This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft File: KqFL_4NIDRDND767gLLLUJH8-C8.mft (raw, json) Hash identifier: dK04PI0w6Pqkln8RlIdcKjgKUzUaQ73fSnb11h3FJT4= Subject key identifier: 31:FB:E2:14:A8:62:0A:4B:85:64:3B:2B:36:05:C8:9E:10:FE:63:2B Authority key identifier: 2A:A1:4B:FF:83:48:0D:10:CD:0F:BE:BB:80:B2:CB:50:91:FC:F8:2F Certificate issuer: /CN=2aa14bff83480d10cd0fbebb80b2cb5091fcf82f Certificate serial: 019AF653ED4E439A91B8ABBB6B2B5AC2364B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqFL_4NIDRDND767gLLLUJH8-C8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft Manifest number: 1762 Signing time: Sun 07 Dec 2025 01:01:26 +0000 Manifest this update: Sun 07 Dec 2025 01:01:26 +0000 Manifest next update: Mon 08 Dec 2025 01:01:26 +0000 Files and hashes: 1: 0zY-sGp0Ft0AM9Sf-NYlNdybUWg.roa (hash: eX1zp0GC5bqV6hOy4nxEisONQ8sH8x4mX06jY0ZL3fw=) 2: KqFL_4NIDRDND767gLLLUJH8-C8.crl (hash: O8vymmihfTilvj83ZuxMJijRaumM8UaBKQ6T+U8n1LM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.crl rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft rsync://rpki.ripe.net/repository/DEFAULT/KqFL_4NIDRDND767gLLLUJH8-C8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:ed:4e:43:9a:91:b8:ab:bb:6b:2b:5a:c2:36:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa14bff83480d10cd0fbebb80b2cb5091fcf82f Validity Not Before: Dec 7 01:01:26 2025 GMT Not After : Dec 8 01:01:26 2025 GMT Subject: CN=31fbe214a8620a4b85643b2b3605c89e10fe632b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:aa:23:d6:68:db:0b:10:c4:8b:22:f3:1f:65: 67:f7:f9:2a:55:a6:6b:8c:03:d9:96:85:30:be:a4: 25:c3:13:d3:d9:7f:f7:32:a9:07:d5:97:22:8f:db: 4d:52:53:2e:55:f4:f3:bc:cb:41:07:90:c8:7a:6d: 5c:5b:78:4e:a2:37:d5:3b:e0:84:4a:12:53:d2:ed: 48:d4:3b:dc:c3:9c:6a:8c:39:d8:88:0b:6d:a0:24: da:88:fa:ee:75:0b:60:bf:c5:e7:78:24:84:c5:70: b6:1e:33:73:49:93:18:62:3c:f0:2b:55:bd:18:41: 0e:0a:43:30:01:55:3e:06:40:33:cf:eb:b4:2a:ad: 30:b3:1c:19:e5:fb:09:e1:56:bf:6c:71:aa:36:94: 92:02:f6:83:08:f3:1f:b5:07:ae:6b:79:66:ac:7b: 5c:4e:79:29:74:db:e3:f6:7e:fd:40:85:c7:b2:d2: 26:87:cf:08:28:f9:26:fd:3e:bc:f6:b3:8f:41:af: 02:0b:8a:59:f7:20:72:00:71:e2:65:8e:02:7c:6c: 12:15:72:fa:cd:b3:a1:28:a5:2d:aa:b4:9b:71:2b: da:81:c7:69:49:42:fe:3b:2a:66:ec:f1:95:c4:80: 1b:b3:b2:c2:1f:76:82:d3:67:97:a4:90:a1:a9:08: 4d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:FB:E2:14:A8:62:0A:4B:85:64:3B:2B:36:05:C8:9E:10:FE:63:2B X509v3 Authority Key Identifier: keyid:2A:A1:4B:FF:83:48:0D:10:CD:0F:BE:BB:80:B2:CB:50:91:FC:F8:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqFL_4NIDRDND767gLLLUJH8-C8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:2d:63:7c:96:ac:fd:5d:cf:c2:e3:98:f7:4d:11:c7:c2:92: 6e:f9:be:3b:c9:0e:50:ed:1c:8d:e4:30:68:b9:74:da:aa:5f: 83:1e:f6:c0:7c:df:ea:fb:da:5d:58:9b:d8:83:fa:5f:7b:8d: 82:f4:46:c8:67:86:21:ec:5a:82:ee:19:f5:b8:44:53:9b:34: 74:1e:94:7b:58:d6:5a:d1:c3:1a:6d:62:74:f3:d9:75:78:83: f3:90:e1:46:52:8c:3a:40:72:bc:5f:2b:8d:47:51:24:42:41: 8e:01:ea:cb:13:8b:2f:24:65:a3:49:55:67:68:65:c1:76:15: b7:eb:2b:3f:70:aa:7c:01:0f:db:b3:42:f7:65:dd:f1:c9:19: f7:86:22:df:8c:6d:7d:a1:6b:c6:39:22:81:2a:8f:15:37:ee: 0d:ed:36:13:a0:b9:6e:41:06:95:6a:78:01:08:1f:06:49:73: e0:64:34:ad:f8:fa:b9:db:cb:cd:39:c8:fe:a9:f0:01:35:2f: 52:2f:46:3c:8f:0d:d1:79:f0:09:a1:fe:80:00:f4:34:65:19: 88:b9:85:f1:73:b7:d3:e3:75:7f:a5:95:3b:89:55:79:62:f7: c0:db:d6:70:fc:06:4a:e1:a6:9b:3c:65:00:e1:58:b5:a3:2e: b1:d6:15:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U+1OQ5qRuKu7aytawjZLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYTE0YmZmODM0ODBkMTBjZDBmYmViYjgwYjJjYjUwOTFm Y2Y4MmYwHhcNMjUxMjA3MDEwMTI2WhcNMjUxMjA4MDEwMTI2WjAzMTEwLwYDVQQD EygzMWZiZTIxNGE4NjIwYTRiODU2NDNiMmIzNjA1Yzg5ZTEwZmU2MzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqoj1mjbCxDEiyLzH2Vn9/kqVaZr jAPZloUwvqQlwxPT2X/3MqkH1Zcij9tNUlMuVfTzvMtBB5DIem1cW3hOojfVO+CE ShJT0u1I1Dvcw5xqjDnYiAttoCTaiPrudQtgv8XneCSExXC2HjNzSZMYYjzwK1W9 GEEOCkMwAVU+BkAzz+u0Kq0wsxwZ5fsJ4Va/bHGqNpSSAvaDCPMftQeua3lmrHtc TnkpdNvj9n79QIXHstImh88IKPkm/T689rOPQa8CC4pZ9yByAHHiZY4CfGwSFXL6 zbOhKKUtqrSbcSvagcdpSUL+Oypm7PGVxIAbs7LCH3aC02eXpJChqQhNLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDH74hSoYgpLhWQ7KzYFyJ4Q/mMrMB8GA1UdIwQY MBaAFCqhS/+DSA0QzQ++u4Cyy1CR/PgvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3FGTF80TklEUkRORDc2N2dMTExVSkg4LUM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9iMTk4MTEtZmEyMy00N2IwLWI1Nzct MTc2OThmODhjM2JkLzEvS3FGTF80TklEUkRORDc2N2dMTExVSkg4LUM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9iMTk4MTEtZmEyMy00N2IwLWI1NzctMTc2OThmODhjM2Jk LzEvS3FGTF80TklEUkRORDc2N2dMTExVSkg4LUM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAji1jfJas /V3PwuOY900Rx8KSbvm+O8kOUO0cjeQwaLl02qpfgx72wHzf6vvaXVib2IP6X3uN gvRGyGeGIexagu4Z9bhEU5s0dB6Ue1jWWtHDGm1idPPZdXiD85DhRlKMOkByvF8r jUdRJEJBjgHqyxOLLyRlo0lVZ2hlwXYVt+srP3CqfAEP27NC92Xd8ckZ94Yi34xt faFrxjkigSqPFTfuDe02E6C5bkEGlWp4AQgfBklz4GQ0rfj6udvLzTnI/qnwATUv Ui9GPI8N0XnwCaH+gAD0NGUZiLmF8XO30+N1f6WVO4lVeWL3wNvWcPwGSuGmmzxl AOFYtaMusdYVCg== -----END CERTIFICATE-----Generated at Sun Dec 7 05:09:19 2025 by rpki-client