This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.mft File: KQzE0K1dr8J6pONC-oDjSBToRcM.mft (raw, json) Hash identifier: 4H3Js/I5XURu7ta//BNiPfkWhvp94is1VRSTsl8Kfw8= Subject key identifier: 5D:6E:26:6D:72:96:73:5D:2B:92:F8:7B:55:C9:86:06:AF:C0:52:AA Authority key identifier: 29:0C:C4:D0:AD:5D:AF:C2:7A:A4:E3:42:FA:80:E3:48:14:E8:45:C3 Certificate issuer: /CN=290cc4d0ad5dafc27aa4e342fa80e34814e845c3 Certificate serial: 019AF2ADDA3F08D68601B2E8190EE15ACBDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQzE0K1dr8J6pONC-oDjSBToRcM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.mft Manifest number: 079F Signing time: Sat 06 Dec 2025 08:01:11 +0000 Manifest this update: Sat 06 Dec 2025 08:01:11 +0000 Manifest next update: Sun 07 Dec 2025 08:01:11 +0000 Files and hashes: 1: 187N4PB5lNzYnkhVyKxTgG2ufTQ.roa (hash: nnFT2Pv1VSMMW5/AFw9H17xWytd4IEI7JaypDZR0hFg=) 2: KQzE0K1dr8J6pONC-oDjSBToRcM.crl (hash: eT+fzXN5Q2zfsVdCt8FNOVF/+TGxvPBHAU9tYAJV3iY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.mft rsync://rpki.ripe.net/repository/DEFAULT/KQzE0K1dr8J6pONC-oDjSBToRcM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:da:3f:08:d6:86:01:b2:e8:19:0e:e1:5a:cb:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=290cc4d0ad5dafc27aa4e342fa80e34814e845c3 Validity Not Before: Dec 6 08:01:11 2025 GMT Not After : Dec 7 08:01:11 2025 GMT Subject: CN=5d6e266d7296735d2b92f87b55c98606afc052aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8d:0a:e0:66:c5:83:90:e3:e7:74:d7:88:f5: 67:d1:cb:28:dd:f5:02:95:a4:1b:cd:d0:9f:35:b0: 48:1d:04:4c:23:9f:b3:3d:9c:c8:72:4d:8e:7c:df: f4:0d:50:d3:3a:61:53:71:d4:c9:51:09:d9:dc:2b: 1c:73:d4:de:2a:e0:e3:b7:62:2f:ce:60:86:19:c0: cf:03:ea:44:79:9b:38:92:a2:88:4b:02:ae:ec:72: 5b:fa:de:7d:6c:1d:6d:d7:62:44:4a:fb:21:9d:d1: 3a:cf:61:d0:fc:d1:31:5b:c9:90:e5:3d:52:8b:80: 00:a4:47:98:51:84:04:d8:a9:50:f6:d8:33:3b:50: 7d:9b:cd:8c:0f:85:27:1f:c8:8c:cb:da:1c:d2:e3: 0a:5a:e8:56:f4:89:61:2f:78:3f:80:8e:2c:29:5d: 5a:6e:59:ca:5d:28:a1:44:95:d8:0d:63:87:fe:ff: d0:97:d0:5e:7e:e9:1e:dc:c7:4e:43:ec:48:08:bd: 90:dc:31:db:88:25:79:cb:3c:c1:04:90:34:24:dd: 73:76:b2:72:ad:fe:75:6b:d3:91:48:42:13:4e:63: b3:db:9f:3c:04:fe:49:5b:ba:17:fa:13:1a:c9:42: 90:5f:bd:d8:f5:62:1b:7d:23:a7:16:7d:db:1c:bd: 6c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:6E:26:6D:72:96:73:5D:2B:92:F8:7B:55:C9:86:06:AF:C0:52:AA X509v3 Authority Key Identifier: keyid:29:0C:C4:D0:AD:5D:AF:C2:7A:A4:E3:42:FA:80:E3:48:14:E8:45:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQzE0K1dr8J6pONC-oDjSBToRcM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:b1:20:fc:7a:50:f1:a3:bb:80:f2:2b:91:3a:6b:77:a5:0b: 69:fc:af:1f:9c:d5:dd:98:ba:52:00:24:14:4e:25:de:05:6a: ac:7e:47:e6:38:d4:26:31:f4:99:40:07:21:be:8a:13:3a:6a: 21:a7:ea:9f:a7:64:f8:9b:ac:83:36:14:08:39:40:e8:b6:6d: d5:cf:9a:6f:c8:43:2e:e6:42:bf:9a:6a:9c:b7:a5:38:d0:b9: 6f:cb:51:8b:42:0d:9e:84:98:2e:a3:d7:1f:55:56:87:2e:ac: 38:48:6d:2e:a3:e6:f1:09:74:e5:fa:80:37:a0:ea:72:94:c1: a0:7b:bc:47:3b:61:e8:7d:5c:82:8a:b6:cd:65:ae:79:81:a4: 93:b4:6e:a4:0d:2f:3e:70:77:fc:96:f1:b5:4b:6c:3f:47:f8: ac:c0:22:c3:9c:ad:77:8c:2e:c5:3d:a3:bd:4d:30:8c:6d:0b: 26:6d:9d:5c:75:89:29:c8:28:f0:3b:cc:4b:fa:ba:08:e1:2a: 91:3b:a0:55:99:b1:5f:34:42:7e:43:e0:97:e8:ea:3e:e6:f6: 3d:7d:8d:09:63:63:e6:94:31:6b:64:c1:2f:02:2a:0d:fa:4e: 40:13:48:90:08:c3:19:0f:9c:93:c8:83:c7:40:8f:79:64:b9: 34:e7:c7:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrdo/CNaGAbLoGQ7hWsvfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MGNjNGQwYWQ1ZGFmYzI3YWE0ZTM0MmZhODBlMzQ4MTRl ODQ1YzMwHhcNMjUxMjA2MDgwMTExWhcNMjUxMjA3MDgwMTExWjAzMTEwLwYDVQQD Eyg1ZDZlMjY2ZDcyOTY3MzVkMmI5MmY4N2I1NWM5ODYwNmFmYzA1MmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxY0K4GbFg5Dj53TXiPVn0cso3fUC laQbzdCfNbBIHQRMI5+zPZzIck2OfN/0DVDTOmFTcdTJUQnZ3Cscc9TeKuDjt2Iv zmCGGcDPA+pEeZs4kqKISwKu7HJb+t59bB1t12JESvshndE6z2HQ/NExW8mQ5T1S i4AApEeYUYQE2KlQ9tgzO1B9m82MD4UnH8iMy9oc0uMKWuhW9IlhL3g/gI4sKV1a blnKXSihRJXYDWOH/v/Ql9Befuke3MdOQ+xICL2Q3DHbiCV5yzzBBJA0JN1zdrJy rf51a9ORSEITTmOz2588BP5JW7oX+hMayUKQX73Y9WIbfSOnFn3bHL1sYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF1uJm1ylnNdK5L4e1XJhgavwFKqMB8GA1UdIwQY MBaAFCkMxNCtXa/CeqTjQvqA40gU6EXDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1F6RTBLMWRyOEo2cE9OQy1vRGpTQlRvUmNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS85MjM1MmYtNDA1MS00NTBlLWIzYTYt MmUwMDc4Y2VlMTgyLzEvS1F6RTBLMWRyOEo2cE9OQy1vRGpTQlRvUmNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS85MjM1MmYtNDA1MS00NTBlLWIzYTYtMmUwMDc4Y2VlMTgy LzEvS1F6RTBLMWRyOEo2cE9OQy1vRGpTQlRvUmNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAObEg/HpQ 8aO7gPIrkTprd6ULafyvH5zV3Zi6UgAkFE4l3gVqrH5H5jjUJjH0mUAHIb6KEzpq Iafqn6dk+JusgzYUCDlA6LZt1c+ab8hDLuZCv5pqnLelONC5b8tRi0INnoSYLqPX H1VWhy6sOEhtLqPm8Ql05fqAN6DqcpTBoHu8Rzth6H1cgoq2zWWueYGkk7RupA0v PnB3/JbxtUtsP0f4rMAiw5ytd4wuxT2jvU0wjG0LJm2dXHWJKcgo8DvMS/q6COEq kTugVZmxXzRCfkPgl+jqPub2PX2NCWNj5pQxa2TBLwIqDfpOQBNIkAjDGQ+ck8iD x0CPeWS5NOfH4A== -----END CERTIFICATE-----Generated at Sat Dec 6 12:14:30 2025 by rpki-client