This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft File: KqrPxdXjsmjyxrpDNrzJQfXI168.mft (raw, json) Hash identifier: HDHDe5TGhMX4F9Bp3iGg//A9NQQFkXa7BglmA1GvHuo= Subject key identifier: 7E:B8:7E:43:1A:14:F5:8A:F3:2C:A6:6F:52:9C:4E:6C:AB:B4:25:99 Authority key identifier: 2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF Certificate issuer: /CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af Certificate serial: 019AF23FC51981A91588630BCD1E48223B7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft Manifest number: 1148 Signing time: Sat 06 Dec 2025 06:00:56 +0000 Manifest this update: Sat 06 Dec 2025 06:00:56 +0000 Manifest next update: Sun 07 Dec 2025 06:00:56 +0000 Files and hashes: 1: KqrPxdXjsmjyxrpDNrzJQfXI168.crl (hash: +i9uEz0s7/bLh2lDn70Wl6w8eoJ6O+KZCvkcqrrW3do=) 2: YHCQmZQSLzGov9OQrOkdfN0GjNg.roa (hash: LJHw2nmrIzxX+QIoapfr72Feky+nKytQhXLYrU9sSE0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:c5:19:81:a9:15:88:63:0b:cd:1e:48:22:3b:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af Validity Not Before: Dec 6 06:00:56 2025 GMT Not After : Dec 7 06:00:56 2025 GMT Subject: CN=7eb87e431a14f58af32ca66f529c4e6cabb42599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:42:fd:17:1f:fe:2d:d2:2b:59:ce:d3:c6:d3: 26:a4:a2:5f:50:95:85:69:18:60:cf:9c:a6:ac:fd: 81:77:a7:e4:7c:d6:55:6d:cc:9e:99:4f:a0:2a:9d: dc:d6:a7:52:4d:1e:ea:7d:70:cc:cd:d7:3c:92:83: dd:d2:9a:e4:27:d1:cf:de:1a:ae:43:30:be:fb:40: 02:57:b7:9a:cf:24:27:df:1c:2c:58:d2:53:1d:02: 5b:99:81:49:f3:47:56:11:76:b0:c7:fb:60:20:bd: 7f:3a:8e:a7:38:36:90:19:fb:94:85:02:64:3b:ac: cd:c9:01:4d:77:87:a9:ce:67:4c:bc:7a:95:18:fd: 71:11:fe:bc:ed:a4:e2:d2:7c:70:3f:d1:60:1f:47: e0:b5:0d:d3:79:30:b0:02:c5:e1:b9:3b:fd:42:b6: 67:91:ff:8d:b3:2f:e5:b4:56:a1:34:61:4d:e1:80: 8c:28:8b:db:a7:e5:04:81:5b:bc:e6:f0:d3:5f:f1: 06:b5:79:22:f8:de:f8:f9:8e:23:bd:21:18:12:73: 91:04:8a:12:25:ab:59:a4:a2:c0:65:51:3f:57:cd: 9e:0b:14:17:95:c5:56:fe:36:e8:21:ae:c4:f4:b3: 75:5b:1a:9a:75:76:52:1a:e9:8c:00:6a:ea:6c:ac: 56:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B8:7E:43:1A:14:F5:8A:F3:2C:A6:6F:52:9C:4E:6C:AB:B4:25:99 X509v3 Authority Key Identifier: keyid:2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:7d:36:67:67:65:aa:2c:55:8f:56:0e:36:41:c6:b9:bc:50: 38:30:9d:3c:2e:93:18:86:9c:8a:a7:cf:60:62:77:7c:04:93: 87:db:57:28:1f:56:0a:6c:77:1c:af:0c:dd:41:8c:a4:a7:08: 42:7f:db:cd:08:a7:50:0f:e7:c2:39:a0:e4:91:3a:b3:94:46: 69:2a:97:fe:47:ba:54:2a:ee:f7:c6:69:9b:7f:d4:fe:fc:97: 43:94:a3:e2:82:aa:0f:b7:77:d4:cd:a7:d5:34:05:93:e1:fa: d2:97:66:84:ce:f8:6a:cf:e5:57:c4:db:b8:c3:c1:4b:8f:f8: ab:77:8f:d4:e8:f1:d9:2a:f3:f5:1c:b4:f3:00:0c:a3:02:30: 91:0d:74:df:65:08:ec:4d:93:9e:b8:82:7f:0b:19:73:13:78: aa:cb:e3:53:68:51:2e:6b:52:18:09:03:1e:43:2b:00:a9:85: 1a:4d:d9:47:ce:e4:44:c4:46:5a:41:d0:13:d8:af:8f:0e:65: cc:5c:f7:fc:f1:61:eb:f9:2d:d1:2d:58:7c:30:70:e1:36:ef: 43:01:e6:a8:69:45:2d:0e:72:d7:5a:e8:11:98:68:f2:88:6c: 68:20:a5:fb:2f:61:c1:b2:04:c6:85:5a:5e:ca:04:22:fd:bf: 38:64:9e:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP8UZgakViGMLzR5IIjt6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYWFjZmM1ZDVlM2IyNjhmMmM2YmE0MzM2YmNjOTQxZjVj OGQ3YWYwHhcNMjUxMjA2MDYwMDU2WhcNMjUxMjA3MDYwMDU2WjAzMTEwLwYDVQQD Eyg3ZWI4N2U0MzFhMTRmNThhZjMyY2E2NmY1MjljNGU2Y2FiYjQyNTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0L9Fx/+LdIrWc7TxtMmpKJfUJWF aRhgz5ymrP2Bd6fkfNZVbcyemU+gKp3c1qdSTR7qfXDMzdc8koPd0prkJ9HP3hqu QzC++0ACV7eazyQn3xwsWNJTHQJbmYFJ80dWEXawx/tgIL1/Oo6nODaQGfuUhQJk O6zNyQFNd4epzmdMvHqVGP1xEf687aTi0nxwP9FgH0fgtQ3TeTCwAsXhuTv9QrZn kf+Nsy/ltFahNGFN4YCMKIvbp+UEgVu85vDTX/EGtXki+N74+Y4jvSEYEnORBIoS JatZpKLAZVE/V82eCxQXlcVW/jboIa7E9LN1WxqadXZSGumMAGrqbKxW6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH64fkMaFPWK8yymb1KcTmyrtCWZMB8GA1UdIwQY MBaAFCqqz8XV47Jo8sa6Qza8yUH1yNevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3FyUHhkWGpzbWp5eHJwRE5yekpRZlhJMTY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9jNTJkNDQtMWJiNi00ZGMwLTg2YmEt NDRjYjRlOTUzMDI3LzEvS3FyUHhkWGpzbWp5eHJwRE5yekpRZlhJMTY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9jNTJkNDQtMWJiNi00ZGMwLTg2YmEtNDRjYjRlOTUzMDI3 LzEvS3FyUHhkWGpzbWp5eHJwRE5yekpRZlhJMTY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHX02Z2dl qixVj1YONkHGubxQODCdPC6TGIaciqfPYGJ3fASTh9tXKB9WCmx3HK8M3UGMpKcI Qn/bzQinUA/nwjmg5JE6s5RGaSqX/ke6VCru98Zpm3/U/vyXQ5Sj4oKqD7d31M2n 1TQFk+H60pdmhM74as/lV8TbuMPBS4/4q3eP1Ojx2Srz9Ry08wAMowIwkQ1032UI 7E2TnriCfwsZcxN4qsvjU2hRLmtSGAkDHkMrAKmFGk3ZR87kRMRGWkHQE9ivjw5l zFz3/PFh6/kt0S1YfDBw4TbvQwHmqGlFLQ5y11roEZho8ohsaCCl+y9hwbIExoVa XsoEIv2/OGSekA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:13:38 2025 by rpki-client