This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft File: KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft (raw, json) Hash identifier: AqSTdns/GDHib3EfP2/m/CI6LRSLWvfrrs+iByJYcaQ= Subject key identifier: 6A:95:91:00:3A:1E:64:7E:E1:B1:BA:D5:8C:10:AD:4C:80:D7:08:85 Authority key identifier: 29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8 Certificate issuer: /CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8 Certificate serial: 019AF31D41FA12B04B470C43C915B9F8BB67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 10:02:52 +0000 Manifest this update: Sat 06 Dec 2025 10:02:52 +0000 Manifest next update: Sun 07 Dec 2025 10:02:52 +0000 Files and hashes: 1: 8TWqg3TfqZs_5FrvevicA08_Me0.roa (hash: 4Z8rTsO/+irkApy694NCfCAKUJGTnN/zDl7bvRScmHU=) 2: E0LmXjQbMH-5PikYPEcuzzsWqGg.roa (hash: ptzM6Lx0G4exHD8wnG0yaiK9TLZgE439UHeYQgYNx5s=) 3: GKCHcnuOeAwv2OrVrhhlx1glPKg.roa (hash: lsZazQ3pOXhSWOPU2R2jWTWFqUlOxcs/A3f1wvZkH2U=) 4: KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl (hash: NwNiDmeo5N11+p+CoChJ+AeHLFMDrVTGRDPMHArA13M=) 5: wTbdYlsUFkp3d9dHZust_Lw_6AQ.roa (hash: OT9PLyVKPfe5qaWoveQ3/agGSLh/5l0V3Q2WNMZnLKQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:41:fa:12:b0:4b:47:0c:43:c9:15:b9:f8:bb:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8 Validity Not Before: Dec 6 10:02:52 2025 GMT Not After : Dec 7 10:02:52 2025 GMT Subject: CN=6a9591003a1e647ee1b1bad58c10ad4c80d70885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:36:fc:c6:a6:f3:03:c4:1e:5c:fe:71:38:a9: 39:ed:8f:b5:d4:a2:d0:f9:de:77:5e:b0:cb:5c:b1: 66:8d:b4:1a:7e:17:1e:ab:3f:69:b5:47:4b:7d:cf: 7c:4b:2f:36:67:16:70:99:57:3a:7a:0e:89:8f:e0: 8b:8f:23:1d:0c:a4:7c:aa:2b:52:86:dd:f8:64:da: fa:63:77:5f:70:e3:dd:7b:b4:34:50:f8:f5:3f:e5: 0b:69:4e:24:36:4f:48:6f:3f:f9:93:50:19:79:25: b4:23:a0:b3:c2:54:c1:31:71:cd:09:1f:8e:99:4e: 96:9d:bd:b7:52:e3:a5:fe:b5:d5:b3:86:93:bd:b4: 3e:f1:5e:c8:a1:e8:24:fb:12:92:96:20:86:19:ef: 4c:b7:2a:6b:08:c8:35:66:00:58:a3:6b:b8:0e:55: d7:a6:ec:0f:63:e8:b7:3a:f9:d5:c4:9e:d0:63:90: 44:b8:c4:05:ca:a4:9f:48:0d:7f:7e:af:79:18:51: 9a:ca:55:98:e6:8d:53:eb:66:77:be:11:6b:fe:0e: e6:15:7b:5a:b7:38:05:d3:b8:79:4f:fe:4c:29:5e: f5:2b:fd:92:d5:f5:2c:b7:bd:6d:e6:c4:70:76:5c: 6a:33:97:31:7a:32:08:71:27:42:6d:a9:74:c0:3f: 5b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:95:91:00:3A:1E:64:7E:E1:B1:BA:D5:8C:10:AD:4C:80:D7:08:85 X509v3 Authority Key Identifier: keyid:29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:ee:ef:57:0a:2b:43:20:af:62:dc:d4:56:a6:60:b3:ac:ae: a4:f2:bd:56:52:87:7e:ec:24:8b:64:5b:a5:1d:28:5d:b5:25: b6:2d:8a:4a:a8:95:16:65:34:c7:d1:cc:1d:00:d9:c5:50:f8: 49:63:f7:2a:a6:90:17:0a:5b:95:c5:93:f2:80:14:68:14:45: 8d:1b:4a:d2:49:83:5e:e2:c6:bd:61:2c:86:fe:bf:88:14:bd: 72:4d:22:7f:20:e0:7d:de:39:0c:d2:40:49:dd:69:7d:a5:49: 21:f7:62:76:d5:f7:fe:46:70:a4:ba:c8:e8:24:c9:dc:12:34: 8d:94:7c:27:a7:9f:05:8d:22:6e:11:32:28:b3:08:5d:93:7e: 47:30:f3:2c:e3:ae:fc:85:e9:07:0a:df:c9:41:3b:8e:52:55: 2a:9b:6a:4c:9b:d7:a1:d5:89:fd:47:b2:46:3a:df:ee:39:c0: 61:06:dc:9d:8e:2d:15:0c:1a:83:c7:72:90:25:18:24:e8:76: 82:a7:ec:4c:ee:83:28:72:85:9c:ca:0d:4d:4e:10:e4:94:12: a4:83:74:43:52:08:9c:45:94:27:e5:53:e3:11:11:00:fa:f2: d2:99:b7:5e:f0:67:d2:89:a4:a5:ef:c6:f1:da:d7:dd:b0:c1: e4:6b:2e:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHUH6ErBLRwxDyRW5+LtnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MDZmMDI2YjFmZTYzNmM5YTVkYTAxMWRjN2ZkNjljNTgx ZDAyYjgwHhcNMjUxMjA2MTAwMjUyWhcNMjUxMjA3MTAwMjUyWjAzMTEwLwYDVQQD Eyg2YTk1OTEwMDNhMWU2NDdlZTFiMWJhZDU4YzEwYWQ0YzgwZDcwODg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Db8xqbzA8QeXP5xOKk57Y+11KLQ +d53XrDLXLFmjbQafhceqz9ptUdLfc98Sy82ZxZwmVc6eg6Jj+CLjyMdDKR8qitS ht34ZNr6Y3dfcOPde7Q0UPj1P+ULaU4kNk9Ibz/5k1AZeSW0I6CzwlTBMXHNCR+O mU6Wnb23UuOl/rXVs4aTvbQ+8V7Ioegk+xKSliCGGe9MtyprCMg1ZgBYo2u4DlXX puwPY+i3OvnVxJ7QY5BEuMQFyqSfSA1/fq95GFGaylWY5o1T62Z3vhFr/g7mFXta tzgF07h5T/5MKV71K/2S1fUst71t5sRwdlxqM5cxejIIcSdCbal0wD9b3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGqVkQA6HmR+4bG61YwQrUyA1wiFMB8GA1UdIwQY MBaAFCkG8Cax/mNsml2gEdx/1pxYHQK4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1Fid0pySC1ZMnlhWGFBUjNIX1duRmdkQXJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy82N2EzMmQtN2JmOC00YjA0LWFhMDUt ODBhOTFiZTgzZTRiLzEvS1Fid0pySC1ZMnlhWGFBUjNIX1duRmdkQXJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy82N2EzMmQtN2JmOC00YjA0LWFhMDUtODBhOTFiZTgzZTRi LzEvS1Fid0pySC1ZMnlhWGFBUjNIX1duRmdkQXJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApu7vVwor QyCvYtzUVqZgs6yupPK9VlKHfuwki2RbpR0oXbUlti2KSqiVFmU0x9HMHQDZxVD4 SWP3KqaQFwpblcWT8oAUaBRFjRtK0kmDXuLGvWEshv6/iBS9ck0ifyDgfd45DNJA Sd1pfaVJIfdidtX3/kZwpLrI6CTJ3BI0jZR8J6efBY0ibhEyKLMIXZN+RzDzLOOu /IXpBwrfyUE7jlJVKptqTJvXodWJ/UeyRjrf7jnAYQbcnY4tFQwag8dykCUYJOh2 gqfsTO6DKHKFnMoNTU4Q5JQSpIN0Q1IInEWUJ+VT4xERAPry0pm3XvBn0omkpe/G 8drX3bDB5Gsu2w== -----END CERTIFICATE-----Generated at Sat Dec 6 15:01:35 2025 by rpki-client