This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft File: kUqlV8PT0ea38FJcNMwdSIpakpQ.mft (raw, json) Hash identifier: ZWKYI+dMbU/LgJ2c6h21D9zqUiY9YWXXYa4RktT+m0Q= Subject key identifier: A2:7D:F4:BD:72:8C:5F:75:98:95:C8:70:9B:60:94:BA:5F:89:49:4D Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94 Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294 Certificate serial: 019AF50AE93D8B0AFC1E10CA7E0202293258 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft Manifest number: 033E Signing time: Sat 06 Dec 2025 19:02:04 +0000 Manifest this update: Sat 06 Dec 2025 19:02:04 +0000 Manifest next update: Sun 07 Dec 2025 19:02:04 +0000 Files and hashes: 1: 3e9xcybUyOgWOmdj2KT0VPc-IQ4.roa (hash: h6OpcAY2hGkLVmHjk3z97L6JK9iEJZ7vz8cORcaFzmM=) 2: 86J3w2KHwC3IOQFcig1RsCiNiqI.roa (hash: YYIEpXZweId3RWAxfqfUUaYUG93HllQHD6f5j3LzIes=) 3: EY-GYc_OgBsb1UIfjvb41Bwimi4.roa (hash: oR/jgqozL9leyl3DMc7LefEzsfH3jn7fBo/d5r37udY=) 4: WUcwdVxjGm9MT5dj0KuN5kY8fc0.roa (hash: Va0HPLXWY6KmecVQh7TSAW6BzjPwycNZWbVEYlVLjHk=) 5: kUqlV8PT0ea38FJcNMwdSIpakpQ.crl (hash: j5jertCi1uYvu2xllKdCVqSzxij7YKewq/v1m66Gczw=) 6: poqG69mPnb95YSUs8FdptFbAqUw.roa (hash: mqMSlTGBPTy+EqcBaFtlD8JVQdwDJPdpMrV37KzvxOo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:e9:3d:8b:0a:fc:1e:10:ca:7e:02:02:29:32:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294 Validity Not Before: Dec 6 19:02:04 2025 GMT Not After : Dec 7 19:02:04 2025 GMT Subject: CN=a27df4bd728c5f759895c8709b6094ba5f89494d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:42:7b:22:e1:f8:2a:01:9b:1a:d6:b7:9c:a8: 56:c7:c9:77:40:4e:6a:1d:6a:c3:b3:52:04:ff:26: 50:b6:83:c0:8b:d5:7c:42:48:5c:35:79:c9:97:51: f8:d3:5a:29:74:62:cb:31:f6:7a:48:a1:34:4e:ae: 27:6b:a9:c4:f3:12:47:40:f9:8b:36:d0:45:11:35: bf:ec:6f:fc:c3:a4:f3:bc:d3:e1:f8:89:8b:5b:92: a5:8e:80:e5:bc:36:6b:75:d0:40:e3:8d:1a:9f:a2: 72:6b:53:6d:f5:f3:7f:5a:4a:be:a0:c8:33:12:b6: b9:04:80:ab:40:b5:13:3b:a9:04:ed:b5:da:ac:ab: 56:55:4b:0d:23:54:46:c3:89:f3:23:0c:84:f0:45: b7:c2:44:fb:a1:22:1e:bc:4d:6b:f6:f2:2b:35:e7: c3:00:d2:58:43:40:c0:f2:ec:7a:98:06:9e:03:97: c4:a8:d3:24:87:9e:f7:9d:9b:f5:02:42:e9:b4:68: 3f:5c:3b:83:9a:c0:5d:a9:7b:99:85:d8:20:b0:6a: fc:e1:95:fd:71:55:0f:d3:e0:97:70:35:bd:99:34: 87:ac:a0:2d:f6:37:73:2e:32:fc:84:e6:76:d6:a8: 57:e5:37:9c:70:91:e9:47:2b:49:05:14:93:b8:20: da:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:7D:F4:BD:72:8C:5F:75:98:95:C8:70:9B:60:94:BA:5F:89:49:4D X509v3 Authority Key Identifier: keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:b8:6e:3b:4f:48:f8:d6:0c:ae:f5:9d:a0:37:7e:89:70:ea: 2b:7d:e4:72:19:81:29:fe:f5:ed:13:86:3a:77:72:55:d4:71: 7e:b3:f2:ad:d9:f9:a5:70:9d:a0:a9:4f:98:47:c7:b2:76:ac: 90:bf:2c:80:3c:60:3a:c4:a9:82:75:75:4a:65:a4:f8:16:ea: 04:73:ee:e6:00:8c:29:87:14:c5:af:c1:e9:8a:7f:74:33:10: f1:c4:73:e5:68:42:b9:4a:59:bb:dc:22:01:f6:39:25:8b:be: 40:01:c6:4e:41:bf:6a:81:0a:68:8d:b3:83:fb:90:2f:4b:80: 75:ac:e5:bb:c3:b8:09:26:1d:26:08:d2:be:2d:58:50:47:d2: bd:ab:1e:87:a5:e5:81:1b:3d:a1:12:2a:fe:c2:b8:6b:df:d1: 6d:5d:4b:a2:e3:8c:7b:2b:66:27:b8:37:59:68:58:1e:ad:70: 6e:12:ae:b0:7e:be:82:32:a4:ef:e4:15:97:4b:51:31:27:73: 67:58:5b:f1:3b:d2:af:39:26:66:a6:5f:c6:03:db:50:b3:2b: a5:f1:9d:4e:be:a7:ad:cc:1f:0a:16:12:9f:78:a4:2b:b9:ea: 61:cf:87:7c:ae:c8:75:79:67:27:06:95:55:c4:e1:43:42:7c: df:00:1a:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cuk9iwr8HhDKfgICKTJYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxNGFhNTU3YzNkM2QxZTZiN2YwNTI1YzM0Y2MxZDQ4OGE1 YTkyOTQwHhcNMjUxMjA2MTkwMjA0WhcNMjUxMjA3MTkwMjA0WjAzMTEwLwYDVQQD EyhhMjdkZjRiZDcyOGM1Zjc1OTg5NWM4NzA5YjYwOTRiYTVmODk0OTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUJ7IuH4KgGbGta3nKhWx8l3QE5q HWrDs1IE/yZQtoPAi9V8QkhcNXnJl1H401opdGLLMfZ6SKE0Tq4na6nE8xJHQPmL NtBFETW/7G/8w6TzvNPh+ImLW5KljoDlvDZrddBA440an6Jya1Nt9fN/Wkq+oMgz Era5BICrQLUTO6kE7bXarKtWVUsNI1RGw4nzIwyE8EW3wkT7oSIevE1r9vIrNefD ANJYQ0DA8ux6mAaeA5fEqNMkh573nZv1AkLptGg/XDuDmsBdqXuZhdggsGr84ZX9 cVUP0+CXcDW9mTSHrKAt9jdzLjL8hOZ21qhX5TeccJHpRytJBRSTuCDa5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJ99L1yjF91mJXIcJtglLpfiUlNMB8GA1UdIwQY MBaAFJFKpVfD09Hmt/BSXDTMHUiKWpKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYt NGEzNDhlN2JlNDQxLzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYtNGEzNDhlN2JlNDQx LzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE7huO09I +NYMrvWdoDd+iXDqK33kchmBKf717ROGOndyVdRxfrPyrdn5pXCdoKlPmEfHsnas kL8sgDxgOsSpgnV1SmWk+BbqBHPu5gCMKYcUxa/B6Yp/dDMQ8cRz5WhCuUpZu9wi AfY5JYu+QAHGTkG/aoEKaI2zg/uQL0uAdazlu8O4CSYdJgjSvi1YUEfSvaseh6Xl gRs9oRIq/sK4a9/RbV1LouOMeytmJ7g3WWhYHq1wbhKusH6+gjKk7+QVl0tRMSdz Z1hb8TvSrzkmZqZfxgPbULMrpfGdTr6nrcwfChYSn3ikK7nqYc+HfK7IdXlnJwaV VcThQ0J83wAalg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:20:50 2025 by rpki-client