This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft File: KqggK00MXBEdN08emLc9tJJNZLE.mft (raw, json) Hash identifier: 1b+NaT9aAtehya0V4tMrc+r08Id4ZDQ6zAgSnug65aA= Subject key identifier: 8A:ED:D1:58:C6:DB:D2:45:EC:8E:1A:2C:0A:99:82:B4:18:82:9A:56 Authority key identifier: 2A:A8:20:2B:4D:0C:5C:11:1D:37:4F:1E:98:B7:3D:B4:92:4D:64:B1 Certificate issuer: /CN=2aa8202b4d0c5c111d374f1e98b73db4924d64b1 Certificate serial: 019AF1642C61FA6DAFA255C60782759F724A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft Manifest number: 0D96 Signing time: Sat 06 Dec 2025 02:01:05 +0000 Manifest this update: Sat 06 Dec 2025 02:01:05 +0000 Manifest next update: Sun 07 Dec 2025 02:01:05 +0000 Files and hashes: 1: 8nLoMcIcsiOT94ggaJIYQQl2oRM.roa (hash: qT9FeEnewJoNeBMjY4zbOI1Gsyx72sYu0a6uEXjvmkY=) 2: KqggK00MXBEdN08emLc9tJJNZLE.crl (hash: AZRZO5t91vBmh5Yeu2FeCzdHlQ4j69o3LuH9Dv9SyBc=) 3: vT6MkqafH5VOMm1ZMgN21UjQYFs.roa (hash: dIHvBtvVugb4PHXdIHdFzDigve4LKcNg9oX/bIFSdDw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:2c:61:fa:6d:af:a2:55:c6:07:82:75:9f:72:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa8202b4d0c5c111d374f1e98b73db4924d64b1 Validity Not Before: Dec 6 02:01:05 2025 GMT Not After : Dec 7 02:01:05 2025 GMT Subject: CN=8aedd158c6dbd245ec8e1a2c0a9982b418829a56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2a:e8:6b:48:5c:ea:03:bd:62:fd:12:21:1c: a7:93:c9:15:ca:c1:51:f0:71:c5:40:49:60:b3:0d: 66:68:40:93:49:62:66:f7:18:6f:a4:ec:b2:9b:0a: 22:9b:d7:de:08:4a:60:b6:cb:70:c9:6d:d8:a5:6d: af:a1:cb:38:d0:72:f2:a3:7f:0b:33:ff:55:09:6a: 00:de:5f:25:fd:fd:e8:6e:e6:19:ac:4e:34:1e:8b: 11:89:85:ef:a3:c7:4d:69:b2:5b:85:f7:e7:6f:12: e4:d1:16:72:f1:86:4b:1f:59:37:44:38:e8:69:48: 12:b6:d2:14:46:5a:21:a3:1a:1c:02:3b:de:11:76: 95:cc:69:41:f5:4f:7f:ff:20:2d:f7:e9:1e:34:93: 0f:50:15:60:92:79:1c:35:20:50:32:72:e3:cc:25: 96:5b:9c:b3:c9:d3:d7:60:44:39:a0:c7:e2:29:f6: 96:48:c3:1f:64:25:1e:87:f4:0c:d6:db:3f:b6:c6: 19:0c:47:51:d3:98:3c:fe:f1:72:79:0e:ad:05:f9: 34:73:d3:1f:bc:83:0a:99:5f:bc:fd:09:95:b0:f5: 35:8d:5a:7c:f4:a0:77:5c:73:16:ce:b7:69:3c:29: f8:21:a7:b5:d5:68:6f:1e:00:f3:1e:5c:6d:14:77: ee:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:ED:D1:58:C6:DB:D2:45:EC:8E:1A:2C:0A:99:82:B4:18:82:9A:56 X509v3 Authority Key Identifier: keyid:2A:A8:20:2B:4D:0C:5C:11:1D:37:4F:1E:98:B7:3D:B4:92:4D:64:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:82:24:d2:b6:6f:fa:42:81:87:a8:1f:71:69:10:c8:60:c7: 8e:5b:24:d8:be:13:b8:62:58:c7:33:92:95:3e:cf:34:1a:15: b2:c4:a0:52:57:7e:66:95:9f:83:39:a2:a1:0f:c3:97:96:28: b2:69:20:a3:77:ca:42:76:65:60:4b:47:fd:c5:c1:ca:f6:75: de:b3:89:7f:4d:26:a4:6d:a6:5d:d8:87:58:ac:4e:08:b6:a1: e4:c3:7c:90:c2:ac:d7:3a:07:51:a6:3b:d1:ce:4b:1f:ef:a6: 6b:49:41:e1:8c:30:14:d8:49:78:95:64:aa:56:63:54:de:67: 73:30:19:de:4e:f9:ef:69:86:48:a7:85:d7:91:12:67:bc:16: 77:f7:b0:4e:f3:93:1f:0e:68:69:04:7f:eb:73:ef:b8:73:69: ce:8e:b8:bf:8a:84:e5:3b:90:b5:11:25:97:bf:78:4f:b8:58: 76:60:f6:e0:8c:35:32:69:d0:e1:9a:25:e9:db:9d:f0:b8:b0: d7:00:6e:0d:b0:ce:c6:52:f6:ca:53:75:b5:df:79:59:55:14: ad:a4:94:f1:4c:ec:89:27:a3:69:e0:14:cf:05:81:77:05:a8: 26:ca:34:f8:e6:08:d9:ce:79:fc:cf:46:46:d2:ca:0b:f9:71: d8:3b:6f:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZCxh+m2volXGB4J1n3JKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYTgyMDJiNGQwYzVjMTExZDM3NGYxZTk4YjczZGI0OTI0 ZDY0YjEwHhcNMjUxMjA2MDIwMTA1WhcNMjUxMjA3MDIwMTA1WjAzMTEwLwYDVQQD Eyg4YWVkZDE1OGM2ZGJkMjQ1ZWM4ZTFhMmMwYTk5ODJiNDE4ODI5YTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziroa0hc6gO9Yv0SIRynk8kVysFR 8HHFQElgsw1maECTSWJm9xhvpOyymwoim9feCEpgtstwyW3YpW2vocs40HLyo38L M/9VCWoA3l8l/f3obuYZrE40HosRiYXvo8dNabJbhffnbxLk0RZy8YZLH1k3RDjo aUgSttIURlohoxocAjveEXaVzGlB9U9//yAt9+keNJMPUBVgknkcNSBQMnLjzCWW W5yzydPXYEQ5oMfiKfaWSMMfZCUeh/QM1ts/tsYZDEdR05g8/vFyeQ6tBfk0c9Mf vIMKmV+8/QmVsPU1jVp89KB3XHMWzrdpPCn4Iae11WhvHgDzHlxtFHfuzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIrt0VjG29JF7I4aLAqZgrQYgppWMB8GA1UdIwQY MBaAFCqoICtNDFwRHTdPHpi3PbSSTWSxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3FnZ0swME1YQkVkTjA4ZW1MYzl0SkpOWkxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8yN2IzYjMtNGIyMi00NzQwLWE2NWEt NmU3YmFlNWZmODk4LzEvS3FnZ0swME1YQkVkTjA4ZW1MYzl0SkpOWkxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8yN2IzYjMtNGIyMi00NzQwLWE2NWEtNmU3YmFlNWZmODk4 LzEvS3FnZ0swME1YQkVkTjA4ZW1MYzl0SkpOWkxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm4Ik0rZv +kKBh6gfcWkQyGDHjlsk2L4TuGJYxzOSlT7PNBoVssSgUld+ZpWfgzmioQ/Dl5Yo smkgo3fKQnZlYEtH/cXByvZ13rOJf00mpG2mXdiHWKxOCLah5MN8kMKs1zoHUaY7 0c5LH++ma0lB4YwwFNhJeJVkqlZjVN5nczAZ3k7572mGSKeF15ESZ7wWd/ewTvOT Hw5oaQR/63PvuHNpzo64v4qE5TuQtREll794T7hYdmD24Iw1MmnQ4Zol6dud8Liw 1wBuDbDOxlL2ylN1td95WVUUraSU8UzsiSejaeAUzwWBdwWoJso0+OYI2c55/M9G RtLKC/lx2DtvXA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:25 2025 by rpki-client