This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft File: KEQn3OurQOvBmDny0l7qLOClYv8.mft (raw, json) Hash identifier: rL4dtefBmeS6tvHB1YwMGkWfJlac1r3FdhldWEhRcGs= Subject key identifier: 9F:BF:64:CB:DE:D3:AF:5C:DA:58:A6:4B:11:21:13:89:1D:9F:32:7F Authority key identifier: 28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF Certificate issuer: /CN=284427dcebab40ebc19839f2d25eea2ce0a562ff Certificate serial: 019AF42DD347EAEC5F4D112EA22D8E3C89D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft Manifest number: 062B Signing time: Sat 06 Dec 2025 15:00:35 +0000 Manifest this update: Sat 06 Dec 2025 15:00:35 +0000 Manifest next update: Sun 07 Dec 2025 15:00:35 +0000 Files and hashes: 1: D46Ir3fESQdKV4ntE1MciVCeNwY.roa (hash: ND9cgWv5J0hNtKyrA/zDulukUC/W3FHSN0hW88QXa3s=) 2: KEQn3OurQOvBmDny0l7qLOClYv8.crl (hash: VgD7sUhn+PAFYhMrNc76X16pwCJsgv5RlHGLQm6g6Cs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:d3:47:ea:ec:5f:4d:11:2e:a2:2d:8e:3c:89:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=284427dcebab40ebc19839f2d25eea2ce0a562ff Validity Not Before: Dec 6 15:00:35 2025 GMT Not After : Dec 7 15:00:35 2025 GMT Subject: CN=9fbf64cbded3af5cda58a64b112113891d9f327f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1b:0d:98:6f:5f:e3:3f:8f:a3:71:a3:97:a9: a3:01:52:a2:14:2b:a0:19:cd:a3:bc:10:0b:27:10: 68:26:c6:d1:b5:b9:ef:e0:06:fb:dc:9e:08:c6:7c: 36:c1:56:62:a2:0c:46:45:37:41:3a:76:84:fc:80: d9:f0:c6:ae:90:ec:5e:9f:a3:8d:6a:9c:d5:81:37: b7:50:83:6a:ee:46:31:85:3e:c2:2e:06:d9:9e:39: e3:fb:47:ec:98:a6:e5:1d:dc:09:73:05:07:4e:ed: e5:6d:27:c0:b2:95:11:28:54:0e:29:54:06:a6:e1: 33:3c:78:e2:25:dc:89:75:1d:84:18:ac:be:f3:85: b3:07:cb:f2:c2:35:32:67:f3:68:5d:fd:bf:9e:ca: 0f:5c:93:f8:b8:06:92:81:15:a6:ac:42:1a:e2:95: 71:68:8c:72:10:44:85:6f:4f:4b:57:72:12:13:10: 17:ba:7d:b3:90:36:d2:66:d8:6c:07:0e:db:7e:4d: 33:ac:9e:2c:22:63:ca:cc:6f:af:e6:a5:26:33:05: 4b:64:9e:6a:19:2e:80:50:af:21:b8:27:2f:a5:fd: e4:be:cc:cf:03:ff:30:b5:c5:74:80:06:71:64:08: 64:34:e0:82:e5:d8:a4:43:65:0e:81:bc:c9:07:90: 72:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:BF:64:CB:DE:D3:AF:5C:DA:58:A6:4B:11:21:13:89:1D:9F:32:7F X509v3 Authority Key Identifier: keyid:28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:2e:aa:49:d9:73:7b:0e:e2:56:c6:ae:61:22:5e:16:75:6a: 7f:38:fc:90:73:7e:c1:a6:66:f5:cd:07:c6:cb:b9:8c:04:d7: 49:af:07:9a:cf:0f:f3:e5:e4:a3:b9:c7:8a:dd:70:8b:d6:6f: e5:fa:bc:d2:7a:57:5c:b5:cf:98:44:6f:01:e0:4c:1c:67:36: 59:93:d1:c1:78:59:93:2c:ac:32:48:d8:7d:58:b8:e1:e9:32: 5b:72:51:c3:c2:ce:25:46:4d:a9:39:d6:ac:89:fd:bc:38:40: fd:e4:b2:0b:31:86:0b:c8:44:2c:51:28:2e:b1:c5:89:9c:3f: 8f:1e:67:dc:67:a8:71:51:cc:82:f4:8b:65:66:1a:00:18:13: 95:ac:58:ee:b3:f6:e7:25:05:44:b3:b4:44:35:fc:4e:bf:c7: 49:84:b2:3c:a4:8f:76:69:30:02:14:a3:55:c1:3a:9f:d2:e7: 97:d4:4c:55:02:54:b3:0e:97:3d:4d:10:3c:e6:ff:a9:c5:95: 04:63:94:21:e7:45:a0:31:9c:a1:96:23:20:c1:01:a6:14:19: 2a:4e:32:c4:d1:df:8f:be:d6:1e:5b:6a:6b:e3:95:92:2a:6b: 43:47:cc:cf:f1:2a:54:7f:da:19:b2:3e:1d:a3:91:e0:b0:75: 6b:1a:30:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LdNH6uxfTREuoi2OPInTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4NDQyN2RjZWJhYjQwZWJjMTk4MzlmMmQyNWVlYTJjZTBh NTYyZmYwHhcNMjUxMjA2MTUwMDM1WhcNMjUxMjA3MTUwMDM1WjAzMTEwLwYDVQQD Eyg5ZmJmNjRjYmRlZDNhZjVjZGE1OGE2NGIxMTIxMTM4OTFkOWYzMjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BsNmG9f4z+Po3Gjl6mjAVKiFCug Gc2jvBALJxBoJsbRtbnv4Ab73J4Ixnw2wVZiogxGRTdBOnaE/IDZ8MaukOxen6ON apzVgTe3UINq7kYxhT7CLgbZnjnj+0fsmKblHdwJcwUHTu3lbSfAspURKFQOKVQG puEzPHjiJdyJdR2EGKy+84WzB8vywjUyZ/NoXf2/nsoPXJP4uAaSgRWmrEIa4pVx aIxyEESFb09LV3ISExAXun2zkDbSZthsBw7bfk0zrJ4sImPKzG+v5qUmMwVLZJ5q GS6AUK8huCcvpf3kvszPA/8wtcV0gAZxZAhkNOCC5dikQ2UOgbzJB5ByMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ+/ZMve069c2limSxEhE4kdnzJ/MB8GA1UdIwQY MBaAFChEJ9zrq0DrwZg58tJe6izgpWL/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0VRbjNPdXJRT3ZCbURueTBsN3FMT0NsWXY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS80NmQ4YjQtOGY0Ny00ZTkzLWFjYzIt NTBkMDA1NzgyZmFiLzEvS0VRbjNPdXJRT3ZCbURueTBsN3FMT0NsWXY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS80NmQ4YjQtOGY0Ny00ZTkzLWFjYzItNTBkMDA1NzgyZmFi LzEvS0VRbjNPdXJRT3ZCbURueTBsN3FMT0NsWXY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATS6qSdlz ew7iVsauYSJeFnVqfzj8kHN+waZm9c0Hxsu5jATXSa8Hms8P8+Xko7nHit1wi9Zv 5fq80npXXLXPmERvAeBMHGc2WZPRwXhZkyysMkjYfVi44ekyW3JRw8LOJUZNqTnW rIn9vDhA/eSyCzGGC8hELFEoLrHFiZw/jx5n3GeocVHMgvSLZWYaABgTlaxY7rP2 5yUFRLO0RDX8Tr/HSYSyPKSPdmkwAhSjVcE6n9Lnl9RMVQJUsw6XPU0QPOb/qcWV BGOUIedFoDGcoZYjIMEBphQZKk4yxNHfj77WHltqa+OVkiprQ0fMz/EqVH/aGbI+ HaOR4LB1axowHg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:39:34 2025 by rpki-client