This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft File: KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft (raw, json) Hash identifier: Ye/jGqMmn4hh1VSG8GVVhEnXFkXMdbzAQ0d2O07xFU4= Subject key identifier: 39:5D:C7:EE:78:92:8A:3E:36:42:C4:0B:1A:52:11:91:48:C1:D0:53 Authority key identifier: 2A:A1:7E:D4:07:43:2C:41:8B:1C:9E:AF:61:FD:1C:A1:CB:FF:6A:74 Certificate issuer: /CN=2aa17ed407432c418b1c9eaf61fd1ca1cbff6a74 Certificate serial: 019AF23FB2F4BCC20B53FA4AA5F971FFDE79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft Manifest number: 0B4B Signing time: Sat 06 Dec 2025 06:00:52 +0000 Manifest this update: Sat 06 Dec 2025 06:00:52 +0000 Manifest next update: Sun 07 Dec 2025 06:00:52 +0000 Files and hashes: 1: B-4mThf4e-80zWpEOjTSvUoatyg.roa (hash: iLGZvkSCMs5F+PZw6Uabdz+fABoTG9YghxbSRDf22wI=) 2: KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl (hash: M+C/1UTzl5ORGE/JELuYt7ron5wKGOex8zN/+Rd1kXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:b2:f4:bc:c2:0b:53:fa:4a:a5:f9:71:ff:de:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa17ed407432c418b1c9eaf61fd1ca1cbff6a74 Validity Not Before: Dec 6 06:00:52 2025 GMT Not After : Dec 7 06:00:52 2025 GMT Subject: CN=395dc7ee78928a3e3642c40b1a52119148c1d053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:62:e1:67:e5:4c:14:6a:d0:7f:e6:f0:af:37: a3:4c:62:56:66:fb:e4:ce:70:40:3c:8e:1e:82:a8: 46:52:5f:c2:c2:7f:ca:39:cf:cc:57:14:fa:fb:4a: a9:4e:03:d6:84:68:1d:7d:e4:18:b1:19:23:34:fc: 5b:58:e0:88:dc:f1:cc:64:19:28:2e:e5:3d:40:e0: 72:52:82:1b:9c:13:8e:e3:0e:bd:13:a9:2b:cc:49: 31:3d:c6:08:9b:38:50:6b:85:b3:95:c5:d6:b9:4a: 6d:d4:59:f1:b5:e0:86:ed:cf:66:8f:00:62:e1:c7: 3d:17:ce:97:c7:2f:26:5d:b9:67:65:0b:e8:00:9d: e7:62:71:4e:c9:f1:f7:b6:7c:3f:34:c7:20:8b:5a: dd:da:ed:34:af:a7:be:de:9b:fe:a0:0e:f5:cd:fe: 64:6f:52:4d:f8:b4:83:ea:06:a9:60:96:3d:23:b0: 23:9f:1a:24:41:42:d9:76:1d:b5:f4:20:ab:a4:01: a8:4f:36:bd:70:bf:3f:d8:29:10:57:ef:83:0c:e1: 39:ae:d3:8f:b7:8c:3a:5a:41:80:53:d0:2d:49:75: 2f:18:36:5c:7f:27:37:c4:18:a7:a0:88:60:8a:8b: 75:79:9a:7b:b6:99:2d:50:eb:e6:b4:32:81:b2:68: 29:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:5D:C7:EE:78:92:8A:3E:36:42:C4:0B:1A:52:11:91:48:C1:D0:53 X509v3 Authority Key Identifier: keyid:2A:A1:7E:D4:07:43:2C:41:8B:1C:9E:AF:61:FD:1C:A1:CB:FF:6A:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:f7:29:95:5f:59:f3:fa:63:95:a7:14:59:2a:85:50:bd:7d: 23:42:75:3c:7c:f1:53:01:e7:c1:a9:e5:b0:e1:b4:84:1e:c4: ca:76:2c:e4:7b:23:02:5a:3c:67:84:35:b1:44:69:e3:da:9d: 36:54:09:28:36:43:8e:0e:b2:e7:4f:64:f7:f3:38:10:51:8a: ac:aa:c0:3e:5c:22:db:6f:b1:98:b6:4a:39:70:5e:bc:fa:3a: 17:7d:e0:73:47:f0:bc:ea:02:29:44:64:0e:91:fc:81:fa:64: 96:3d:8c:d4:91:33:07:b4:dd:11:47:40:4a:26:88:9a:52:5f: 2f:4f:f5:3e:ac:b0:ff:83:d1:9f:1f:01:f0:9c:6e:8c:09:c0: a1:32:f7:22:df:ac:d5:85:93:07:a2:f0:2e:9b:eb:ba:92:e7: 55:0f:f9:97:a1:9e:8f:7f:40:c3:03:2a:94:c7:f3:d0:dd:2e: 65:f5:7d:97:23:64:7b:f0:ba:f7:e0:40:7d:b2:80:98:af:f1: 4d:07:a2:8b:e1:94:25:1e:77:a7:da:e4:5f:04:aa:3d:87:ca: 6d:f0:83:4a:b2:49:ec:56:ae:4c:00:e1:ed:a4:3d:c8:83:2c: 04:61:76:0b:f9:a6:cc:fd:e4:4e:5f:8a:97:29:f3:d9:cd:35: a9:9f:ba:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP7L0vMILU/pKpflx/955MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYTE3ZWQ0MDc0MzJjNDE4YjFjOWVhZjYxZmQxY2ExY2Jm ZjZhNzQwHhcNMjUxMjA2MDYwMDUyWhcNMjUxMjA3MDYwMDUyWjAzMTEwLwYDVQQD EygzOTVkYzdlZTc4OTI4YTNlMzY0MmM0MGIxYTUyMTE5MTQ4YzFkMDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGLhZ+VMFGrQf+bwrzejTGJWZvvk znBAPI4egqhGUl/Cwn/KOc/MVxT6+0qpTgPWhGgdfeQYsRkjNPxbWOCI3PHMZBko LuU9QOByUoIbnBOO4w69E6krzEkxPcYImzhQa4WzlcXWuUpt1FnxteCG7c9mjwBi 4cc9F86Xxy8mXblnZQvoAJ3nYnFOyfH3tnw/NMcgi1rd2u00r6e+3pv+oA71zf5k b1JN+LSD6gapYJY9I7AjnxokQULZdh219CCrpAGoTza9cL8/2CkQV++DDOE5rtOP t4w6WkGAU9AtSXUvGDZcfyc3xBinoIhgiot1eZp7tpktUOvmtDKBsmgplwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDldx+54koo+NkLECxpSEZFIwdBTMB8GA1UdIwQY MBaAFCqhftQHQyxBixyer2H9HKHL/2p0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3FGLTFBZERMRUdMSEo2dllmMGNvY3ZfYW5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni81NGQ0MzctYTI3Ny00MWJkLTk4OGYt OTUwZjBhMDEwMWE5LzEvS3FGLTFBZERMRUdMSEo2dllmMGNvY3ZfYW5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni81NGQ0MzctYTI3Ny00MWJkLTk4OGYtOTUwZjBhMDEwMWE5 LzEvS3FGLTFBZERMRUdMSEo2dllmMGNvY3ZfYW5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADfcplV9Z 8/pjlacUWSqFUL19I0J1PHzxUwHnwanlsOG0hB7EynYs5HsjAlo8Z4Q1sURp49qd NlQJKDZDjg6y509k9/M4EFGKrKrAPlwi22+xmLZKOXBevPo6F33gc0fwvOoCKURk DpH8gfpklj2M1JEzB7TdEUdASiaImlJfL0/1Pqyw/4PRnx8B8JxujAnAoTL3It+s 1YWTB6LwLpvrupLnVQ/5l6Gej39AwwMqlMfz0N0uZfV9lyNke/C69+BAfbKAmK/x TQeii+GUJR53p9rkXwSqPYfKbfCDSrJJ7FauTADh7aQ9yIMsBGF2C/mmzP3kTl+K lynz2c01qZ+6dA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:43:42 2025 by rpki-client