21:fc:93:b7:05:80:6e: d4:6b:6f:e7:96:38:68:49:39:b8:6a:bb:ec:e5:2c:d5:8d:70: 38:55:c6:ec:ad:69:b0:1c:83:6a:ee:e1:2d:0b:89:5b:6c:f9: 93:3c:39:f6:80:98:66:f1:b0:81:28:a1:dd:d2:ad:ff:fd:32: 93:b8:dd:7d:64:52:58:ab:f6:4c:b9:91:9a:e9:62:c2:fb:54: ae:3e:a8:1a:8e:dc:9a:51:f2:6f:95:a4:de:89:b2:cf:1e:b7: 87:35:6f:cc:cd:d1:17:79:5a:f0:37:63:94:7a:5c:1d:10:a4: fb:d6:bc:aa:56:e7:90:17:10:b5:8c:2d:19:dd:cb:b2:89:05: 6e:ac:bb:95:3f:27:a2:07:df:d8:fd:69:71:4f:b1:a7:10:86: ac:b0:db:c8:1b:96:b3:0f:33:0f:80:b4:39:34:23:99:55:23: 03:7d:15:01:b3:2b:5c:ba:e4:4a:0d:92:8b:3b:9e:1b:b4:87: 55:17:ea:e7:d6:61:ac:75:8b:60:46:d1:b6:07:0c:b9:2c:f6: c5:7b:41:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskB5iOmbuG9K5kGIXhto4kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4YmFjMTg1YjgzZjZkZTM5YWJhZGNmZjNkZmU0ODczZDg4 M2M0ODgwHhcNMjUxMjE1MjIwMDM2WhcNMjUxMjE2MjIwMDM2WjAzMTEwLwYDVQQD EygwMjYyN2U4ODU0YjdhN2VhYTU2MTVmMmNiOWVkNDhkYjEzZjdmZGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvETQ0ZJY2IWwBiye7+jtYSlOCnlx ZiA1vZXKgU67dCpEgGEyE8/UijwxQt/5PF+mZDbw/3GDMVPlF+m4E3fG2bW9dww9 6GH1lRpGZcg/oL+Vq4tvUYK+XNhPAn9vU2M67L+6jspcaYpK1D//jNMcdUe10eNd jxRc7dDikg5fHFDDpqYWnvlh1zXx632vSY14WXX4R0J5kd/Zs7oo8IxANQU8RJdO J/+pJte6Wk2DscCCHSPzUTSkzGoBrmX9hlKKxD6vSbBFFKBBZpwkx7MIcEq7H8v9 EDFj1FoYB5NIacTLsd4Fub+2c5wqzatEKMvYSDPl6099akI4D/D47geZbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJifohUt6fqpWFfLLntSNsT9/3HMB8GA1UdIwQY MBaAFCi6wYW4P23jmrrc/z3+SHPYg8SIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0xyQmhiZ19iZU9hdXR6X1BmNUljOWlEeElnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mYjk0NjEtMmRiNy00MDllLWFiZWIt ZjNiMTZlZDZjMDYxLzEvS0xyQmhiZ19iZU9hdXR6X1BmNUljOWlEeElnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9mYjk0NjEtMmRiNy00MDllLWFiZWItZjNiMTZlZDZjMDYx LzEvS0xyQmhiZ19iZU9hdXR6X1BmNUljOWlEeElnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfI5+GhiQ +zpV+tB7B2vGJc/CvrNooQ+dX8IIpGyeguaudieWzRo5G62IcsfCyIoh/JO3BYBu 1Gtv55Y4aEk5uGq77OUs1Y1wOFXG7K1psByDau7hLQuJW2z5kzw59oCYZvGwgSih 3dKt//0yk7jdfWRSWKv2TLmRmuliwvtUrj6oGo7cmlHyb5Wk3omyzx63hzVvzM3R F3la8DdjlHpcHRCk+9a8qlbnkBcQtYwtGd3LsokFbqy7lT8nogff2P1pcU+xpxCG rLDbyBuWsw8zD4C0OTQjmVUjA30VAbMrXLrkSg2SizueG7SHVRfq59ZhrHWLYEbR tgcMuSz2xXtBTw== -----END CERTIFICATE-----Generated at Tue Dec 16 06:28:08 2025 by rpki-client