This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft File: KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft (raw, json) Hash identifier: hb7UAuya9WJCM+BX+L74BAyup5nhrzo3kZrU3fX5O2A= Subject key identifier: 75:7C:45:A6:DE:D3:CB:89:FA:55:A8:E0:9A:13:48:C6:DB:B2:A0:5E Authority key identifier: 2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC Certificate issuer: /CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc Certificate serial: 019AF2ADC1B6FEC6620AAB3D1C3AC4102878 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft Manifest number: 106D Signing time: Sat 06 Dec 2025 08:01:04 +0000 Manifest this update: Sat 06 Dec 2025 08:01:04 +0000 Manifest next update: Sun 07 Dec 2025 08:01:04 +0000 Files and hashes: 1: KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl (hash: qxBYmbD2T9v1p8wW/lKnHEeIm0CSijsoOjVmYMxPXCM=) 2: UZvnE-CaTB9qoHVdVXMgB-LiNEM.roa (hash: Ycg6B0Rffq0DfziTHdPyE76c/wB4R/dWXA7Fjbacvbs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:c1:b6:fe:c6:62:0a:ab:3d:1c:3a:c4:10:28:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc Validity Not Before: Dec 6 08:01:04 2025 GMT Not After : Dec 7 08:01:04 2025 GMT Subject: CN=757c45a6ded3cb89fa55a8e09a1348c6dbb2a05e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9a:e9:0b:4c:5e:b7:f5:f1:f5:14:78:20:7f: bc:a2:50:b9:3e:69:4a:6d:96:c1:33:3d:e3:ef:b5: be:f8:96:a4:bb:2a:43:cb:e5:99:a3:fe:c5:18:87: c4:7d:a5:b8:16:a1:33:ad:ef:ca:ad:e4:47:b9:04: 42:ef:71:5d:9c:cf:68:bc:0b:0b:01:be:f8:ff:87: 26:8f:64:de:e6:b1:9b:4d:ca:00:9b:2a:88:2f:e2: 89:ce:38:62:a6:9d:9d:ed:0a:b0:59:30:07:94:61: b9:14:16:55:a6:e7:4c:9e:0f:d5:00:71:04:68:ff: c6:e7:58:df:f6:ed:20:2a:54:36:02:f0:6a:b9:be: e6:b1:89:e0:c0:07:7d:c7:24:06:03:50:01:6a:1b: cd:ab:bb:87:ea:7c:c7:9f:6d:5d:84:37:79:1f:31: 2b:f6:01:17:03:47:7b:96:c2:94:82:5c:ac:35:4f: 84:2f:1c:fe:8b:8b:75:4d:66:51:b6:5d:4c:6c:d8: bb:8c:00:04:04:83:f7:46:bd:dc:0c:1a:d2:a2:14: 63:1e:95:ef:83:d1:16:b1:f1:a1:12:3d:48:31:b2: a5:3d:a0:68:14:37:39:43:bf:d4:86:c9:54:73:44: 25:e8:ca:7a:04:37:7c:9f:6f:68:7a:7c:b3:69:ee: 8b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:7C:45:A6:DE:D3:CB:89:FA:55:A8:E0:9A:13:48:C6:DB:B2:A0:5E X509v3 Authority Key Identifier: keyid:2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:75:23:b1:a6:91:36:e0:ec:ca:ad:4a:c8:17:a2:e4:a7:ce: aa:d4:e3:e7:b1:7a:b1:9f:7d:0c:51:6c:8f:35:b8:80:26:1b: 12:52:ae:89:71:28:78:d6:0b:5d:90:22:c4:35:6b:09:99:0b: 49:aa:bc:df:14:e4:01:34:2b:97:19:4c:e8:5c:56:21:5d:3e: 70:99:69:1a:26:4d:b2:a5:39:bc:2e:cf:69:09:8c:b6:f7:85: 95:fb:75:fd:be:cb:9b:44:26:fe:41:84:20:3d:22:d0:b9:c7: be:dc:5e:83:0c:8f:98:8f:69:c8:ef:5a:89:7a:00:dd:f3:26: 11:c3:c0:07:36:8c:58:85:02:f3:b5:47:59:f3:66:94:d1:15: 67:e1:ca:12:5d:71:f2:c0:c0:41:ce:59:62:ab:4c:45:19:18: e8:db:a4:59:46:9f:be:ec:6a:f4:59:2e:a0:c8:e8:40:8f:5e: 25:d5:32:0d:ad:cd:b5:e5:24:cd:08:f4:78:9d:43:a8:af:95: 5b:47:c7:47:f3:78:18:7f:9c:9f:c8:7c:47:b2:33:ff:fc:da: c4:06:03:79:91:72:29:ed:ac:73:45:59:02:b7:c1:42:5c:68: f2:19:30:5d:9f:4c:8b:e7:7e:28:34:fe:94:ae:4a:32:10:6e: d9:2e:8b:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrcG2/sZiCqs9HDrEECh4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYTNjOTlmZjU4YjhmNzMzZWYyYzYyYTc3NzJjMGMxZjI5 ZTU3ZmMwHhcNMjUxMjA2MDgwMTA0WhcNMjUxMjA3MDgwMTA0WjAzMTEwLwYDVQQD Eyg3NTdjNDVhNmRlZDNjYjg5ZmE1NWE4ZTA5YTEzNDhjNmRiYjJhMDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5rpC0xet/Xx9RR4IH+8olC5PmlK bZbBMz3j77W++JakuypDy+WZo/7FGIfEfaW4FqEzre/KreRHuQRC73FdnM9ovAsL Ab74/4cmj2Te5rGbTcoAmyqIL+KJzjhipp2d7QqwWTAHlGG5FBZVpudMng/VAHEE aP/G51jf9u0gKlQ2AvBqub7msYngwAd9xyQGA1ABahvNq7uH6nzHn21dhDd5HzEr 9gEXA0d7lsKUglysNU+ELxz+i4t1TWZRtl1MbNi7jAAEBIP3Rr3cDBrSohRjHpXv g9EWsfGhEj1IMbKlPaBoFDc5Q7/UhslUc0Ql6Mp6BDd8n29oenyzae6LawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHV8Rabe08uJ+lWo4JoTSMbbsqBeMB8GA1UdIwQY MBaAFCqjyZ/1i49zPvLGKndywMHynlf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3FQSm5fV0xqM00tOHNZcWQzTEF3ZktlVl93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hMGI2M2UtMTE2Ni00NmI1LTllM2Ut MzhiNWQxNzg4MDA3LzEvS3FQSm5fV0xqM00tOHNZcWQzTEF3ZktlVl93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hMGI2M2UtMTE2Ni00NmI1LTllM2UtMzhiNWQxNzg4MDA3 LzEvS3FQSm5fV0xqM00tOHNZcWQzTEF3ZktlVl93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHXUjsaaR NuDsyq1KyBei5KfOqtTj57F6sZ99DFFsjzW4gCYbElKuiXEoeNYLXZAixDVrCZkL Saq83xTkATQrlxlM6FxWIV0+cJlpGiZNsqU5vC7PaQmMtveFlft1/b7Lm0Qm/kGE ID0i0LnHvtxegwyPmI9pyO9aiXoA3fMmEcPABzaMWIUC87VHWfNmlNEVZ+HKEl1x 8sDAQc5ZYqtMRRkY6NukWUafvuxq9FkuoMjoQI9eJdUyDa3NteUkzQj0eJ1DqK+V W0fHR/N4GH+cn8h8R7Iz//zaxAYDeZFyKe2sc0VZArfBQlxo8hkwXZ9Mi+d+KDT+ lK5KMhBu2S6LDg== -----END CERTIFICATE-----Generated at Sat Dec 6 16:20:41 2025 by rpki-client