This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft File: qKJRFAEUyP2K1ftFtxiaunvFBI8.mft (raw, json) Hash identifier: KcV7XsK+ZcMpoLj7uj+mG02Y7QgYNJSQgFimeGY1X94= Subject key identifier: 35:BD:FE:73:0A:50:5E:EB:C6:7A:C1:D1:AC:C9:34:CC:F8:3F:E8:93 Authority key identifier: A8:A2:51:14:01:14:C8:FD:8A:D5:FB:45:B7:18:9A:BA:7B:C5:04:8F Certificate issuer: /CN=a8a251140114c8fd8ad5fb45b7189aba7bc5048f Certificate serial: 019AF12E8C396980D7302FAF44E803B1D3D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft Manifest number: 13F3 Signing time: Sat 06 Dec 2025 01:02:30 +0000 Manifest this update: Sat 06 Dec 2025 01:02:30 +0000 Manifest next update: Sun 07 Dec 2025 01:02:30 +0000 Files and hashes: 1: AHkD8Aaan3pABbcPGhXEHYTBg8Y.roa (hash: hXef/ttEb+W4FSVe0XdSIGoItwURMRnjh0hA4tDFc64=) 2: qKJRFAEUyP2K1ftFtxiaunvFBI8.crl (hash: H/AS6sWzTXjHxmAJczZYVcPey9gCqJ7EU7Tecanouo4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:8c:39:69:80:d7:30:2f:af:44:e8:03:b1:d3:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8a251140114c8fd8ad5fb45b7189aba7bc5048f Validity Not Before: Dec 6 01:02:30 2025 GMT Not After : Dec 7 01:02:30 2025 GMT Subject: CN=35bdfe730a505eebc67ac1d1acc934ccf83fe893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9e:77:d8:6e:b4:30:38:79:9e:f7:35:54:eb: 6e:3d:c0:ac:60:8e:54:45:eb:3e:24:3d:2a:c4:d9: 6e:7a:63:79:d4:7c:da:50:15:31:f0:18:77:8c:19: c0:44:69:eb:47:91:2c:a7:e7:82:3b:b5:af:25:47: ef:2e:fb:d8:dd:be:59:ae:c5:df:a0:67:e9:97:0c: 33:89:6f:a8:94:ed:73:6c:02:56:a3:ef:4e:19:8a: e2:a9:57:03:55:75:97:e2:9a:4d:a2:07:f2:ca:05: 18:4f:33:8d:25:26:50:1b:bb:30:0f:31:29:9d:56: bf:9f:8e:09:2b:b1:99:05:df:a8:6c:bd:3d:e8:fa: 1e:85:dc:a5:4e:ff:41:30:db:70:1c:d9:ef:2f:1a: b4:4b:52:03:3e:b9:7f:df:31:a9:6e:51:5f:3a:85: 27:54:45:f2:f9:88:18:72:62:f6:5d:e3:16:cc:3a: e7:b8:49:37:b4:b4:0c:fc:cb:05:d7:50:35:40:ea: 98:91:a2:89:e0:6d:94:e3:15:cf:61:c1:34:1f:6b: c2:89:68:8b:36:3c:5c:d9:d9:f0:31:bb:f9:a7:fb: 1a:de:e5:5a:5d:e0:1b:f4:e6:1a:2e:52:71:7d:a9: 79:a1:5f:c4:57:01:18:0b:fb:5d:3a:d9:52:5b:3e: 57:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:BD:FE:73:0A:50:5E:EB:C6:7A:C1:D1:AC:C9:34:CC:F8:3F:E8:93 X509v3 Authority Key Identifier: keyid:A8:A2:51:14:01:14:C8:FD:8A:D5:FB:45:B7:18:9A:BA:7B:C5:04:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:6c:24:82:23:15:1b:36:77:c4:1f:a6:22:df:f5:80:7a:85: 9e:1f:69:8b:e8:7c:69:c7:4a:ac:d6:5b:99:f9:27:30:ba:c3: 02:14:40:6b:5c:29:1a:ca:3b:ab:37:ec:26:be:54:4a:ab:ae: 5a:c1:8b:25:95:43:1b:f4:21:94:d5:05:93:46:29:a7:7a:4d: a5:07:a6:04:ae:a3:0e:ef:2f:93:40:9a:06:da:81:60:35:dd: da:5f:4e:9b:7f:c1:b4:00:3a:eb:01:35:ee:7e:53:32:be:5a: 45:43:e9:f5:8b:3a:18:68:a5:b6:d8:b1:79:55:94:0b:f3:3e: 3d:df:7c:a3:64:18:32:05:7d:a9:c8:9c:2a:ed:21:be:98:59: ab:fe:f3:f5:e4:db:0b:5b:6e:d3:58:1f:d4:37:75:ef:de:e7: 39:90:5d:ad:a2:34:a6:17:1b:f2:ea:b5:31:ce:9f:9f:2d:20: 36:d2:63:c8:64:83:67:cd:2d:56:d0:1d:33:57:1a:55:e7:21: cd:e4:57:54:45:ec:af:91:42:8c:2c:fa:b1:d0:e5:f2:bb:93: ce:0e:95:4a:a1:43:dc:99:75:41:7b:85:45:6c:78:c5:fa:3f: ff:34:c5:e3:38:96:9d:0e:b0:25:bf:b9:70:ad:5d:b1:79:c5: d0:b6:00:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLow5aYDXMC+vROgDsdPUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4YTI1MTE0MDExNGM4ZmQ4YWQ1ZmI0NWI3MTg5YWJhN2Jj NTA0OGYwHhcNMjUxMjA2MDEwMjMwWhcNMjUxMjA3MDEwMjMwWjAzMTEwLwYDVQQD EygzNWJkZmU3MzBhNTA1ZWViYzY3YWMxZDFhY2M5MzRjY2Y4M2ZlODkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvp532G60MDh5nvc1VOtuPcCsYI5U Res+JD0qxNluemN51HzaUBUx8Bh3jBnARGnrR5Esp+eCO7WvJUfvLvvY3b5ZrsXf oGfplwwziW+olO1zbAJWo+9OGYriqVcDVXWX4ppNogfyygUYTzONJSZQG7swDzEp nVa/n44JK7GZBd+obL096PoehdylTv9BMNtwHNnvLxq0S1IDPrl/3zGpblFfOoUn VEXy+YgYcmL2XeMWzDrnuEk3tLQM/MsF11A1QOqYkaKJ4G2U4xXPYcE0H2vCiWiL Njxc2dnwMbv5p/sa3uVaXeAb9OYaLlJxfal5oV/EVwEYC/tdOtlSWz5XVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDW9/nMKUF7rxnrB0azJNMz4P+iTMB8GA1UdIwQY MBaAFKiiURQBFMj9itX7RbcYmrp7xQSPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUtKUkZBRVV5UDJLMWZ0RnR4aWF1bnZGQkk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lZTRhNTYtZDVjOS00NjUyLTljZjEt ZjA5NDYyYzEyZGE0LzEvcUtKUkZBRVV5UDJLMWZ0RnR4aWF1bnZGQkk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9lZTRhNTYtZDVjOS00NjUyLTljZjEtZjA5NDYyYzEyZGE0 LzEvcUtKUkZBRVV5UDJLMWZ0RnR4aWF1bnZGQkk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnWwkgiMV GzZ3xB+mIt/1gHqFnh9pi+h8acdKrNZbmfknMLrDAhRAa1wpGso7qzfsJr5USquu WsGLJZVDG/QhlNUFk0Ypp3pNpQemBK6jDu8vk0CaBtqBYDXd2l9Om3/BtAA66wE1 7n5TMr5aRUPp9Ys6GGilttixeVWUC/M+Pd98o2QYMgV9qcicKu0hvphZq/7z9eTb C1tu01gf1Dd1797nOZBdraI0phcb8uq1Mc6fny0gNtJjyGSDZ80tVtAdM1caVech zeRXVEXsr5FCjCz6sdDl8ruTzg6VSqFD3Jl1QXuFRWx4xfo//zTF4ziWnQ6wJb+5 cK1dsXnF0LYAlw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:56:29 2025 by rpki-client