This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft File: kQRcV5lsmjyeYnekMmsRgyFdW2o.mft (raw, json) Hash identifier: /m6VOx358s7Oni8xrszNmfR3XuuBWsX4sMGTYvUZIjA= Subject key identifier: C0:22:41:79:4D:89:95:85:1F:C5:F5:4B:6A:9A:64:46:F5:AC:BD:68 Authority key identifier: 91:04:5C:57:99:6C:9A:3C:9E:62:77:A4:32:6B:11:83:21:5D:5B:6A Certificate issuer: /CN=91045c57996c9a3c9e6277a4326b1183215d5b6a Certificate serial: 019AF31B58F12D3CB4EF7A35A96244E2CA5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft Manifest number: 115C Signing time: Sat 06 Dec 2025 10:00:47 +0000 Manifest this update: Sat 06 Dec 2025 10:00:47 +0000 Manifest next update: Sun 07 Dec 2025 10:00:47 +0000 Files and hashes: 1: 75qkVCY5XXIcFQQiW3dyFVzW6eQ.roa (hash: dXFNWNpycxDfWS4F1kZ68a/+XDX33UqEzrugZvo8DVg=) 2: kQRcV5lsmjyeYnekMmsRgyFdW2o.crl (hash: pLjXcKStKoy/4alpBJQJ5/sqCI5WlIaje0ZcO/4vQsI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.crl rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:58:f1:2d:3c:b4:ef:7a:35:a9:62:44:e2:ca:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91045c57996c9a3c9e6277a4326b1183215d5b6a Validity Not Before: Dec 6 10:00:47 2025 GMT Not After : Dec 7 10:00:47 2025 GMT Subject: CN=c02241794d8995851fc5f54b6a9a6446f5acbd68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2f:f4:f6:d2:cd:30:ae:3f:9e:45:2b:66:f7: 5a:de:f8:06:2f:15:31:1d:f6:2b:0b:2d:5d:78:86: df:6b:fb:fa:25:38:d2:3a:22:a9:3d:69:45:5c:82: e1:db:6c:ca:ea:b0:e2:e1:b6:ab:df:d9:17:df:96: aa:47:a2:fe:17:18:43:25:e0:cc:79:5d:10:a5:7c: 06:56:8d:88:aa:90:15:66:e6:1e:3d:6f:b8:59:22: 8b:5c:0b:ac:9d:76:4d:ea:9e:0b:89:fb:13:d9:f8: f6:3a:71:cb:b5:d0:ac:9b:1e:fb:89:f2:d9:ba:60: d7:e8:55:42:55:96:be:6e:c6:d9:79:5e:56:87:a6: 7a:f0:7d:0f:3f:2a:43:95:d8:a8:10:60:4b:92:8c: 50:2d:68:df:b7:2a:2e:7f:da:85:10:04:2e:5a:4a: e2:d6:77:4e:b0:1b:83:71:fa:bd:5a:40:0c:73:3a: bb:6d:4a:f1:2f:47:89:55:ba:5d:8f:a0:cc:ce:51: 36:d5:87:dc:ed:ff:84:1e:71:e8:59:00:61:de:bb: 1f:e9:2c:9f:a4:2d:d0:86:d1:5a:52:3d:be:f0:b3: 53:81:fa:d9:73:fe:29:64:34:e1:64:83:14:eb:b7: 47:f1:c0:a0:d8:61:29:d2:5c:3d:2d:bc:ab:29:2a: 9e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:22:41:79:4D:89:95:85:1F:C5:F5:4B:6A:9A:64:46:F5:AC:BD:68 X509v3 Authority Key Identifier: keyid:91:04:5C:57:99:6C:9A:3C:9E:62:77:A4:32:6B:11:83:21:5D:5B:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:0f:22:9b:5c:ed:fe:2c:74:bf:9c:86:b1:88:1d:1b:2f:2f: 9a:97:d8:36:95:54:9f:b6:8c:82:0c:7d:26:fc:b9:75:b9:be: 8b:18:2a:a4:3e:78:07:0c:91:58:02:af:2f:07:bb:56:14:33: 95:e8:63:78:b8:45:48:56:0a:36:aa:88:72:45:1d:79:ed:7c: 55:50:53:c3:b1:32:b4:20:0f:49:8b:5e:70:c8:8d:51:a2:cf: 2f:3c:09:e6:0b:0a:fc:31:7b:de:db:c4:6b:20:05:8c:73:66: 3a:c4:06:5e:eb:36:0c:62:ed:d4:e0:d5:bf:43:fd:92:fe:53: 55:da:13:dc:92:d8:b6:91:f1:0a:f6:a8:76:90:02:97:de:6b: f6:21:b8:bc:fa:f9:fa:22:fe:df:d9:74:5b:c4:85:08:2a:ed: d6:80:00:30:4f:49:b8:27:8c:6e:f3:90:d8:db:db:21:f4:8f: 27:19:15:98:81:b9:9e:2e:d6:19:77:69:f3:23:7d:e8:59:1f: c1:1d:5d:db:02:26:6d:4c:9e:9b:38:d8:5f:e6:a4:2d:01:c3: ce:8e:d7:bd:1f:64:ab:ed:1e:d3:bf:c3:90:61:1f:c4:09:10: dc:e5:1d:7d:08:2e:19:ac:3c:ba:1e:12:15:c7:16:d9:b0:a1: 57:cf:70:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG1jxLTy073o1qWJE4spfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxMDQ1YzU3OTk2YzlhM2M5ZTYyNzdhNDMyNmIxMTgzMjE1 ZDViNmEwHhcNMjUxMjA2MTAwMDQ3WhcNMjUxMjA3MTAwMDQ3WjAzMTEwLwYDVQQD EyhjMDIyNDE3OTRkODk5NTg1MWZjNWY1NGI2YTlhNjQ0NmY1YWNiZDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxC/09tLNMK4/nkUrZvda3vgGLxUx HfYrCy1deIbfa/v6JTjSOiKpPWlFXILh22zK6rDi4bar39kX35aqR6L+FxhDJeDM eV0QpXwGVo2IqpAVZuYePW+4WSKLXAusnXZN6p4LifsT2fj2OnHLtdCsmx77ifLZ umDX6FVCVZa+bsbZeV5Wh6Z68H0PPypDldioEGBLkoxQLWjftyouf9qFEAQuWkri 1ndOsBuDcfq9WkAMczq7bUrxL0eJVbpdj6DMzlE21Yfc7f+EHnHoWQBh3rsf6Syf pC3QhtFaUj2+8LNTgfrZc/4pZDThZIMU67dH8cCg2GEp0lw9LbyrKSqeBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMAiQXlNiZWFH8X1S2qaZEb1rL1oMB8GA1UdIwQY MBaAFJEEXFeZbJo8nmJ3pDJrEYMhXVtqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1FSY1Y1bHNtanllWW5la01tc1JneUZkVzJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS81ZmE2ODEtMjU2Ni00MGVlLTlmMDQt NWRmNDQyOTViNGM5LzEva1FSY1Y1bHNtanllWW5la01tc1JneUZkVzJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS81ZmE2ODEtMjU2Ni00MGVlLTlmMDQtNWRmNDQyOTViNGM5 LzEva1FSY1Y1bHNtanllWW5la01tc1JneUZkVzJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbQ8im1zt /ix0v5yGsYgdGy8vmpfYNpVUn7aMggx9Jvy5dbm+ixgqpD54BwyRWAKvLwe7VhQz lehjeLhFSFYKNqqIckUdee18VVBTw7EytCAPSYtecMiNUaLPLzwJ5gsK/DF73tvE ayAFjHNmOsQGXus2DGLt1ODVv0P9kv5TVdoT3JLYtpHxCvaodpACl95r9iG4vPr5 +iL+39l0W8SFCCrt1oAAME9JuCeMbvOQ2NvbIfSPJxkVmIG5ni7WGXdp8yN96Fkf wR1d2wImbUyemzjYX+akLQHDzo7XvR9kq+0e07/DkGEfxAkQ3OUdfQguGaw8uh4S FccW2bChV89wjQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:47:00 2025 by rpki-client