This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft File: KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft (raw, json) Hash identifier: 5HWDXi4E9Q1wVSuQDjDI3qTNzmkIQQUo01uYTx5nRzU= Subject key identifier: 92:96:73:B5:F9:18:7C:73:91:FE:CA:4A:80:A7:23:92:73:22:6F:64 Authority key identifier: 29:01:D7:64:31:C6:E8:73:D3:C4:47:30:57:1E:1E:50:D6:02:05:7C Certificate issuer: /CN=2901d76431c6e873d3c44730571e1e50d602057c Certificate serial: 019AF0BF196508EBDDF4AA6E4F8D5C51AAB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft Manifest number: 1370 Signing time: Fri 05 Dec 2025 23:00:46 +0000 Manifest this update: Fri 05 Dec 2025 23:00:46 +0000 Manifest next update: Sat 06 Dec 2025 23:00:46 +0000 Files and hashes: 1: JePrT9N5p_vpcuN2wLJvV6n4f0o.roa (hash: ec+cmY8FX0sUxq4KIX8YI3T2SVi2Yc81u8O7CEJnLdo=) 2: KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl (hash: dswtZgNtFIWm7vaJnP5EMmGJ24MUX1fodRJhyhqcE1M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:19:65:08:eb:dd:f4:aa:6e:4f:8d:5c:51:aa:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2901d76431c6e873d3c44730571e1e50d602057c Validity Not Before: Dec 5 23:00:46 2025 GMT Not After : Dec 6 23:00:46 2025 GMT Subject: CN=929673b5f9187c7391feca4a80a7239273226f64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:68:17:fb:1b:be:cc:e5:d8:46:34:1c:6d:34: 52:3d:81:1a:51:7b:ad:b7:6c:e7:ad:70:28:34:7a: 43:03:5b:02:74:ea:0d:31:3e:79:f0:87:16:b3:04: b3:1b:03:ba:20:40:02:e6:8c:2c:bf:d7:6a:a1:4c: 90:c6:ce:14:19:04:5e:c7:81:7c:5a:08:7a:b9:f3: 5b:a9:60:6c:d3:3c:3b:41:69:1c:96:5d:fe:b3:3c: d5:94:05:cc:1f:e4:be:c1:5d:52:65:14:0d:8c:d3: c1:be:f6:7f:d3:b2:14:b2:d4:af:63:7b:c7:e8:29: 03:47:5a:98:22:e9:4f:67:ba:b9:03:d1:0c:f4:79: 63:44:35:e0:99:17:d4:72:cf:d5:a1:09:25:05:63: 2b:25:36:8c:6e:fe:1a:b3:ba:5d:dc:98:89:88:7a: 88:71:b7:87:fd:97:04:f7:fb:2f:33:fd:3f:f3:4c: 79:d1:e0:0a:eb:34:8d:04:5c:d3:17:c0:04:ef:0b: 1c:88:c0:2f:f3:39:a7:38:ba:0b:f7:53:10:fa:67: 23:d0:2d:8e:6b:54:71:86:a1:98:31:ed:fc:25:93: 61:9d:b0:02:9e:91:45:5a:1b:09:b2:77:82:2b:13: 34:2e:c9:84:fb:33:7d:e6:bc:5f:5c:68:c8:3a:3d: fb:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:96:73:B5:F9:18:7C:73:91:FE:CA:4A:80:A7:23:92:73:22:6F:64 X509v3 Authority Key Identifier: keyid:29:01:D7:64:31:C6:E8:73:D3:C4:47:30:57:1E:1E:50:D6:02:05:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:df:15:72:93:69:73:27:f2:b9:50:6a:4a:a3:10:92:1b:f9: 8a:73:5d:7a:91:4a:b1:48:99:e1:ed:1f:79:42:47:6d:0c:1d: 8c:20:41:f1:4a:99:c6:df:ad:24:e9:60:b3:a0:83:ed:e1:40: e8:3a:7e:99:22:d6:5c:a0:3b:91:48:a3:71:7a:ca:15:76:1d: 92:65:b2:96:c9:22:11:de:c0:8d:0a:99:54:79:01:80:ef:2f: 44:5d:a9:36:60:f5:f4:13:a9:cd:99:41:6c:a1:01:a3:07:32: bc:99:18:85:cd:8f:79:5f:bd:6a:63:27:49:4b:5e:f8:78:7b: d2:6b:c3:d7:d9:a8:12:e4:90:6f:08:9f:d2:ed:ac:bf:37:04: 6b:4c:45:ca:74:18:36:fe:d1:7f:ec:c1:ee:34:56:34:0f:59: 09:e8:3d:e3:18:84:9d:f9:45:75:00:ea:57:7e:19:86:c7:79: 2e:83:83:62:fd:e2:cd:a7:5c:2f:19:c9:d0:53:66:c7:87:dc: 8b:d6:f8:e7:74:71:69:d8:1e:9d:23:7c:87:9d:98:27:ed:e1: 71:e5:d2:a9:06:71:6f:d8:f4:d9:f8:98:ef:95:55:cb:7c:52: 45:3c:7b:1d:3d:38:60:43:58:61:94:c0:6e:ef:58:ae:27:81: 1b:f9:c0:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvxllCOvd9KpuT41cUaq1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MDFkNzY0MzFjNmU4NzNkM2M0NDczMDU3MWUxZTUwZDYw MjA1N2MwHhcNMjUxMjA1MjMwMDQ2WhcNMjUxMjA2MjMwMDQ2WjAzMTEwLwYDVQQD Eyg5Mjk2NzNiNWY5MTg3YzczOTFmZWNhNGE4MGE3MjM5MjczMjI2ZjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmgX+xu+zOXYRjQcbTRSPYEaUXut t2znrXAoNHpDA1sCdOoNMT558IcWswSzGwO6IEAC5owsv9dqoUyQxs4UGQRex4F8 Wgh6ufNbqWBs0zw7QWkcll3+szzVlAXMH+S+wV1SZRQNjNPBvvZ/07IUstSvY3vH 6CkDR1qYIulPZ7q5A9EM9HljRDXgmRfUcs/VoQklBWMrJTaMbv4as7pd3JiJiHqI cbeH/ZcE9/svM/0/80x50eAK6zSNBFzTF8AE7wsciMAv8zmnOLoL91MQ+mcj0C2O a1RxhqGYMe38JZNhnbACnpFFWhsJsneCKxM0LsmE+zN95rxfXGjIOj37OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJKWc7X5GHxzkf7KSoCnI5JzIm9kMB8GA1UdIwQY MBaAFCkB12Qxxuhz08RHMFceHlDWAgV8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1FIWFpESEc2SFBUeEVjd1Z4NGVVTllDQlh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8wNWMzYTEtYzhmZS00MGZmLTljNTIt M2U2ZjAzMjQ0MTBhLzEvS1FIWFpESEc2SFBUeEVjd1Z4NGVVTllDQlh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8wNWMzYTEtYzhmZS00MGZmLTljNTItM2U2ZjAzMjQ0MTBh LzEvS1FIWFpESEc2SFBUeEVjd1Z4NGVVTllDQlh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR98VcpNp cyfyuVBqSqMQkhv5inNdepFKsUiZ4e0feUJHbQwdjCBB8UqZxt+tJOlgs6CD7eFA 6Dp+mSLWXKA7kUijcXrKFXYdkmWylskiEd7AjQqZVHkBgO8vRF2pNmD19BOpzZlB bKEBowcyvJkYhc2PeV+9amMnSUte+Hh70mvD19moEuSQbwif0u2svzcEa0xFynQY Nv7Rf+zB7jRWNA9ZCeg94xiEnflFdQDqV34Zhsd5LoODYv3izadcLxnJ0FNmx4fc i9b453RxadgenSN8h52YJ+3hceXSqQZxb9j02fiY75VVy3xSRTx7HT04YENYYZTA bu9YrieBG/nALw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:58:52 2025 by rpki-client