This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft File: KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft (raw, json) Hash identifier: 6oDiIt+7pqFdWN6bCq2dVXh/ooo0xX/K6/XtIjqWvxg= Subject key identifier: 52:8E:D2:9B:52:1C:AC:3D:78:A6:A6:A8:EE:D6:EF:88:52:77:28:77 Authority key identifier: 2A:A3:80:E2:30:CB:33:43:61:B4:86:1E:2F:69:41:24:38:7F:85:29 Certificate issuer: /CN=2aa380e230cb334361b4861e2f694124387f8529 Certificate serial: 019AF12ED6541222DF8E51D8556E2D71DAB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqOA4jDLM0NhtIYeL2lBJDh_hSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 01:02:49 +0000 Manifest this update: Sat 06 Dec 2025 01:02:49 +0000 Manifest next update: Sun 07 Dec 2025 01:02:49 +0000 Files and hashes: 1: KqOA4jDLM0NhtIYeL2lBJDh_hSk.crl (hash: ZF2Xh5mjyAn7ecIlOI3BVk5C7eUoil72n+YkpWopdv4=) 2: SjvSMbvX_pvw3i1Pn6Bx1TTyu6U.roa (hash: kgWKItzA9z25TXtV7XlZgfoMV6KRvWKz0GsOPfm6isI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft rsync://rpki.ripe.net/repository/DEFAULT/KqOA4jDLM0NhtIYeL2lBJDh_hSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:d6:54:12:22:df:8e:51:d8:55:6e:2d:71:da:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa380e230cb334361b4861e2f694124387f8529 Validity Not Before: Dec 6 01:02:49 2025 GMT Not After : Dec 7 01:02:49 2025 GMT Subject: CN=528ed29b521cac3d78a6a6a8eed6ef8852772877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:63:99:a3:32:e4:f5:0b:26:39:df:0b:c5:8f: 99:f3:9f:39:5a:40:76:e5:b6:8c:2c:46:39:e0:49: 65:02:ed:60:ea:c7:d7:8b:ef:5e:98:17:5d:ba:bd: 10:70:eb:0b:76:f0:99:a3:55:b3:32:79:1b:39:d4: 08:a7:cf:1b:13:ff:1f:fa:5e:c0:04:a9:36:a5:f7: 4c:a8:c6:39:72:68:1d:6e:11:e6:4f:46:7d:62:57: 51:80:e9:3b:93:7c:49:f6:09:a9:40:08:24:4e:8c: ff:59:fd:03:be:85:f7:d5:7c:08:83:fd:9b:a7:23: 18:a9:5d:78:d6:1f:2d:fe:53:2f:ba:d1:94:7e:89: d0:40:14:7f:17:c9:d1:d5:d1:6c:d7:8c:75:c2:90: 98:26:44:48:6d:6a:84:23:79:13:58:7f:79:76:31: a6:9a:5b:b1:d7:27:16:63:26:da:61:1f:4a:4f:f5: 7a:94:f7:28:34:84:ee:d0:75:16:d6:a7:92:cd:79: b3:03:08:5b:bc:6b:ac:5e:72:cd:5f:2d:16:a9:d7: 31:34:ef:2f:e2:17:6e:c8:66:2a:bc:01:6f:82:79: 36:55:f1:6e:50:5a:de:80:cb:a1:c7:de:9f:9d:1c: a9:d0:9d:52:42:35:45:b7:ef:1e:d3:5c:66:f0:2d: f3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:8E:D2:9B:52:1C:AC:3D:78:A6:A6:A8:EE:D6:EF:88:52:77:28:77 X509v3 Authority Key Identifier: keyid:2A:A3:80:E2:30:CB:33:43:61:B4:86:1E:2F:69:41:24:38:7F:85:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqOA4jDLM0NhtIYeL2lBJDh_hSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:6e:13:d2:58:8f:09:62:a3:f3:e3:21:79:92:5d:d2:6c:cf: f9:1a:e3:90:e3:60:24:e8:10:d6:5f:d0:19:a7:48:e4:52:71: e1:e8:06:9c:26:ab:5d:8b:f2:34:9e:61:76:b6:f2:72:5c:02: ba:54:f1:07:4a:77:4b:09:74:e0:69:ae:e7:cf:19:b6:88:a7: 78:d3:53:fc:c2:b2:29:0a:f3:c5:61:1f:6a:d6:49:46:32:98: 8e:9d:dd:1a:d0:87:fd:59:4e:b6:f8:50:16:76:f3:79:d1:12: 35:a7:62:4b:e9:47:dd:b6:af:3f:2a:46:1d:d1:cf:7d:2c:80: 0f:97:3e:a9:b7:d7:a8:c3:f2:7e:0e:7d:54:4f:e5:9e:88:62: ba:5f:58:f5:a2:23:ee:05:df:d9:5c:50:f7:43:5c:45:a0:9d: d6:e3:66:04:d9:4d:0c:32:0f:b2:5b:1c:89:4e:f1:50:b0:f4: 45:3c:4f:52:a9:92:a5:16:9c:24:32:51:44:3f:c6:44:bd:49: a3:94:ae:12:e6:58:17:46:5c:c2:c1:ac:72:0f:78:5f:a7:fb: a4:fa:de:31:b1:f1:03:56:01:d4:8c:ec:0e:fc:7f:5f:08:33: 79:34:f8:cc:f4:a9:a4:2b:8d:50:6e:8a:d6:f6:e6:06:0e:b4: b3:12:b6:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLtZUEiLfjlHYVW4tcdqwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYTM4MGUyMzBjYjMzNDM2MWI0ODYxZTJmNjk0MTI0Mzg3 Zjg1MjkwHhcNMjUxMjA2MDEwMjQ5WhcNMjUxMjA3MDEwMjQ5WjAzMTEwLwYDVQQD Eyg1MjhlZDI5YjUyMWNhYzNkNzhhNmE2YThlZWQ2ZWY4ODUyNzcyODc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmOZozLk9QsmOd8LxY+Z8585WkB2 5baMLEY54EllAu1g6sfXi+9emBddur0QcOsLdvCZo1WzMnkbOdQIp88bE/8f+l7A BKk2pfdMqMY5cmgdbhHmT0Z9YldRgOk7k3xJ9gmpQAgkToz/Wf0DvoX31XwIg/2b pyMYqV141h8t/lMvutGUfonQQBR/F8nR1dFs14x1wpCYJkRIbWqEI3kTWH95djGm mlux1ycWYybaYR9KT/V6lPcoNITu0HUW1qeSzXmzAwhbvGusXnLNXy0WqdcxNO8v 4hduyGYqvAFvgnk2VfFuUFregMuhx96fnRyp0J1SQjVFt+8e01xm8C3zoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKO0ptSHKw9eKamqO7W74hSdyh3MB8GA1UdIwQY MBaAFCqjgOIwyzNDYbSGHi9pQSQ4f4UpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3FPQTRqRExNME5odElZZUwybEJKRGhfaFNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9mMmM4MDMtNDNjOC00NGJiLTlkZDAt NjUxMjI5ODMwMTcwLzEvS3FPQTRqRExNME5odElZZUwybEJKRGhfaFNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9mMmM4MDMtNDNjOC00NGJiLTlkZDAtNjUxMjI5ODMwMTcw LzEvS3FPQTRqRExNME5odElZZUwybEJKRGhfaFNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMG4T0liP CWKj8+MheZJd0mzP+RrjkONgJOgQ1l/QGadI5FJx4egGnCarXYvyNJ5hdrbyclwC ulTxB0p3Swl04Gmu588ZtoineNNT/MKyKQrzxWEfatZJRjKYjp3dGtCH/VlOtvhQ FnbzedESNadiS+lH3bavPypGHdHPfSyAD5c+qbfXqMPyfg59VE/lnohiul9Y9aIj 7gXf2VxQ90NcRaCd1uNmBNlNDDIPslsciU7xULD0RTxPUqmSpRacJDJRRD/GRL1J o5SuEuZYF0ZcwsGscg94X6f7pPreMbHxA1YB1IzsDvx/XwgzeTT4zPSppCuNUG6K 1vbmBg60sxK2Tw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:21:16 2025 by rpki-client