This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft File: kGQm9IPDaqzahzIySriK1YAMmi0.mft (raw, json) Hash identifier: hu/ADuIA+GfYnViaQihcd2FZHcGJ9DN7EmLrTl+mxsA= Subject key identifier: 8A:22:28:EB:8A:06:C2:DA:77:28:2B:C4:71:5A:28:68:4A:7F:2C:8F Authority key identifier: 90:64:26:F4:83:C3:6A:AC:DA:87:32:32:4A:B8:8A:D5:80:0C:9A:2D Certificate issuer: /CN=906426f483c36aacda8732324ab88ad5800c9a2d Certificate serial: 019AF19BAB096F0211237A26087B776AA422 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft Manifest number: 0C84 Signing time: Sat 06 Dec 2025 03:01:41 +0000 Manifest this update: Sat 06 Dec 2025 03:01:41 +0000 Manifest next update: Sun 07 Dec 2025 03:01:41 +0000 Files and hashes: 1: gLZLrbhpO6mWtu79cX_I9beQtfY.roa (hash: FKC1b4NqDGusVuG1PsHV/OorcR6VfmcWdy6GLsbONNI=) 2: kGQm9IPDaqzahzIySriK1YAMmi0.crl (hash: 9tZiI79Wf4r4HeQhpPIoaCVczqV0dGXwAR4YdYWBA/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:ab:09:6f:02:11:23:7a:26:08:7b:77:6a:a4:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=906426f483c36aacda8732324ab88ad5800c9a2d Validity Not Before: Dec 6 03:01:41 2025 GMT Not After : Dec 7 03:01:41 2025 GMT Subject: CN=8a2228eb8a06c2da77282bc4715a28684a7f2c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:59:8c:a4:da:af:a9:67:c3:9f:68:7a:a9:f2: d0:12:0b:92:09:13:38:0b:d5:d0:bb:85:d9:d3:b0: 8b:a3:b8:d9:bf:ae:d0:bc:23:1c:0f:a2:da:a9:f0: fd:65:53:19:b6:2c:62:0f:64:f9:e2:0b:e3:98:3e: 86:5d:a6:f2:dc:66:50:07:45:2f:13:b6:91:8e:fb: bc:ce:94:d1:5c:24:38:83:6a:d0:70:4a:4f:58:c1: ed:39:44:0a:f1:85:a7:50:63:00:15:e6:ea:0f:f8: 7d:4c:c5:54:55:9b:50:f7:4f:fa:af:4b:c5:cd:68: 95:2c:b3:65:47:ad:2f:11:99:2c:02:03:0a:7b:b5: 7e:9f:a7:33:b0:dd:79:ae:bc:ee:04:bf:5f:e7:0b: ed:d7:c1:86:8c:d1:2f:bb:3a:62:e3:1d:99:4a:63: 18:55:1b:05:47:5e:90:c2:8e:c6:c0:d1:43:f0:4f: bb:7b:8d:00:04:c0:62:a4:a8:36:8d:34:52:87:aa: 3e:51:e3:66:b9:71:b0:c0:65:d9:2a:77:0d:54:4f: e5:00:cd:20:08:f6:75:c2:ec:47:02:0b:0a:8d:70: 81:b0:f7:45:48:11:3f:36:df:59:fe:b6:54:d4:8d: b8:be:93:43:1a:b1:06:5c:92:3f:88:cd:55:e6:56: aa:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:22:28:EB:8A:06:C2:DA:77:28:2B:C4:71:5A:28:68:4A:7F:2C:8F X509v3 Authority Key Identifier: keyid:90:64:26:F4:83:C3:6A:AC:DA:87:32:32:4A:B8:8A:D5:80:0C:9A:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:d5:9b:a6:ef:c3:2a:52:70:36:b6:a8:4b:1b:7f:22:90:d1: 23:5a:43:04:f2:ec:da:db:58:84:a8:f3:b5:bd:39:a1:83:cd: 92:f5:d9:c4:64:bd:9a:b3:21:d1:18:e5:81:c8:d0:fb:ed:bb: 7d:e9:ca:89:27:28:17:cb:e5:b1:22:de:f4:9b:dd:14:38:8a: 4c:8c:f2:66:75:be:80:47:32:85:c8:85:f2:d2:c7:ac:bc:35: da:ab:31:64:d3:db:58:9f:ec:7f:06:52:5f:4c:04:28:c4:95: 04:59:c7:91:43:9e:a4:ab:a0:96:6c:0a:28:63:a6:a6:51:87: 0c:9c:e5:9b:c1:d8:ab:87:5c:16:2f:6e:35:e4:d7:c6:e1:e5: 27:b6:77:06:8a:a5:c3:e9:09:80:10:0f:3a:e5:e4:d0:ee:62: 00:2a:8f:43:99:5a:4f:cc:e3:56:27:52:72:b9:92:b3:d7:48: ca:7c:02:07:2a:be:af:2c:1e:e6:c9:e2:1d:36:28:b1:07:cf: 69:03:e2:2f:2f:b2:53:54:0d:c5:56:9a:29:2c:f5:db:6e:2e: 51:0c:55:4a:63:72:d5:b6:11:58:40:7f:94:15:73:3e:85:3b: 80:68:ba:66:86:85:fa:88:37:84:79:94:bd:d9:59:60:9b:4b: 96:5d:16:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm6sJbwIRI3omCHt3aqQiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwNjQyNmY0ODNjMzZhYWNkYTg3MzIzMjRhYjg4YWQ1ODAw YzlhMmQwHhcNMjUxMjA2MDMwMTQxWhcNMjUxMjA3MDMwMTQxWjAzMTEwLwYDVQQD Eyg4YTIyMjhlYjhhMDZjMmRhNzcyODJiYzQ3MTVhMjg2ODRhN2YyYzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFmMpNqvqWfDn2h6qfLQEguSCRM4 C9XQu4XZ07CLo7jZv67QvCMcD6LaqfD9ZVMZtixiD2T54gvjmD6GXaby3GZQB0Uv E7aRjvu8zpTRXCQ4g2rQcEpPWMHtOUQK8YWnUGMAFebqD/h9TMVUVZtQ90/6r0vF zWiVLLNlR60vEZksAgMKe7V+n6czsN15rrzuBL9f5wvt18GGjNEvuzpi4x2ZSmMY VRsFR16Qwo7GwNFD8E+7e40ABMBipKg2jTRSh6o+UeNmuXGwwGXZKncNVE/lAM0g CPZ1wuxHAgsKjXCBsPdFSBE/Nt9Z/rZU1I24vpNDGrEGXJI/iM1V5laq/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIoiKOuKBsLadygrxHFaKGhKfyyPMB8GA1UdIwQY MBaAFJBkJvSDw2qs2ocyMkq4itWADJotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0dRbTlJUERhcXphaHpJeVNyaUsxWUFNbWkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85NGQ0NDEtZDk4Ny00MDYyLTg5YzEt OTRjNWFkMTdhN2EwLzEva0dRbTlJUERhcXphaHpJeVNyaUsxWUFNbWkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85NGQ0NDEtZDk4Ny00MDYyLTg5YzEtOTRjNWFkMTdhN2Ew LzEva0dRbTlJUERhcXphaHpJeVNyaUsxWUFNbWkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArNWbpu/D KlJwNraoSxt/IpDRI1pDBPLs2ttYhKjztb05oYPNkvXZxGS9mrMh0RjlgcjQ++27 fenKiScoF8vlsSLe9JvdFDiKTIzyZnW+gEcyhciF8tLHrLw12qsxZNPbWJ/sfwZS X0wEKMSVBFnHkUOepKuglmwKKGOmplGHDJzlm8HYq4dcFi9uNeTXxuHlJ7Z3Boql w+kJgBAPOuXk0O5iACqPQ5laT8zjVidScrmSs9dIynwCByq+rywe5sniHTYosQfP aQPiLy+yU1QNxVaaKSz1224uUQxVSmNy1bYRWEB/lBVzPoU7gGi6ZoaF+og3hHmU vdlZYJtLll0WmA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:53:49 2025 by rpki-client