This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft File: KEQn3OurQOvBmDny0l7qLOClYv8.mft (raw, json) Hash identifier: eg/bSilvJALuVjaJR7Z8wS2iBsmEP1u2wNApMgN7dxM= Subject key identifier: 6B:88:B4:44:61:67:81:F4:B5:69:BD:0F:66:8A:AB:63:36:7A:D9:DD Authority key identifier: 28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF Certificate issuer: /CN=284427dcebab40ebc19839f2d25eea2ce0a562ff Certificate serial: 019AF61C3C33832F470EECFA12B1B4DACA6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft Manifest number: 062C Signing time: Sun 07 Dec 2025 00:00:36 +0000 Manifest this update: Sun 07 Dec 2025 00:00:36 +0000 Manifest next update: Mon 08 Dec 2025 00:00:36 +0000 Files and hashes: 1: D46Ir3fESQdKV4ntE1MciVCeNwY.roa (hash: ND9cgWv5J0hNtKyrA/zDulukUC/W3FHSN0hW88QXa3s=) 2: KEQn3OurQOvBmDny0l7qLOClYv8.crl (hash: YlyKgtjelU/OWrq85gyhBu24IRxrPPSbWWIrBCEcymM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:3c:33:83:2f:47:0e:ec:fa:12:b1:b4:da:ca:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=284427dcebab40ebc19839f2d25eea2ce0a562ff Validity Not Before: Dec 7 00:00:36 2025 GMT Not After : Dec 8 00:00:36 2025 GMT Subject: CN=6b88b444616781f4b569bd0f668aab63367ad9dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2b:a2:48:e3:56:ee:30:e0:58:b7:e5:fe:ed: cb:c9:d9:68:38:2e:14:7f:7a:f1:53:af:1c:16:f9: 0f:bf:78:ef:0a:b6:0f:06:97:03:8a:b8:6c:7e:c5: 62:83:29:b1:f1:86:a4:cb:55:57:e6:3c:b4:58:dd: 7e:8a:68:77:4e:2d:21:9d:1e:93:59:4d:c0:f8:9e: 3a:65:7a:48:96:f8:bb:0c:43:94:b4:b4:95:59:b6: 11:d2:6b:a2:c8:98:d9:94:5f:cd:3a:9f:f8:44:75: 39:c0:d4:59:ff:37:63:30:4c:66:b0:c1:d8:70:30: ee:b4:02:18:c7:0c:2a:3d:e3:f2:dc:1b:38:13:ee: 49:22:72:82:2b:8d:8d:3e:31:17:a1:6e:a2:85:35: 6b:d5:60:15:ca:c0:d8:e5:99:f8:a5:df:11:d2:69: bc:99:6a:d2:d4:d0:11:28:01:c4:60:0a:15:c4:ea: 3d:5a:51:a0:db:25:d6:f0:a0:b4:7d:d0:ea:c4:6b: fb:a5:34:99:73:d5:79:27:7d:1d:43:14:15:b1:94: 2b:fe:67:b8:69:b7:17:8c:11:ab:81:96:2d:36:b8: 53:70:47:10:94:06:fc:2f:5e:82:2b:8b:18:59:9c: 4f:7d:6a:f8:6b:ea:96:59:7c:f4:ce:4c:7d:6b:c7: 03:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:88:B4:44:61:67:81:F4:B5:69:BD:0F:66:8A:AB:63:36:7A:D9:DD X509v3 Authority Key Identifier: keyid:28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:04:8d:6c:63:75:f2:b1:6c:b2:28:ee:c2:6f:56:d9:48:75: 65:d5:9c:91:24:5e:26:07:88:89:51:4d:88:a0:e5:2c:93:9f: 12:0c:4a:ec:8a:50:08:35:0a:c8:71:a7:63:36:41:9f:ca:68: 4b:35:76:ee:99:69:29:53:2d:9d:6f:72:ca:b4:9a:21:f3:99: c8:8b:3e:4f:8d:ca:e3:87:27:46:d5:07:35:6e:55:7b:45:67: c0:a1:8f:c5:e8:4f:57:91:c5:16:88:8d:ab:9e:0d:d2:00:53: 75:e9:db:11:3a:3a:07:99:1b:f7:ce:8c:87:f8:60:ae:72:6a: 62:86:37:f1:a8:e1:67:e1:4d:37:bb:7d:2d:33:e9:09:cb:69: 21:84:15:c1:bd:da:21:a5:a6:81:d7:18:47:61:c3:7e:d6:51: 41:ab:8f:72:50:3e:3d:02:fa:47:ea:2e:92:5e:10:91:79:41: 3b:78:d2:0d:6e:50:23:54:00:d9:45:00:a7:75:ab:ed:7f:41: bb:61:d5:3d:f2:c3:92:dc:b8:54:0e:1b:35:ed:47:7c:e2:62: 71:ed:a1:38:71:8f:84:05:fb:8d:b0:c8:3e:2c:04:34:29:2a: 1e:65:9f:ad:74:f3:36:c8:a0:4d:25:7b:fd:45:1b:02:b8:d6: ff:64:7d:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HDwzgy9HDuz6ErG02sprMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4NDQyN2RjZWJhYjQwZWJjMTk4MzlmMmQyNWVlYTJjZTBh NTYyZmYwHhcNMjUxMjA3MDAwMDM2WhcNMjUxMjA4MDAwMDM2WjAzMTEwLwYDVQQD Eyg2Yjg4YjQ0NDYxNjc4MWY0YjU2OWJkMGY2NjhhYWI2MzM2N2FkOWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSuiSONW7jDgWLfl/u3LydloOC4U f3rxU68cFvkPv3jvCrYPBpcDirhsfsVigymx8Yaky1VX5jy0WN1+imh3Ti0hnR6T WU3A+J46ZXpIlvi7DEOUtLSVWbYR0muiyJjZlF/NOp/4RHU5wNRZ/zdjMExmsMHY cDDutAIYxwwqPePy3Bs4E+5JInKCK42NPjEXoW6ihTVr1WAVysDY5Zn4pd8R0mm8 mWrS1NARKAHEYAoVxOo9WlGg2yXW8KC0fdDqxGv7pTSZc9V5J30dQxQVsZQr/me4 abcXjBGrgZYtNrhTcEcQlAb8L16CK4sYWZxPfWr4a+qWWXz0zkx9a8cDcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGuItERhZ4H0tWm9D2aKq2M2etndMB8GA1UdIwQY MBaAFChEJ9zrq0DrwZg58tJe6izgpWL/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0VRbjNPdXJRT3ZCbURueTBsN3FMT0NsWXY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS80NmQ4YjQtOGY0Ny00ZTkzLWFjYzIt NTBkMDA1NzgyZmFiLzEvS0VRbjNPdXJRT3ZCbURueTBsN3FMT0NsWXY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS80NmQ4YjQtOGY0Ny00ZTkzLWFjYzItNTBkMDA1NzgyZmFi LzEvS0VRbjNPdXJRT3ZCbURueTBsN3FMT0NsWXY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtASNbGN1 8rFssijuwm9W2Uh1ZdWckSReJgeIiVFNiKDlLJOfEgxK7IpQCDUKyHGnYzZBn8po SzV27plpKVMtnW9yyrSaIfOZyIs+T43K44cnRtUHNW5Ve0VnwKGPxehPV5HFFoiN q54N0gBTdenbETo6B5kb986Mh/hgrnJqYoY38ajhZ+FNN7t9LTPpCctpIYQVwb3a IaWmgdcYR2HDftZRQauPclA+PQL6R+oukl4QkXlBO3jSDW5QI1QA2UUAp3Wr7X9B u2HVPfLDkty4VA4bNe1HfOJice2hOHGPhAX7jbDIPiwENCkqHmWfrXTzNsigTSV7 /UUbArjW/2R9sw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:48:48 2025 by rpki-client