This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.mft File: KQgY9N9Ka9El1fIhJBRaafW2o0w.mft (raw, json) Hash identifier: y7j0SXCRLEXbf+BfWJZGh+WXgKWkr7t2zx/er83sSpU= Subject key identifier: 12:96:7E:BC:94:65:23:5B:CD:DE:C8:DA:E9:46:E4:F0:B5:58:40:CD Authority key identifier: 29:08:18:F4:DF:4A:6B:D1:25:D5:F2:21:24:14:5A:69:F5:B6:A3:4C Certificate issuer: /CN=290818f4df4a6bd125d5f22124145a69f5b6a34c Certificate serial: 019AF6F83774DB0B4E0BCF7159BD5160C18B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQgY9N9Ka9El1fIhJBRaafW2o0w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.mft Manifest number: 01E0 Signing time: Sun 07 Dec 2025 04:00:53 +0000 Manifest this update: Sun 07 Dec 2025 04:00:53 +0000 Manifest next update: Mon 08 Dec 2025 04:00:53 +0000 Files and hashes: 1: KQgY9N9Ka9El1fIhJBRaafW2o0w.crl (hash: bfnOgmQZ16fZP/RSdaP/labbK+vb6JCU1W9J9UJ4iUA=) 2: eRG91sI4OxgJ5Ftj11HHCdo0lp4.roa (hash: XcHiB6tZLyMWY77AGAaJ1ywYGGueBg3m4NiJeGQTKn0=) 3: gH5Nx8BjDuFW9EStmNz8wzpaF0c.roa (hash: 4+5mIuyJK0b0oNUWLYEpywekd9cxzAgZ3IGvlVb8A04=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.mft rsync://rpki.ripe.net/repository/DEFAULT/KQgY9N9Ka9El1fIhJBRaafW2o0w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f8:37:74:db:0b:4e:0b:cf:71:59:bd:51:60:c1:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=290818f4df4a6bd125d5f22124145a69f5b6a34c Validity Not Before: Dec 7 04:00:53 2025 GMT Not After : Dec 8 04:00:53 2025 GMT Subject: CN=12967ebc9465235bcddec8dae946e4f0b55840cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c3:08:ae:bd:a8:81:07:e1:ca:f3:77:13:a4: 6d:a3:6e:cf:ca:04:43:f7:03:50:be:13:c6:33:97: d9:44:20:fa:1c:2b:98:50:6f:8b:57:2e:6f:90:a3: ad:d7:b3:b1:69:8e:bc:1b:a1:5c:85:4d:e5:7e:b9: 9b:14:33:43:b1:e2:0b:b0:67:60:91:17:af:3a:ad: c8:9a:3e:3a:82:5e:74:bb:8d:6d:b7:e0:e4:7c:8a: 97:cc:ca:e2:dc:ca:22:1c:49:1c:04:02:3a:ec:63: bb:31:01:5a:6f:10:db:4b:0c:f9:59:a1:2a:a9:77: f5:41:76:14:bc:be:e8:2f:cd:7c:ed:d0:86:f7:86: 9c:37:cb:80:88:9b:c7:a9:b4:91:17:9d:5b:7d:f0: 19:04:53:ec:1b:c7:b1:af:0d:e8:f3:22:cb:a5:2a: e2:6f:47:a3:95:d9:d5:64:eb:3a:7f:e1:5d:b6:88: dd:b4:55:0e:8a:50:98:6c:b3:a8:83:ec:e3:b0:cf: 96:85:49:4d:84:52:d6:8b:92:47:07:1d:98:fd:33: 25:1d:83:14:2c:67:77:e9:44:79:38:64:80:92:b2: fd:c4:cf:f0:b0:a5:e3:50:3e:5b:28:1f:54:6d:36: d2:0f:52:bf:ae:94:ed:ec:a6:3e:61:0f:d3:b4:fe: 5c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:96:7E:BC:94:65:23:5B:CD:DE:C8:DA:E9:46:E4:F0:B5:58:40:CD X509v3 Authority Key Identifier: keyid:29:08:18:F4:DF:4A:6B:D1:25:D5:F2:21:24:14:5A:69:F5:B6:A3:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQgY9N9Ka9El1fIhJBRaafW2o0w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:6e:67:8f:5b:71:f6:c3:b8:c3:97:5d:33:44:5b:51:45:94: e8:f5:a2:98:aa:79:27:ce:8c:a5:84:fa:26:83:cf:52:9a:a7: 5a:92:34:75:83:6b:dd:a3:14:e1:8d:f5:cf:87:24:44:5e:5b: 68:cf:a9:c8:8f:05:9c:21:50:19:50:56:42:bc:4b:22:4c:eb: 43:41:f4:10:48:d6:18:bc:90:c7:18:97:cf:7c:84:6e:c4:db: ca:6b:90:86:ea:9b:84:fc:b8:ab:b2:3d:35:25:c9:44:7f:52: 62:bc:86:be:99:13:41:01:9a:cd:f7:0e:52:46:a8:a4:d3:8e: 73:07:af:fb:4e:73:fe:ab:d8:df:e2:99:92:ef:33:61:eb:e7: 97:be:a5:87:47:1c:38:0d:13:7d:97:b3:e9:15:6f:5b:98:36: 8b:5c:fd:06:98:de:97:eb:ab:07:6c:2b:48:a5:5e:ef:cd:5c: 36:91:f6:d4:05:38:2c:97:27:15:e5:53:5d:06:d1:42:75:0f: f0:52:3f:68:25:ff:89:77:13:d2:86:de:84:07:cb:7b:4a:2f: d9:36:c0:a0:6d:d8:41:93:4a:30:94:31:c8:c6:78:bb:8b:f0: bd:6f:0e:92:a2:49:50:b8:58:21:86:9a:cc:33:bf:e5:a8:f2: ce:5c:c7:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+Dd02wtOC89xWb1RYMGLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MDgxOGY0ZGY0YTZiZDEyNWQ1ZjIyMTI0MTQ1YTY5ZjVi NmEzNGMwHhcNMjUxMjA3MDQwMDUzWhcNMjUxMjA4MDQwMDUzWjAzMTEwLwYDVQQD EygxMjk2N2ViYzk0NjUyMzViY2RkZWM4ZGFlOTQ2ZTRmMGI1NTg0MGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MMIrr2ogQfhyvN3E6Rto27PygRD 9wNQvhPGM5fZRCD6HCuYUG+LVy5vkKOt17OxaY68G6FchU3lfrmbFDNDseILsGdg kRevOq3Imj46gl50u41tt+DkfIqXzMri3MoiHEkcBAI67GO7MQFabxDbSwz5WaEq qXf1QXYUvL7oL8187dCG94acN8uAiJvHqbSRF51bffAZBFPsG8exrw3o8yLLpSri b0ejldnVZOs6f+FdtojdtFUOilCYbLOog+zjsM+WhUlNhFLWi5JHBx2Y/TMlHYMU LGd36UR5OGSAkrL9xM/wsKXjUD5bKB9UbTbSD1K/rpTt7KY+YQ/TtP5cEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBKWfryUZSNbzd7I2ulG5PC1WEDNMB8GA1UdIwQY MBaAFCkIGPTfSmvRJdXyISQUWmn1tqNMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1FnWTlOOUthOUVsMWZJaEpCUmFhZlcybzB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9lNTdlZmItODYxYi00OTMxLTg4ZDMt ZGQ5NzNkYTQyNzIxLzEvS1FnWTlOOUthOUVsMWZJaEpCUmFhZlcybzB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9lNTdlZmItODYxYi00OTMxLTg4ZDMtZGQ5NzNkYTQyNzIx LzEvS1FnWTlOOUthOUVsMWZJaEpCUmFhZlcybzB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfm5nj1tx 9sO4w5ddM0RbUUWU6PWimKp5J86MpYT6JoPPUpqnWpI0dYNr3aMU4Y31z4ckRF5b aM+pyI8FnCFQGVBWQrxLIkzrQ0H0EEjWGLyQxxiXz3yEbsTbymuQhuqbhPy4q7I9 NSXJRH9SYryGvpkTQQGazfcOUkaopNOOcwev+05z/qvY3+KZku8zYevnl76lh0cc OA0TfZez6RVvW5g2i1z9Bpjel+urB2wrSKVe781cNpH21AU4LJcnFeVTXQbRQnUP 8FI/aCX/iXcT0obehAfLe0ov2TbAoG3YQZNKMJQxyMZ4u4vwvW8OkqJJULhYIYaa zDO/5ajyzlzHjw== -----END CERTIFICATE-----Generated at Sun Dec 7 06:09:35 2025 by rpki-client