This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft File: KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft (raw, json) Hash identifier: nkAfi0Zqn+fC5S6nWlDn7sRZJYgfTkQiM2lkB70vo50= Subject key identifier: D6:CE:6A:3D:96:B0:B4:58:D3:5F:3F:35:F2:92:05:29:8E:A3:9F:35 Authority key identifier: 28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5 Certificate issuer: /CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5 Certificate serial: 019B2F9E6E1ACD77C8BC629E25BC5EE79BDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 04:01:10 +0000 Manifest this update: Thu 18 Dec 2025 04:01:10 +0000 Manifest next update: Fri 19 Dec 2025 04:01:10 +0000 Files and hashes: 1: 5HJN2TYq8z8eJjL58_c0u5IQ5Q8.roa (hash: yhJDGnf72pl9WyOFKwP7I927446gAZjcSsCI8qXComM=) 2: KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl (hash: XO9uTMdL6rJYNMcpRrNiIYlMnjjFR9EkthsXK3jX9eo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:6e:1a:cd:77:c8:bc:62:9e:25:bc:5e:e7:9b:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5 Validity Not Before: Dec 18 04:01:10 2025 GMT Not After : Dec 19 04:01:10 2025 GMT Subject: CN=d6ce6a3d96b0b458d35f3f35f29205298ea39f35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fe:b4:59:ba:c9:d1:d3:3f:7c:f9:ea:5e:89: c2:87:f4:20:bb:a5:4d:12:23:1b:91:e9:14:ba:15: c3:86:be:1c:8a:0b:5f:40:9e:31:fc:e7:c8:5e:9c: a3:02:10:9e:a5:e2:71:d1:76:36:ad:6b:7b:be:85: 2e:b8:1e:a6:58:22:65:66:c9:3e:fe:b8:db:c9:69: a6:07:78:1a:00:c8:c6:e3:f5:99:3f:9b:c4:7b:47: 09:80:a2:4a:90:7c:e8:58:3d:80:e2:0d:72:5f:1d: 08:09:d7:47:2e:de:db:a6:29:a0:79:99:81:60:b4: 3f:a2:e6:06:04:86:71:1c:55:6c:13:5d:eb:8a:a4: 53:bb:9d:b8:62:48:00:7a:40:ef:7b:d1:2c:51:a8: 89:cc:52:47:ab:dc:39:36:1f:9a:79:84:4a:60:f6: de:94:74:a0:9c:ee:1a:ee:83:cd:86:f0:c4:ed:e0: ec:7e:68:c3:3f:8f:8d:f1:cd:db:7a:0b:91:fe:bc: d3:f1:8e:a8:29:3a:f7:99:a6:f9:97:ac:20:19:99: f2:03:04:b8:9a:cd:42:53:82:94:6c:e0:99:59:dc: 10:9e:b6:83:94:5f:fb:cc:7d:fa:94:42:f0:ad:27: d9:cb:5d:e6:8d:14:5b:f6:88:61:e2:ae:5f:9e:3f: be:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:CE:6A:3D:96:B0:B4:58:D3:5F:3F:35:F2:92:05:29:8E:A3:9F:35 X509v3 Authority Key Identifier: keyid:28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:8e:a9:e9:a7:09:37:fe:20:ff:23:f7:da:cd:d8:2e:3e:63: 60:dd:73:99:67:8d:56:ef:65:78:98:da:01:2c:84:b8:72:75: 87:89:8d:74:cc:c1:5f:38:fc:4c:2e:86:a5:76:62:20:0d:02: c3:d0:b7:65:f9:e4:15:11:b1:c8:37:02:30:14:5e:50:80:20: 53:a6:a1:b6:93:99:75:6e:b5:8f:97:c0:6a:32:c7:26:ac:15: 65:7b:3d:08:9f:41:7a:15:59:d9:7d:da:0a:c8:b4:fa:16:9a: 09:44:1e:ff:b1:84:f2:0c:bb:ab:ac:22:cc:60:59:e0:0f:6b: e9:9f:06:93:32:9a:d0:e7:07:81:39:51:fe:c6:86:4c:db:1e: 49:3d:c6:0a:04:c5:49:91:7e:ca:a4:9c:31:d1:55:3b:6c:3a: 44:d7:b8:1b:2a:5e:1a:42:8a:e0:61:dc:99:1d:2e:4d:65:fb: a2:64:cf:a1:8e:9a:d5:de:dd:5f:be:76:05:09:83:9e:a5:2f: 84:7c:0c:12:16:e0:a3:94:1f:ce:6f:b2:40:63:1b:26:25:17: 5f:3d:c4:91:09:18:20:31:6d:cb:d1:a6:1f:f8:e6:52:70:64: f5:06:6b:b7:4f:c0:b6:9d:a7:a5:23:e0:e1:b9:73:65:6e:e0: 79:fe:96:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnm4azXfIvGKeJbxe55vcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MjQzNGE5YTAzOGIwZmU3M2NhZjc3NmJjY2Q1NDJmZDNl MmY2YTUwHhcNMjUxMjE4MDQwMTEwWhcNMjUxMjE5MDQwMTEwWjAzMTEwLwYDVQQD EyhkNmNlNmEzZDk2YjBiNDU4ZDM1ZjNmMzVmMjkyMDUyOThlYTM5ZjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqP60WbrJ0dM/fPnqXonCh/Qgu6VN EiMbkekUuhXDhr4cigtfQJ4x/OfIXpyjAhCepeJx0XY2rWt7voUuuB6mWCJlZsk+ /rjbyWmmB3gaAMjG4/WZP5vEe0cJgKJKkHzoWD2A4g1yXx0ICddHLt7bpimgeZmB YLQ/ouYGBIZxHFVsE13riqRTu524YkgAekDve9EsUaiJzFJHq9w5Nh+aeYRKYPbe lHSgnO4a7oPNhvDE7eDsfmjDP4+N8c3beguR/rzT8Y6oKTr3mab5l6wgGZnyAwS4 ms1CU4KUbOCZWdwQnraDlF/7zH36lELwrSfZy13mjRRb9ohh4q5fnj++PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbOaj2WsLRY018/NfKSBSmOo581MB8GA1UdIwQY MBaAFCgkNKmgOLD+c8r3drzNVC/T4valMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0NRMHFhQTRzUDV6eXZkMnZNMVVMOVBpOXFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9lN2ZiZTgtZDk4ZS00NWQyLWIxOWMt MTE2MjdkNzQ2OWFiLzEvS0NRMHFhQTRzUDV6eXZkMnZNMVVMOVBpOXFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9lN2ZiZTgtZDk4ZS00NWQyLWIxOWMtMTE2MjdkNzQ2OWFi LzEvS0NRMHFhQTRzUDV6eXZkMnZNMVVMOVBpOXFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbo6p6acJ N/4g/yP32s3YLj5jYN1zmWeNVu9leJjaASyEuHJ1h4mNdMzBXzj8TC6GpXZiIA0C w9C3ZfnkFRGxyDcCMBReUIAgU6ahtpOZdW61j5fAajLHJqwVZXs9CJ9BehVZ2X3a Csi0+haaCUQe/7GE8gy7q6wizGBZ4A9r6Z8GkzKa0OcHgTlR/saGTNseST3GCgTF SZF+yqScMdFVO2w6RNe4GypeGkKK4GHcmR0uTWX7omTPoY6a1d7dX752BQmDnqUv hHwMEhbgo5Qfzm+yQGMbJiUXXz3EkQkYIDFty9GmH/jmUnBk9QZrt0/Atp2npSPg 4blzZW7gef6W0A== -----END CERTIFICATE-----Generated at Thu Dec 18 07:10:11 2025 by rpki-client