This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft File: KqGB-LCskT3cN34Z1WZLEbGXU3M.mft (raw, json) Hash identifier: TH39C3II3i6E+P5szkUasvwR9sz4Rfy9lVzwiyetBZg= Subject key identifier: 0F:2E:99:99:C8:E7:6F:5E:2F:8D:5D:8E:C9:75:90:5F:90:9F:1B:A8 Authority key identifier: 2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73 Certificate issuer: /CN=2aa181f8b0ac913ddc377e19d5664b11b1975373 Certificate serial: 019B1D29EF4CB5D0D878BF43324FEE57F625 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft Manifest number: 0CEB Signing time: Sun 14 Dec 2025 14:00:45 +0000 Manifest this update: Sun 14 Dec 2025 14:00:45 +0000 Manifest next update: Mon 15 Dec 2025 14:00:45 +0000 Files and hashes: 1: KqGB-LCskT3cN34Z1WZLEbGXU3M.crl (hash: rvaBEnRK81f4YwkHCkD5SrWH0Ahh9O+Scljiadx7elM=) 2: pYcNr9sVfFTE36N21zQEaYvpSC8.roa (hash: qgrqjfITSKMfgl03Ej2JSBSRB998DdmMRLl3Rj6JmrI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:29:ef:4c:b5:d0:d8:78:bf:43:32:4f:ee:57:f6:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa181f8b0ac913ddc377e19d5664b11b1975373 Validity Not Before: Dec 14 14:00:45 2025 GMT Not After : Dec 15 14:00:45 2025 GMT Subject: CN=0f2e9999c8e76f5e2f8d5d8ec975905f909f1ba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:46:43:68:7d:32:57:c1:fd:7a:79:fd:da:2a: ea:3a:e5:6e:dd:5f:86:c5:c6:42:01:1d:55:96:61: be:6c:15:b6:05:6a:4c:16:18:17:94:82:13:b1:fe: 7b:34:49:3d:96:e4:3e:8c:33:57:e0:97:d6:c7:8e: 54:73:a6:f9:76:82:e6:3c:ab:d4:5c:04:ae:fe:a7: bd:36:62:bf:dc:ed:5e:3c:a1:b0:79:19:32:08:c3: a8:31:01:a0:0c:9f:d0:0e:5f:21:01:ab:70:3d:4d: 73:39:62:8e:5f:b9:a2:09:37:13:f5:ab:e8:95:f2: 77:14:43:73:33:eb:a2:8b:bb:6e:d1:a8:fa:c7:c0: 42:94:bf:7c:16:01:50:38:ed:43:ea:59:22:18:74: 28:8e:06:19:72:a7:d8:fe:29:2d:a2:22:b3:7f:c1: 09:ed:1e:66:5e:c7:db:4c:7b:f8:3b:e2:e2:4b:e6: 84:73:7c:bf:dd:0c:3f:ba:37:53:de:da:d4:31:d1: f9:82:61:dd:51:69:ba:23:27:ed:eb:82:91:48:38: b8:3e:af:29:a8:59:db:80:13:c1:42:7e:14:c3:12: 68:3a:e5:04:0f:fa:3f:8b:0b:e2:e5:34:da:86:c4: a3:03:62:3f:4b:4b:4b:fe:7e:f1:c2:c1:0c:a5:f8: 44:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:2E:99:99:C8:E7:6F:5E:2F:8D:5D:8E:C9:75:90:5F:90:9F:1B:A8 X509v3 Authority Key Identifier: keyid:2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:b9:0e:93:20:0d:2f:59:18:8c:80:1f:ee:f5:4d:d6:5b:66: 0f:9b:50:88:c8:e9:c2:65:2f:39:a9:19:9a:c4:01:4c:9f:0d: c8:10:01:4a:07:9f:50:5e:a8:84:26:b6:43:20:59:ec:18:52: 60:41:8b:e2:9a:e6:86:67:63:79:b2:d2:15:d7:cc:b4:ed:8f: 0d:fd:4f:e4:d1:03:e0:af:ca:4e:e6:a8:60:b5:bd:3f:f5:81: 45:c5:7d:fe:39:9e:07:1b:0c:00:5e:99:bc:eb:90:45:0c:f8: 93:25:b5:5d:d3:3a:cf:e1:aa:68:38:f4:88:f8:d9:09:39:4b: 04:ba:00:3b:91:df:7e:c0:18:e2:67:d7:b8:21:67:6e:c8:15: 98:d2:81:41:98:b7:28:65:52:c8:76:20:79:8e:c6:09:52:66: e6:d6:d1:f9:09:06:ea:b7:ea:61:5e:4d:e1:6d:93:db:45:8f: 42:fc:8d:06:8d:84:48:2d:36:62:69:e7:ed:aa:0c:a6:e0:06: 72:b3:16:70:33:f6:bc:23:2b:e6:13:3a:11:30:65:c0:31:7a: 91:71:43:49:c6:08:60:b6:dd:e7:ff:40:a5:e8:0d:c8:0f:b6: 19:df:f0:79:ba:38:7a:26:c5:f5:d1:f9:39:f8:b3:b1:23:b5: 10:32:c7:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdKe9MtdDYeL9DMk/uV/YlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYTE4MWY4YjBhYzkxM2RkYzM3N2UxOWQ1NjY0YjExYjE5 NzUzNzMwHhcNMjUxMjE0MTQwMDQ1WhcNMjUxMjE1MTQwMDQ1WjAzMTEwLwYDVQQD EygwZjJlOTk5OWM4ZTc2ZjVlMmY4ZDVkOGVjOTc1OTA1ZjkwOWYxYmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEZDaH0yV8H9enn92irqOuVu3V+G xcZCAR1VlmG+bBW2BWpMFhgXlIITsf57NEk9luQ+jDNX4JfWx45Uc6b5doLmPKvU XASu/qe9NmK/3O1ePKGweRkyCMOoMQGgDJ/QDl8hAatwPU1zOWKOX7miCTcT9avo lfJ3FENzM+uii7tu0aj6x8BClL98FgFQOO1D6lkiGHQojgYZcqfY/iktoiKzf8EJ 7R5mXsfbTHv4O+LiS+aEc3y/3Qw/ujdT3trUMdH5gmHdUWm6Iyft64KRSDi4Pq8p qFnbgBPBQn4UwxJoOuUED/o/iwvi5TTahsSjA2I/S0tL/n7xwsEMpfhEQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA8umZnI529eL41djsl1kF+QnxuoMB8GA1UdIwQY MBaAFCqhgfiwrJE93Dd+GdVmSxGxl1NzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3FHQi1MQ3NrVDNjTjM0WjFXWkxFYkdYVTNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9iOTg3NTUtNjVjNC00ZDE5LWIwNjkt YTFhNTVlOGJlZTNmLzEvS3FHQi1MQ3NrVDNjTjM0WjFXWkxFYkdYVTNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9iOTg3NTUtNjVjNC00ZDE5LWIwNjktYTFhNTVlOGJlZTNm LzEvS3FHQi1MQ3NrVDNjTjM0WjFXWkxFYkdYVTNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkrkOkyAN L1kYjIAf7vVN1ltmD5tQiMjpwmUvOakZmsQBTJ8NyBABSgefUF6ohCa2QyBZ7BhS YEGL4prmhmdjebLSFdfMtO2PDf1P5NED4K/KTuaoYLW9P/WBRcV9/jmeBxsMAF6Z vOuQRQz4kyW1XdM6z+GqaDj0iPjZCTlLBLoAO5HffsAY4mfXuCFnbsgVmNKBQZi3 KGVSyHYgeY7GCVJm5tbR+QkG6rfqYV5N4W2T20WPQvyNBo2ESC02Ymnn7aoMpuAG crMWcDP2vCMr5hM6ETBlwDF6kXFDScYIYLbd5/9ApegNyA+2Gd/webo4eibF9dH5 OfizsSO1EDLHaQ== -----END CERTIFICATE-----Generated at Sun Dec 14 19:31:51 2025 by rpki-client