This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft File: KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft (raw, json) Hash identifier: 0pIEwGdpO6dssNd4Nsb21hU7nTeKh+YY4fOk6LIUH1E= Subject key identifier: 1C:F9:8E:60:DA:52:5F:D6:41:FB:92:F9:0F:D2:FF:97:4F:30:FB:42 Authority key identifier: 2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC Certificate issuer: /CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc Certificate serial: 019B2C9DA5D6131A727E0440358B4ECC69DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft Manifest number: 108B Signing time: Wed 17 Dec 2025 14:01:27 +0000 Manifest this update: Wed 17 Dec 2025 14:01:27 +0000 Manifest next update: Thu 18 Dec 2025 14:01:27 +0000 Files and hashes: 1: KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl (hash: 9Cic/TF7bdN1ch0edSieqpi6azIvLsAhlEUmqMY/8mM=) 2: UZvnE-CaTB9qoHVdVXMgB-LiNEM.roa (hash: Ycg6B0Rffq0DfziTHdPyE76c/wB4R/dWXA7Fjbacvbs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:9d:a5:d6:13:1a:72:7e:04:40:35:8b:4e:cc:69:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc Validity Not Before: Dec 17 14:01:27 2025 GMT Not After : Dec 18 14:01:27 2025 GMT Subject: CN=1cf98e60da525fd641fb92f90fd2ff974f30fb42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:12:9b:4b:96:f7:bf:2b:76:2d:9b:31:19:46: ef:45:ed:9e:9c:21:00:7d:49:b8:fc:ae:dc:48:49: 71:c5:54:ac:88:80:81:25:21:51:08:bb:7c:a6:58: 38:e3:32:43:0a:d9:2b:51:2c:57:f8:04:ba:e1:eb: 7e:d5:3e:18:16:bd:3a:24:a6:7d:4e:b5:fa:02:51: db:66:02:2b:b3:e5:f8:aa:3c:bb:65:48:ad:34:bd: db:1c:e4:8c:9a:3b:a2:10:14:f9:23:0a:a7:8f:63: 73:ce:39:43:6f:cd:4f:e3:c3:17:99:ac:ef:3f:fe: e2:2f:42:de:5f:51:46:3a:94:33:46:44:18:8f:42: b0:4f:0d:a1:9b:98:35:5b:1d:4f:bd:14:7d:19:ba: be:a5:3d:48:fc:93:3b:d5:af:be:e0:4c:96:02:15: d8:68:2a:7e:fa:2f:45:ef:62:8d:58:01:5c:b2:44: 81:84:f1:c1:1b:81:db:02:fd:a4:3c:dc:de:92:1e: b5:f8:41:bb:eb:fc:0f:ad:db:99:94:e8:4c:e3:9b: fe:5b:7c:e9:e7:f5:f5:b4:49:ad:bb:73:b4:51:0a: 98:9d:de:68:75:5c:a0:29:6a:b9:7f:89:77:fe:91: 03:cc:cf:35:3c:f5:b9:39:4e:40:1f:d4:48:6b:8c: 8a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F9:8E:60:DA:52:5F:D6:41:FB:92:F9:0F:D2:FF:97:4F:30:FB:42 X509v3 Authority Key Identifier: keyid:2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:ed:ad:c1:de:c1:2b:c0:5b:2f:50:0e:0c:a9:97:0e:b3:c1: a9:e0:a6:66:ff:49:32:9e:93:2e:42:6c:3f:f7:b4:3c:46:aa: 96:a7:c8:09:2a:70:fc:70:33:1d:f1:98:72:91:0b:1d:e7:ba: a1:fe:95:b8:7a:98:76:3f:0c:e7:d0:f8:d4:81:c2:3d:c9:99: da:be:5e:91:2d:44:eb:0c:af:a1:f3:a8:59:1d:b2:72:93:0e: 8e:19:04:57:6c:c5:bf:d6:4c:6b:5f:53:57:f8:6e:18:83:04: 65:69:4f:9a:19:a4:32:e0:e4:f1:80:94:43:b6:b0:ca:c1:12: 7b:f2:9f:01:33:1e:a9:9a:50:50:d9:86:f2:37:17:41:21:0e: be:ec:b8:59:88:35:12:05:fe:1a:79:53:78:13:5e:0d:15:49: 4e:f6:e2:8b:4f:04:df:71:53:68:1b:a8:11:d2:0e:21:41:3c: c0:58:ea:8f:f4:d5:8e:d1:f2:d9:7f:26:f3:d1:32:47:4f:e0: 94:f4:85:40:5d:fe:8f:b3:6c:a4:bc:51:2e:8e:21:48:13:94: a4:ba:94:07:49:e9:4f:dd:fa:5c:38:e3:bb:87:2c:fd:e9:cd: 97:e1:59:0b:25:7c:05:ad:0d:69:d1:10:8f:58:5c:b7:e2:51: 86:0a:dc:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssnaXWExpyfgRANYtOzGndMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYTNjOTlmZjU4YjhmNzMzZWYyYzYyYTc3NzJjMGMxZjI5 ZTU3ZmMwHhcNMjUxMjE3MTQwMTI3WhcNMjUxMjE4MTQwMTI3WjAzMTEwLwYDVQQD EygxY2Y5OGU2MGRhNTI1ZmQ2NDFmYjkyZjkwZmQyZmY5NzRmMzBmYjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxKbS5b3vyt2LZsxGUbvRe2enCEA fUm4/K7cSElxxVSsiICBJSFRCLt8plg44zJDCtkrUSxX+AS64et+1T4YFr06JKZ9 TrX6AlHbZgIrs+X4qjy7ZUitNL3bHOSMmjuiEBT5Iwqnj2NzzjlDb81P48MXmazv P/7iL0LeX1FGOpQzRkQYj0KwTw2hm5g1Wx1PvRR9Gbq+pT1I/JM71a++4EyWAhXY aCp++i9F72KNWAFcskSBhPHBG4HbAv2kPNzekh61+EG76/wPrduZlOhM45v+W3zp 5/X1tEmtu3O0UQqYnd5odVygKWq5f4l3/pEDzM81PPW5OU5AH9RIa4yKEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBz5jmDaUl/WQfuS+Q/S/5dPMPtCMB8GA1UdIwQY MBaAFCqjyZ/1i49zPvLGKndywMHynlf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3FQSm5fV0xqM00tOHNZcWQzTEF3ZktlVl93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hMGI2M2UtMTE2Ni00NmI1LTllM2Ut MzhiNWQxNzg4MDA3LzEvS3FQSm5fV0xqM00tOHNZcWQzTEF3ZktlVl93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hMGI2M2UtMTE2Ni00NmI1LTllM2UtMzhiNWQxNzg4MDA3 LzEvS3FQSm5fV0xqM00tOHNZcWQzTEF3ZktlVl93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm+2twd7B K8BbL1AODKmXDrPBqeCmZv9JMp6TLkJsP/e0PEaqlqfICSpw/HAzHfGYcpELHee6 of6VuHqYdj8M59D41IHCPcmZ2r5ekS1E6wyvofOoWR2ycpMOjhkEV2zFv9ZMa19T V/huGIMEZWlPmhmkMuDk8YCUQ7awysESe/KfATMeqZpQUNmG8jcXQSEOvuy4WYg1 EgX+GnlTeBNeDRVJTvbii08E33FTaBuoEdIOIUE8wFjqj/TVjtHy2X8m89EyR0/g lPSFQF3+j7NspLxRLo4hSBOUpLqUB0npT936XDjju4cs/enNl+FZCyV8Ba0NadEQ j1hct+JRhgrc9w== -----END CERTIFICATE-----Generated at Wed Dec 17 19:20:33 2025 by rpki-client