This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft File: kqH7oqss0QEUipWef4wI96Qbw8U.mft (raw, json) Hash identifier: 4ulV+cn+JKB9EcunUJUTaFO2StVlhn0bKC7QJjpb97s= Subject key identifier: EB:E6:DA:AF:1F:73:E4:CE:92:02:42:18:48:2A:91:4F:B4:9B:04:41 Authority key identifier: 92:A1:FB:A2:AB:2C:D1:01:14:8A:95:9E:7F:8C:08:F7:A4:1B:C3:C5 Certificate issuer: /CN=92a1fba2ab2cd101148a959e7f8c08f7a41bc3c5 Certificate serial: 019AF12ED506666AAAF2CACEB471F08258EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft Manifest number: 130C Signing time: Sat 06 Dec 2025 01:02:49 +0000 Manifest this update: Sat 06 Dec 2025 01:02:49 +0000 Manifest next update: Sun 07 Dec 2025 01:02:49 +0000 Files and hashes: 1: kqH7oqss0QEUipWef4wI96Qbw8U.crl (hash: FZyGvQeI+40aw1JQHee84o/G8c7hDbifG9U6ikSC80U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.crl rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft rsync://rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:d5:06:66:6a:aa:f2:ca:ce:b4:71:f0:82:58:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92a1fba2ab2cd101148a959e7f8c08f7a41bc3c5 Validity Not Before: Dec 6 01:02:49 2025 GMT Not After : Dec 7 01:02:49 2025 GMT Subject: CN=ebe6daaf1f73e4ce92024218482a914fb49b0441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a0:47:4b:71:c7:c3:cd:75:ea:6b:d9:8f:c1: 1c:25:d2:3b:1a:be:22:0d:0b:cb:9a:ec:cf:30:7d: d0:2c:83:93:c5:24:ed:01:d6:8a:44:2b:f5:f0:d6: b0:36:cb:94:cb:25:7a:74:1f:c3:db:fb:ee:a2:3a: e2:8e:30:84:4f:2c:14:b1:b1:a9:76:f2:3c:8b:0e: 8e:39:49:dd:92:9a:ea:ce:91:60:69:50:c1:5b:a2: 75:75:12:43:e7:c4:02:52:dc:fd:6f:2a:30:eb:f9: 46:6e:30:d2:45:84:16:b2:a6:07:9e:f3:1a:81:f3: 04:2f:d9:8e:88:31:17:c2:6f:f8:1b:79:f8:17:c9: a2:4e:9e:5b:56:34:0b:f7:bb:2b:cc:9c:8c:dc:2f: 69:7c:09:1a:5b:a8:75:93:6a:7f:35:f8:d8:59:99: cb:1e:5c:c7:75:33:99:7e:1e:f7:ef:31:ee:56:c9: 54:db:70:e2:9f:aa:4a:6b:5d:93:28:96:8e:11:46: da:d5:dd:07:74:9d:12:30:59:a4:65:98:49:19:bd: b0:05:e6:73:0b:7f:05:b1:9a:1d:84:ff:6d:13:e4: 87:9a:41:9a:d9:6c:a2:d4:4e:f0:32:71:6d:37:63: 48:e4:7c:4d:e1:cb:48:3c:62:68:45:d5:df:a7:ec: 26:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:E6:DA:AF:1F:73:E4:CE:92:02:42:18:48:2A:91:4F:B4:9B:04:41 X509v3 Authority Key Identifier: keyid:92:A1:FB:A2:AB:2C:D1:01:14:8A:95:9E:7F:8C:08:F7:A4:1B:C3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:a7:2b:94:d1:39:bd:b6:6a:75:fc:31:a7:a8:24:67:72:20: fd:42:fb:11:e9:3f:17:f1:81:f0:b1:42:35:8b:5b:bc:48:48: bc:a5:49:e3:59:7e:5d:c2:63:92:4f:06:38:6f:55:a7:11:10: 80:46:e7:c7:54:78:69:7f:4a:30:d8:43:3f:c1:b2:a4:29:d9: 8e:5a:8f:0e:88:cd:ee:30:5f:66:76:ce:65:76:77:71:dd:fe: 58:f4:ec:27:84:49:07:ea:ae:0c:37:b5:df:20:29:00:f6:1b: 82:8d:f0:79:53:a9:68:2c:67:d3:d8:11:91:b5:8f:50:c1:66: 67:14:27:26:a2:0d:15:d5:ab:95:33:1f:ea:d0:21:0f:ee:53: f8:5a:e8:47:61:67:63:b0:6a:80:96:ef:85:52:0a:3d:ed:db: a9:84:68:44:19:50:f1:33:19:9d:b7:b5:40:6b:ca:1d:d9:e8: 0c:e3:3b:c5:de:70:fe:af:e2:4b:04:86:21:5e:88:43:21:ec: 9b:33:16:a2:b3:da:54:c4:57:4f:a5:89:af:81:50:dd:1b:16: 35:70:9d:43:16:9e:63:b7:12:02:42:0a:ec:9e:fa:2b:21:c2: 1f:18:df:6a:eb:b3:b1:03:ba:09:1b:3c:01:c0:60:6b:0c:ab: 72:40:c5:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLtUGZmqq8srOtHHwgljrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYTFmYmEyYWIyY2QxMDExNDhhOTU5ZTdmOGMwOGY3YTQx YmMzYzUwHhcNMjUxMjA2MDEwMjQ5WhcNMjUxMjA3MDEwMjQ5WjAzMTEwLwYDVQQD EyhlYmU2ZGFhZjFmNzNlNGNlOTIwMjQyMTg0ODJhOTE0ZmI0OWIwNDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16BHS3HHw8116mvZj8EcJdI7Gr4i DQvLmuzPMH3QLIOTxSTtAdaKRCv18NawNsuUyyV6dB/D2/vuojrijjCETywUsbGp dvI8iw6OOUndkprqzpFgaVDBW6J1dRJD58QCUtz9byow6/lGbjDSRYQWsqYHnvMa gfMEL9mOiDEXwm/4G3n4F8miTp5bVjQL97srzJyM3C9pfAkaW6h1k2p/NfjYWZnL HlzHdTOZfh737zHuVslU23Din6pKa12TKJaOEUba1d0HdJ0SMFmkZZhJGb2wBeZz C38FsZodhP9tE+SHmkGa2Wyi1E7wMnFtN2NI5HxN4ctIPGJoRdXfp+wmcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOvm2q8fc+TOkgJCGEgqkU+0mwRBMB8GA1UdIwQY MBaAFJKh+6KrLNEBFIqVnn+MCPekG8PFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3FIN29xc3MwUUVVaXBXZWY0d0k5NlFidzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kZDgyNjgtZjI5Zi00M2I1LTlhNWYt ZGM5YzNhZTdlMzBiLzEva3FIN29xc3MwUUVVaXBXZWY0d0k5NlFidzhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9kZDgyNjgtZjI5Zi00M2I1LTlhNWYtZGM5YzNhZTdlMzBi LzEva3FIN29xc3MwUUVVaXBXZWY0d0k5NlFidzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATacrlNE5 vbZqdfwxp6gkZ3Ig/UL7Eek/F/GB8LFCNYtbvEhIvKVJ41l+XcJjkk8GOG9VpxEQ gEbnx1R4aX9KMNhDP8GypCnZjlqPDojN7jBfZnbOZXZ3cd3+WPTsJ4RJB+quDDe1 3yApAPYbgo3weVOpaCxn09gRkbWPUMFmZxQnJqINFdWrlTMf6tAhD+5T+FroR2Fn Y7BqgJbvhVIKPe3bqYRoRBlQ8TMZnbe1QGvKHdnoDOM7xd5w/q/iSwSGIV6IQyHs mzMWorPaVMRXT6WJr4FQ3RsWNXCdQxaeY7cSAkIK7J76KyHCHxjfauuzsQO6CRs8 AcBgawyrckDFFQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:22 2025 by rpki-client