This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft File: KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft (raw, json) Hash identifier: OXkLGKrV7oV4TwcX86ZsH7ypWl6yxEBtisJXVjJCOnM= Subject key identifier: B6:85:3C:9F:A7:A0:32:3D:AF:00:C5:87:1A:C7:46:A2:80:FA:EB:71 Authority key identifier: 29:08:1D:68:BD:DE:A8:BE:BF:26:E6:18:21:97:85:94:F2:23:BC:BE Certificate issuer: /CN=29081d68bddea8bebf26e61821978594f223bcbe Certificate serial: 019B2F67275A028DA4AE1D4F84B88A23E09E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft Manifest number: 0981 Signing time: Thu 18 Dec 2025 03:00:47 +0000 Manifest this update: Thu 18 Dec 2025 03:00:47 +0000 Manifest next update: Fri 19 Dec 2025 03:00:47 +0000 Files and hashes: 1: KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl (hash: hf+vRnPR9Sp4YgUiDzEfOH5PUeSBNMMioZjeRD/O1Kk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:27:5a:02:8d:a4:ae:1d:4f:84:b8:8a:23:e0:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29081d68bddea8bebf26e61821978594f223bcbe Validity Not Before: Dec 18 03:00:47 2025 GMT Not After : Dec 19 03:00:47 2025 GMT Subject: CN=b6853c9fa7a0323daf00c5871ac746a280faeb71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d9:b4:0e:99:6f:f0:b6:38:78:27:99:71:a3: 17:13:02:c3:84:04:e5:56:cb:7b:84:d8:e6:db:0b: 29:9f:61:20:f1:a9:b2:cc:af:41:e6:80:f3:ce:ba: be:06:8b:5e:91:e8:09:04:d6:41:8f:da:76:4e:39: b5:4d:e4:5d:29:34:1c:1f:42:ea:0b:7c:96:f5:ea: dd:c5:fb:1f:89:7d:0a:cf:8e:b4:ff:52:43:25:97: f1:d7:02:9e:ff:e1:49:e6:3e:f7:3f:20:2f:c1:25: 2c:56:b6:bc:bf:87:3b:f4:f0:8b:fc:71:22:e6:20: 54:b7:b7:cb:e8:b1:50:f3:55:0c:a3:c1:3e:66:8a: 52:e4:79:9e:95:e5:46:cf:f9:a3:c6:08:f0:81:e5: 42:de:10:e4:b4:3c:a8:d5:37:1b:f2:71:94:3b:fb: e0:00:89:8b:11:66:13:39:48:36:67:2c:58:f0:e3: 5e:eb:d0:6b:40:e8:c4:ef:cb:af:13:10:cc:26:ae: ee:01:fa:f3:09:6c:7a:3f:b0:c1:79:30:fa:ab:db: 98:86:4d:72:ae:b8:7c:ff:e4:1e:16:22:23:93:7c: 1a:5c:25:fa:51:c3:42:aa:38:5e:90:dd:3a:bd:7e: 2c:df:06:55:c3:19:a7:c6:4f:40:46:27:8d:64:21: 61:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:85:3C:9F:A7:A0:32:3D:AF:00:C5:87:1A:C7:46:A2:80:FA:EB:71 X509v3 Authority Key Identifier: keyid:29:08:1D:68:BD:DE:A8:BE:BF:26:E6:18:21:97:85:94:F2:23:BC:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:6c:f3:04:c2:52:48:ec:6d:cb:1d:e1:c9:62:a7:bc:05:72: da:5f:cb:c9:a5:d1:4f:2f:a7:11:77:1c:68:77:e4:40:03:63: e7:6d:fc:3c:bc:a8:f2:59:97:04:f5:30:00:b8:f9:a9:96:60: e9:74:c3:c5:15:d0:70:9d:57:41:b8:aa:3b:10:dd:1d:10:17: 2b:98:86:f2:5d:fb:bc:2d:87:bb:46:68:8f:21:98:5c:46:81: 78:7c:0a:63:43:b3:9a:e2:da:48:cd:e7:ed:3e:ea:e6:e1:a8: 24:95:6b:51:98:64:f5:4b:c3:87:95:eb:71:21:ec:2a:4b:1e: 10:70:15:1d:30:6b:53:2d:ab:76:47:85:94:c0:b5:75:4d:16: fc:6a:05:e8:32:b2:36:f0:7c:e8:fe:96:24:de:a1:d4:46:37: 3b:4c:44:f8:e2:9e:61:0a:80:01:11:21:db:95:83:74:2a:72: c1:c7:5c:04:f7:4d:ff:d5:2b:8e:9f:66:66:3e:87:c9:bd:d6: f9:89:60:8b:ad:85:03:6f:42:64:38:b7:12:17:a9:f6:51:08: 7a:87:d7:c5:0b:a1:fa:63:fd:f2:90:2d:03:8e:e0:c0:e5:21: 16:4a:26:8c:83:66:ae:80:f7:ca:83:2e:08:01:3c:e3:7d:7b: d6:03:f7:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZydaAo2krh1PhLiKI+CeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MDgxZDY4YmRkZWE4YmViZjI2ZTYxODIxOTc4NTk0ZjIy M2JjYmUwHhcNMjUxMjE4MDMwMDQ3WhcNMjUxMjE5MDMwMDQ3WjAzMTEwLwYDVQQD EyhiNjg1M2M5ZmE3YTAzMjNkYWYwMGM1ODcxYWM3NDZhMjgwZmFlYjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudm0Dplv8LY4eCeZcaMXEwLDhATl Vst7hNjm2wspn2Eg8amyzK9B5oDzzrq+BotekegJBNZBj9p2Tjm1TeRdKTQcH0Lq C3yW9erdxfsfiX0Kz460/1JDJZfx1wKe/+FJ5j73PyAvwSUsVra8v4c79PCL/HEi 5iBUt7fL6LFQ81UMo8E+ZopS5HmeleVGz/mjxgjwgeVC3hDktDyo1Tcb8nGUO/vg AImLEWYTOUg2ZyxY8ONe69BrQOjE78uvExDMJq7uAfrzCWx6P7DBeTD6q9uYhk1y rrh8/+QeFiIjk3waXCX6UcNCqjhekN06vX4s3wZVwxmnxk9ARieNZCFhvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLaFPJ+noDI9rwDFhxrHRqKA+utxMB8GA1UdIwQY MBaAFCkIHWi93qi+vybmGCGXhZTyI7y+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1FnZGFMM2VxTDZfSnVZWUlaZUZsUElqdkw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9iNjhmNmYtOTYwZC00ZTMzLTg3M2Yt NzM2N2MwZjIwYmM5LzEvS1FnZGFMM2VxTDZfSnVZWUlaZUZsUElqdkw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9iNjhmNmYtOTYwZC00ZTMzLTg3M2YtNzM2N2MwZjIwYmM5 LzEvS1FnZGFMM2VxTDZfSnVZWUlaZUZsUElqdkw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq2zzBMJS SOxtyx3hyWKnvAVy2l/LyaXRTy+nEXccaHfkQANj5238PLyo8lmXBPUwALj5qZZg 6XTDxRXQcJ1XQbiqOxDdHRAXK5iG8l37vC2Hu0ZojyGYXEaBeHwKY0OzmuLaSM3n 7T7q5uGoJJVrUZhk9UvDh5XrcSHsKkseEHAVHTBrUy2rdkeFlMC1dU0W/GoF6DKy NvB86P6WJN6h1EY3O0xE+OKeYQqAAREh25WDdCpywcdcBPdN/9Urjp9mZj6Hyb3W +Ylgi62FA29CZDi3Ehep9lEIeofXxQuh+mP98pAtA47gwOUhFkomjINmroD3yoMu CAE843171gP3GA== -----END CERTIFICATE-----Generated at Thu Dec 18 06:33:26 2025 by rpki-client