This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft File: KqttsAX47NmhIcY2hYB17xMUXbA.mft (raw, json) Hash identifier: 2D68feQmS/SsEt7cnhkwcvDfKgid8bdFqGUAbbAGP2I= Subject key identifier: B9:E9:5D:B9:F1:14:26:6C:2A:38:41:59:E1:9F:8D:38:38:AA:F0:57 Authority key identifier: 2A:AB:6D:B0:05:F8:EC:D9:A1:21:C6:36:85:80:75:EF:13:14:5D:B0 Certificate issuer: /CN=2aab6db005f8ecd9a121c636858075ef13145db0 Certificate serial: 019AF12EE6C77E29D51A5635931E0762C5E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqttsAX47NmhIcY2hYB17xMUXbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft Manifest number: 115C Signing time: Sat 06 Dec 2025 01:02:54 +0000 Manifest this update: Sat 06 Dec 2025 01:02:54 +0000 Manifest next update: Sun 07 Dec 2025 01:02:54 +0000 Files and hashes: 1: KqttsAX47NmhIcY2hYB17xMUXbA.crl (hash: RsVwSPGRlKu2th3FER7U67liacBtmT2zD/eDLBb8dEk=) 2: NTwv9MrFUxU0rREuWqapE-DiajI.roa (hash: hq+d0ybPFOeu8D+rx2edFf/i0EP0Jbrx83E12M+26zY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft rsync://rpki.ripe.net/repository/DEFAULT/KqttsAX47NmhIcY2hYB17xMUXbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:e6:c7:7e:29:d5:1a:56:35:93:1e:07:62:c5:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aab6db005f8ecd9a121c636858075ef13145db0 Validity Not Before: Dec 6 01:02:54 2025 GMT Not After : Dec 7 01:02:54 2025 GMT Subject: CN=b9e95db9f114266c2a384159e19f8d3838aaf057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:00:25:28:69:fe:b6:df:87:cb:eb:39:12:ae: b4:86:d0:b0:6b:b4:31:e3:9a:34:f4:e8:c1:86:2e: 0a:88:ed:5c:ba:7a:3e:6e:d2:95:f4:b1:4d:27:95: 61:df:3b:9f:d2:58:17:c3:7b:86:6d:91:be:c6:e7: 91:77:de:17:5c:c1:ed:80:c9:e3:ae:f5:2c:75:c3: 18:ab:7f:40:f1:b9:bd:75:27:d5:44:b0:51:50:8f: 8f:34:ee:77:e7:66:6c:c3:4f:dc:5e:98:9b:5c:dc: 21:be:ae:0f:a8:5b:f5:64:85:71:2f:f1:6d:a0:27: c5:af:49:15:6d:c7:b5:7c:0e:da:07:20:91:1f:6c: 86:1c:b8:07:42:df:b1:45:07:74:86:30:69:4d:a4: 93:02:56:7f:9f:fa:6b:f4:48:ef:5c:58:31:d4:12: 1e:0e:80:af:20:35:13:ce:f5:63:26:eb:72:b0:87: fb:81:65:71:b5:b2:0d:84:0e:21:9d:22:51:4e:d9: bf:11:ba:0d:27:a0:c7:40:26:73:e7:f5:d4:0c:de: 66:49:8a:ce:bc:1d:c9:1c:42:9e:39:af:6d:94:3f: 49:ac:42:3c:8d:15:96:fd:58:35:95:8d:a6:99:77: ca:a1:94:fa:a1:4c:88:f0:37:7e:12:06:23:f7:7b: 53:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E9:5D:B9:F1:14:26:6C:2A:38:41:59:E1:9F:8D:38:38:AA:F0:57 X509v3 Authority Key Identifier: keyid:2A:AB:6D:B0:05:F8:EC:D9:A1:21:C6:36:85:80:75:EF:13:14:5D:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqttsAX47NmhIcY2hYB17xMUXbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:8f:8f:77:8f:05:fd:47:c5:e5:98:a9:c3:d6:32:b2:5a:d7: fe:14:9b:a7:8c:1e:0f:e9:7e:81:23:c1:b9:07:8c:05:c5:99: d9:2b:11:f6:c9:8e:e3:55:f9:5a:06:75:00:ad:56:cb:7c:76: b3:fd:ce:c3:c1:5b:bd:d9:bc:cc:a7:06:6c:d1:b9:f4:07:91: 47:96:79:40:e4:41:e4:12:47:ea:98:7d:9b:5e:62:80:89:74: 68:f8:d7:a2:e0:2a:1f:f0:94:77:11:93:ac:8e:02:9a:c5:86: 17:9e:bb:dc:72:d7:5d:ae:8f:fc:8f:2d:fb:d6:c9:11:0a:9f: 54:cd:d9:68:84:e2:a9:c2:bc:f1:2c:eb:c9:8b:de:b7:db:50: 9a:20:b3:5e:93:1d:eb:2b:c9:df:d2:5b:19:5f:20:f8:67:30: 24:2d:a4:80:f0:85:ab:4e:ed:c4:be:40:c5:f2:98:ca:a2:eb: 75:38:70:6d:48:7d:c8:b6:3c:3f:53:e2:88:da:09:28:8c:db: 35:ff:4c:da:b4:0e:a4:ae:17:3e:28:01:6a:94:07:c0:80:4f: 65:d2:46:54:d2:d1:f2:38:e3:72:a2:ed:a3:d4:bc:c3:89:93: 17:0d:5d:62:b6:a0:dd:07:b9:f1:2b:5a:de:03:8e:89:4c:66: f3:29:62:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLubHfinVGlY1kx4HYsXkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYWI2ZGIwMDVmOGVjZDlhMTIxYzYzNjg1ODA3NWVmMTMx NDVkYjAwHhcNMjUxMjA2MDEwMjU0WhcNMjUxMjA3MDEwMjU0WjAzMTEwLwYDVQQD EyhiOWU5NWRiOWYxMTQyNjZjMmEzODQxNTllMTlmOGQzODM4YWFmMDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QAlKGn+tt+Hy+s5Eq60htCwa7Qx 45o09OjBhi4KiO1cuno+btKV9LFNJ5Vh3zuf0lgXw3uGbZG+xueRd94XXMHtgMnj rvUsdcMYq39A8bm9dSfVRLBRUI+PNO5352Zsw0/cXpibXNwhvq4PqFv1ZIVxL/Ft oCfFr0kVbce1fA7aByCRH2yGHLgHQt+xRQd0hjBpTaSTAlZ/n/pr9EjvXFgx1BIe DoCvIDUTzvVjJutysIf7gWVxtbINhA4hnSJRTtm/EboNJ6DHQCZz5/XUDN5mSYrO vB3JHEKeOa9tlD9JrEI8jRWW/Vg1lY2mmXfKoZT6oUyI8Dd+EgYj93tTUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLnpXbnxFCZsKjhBWeGfjTg4qvBXMB8GA1UdIwQY MBaAFCqrbbAF+OzZoSHGNoWAde8TFF2wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3F0dHNBWDQ3Tm1oSWNZMmhZQjE3eE1VWGJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84YzE3YmEtNWFiNC00ZjU5LWI0YmUt YWQ2YTgxYjgyYTE3LzEvS3F0dHNBWDQ3Tm1oSWNZMmhZQjE3eE1VWGJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi84YzE3YmEtNWFiNC00ZjU5LWI0YmUtYWQ2YTgxYjgyYTE3 LzEvS3F0dHNBWDQ3Tm1oSWNZMmhZQjE3eE1VWGJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw4+Pd48F /UfF5Zipw9YyslrX/hSbp4weD+l+gSPBuQeMBcWZ2SsR9smO41X5WgZ1AK1Wy3x2 s/3Ow8Fbvdm8zKcGbNG59AeRR5Z5QORB5BJH6ph9m15igIl0aPjXouAqH/CUdxGT rI4CmsWGF5673HLXXa6P/I8t+9bJEQqfVM3ZaITiqcK88SzryYvet9tQmiCzXpMd 6yvJ39JbGV8g+GcwJC2kgPCFq07txL5AxfKYyqLrdThwbUh9yLY8P1PiiNoJKIzb Nf9M2rQOpK4XPigBapQHwIBPZdJGVNLR8jjjcqLto9S8w4mTFw1dYrag3Qe58Sta 3gOOiUxm8yli9g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:54 2025 by rpki-client