This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft File: KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft (raw, json) Hash identifier: c5533InU9+4vlbGGJPavmp7wuc912W1jbOgT4N/UQq0= Subject key identifier: E7:78:04:68:02:25:A4:08:89:3A:3F:3F:75:F2:09:76:6A:37:D3:39 Authority key identifier: 28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5 Certificate issuer: /CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5 Certificate serial: 019AF1D1F3C6248A530F9CAD3B0CC7D1227A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 04:00:59 +0000 Manifest this update: Sat 06 Dec 2025 04:00:59 +0000 Manifest next update: Sun 07 Dec 2025 04:00:59 +0000 Files and hashes: 1: 5HJN2TYq8z8eJjL58_c0u5IQ5Q8.roa (hash: yhJDGnf72pl9WyOFKwP7I927446gAZjcSsCI8qXComM=) 2: KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl (hash: 8sw0veJnRSg7f1rR3hxlERRurCVKze23j2u+tFLik40=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:f3:c6:24:8a:53:0f:9c:ad:3b:0c:c7:d1:22:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5 Validity Not Before: Dec 6 04:00:59 2025 GMT Not After : Dec 7 04:00:59 2025 GMT Subject: CN=e77804680225a408893a3f3f75f209766a37d339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d2:fc:54:7f:11:a0:e2:67:10:f0:ae:38:fd: cb:9c:fa:44:0a:a7:4a:62:87:f4:cd:cc:e0:73:03: e8:7d:99:00:0b:24:40:fe:5d:e5:17:a2:98:e1:67: 95:60:a9:27:5b:53:3f:52:5b:27:4b:89:99:5e:22: 73:33:42:6d:48:4f:4a:1d:f4:41:41:98:7e:ea:37: f4:62:32:f9:36:4b:02:42:c3:89:74:11:c9:6f:cc: a9:71:da:7f:d5:3d:53:4b:52:e8:36:38:58:7d:f6: d3:1c:5b:61:91:7a:10:c5:1a:85:83:ba:78:22:f7: 82:22:4b:08:3b:17:4f:72:a7:c5:72:42:3f:44:74: 7d:07:34:df:19:8d:ce:7d:f4:af:0d:10:1d:b0:d2: f9:99:51:50:25:5a:88:45:df:b2:99:25:d9:12:a4: ef:70:ed:56:3e:f9:11:64:d0:f5:98:07:7e:44:20: f5:70:4b:ef:e4:70:2d:c9:b0:cb:ee:fc:0d:95:bc: a0:c2:0f:a5:f2:07:23:2d:4f:f0:43:42:ee:88:29: bc:2c:d6:73:fe:6c:a0:2f:0b:03:4b:3d:09:ae:42: 6a:3a:c2:88:2f:d9:fb:73:d5:00:fe:cf:cf:b7:09: 03:6c:be:e8:6a:42:d7:f4:9d:cc:96:86:5d:6a:ee: bf:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:78:04:68:02:25:A4:08:89:3A:3F:3F:75:F2:09:76:6A:37:D3:39 X509v3 Authority Key Identifier: keyid:28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:d3:8b:c5:0d:e9:48:60:5a:81:bb:d7:63:27:98:34:1a:2b: d6:85:43:55:14:c8:7a:64:c2:86:38:ef:85:75:74:96:db:a2: cf:30:1e:54:c8:e7:b9:ce:32:9f:b4:02:02:de:a8:90:1e:3f: 9b:c7:8d:d2:1d:68:07:3b:c1:3a:b1:86:49:88:c8:42:dd:a4: 24:9f:f3:be:77:e5:fe:d7:20:3d:09:54:df:6e:5e:0b:72:39: a4:ff:16:b1:6e:e0:43:4c:ac:05:ca:88:7a:ae:f0:43:6d:12: 6a:b1:2f:5b:85:49:99:23:f7:fc:c9:62:c3:d1:1d:18:8a:65: ec:89:67:09:38:11:c3:aa:aa:b7:a7:46:48:68:07:9f:d6:06: a3:d8:d3:e7:90:99:88:87:6f:f4:6d:8b:a1:c2:c1:1a:3f:70: a2:05:41:1f:da:09:1a:a5:4f:0b:0e:3c:f7:35:4b:00:31:61: ac:e1:82:94:dc:81:10:6b:3e:9e:3c:4f:91:46:15:c3:26:5d: 14:d4:e3:ca:2a:08:d5:a9:00:c5:a6:b0:a7:cc:16:45:43:16: 9e:a1:42:e8:f6:89:b8:74:ed:c2:92:6f:05:eb:50:9d:2e:ff: 4b:99:14:2a:4e:cd:04:df:16:ea:65:58:88:e9:b8:9a:ee:fe: 1a:cc:3b:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fPGJIpTD5ytOwzH0SJ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MjQzNGE5YTAzOGIwZmU3M2NhZjc3NmJjY2Q1NDJmZDNl MmY2YTUwHhcNMjUxMjA2MDQwMDU5WhcNMjUxMjA3MDQwMDU5WjAzMTEwLwYDVQQD EyhlNzc4MDQ2ODAyMjVhNDA4ODkzYTNmM2Y3NWYyMDk3NjZhMzdkMzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9L8VH8RoOJnEPCuOP3LnPpECqdK Yof0zczgcwPofZkACyRA/l3lF6KY4WeVYKknW1M/UlsnS4mZXiJzM0JtSE9KHfRB QZh+6jf0YjL5NksCQsOJdBHJb8ypcdp/1T1TS1LoNjhYffbTHFthkXoQxRqFg7p4 IveCIksIOxdPcqfFckI/RHR9BzTfGY3OffSvDRAdsNL5mVFQJVqIRd+ymSXZEqTv cO1WPvkRZND1mAd+RCD1cEvv5HAtybDL7vwNlbygwg+l8gcjLU/wQ0LuiCm8LNZz /mygLwsDSz0JrkJqOsKIL9n7c9UA/s/PtwkDbL7oakLX9J3MloZdau6/JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOd4BGgCJaQIiTo/P3XyCXZqN9M5MB8GA1UdIwQY MBaAFCgkNKmgOLD+c8r3drzNVC/T4valMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0NRMHFhQTRzUDV6eXZkMnZNMVVMOVBpOXFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9lN2ZiZTgtZDk4ZS00NWQyLWIxOWMt MTE2MjdkNzQ2OWFiLzEvS0NRMHFhQTRzUDV6eXZkMnZNMVVMOVBpOXFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9lN2ZiZTgtZDk4ZS00NWQyLWIxOWMtMTE2MjdkNzQ2OWFi LzEvS0NRMHFhQTRzUDV6eXZkMnZNMVVMOVBpOXFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIdOLxQ3p SGBagbvXYyeYNBor1oVDVRTIemTChjjvhXV0ltuizzAeVMjnuc4yn7QCAt6okB4/ m8eN0h1oBzvBOrGGSYjIQt2kJJ/zvnfl/tcgPQlU325eC3I5pP8WsW7gQ0ysBcqI eq7wQ20SarEvW4VJmSP3/Mliw9EdGIpl7IlnCTgRw6qqt6dGSGgHn9YGo9jT55CZ iIdv9G2LocLBGj9wogVBH9oJGqVPCw489zVLADFhrOGClNyBEGs+njxPkUYVwyZd FNTjyioI1akAxaawp8wWRUMWnqFC6PaJuHTtwpJvBetQnS7/S5kUKk7NBN8W6mVY iOm4mu7+Gsw7LQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:42 2025 by rpki-client