This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft File: KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft (raw, json) Hash identifier: OdFJ//3jaXU4Nt9rtxfOeBB//q9QB7DSjJUc6MPnPM4= Subject key identifier: 45:E2:A4:14:6B:C1:52:F3:1F:8C:59:6F:19:3F:89:2B:4B:7E:BC:84 Authority key identifier: 29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8 Certificate issuer: /CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8 Certificate serial: 019B2D0C85DF5A60B715B4FB5FAECDD176BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft Manifest number: 1785 Signing time: Wed 17 Dec 2025 16:02:33 +0000 Manifest this update: Wed 17 Dec 2025 16:02:33 +0000 Manifest next update: Thu 18 Dec 2025 16:02:33 +0000 Files and hashes: 1: 8TWqg3TfqZs_5FrvevicA08_Me0.roa (hash: 4Z8rTsO/+irkApy694NCfCAKUJGTnN/zDl7bvRScmHU=) 2: E0LmXjQbMH-5PikYPEcuzzsWqGg.roa (hash: ptzM6Lx0G4exHD8wnG0yaiK9TLZgE439UHeYQgYNx5s=) 3: GKCHcnuOeAwv2OrVrhhlx1glPKg.roa (hash: lsZazQ3pOXhSWOPU2R2jWTWFqUlOxcs/A3f1wvZkH2U=) 4: KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl (hash: e7qTkV+NX/GxHC3RtOdubjHJOzYf4jbXD7KsrtszSw8=) 5: wTbdYlsUFkp3d9dHZust_Lw_6AQ.roa (hash: OT9PLyVKPfe5qaWoveQ3/agGSLh/5l0V3Q2WNMZnLKQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0c:85:df:5a:60:b7:15:b4:fb:5f:ae:cd:d1:76:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8 Validity Not Before: Dec 17 16:02:33 2025 GMT Not After : Dec 18 16:02:33 2025 GMT Subject: CN=45e2a4146bc152f31f8c596f193f892b4b7ebc84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e5:31:e7:6d:b9:98:19:a8:db:f6:a0:ee:07: 83:4d:02:10:41:c1:84:31:37:6a:64:da:c8:4f:ea: ef:17:b6:7a:b5:9d:7a:3c:13:5c:cd:66:be:9d:58: be:45:96:58:61:2b:3b:d1:b1:d1:fc:3f:2c:18:9b: 0b:68:ea:23:d4:39:b8:ff:9d:89:d5:d2:55:90:84: 20:20:18:5e:a4:f2:ba:74:6d:69:82:65:74:1a:95: 9b:9a:8a:ae:08:6f:25:72:26:4d:58:c5:7b:3f:a4: ca:54:fa:5b:f4:09:a0:c2:fd:80:9c:54:24:23:38: fa:b5:f3:70:41:95:aa:cb:c2:11:cc:e1:c9:f5:cd: 57:9a:28:5d:45:47:a2:de:3f:a8:0a:1c:04:c5:e9: b6:76:49:24:de:68:22:a3:5d:a6:76:86:1e:c9:7f: aa:61:92:08:b4:b9:6f:be:c5:8c:0c:3a:cc:a7:0b: d1:c1:50:33:89:54:6d:dd:88:9d:a0:be:2f:4e:f4: b8:ff:cd:77:b9:9f:4f:81:c8:1d:41:04:3c:1d:a4: ed:58:66:7f:11:ca:2c:c8:3e:9f:a0:46:69:e6:c9: 44:81:71:b7:85:06:39:6a:bf:9a:4a:ab:88:ed:d2: c5:44:c1:ea:e3:f4:79:fb:26:0e:5b:db:cd:dc:dc: 69:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E2:A4:14:6B:C1:52:F3:1F:8C:59:6F:19:3F:89:2B:4B:7E:BC:84 X509v3 Authority Key Identifier: keyid:29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:17:a3:85:63:c7:86:03:b4:d2:6d:7f:a9:7a:d2:13:56:75: fe:89:a0:c7:24:2c:76:eb:1e:f7:df:d3:49:53:16:8d:8d:1a: f2:57:04:4c:f6:a6:bb:38:5b:55:f6:62:85:1b:0b:af:9f:17: 24:02:95:17:68:02:7e:65:d2:4c:66:57:48:21:6d:11:b9:d3: 11:ef:05:c9:9d:a4:6e:07:d8:bb:08:af:99:57:32:88:1a:0d: e5:57:23:6c:a7:8a:f6:15:c0:af:99:2f:b8:a1:9e:fd:3c:31: 7d:70:b6:fa:62:ad:b3:6f:98:8f:d4:24:7f:ac:a4:1f:32:e4: 39:22:27:c7:66:c3:f4:f8:df:be:db:69:65:a0:e2:49:3c:49: 82:19:35:7f:d7:44:3b:c8:9b:2d:bc:9e:24:68:fb:79:8d:c3: dc:82:f9:c4:a9:7a:4f:4d:9c:3f:98:90:b5:6e:9f:3b:d9:82: c2:96:b3:5b:66:35:c2:95:1a:f0:c7:4a:29:37:ec:70:9d:9f: 8f:dd:a1:6e:f5:82:cb:99:14:c4:52:67:a3:9f:c7:4f:30:4e: d3:01:97:91:d8:75:cc:2c:07:b7:ff:66:46:da:9e:03:a5:03: cf:9e:2e:18:1c:a7:b8:58:b5:c3:62:19:36:d9:cd:53:8f:6d: 4c:70:61:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstDIXfWmC3FbT7X67N0Xa6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MDZmMDI2YjFmZTYzNmM5YTVkYTAxMWRjN2ZkNjljNTgx ZDAyYjgwHhcNMjUxMjE3MTYwMjMzWhcNMjUxMjE4MTYwMjMzWjAzMTEwLwYDVQQD Eyg0NWUyYTQxNDZiYzE1MmYzMWY4YzU5NmYxOTNmODkyYjRiN2ViYzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOUx5225mBmo2/ag7geDTQIQQcGE MTdqZNrIT+rvF7Z6tZ16PBNczWa+nVi+RZZYYSs70bHR/D8sGJsLaOoj1Dm4/52J 1dJVkIQgIBhepPK6dG1pgmV0GpWbmoquCG8lciZNWMV7P6TKVPpb9Amgwv2AnFQk Izj6tfNwQZWqy8IRzOHJ9c1XmihdRUei3j+oChwExem2dkkk3mgio12mdoYeyX+q YZIItLlvvsWMDDrMpwvRwVAziVRt3YidoL4vTvS4/813uZ9PgcgdQQQ8HaTtWGZ/ EcosyD6foEZp5slEgXG3hQY5ar+aSquI7dLFRMHq4/R5+yYOW9vN3NxpuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEXipBRrwVLzH4xZbxk/iStLfryEMB8GA1UdIwQY MBaAFCkG8Cax/mNsml2gEdx/1pxYHQK4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1Fid0pySC1ZMnlhWGFBUjNIX1duRmdkQXJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy82N2EzMmQtN2JmOC00YjA0LWFhMDUt ODBhOTFiZTgzZTRiLzEvS1Fid0pySC1ZMnlhWGFBUjNIX1duRmdkQXJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy82N2EzMmQtN2JmOC00YjA0LWFhMDUtODBhOTFiZTgzZTRi LzEvS1Fid0pySC1ZMnlhWGFBUjNIX1duRmdkQXJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfxejhWPH hgO00m1/qXrSE1Z1/omgxyQsduse99/TSVMWjY0a8lcETPamuzhbVfZihRsLr58X JAKVF2gCfmXSTGZXSCFtEbnTEe8FyZ2kbgfYuwivmVcyiBoN5VcjbKeK9hXAr5kv uKGe/TwxfXC2+mKts2+Yj9Qkf6ykHzLkOSInx2bD9PjfvttpZaDiSTxJghk1f9dE O8ibLbyeJGj7eY3D3IL5xKl6T02cP5iQtW6fO9mCwpazW2Y1wpUa8MdKKTfscJ2f j92hbvWCy5kUxFJno5/HTzBO0wGXkdh1zCwHt/9mRtqeA6UDz54uGBynuFi1w2IZ NtnNU49tTHBh4w== -----END CERTIFICATE-----Generated at Wed Dec 17 18:12:15 2025 by rpki-client