This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft File: Kq8k6REaiJ202uCH5ICeEIbjP4I.mft (raw, json) Hash identifier: Vkg1wWudcqwYHFTMPy+q/AWaMTXkhUJKLWpPXqgum/s= Subject key identifier: 12:07:C2:08:A9:23:C0:B0:7D:3F:2C:16:22:BE:BC:1E:BF:0C:6B:08 Authority key identifier: 2A:AF:24:E9:11:1A:88:9D:B4:DA:E0:87:E4:80:9E:10:86:E3:3F:82 Certificate issuer: /CN=2aaf24e9111a889db4dae087e4809e1086e33f82 Certificate serial: 019AF1D2348A797A318A51E6DF643A105A98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kq8k6REaiJ202uCH5ICeEIbjP4I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft Manifest number: 16BD Signing time: Sat 06 Dec 2025 04:01:16 +0000 Manifest this update: Sat 06 Dec 2025 04:01:16 +0000 Manifest next update: Sun 07 Dec 2025 04:01:16 +0000 Files and hashes: 1: 5sMxgmIczAQ4fn8JJ0_j3DrMjS0.roa (hash: VTfvZnzv8Q2Rd2Q6njhUyXmObqB+4ygm6Iue4TDP3ic=) 2: Kq8k6REaiJ202uCH5ICeEIbjP4I.crl (hash: 9OykFEfEsMxv22yHKHy3fvJeGH93QXN3Yp2VXZrZ3yg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.crl rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft rsync://rpki.ripe.net/repository/DEFAULT/Kq8k6REaiJ202uCH5ICeEIbjP4I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:34:8a:79:7a:31:8a:51:e6:df:64:3a:10:5a:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aaf24e9111a889db4dae087e4809e1086e33f82 Validity Not Before: Dec 6 04:01:16 2025 GMT Not After : Dec 7 04:01:16 2025 GMT Subject: CN=1207c208a923c0b07d3f2c1622bebc1ebf0c6b08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7b:87:4e:50:b4:0f:42:c3:4f:ef:64:04:25: 53:d8:dc:ce:2e:dd:07:e5:b0:80:27:37:72:12:e6: 9a:e9:e3:8a:49:78:81:6f:bd:9c:3b:49:ec:6c:76: 0e:9c:95:56:f5:6a:e3:8f:94:98:6d:f3:70:b2:e2: f6:c7:69:43:11:24:50:dc:66:b2:36:15:b3:c8:0b: 2f:d5:ed:9d:7e:45:c0:bd:ab:80:c6:dd:f2:78:3d: de:58:2f:fa:95:84:d2:25:49:41:71:d6:8b:7f:58: fe:ef:f4:6d:c4:58:ae:31:3f:86:92:b1:c5:3b:08: 36:91:e7:7d:d7:1d:76:c7:25:22:fe:d2:ba:fc:31: 01:cd:56:0a:85:73:bb:81:fe:58:69:85:90:ca:a9: ce:fd:09:b5:83:d4:80:f6:14:3d:64:4f:65:5d:f6: 21:9f:7c:a1:ce:d9:7d:f8:b3:4a:ba:73:0f:54:91: 17:1a:6d:ec:de:7d:0f:c5:84:be:9e:50:e9:26:4b: 60:9f:59:08:bb:2a:93:8e:51:9b:de:a2:72:46:20: d0:f5:27:ec:c1:f6:23:ea:bd:52:c2:0a:0b:65:84: 38:97:75:ce:b1:cf:37:b0:30:cb:30:6a:40:38:98: f9:79:dd:70:cb:15:23:83:bb:c1:24:97:4f:5c:52: 44:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:07:C2:08:A9:23:C0:B0:7D:3F:2C:16:22:BE:BC:1E:BF:0C:6B:08 X509v3 Authority Key Identifier: keyid:2A:AF:24:E9:11:1A:88:9D:B4:DA:E0:87:E4:80:9E:10:86:E3:3F:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kq8k6REaiJ202uCH5ICeEIbjP4I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:bd:60:34:0c:f3:56:c3:b6:92:66:d0:4a:f0:8e:25:55:e6: a0:0a:e1:80:d7:6e:f5:0a:c9:1d:e7:4c:5a:74:b0:d9:70:07: 95:51:6d:d6:17:67:eb:7f:b4:e3:51:eb:55:ab:52:12:76:8c: d9:62:4b:7d:ed:e1:fc:a8:09:da:15:b8:e1:ac:50:2c:25:a5: 42:38:34:89:2c:38:39:04:1e:04:78:a1:76:46:65:11:9c:6d: 9b:84:33:4f:37:6d:e2:d9:b4:68:47:1f:61:79:85:6c:b1:e6: 0b:fc:17:95:39:e5:a5:a6:c6:ec:5b:53:6a:ec:b5:78:a3:9e: 05:e2:2c:16:b6:02:d8:66:b1:4c:4c:d3:4e:11:6c:21:0a:aa: 30:87:1b:f9:80:f2:96:a5:eb:80:92:b2:14:08:ff:bd:60:61: de:aa:8e:d3:c4:fa:14:60:02:06:03:eb:24:ac:8c:cd:9d:ae: b0:c2:8b:fa:2c:80:72:36:50:87:36:f7:c8:46:9a:4b:23:d3: 82:fb:c8:ed:f5:7e:d8:05:80:d0:27:7a:f1:ca:27:d4:f5:22: 08:a4:f3:94:21:10:44:70:9f:6d:b3:68:90:a1:41:fa:bb:16: 96:16:74:15:2b:bf:9c:cd:21:31:b9:65:c6:3b:1b:e4:33:d3: 13:9d:02:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0jSKeXoxilHm32Q6EFqYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYWYyNGU5MTExYTg4OWRiNGRhZTA4N2U0ODA5ZTEwODZl MzNmODIwHhcNMjUxMjA2MDQwMTE2WhcNMjUxMjA3MDQwMTE2WjAzMTEwLwYDVQQD EygxMjA3YzIwOGE5MjNjMGIwN2QzZjJjMTYyMmJlYmMxZWJmMGM2YjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnuHTlC0D0LDT+9kBCVT2NzOLt0H 5bCAJzdyEuaa6eOKSXiBb72cO0nsbHYOnJVW9Wrjj5SYbfNwsuL2x2lDESRQ3Gay NhWzyAsv1e2dfkXAvauAxt3yeD3eWC/6lYTSJUlBcdaLf1j+7/RtxFiuMT+GkrHF Owg2ked91x12xyUi/tK6/DEBzVYKhXO7gf5YaYWQyqnO/Qm1g9SA9hQ9ZE9lXfYh n3yhztl9+LNKunMPVJEXGm3s3n0PxYS+nlDpJktgn1kIuyqTjlGb3qJyRiDQ9Sfs wfYj6r1SwgoLZYQ4l3XOsc83sDDLMGpAOJj5ed1wyxUjg7vBJJdPXFJEMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBIHwgipI8CwfT8sFiK+vB6/DGsIMB8GA1UdIwQY MBaAFCqvJOkRGoidtNrgh+SAnhCG4z+CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3E4azZSRWFpSjIwMnVDSDVJQ2VFSWJqUDRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9jODA4OTYtYzM2ZS00NjI3LTgzNTMt MzQxYzNmYTQ1YjQzLzEvS3E4azZSRWFpSjIwMnVDSDVJQ2VFSWJqUDRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9jODA4OTYtYzM2ZS00NjI3LTgzNTMtMzQxYzNmYTQ1YjQz LzEvS3E4azZSRWFpSjIwMnVDSDVJQ2VFSWJqUDRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS71gNAzz VsO2kmbQSvCOJVXmoArhgNdu9QrJHedMWnSw2XAHlVFt1hdn63+041HrVatSEnaM 2WJLfe3h/KgJ2hW44axQLCWlQjg0iSw4OQQeBHihdkZlEZxtm4QzTzdt4tm0aEcf YXmFbLHmC/wXlTnlpabG7FtTauy1eKOeBeIsFrYC2GaxTEzTThFsIQqqMIcb+YDy lqXrgJKyFAj/vWBh3qqO08T6FGACBgPrJKyMzZ2usMKL+iyAcjZQhzb3yEaaSyPT gvvI7fV+2AWA0Cd68con1PUiCKTzlCEQRHCfbbNokKFB+rsWlhZ0FSu/nM0hMbll xjsb5DPTE50CIA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:23 2025 by rpki-client