This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft File: 1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft (raw, json) Hash identifier: Vx8tloEbA1dbc5nN/VKVBQatYGQbct1xYjtmAs4OND8= Subject key identifier: 79:6E:23:62:38:AC:8B:F8:21:C5:BB:02:DD:A2:20:AE:96:F9:74:9F Authority key identifier: F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F Certificate issuer: /CN=f8a41594a92a9ae05c65a04f803d411a4f88423f Certificate serial: 019AF42E6124938666AB015E716C90DEE0D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft Manifest number: 136D Signing time: Sat 06 Dec 2025 15:01:11 +0000 Manifest this update: Sat 06 Dec 2025 15:01:11 +0000 Manifest next update: Sun 07 Dec 2025 15:01:11 +0000 Files and hashes: 1: 1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl (hash: a8d00bn02J0VgIXMOOtGczQR6JFjuVhvhUrnJc8Xzn8=) 2: kgzoK8BF6aDaCA7s2y2-oNomvaU.roa (hash: thv0x/fHxG1HTXAqa1M1DqYuduWmIxV8jm8IAHJKruM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:61:24:93:86:66:ab:01:5e:71:6c:90:de:e0:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8a41594a92a9ae05c65a04f803d411a4f88423f Validity Not Before: Dec 6 15:01:11 2025 GMT Not After : Dec 7 15:01:11 2025 GMT Subject: CN=796e236238ac8bf821c5bb02dda220ae96f9749f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4b:16:c7:36:20:05:3a:6b:e2:ed:ba:ee:fd: f4:b5:59:de:67:9a:21:45:a3:67:98:bd:2a:3f:e0: 84:1a:c9:dc:b3:6f:6f:01:63:0a:e7:9f:4d:a9:c1: f1:dd:69:17:ea:27:b4:8a:15:b8:17:15:cd:89:a9: b3:ce:15:d0:76:17:07:1e:a6:0c:22:b7:29:4f:e0: 59:86:6e:37:d5:59:b8:4f:fa:26:0e:4e:cf:8b:5f: ad:4a:0c:cf:66:b1:b1:9f:1d:a7:89:45:b1:64:27: fa:1c:08:ac:35:3f:3b:44:2c:d8:32:11:99:48:fd: 54:51:97:e2:6b:76:b2:72:86:07:5f:68:0c:ca:84: 0d:cf:c6:9b:85:f9:46:60:f0:84:34:d4:bf:3a:d0: cc:d8:b1:a0:ae:75:07:b6:16:37:40:22:48:48:59: 28:8f:eb:85:29:51:3b:ed:f6:2b:d4:82:99:b0:bb: 73:84:41:b4:68:1c:21:51:f2:eb:77:e0:a9:61:f0: 08:bf:3d:48:78:4c:d2:d9:54:31:ae:50:fb:a8:20: 17:c4:51:2c:80:96:94:43:03:31:88:3a:ed:33:6e: 88:0f:bc:37:0f:18:26:60:fc:7b:6c:8f:35:d9:10: bd:db:07:86:df:50:72:e4:e0:f4:21:a1:cf:6e:8a: c3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:6E:23:62:38:AC:8B:F8:21:C5:BB:02:DD:A2:20:AE:96:F9:74:9F X509v3 Authority Key Identifier: keyid:F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:7e:d2:88:a5:e7:cf:da:66:05:c2:2c:b6:05:f6:9d:08:8d: 2f:81:25:e5:9b:fe:86:00:96:9d:c2:ba:17:64:d3:04:82:0d: 87:2e:77:8d:ea:df:fe:09:8e:54:cb:23:f5:fc:93:a3:86:c8: cb:05:4e:6b:ac:d9:dc:e1:e9:ed:16:de:62:7b:78:1b:42:8e: 73:45:29:7d:54:b4:97:83:71:59:32:41:f9:af:77:58:b0:ea: 39:48:31:1f:b5:5e:99:50:be:b8:1f:d6:c0:1e:9a:a5:25:1d: 0b:d0:6b:91:1b:2a:f3:3b:73:eb:48:e5:6a:ec:39:cb:62:ef: 67:f5:60:9b:c2:db:e2:38:6d:cf:67:64:27:90:ef:5e:05:79: 5f:4c:17:45:0b:bd:4e:a2:6d:82:58:e5:d1:07:c2:cc:db:04: f9:14:4c:b6:00:90:d2:0f:01:3b:87:3c:41:24:98:25:5f:bd: 72:7d:8c:94:94:bd:a4:02:bc:04:6a:61:67:c8:9d:72:2a:8b: e0:20:24:72:51:f0:87:dd:08:70:2f:01:3b:d7:5c:4f:c5:75: 61:50:c3:ff:c4:85:8f:f6:33:13:2b:0a:6e:ea:e1:54:f3:f8: e8:be:aa:56:30:a0:0a:64:32:3c:8e:dd:9d:db:ff:bb:d1:76: 23:d5:1a:11 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZr0LmEkk4ZmqwFecWyQ3uDWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YTQxNTk0YTkyYTlhZTA1YzY1YTA0ZjgwM2Q0MTFhNGY4 ODQyM2YwHhcNMjUxMjA2MTUwMTExWhcNMjUxMjA3MTUwMTExWjAzMTEwLwYDVQQD Eyg3OTZlMjM2MjM4YWM4YmY4MjFjNWJiMDJkZGEyMjBhZTk2Zjk3NDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUsWxzYgBTpr4u267v30tVneZ5oh RaNnmL0qP+CEGsncs29vAWMK559NqcHx3WkX6ie0ihW4FxXNiamzzhXQdhcHHqYM IrcpT+BZhm431Vm4T/omDk7Pi1+tSgzPZrGxnx2niUWxZCf6HAisNT87RCzYMhGZ SP1UUZfia3aycoYHX2gMyoQNz8abhflGYPCENNS/OtDM2LGgrnUHthY3QCJISFko j+uFKVE77fYr1IKZsLtzhEG0aBwhUfLrd+CpYfAIvz1IeEzS2VQxrlD7qCAXxFEs gJaUQwMxiDrtM26ID7w3DxgmYPx7bI812RC92weG31By5OD0IaHPborDEQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFHluI2I4rIv4IcW7At2iIK6W+XSfMB8GA1UdIwQY MBaAFPikFZSpKprgXGWgT4A9QRpPiEI/MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LUVZsS2txbXVCY1phQlBnRDFCR2stSVFqOC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvNjMwMzYyLTI5MGYtNDZiYy04NDQ2 LTZhN2MzYmEzMTQxMC8xLzEtS1FWbEtrcW11QmNaYUJQZ0QxQkdrLUlRajgubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzBhLzYzMDM2Mi0yOTBmLTQ2YmMtODQ0Ni02YTdjM2JhMzE0 MTAvMS8xLUtRVmxLa3FtdUJjWmFCUGdEMUJHay1JUWo4LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJn7S iKXnz9pmBcIstgX2nQiNL4El5Zv+hgCWncK6F2TTBIINhy53jerf/gmOVMsj9fyT o4bIywVOa6zZ3OHp7RbeYnt4G0KOc0UpfVS0l4NxWTJB+a93WLDqOUgxH7VemVC+ uB/WwB6apSUdC9BrkRsq8ztz60jlauw5y2LvZ/Vgm8Lb4jhtz2dkJ5DvXgV5X0wX RQu9TqJtgljl0QfCzNsE+RRMtgCQ0g8BO4c8QSSYJV+9cn2MlJS9pAK8BGphZ8id ciqL4CAkclHwh90IcC8BO9dcT8V1YVDD/8SFj/YzEysKburhVPP46L6qVjCgCmQy PI7dndv/u9F2I9UaEQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:04:17 2025 by rpki-client