This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft File: KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft (raw, json) Hash identifier: qS7OGu7XAdNB851rja72Xi91L9xPgaUGv1HrtCa79Tg= Subject key identifier: 44:90:53:E4:BC:D6:3E:5C:02:AD:D2:D5:8E:BC:A5:05:11:A6:A5:5D Authority key identifier: 29:08:1D:68:BD:DE:A8:BE:BF:26:E6:18:21:97:85:94:F2:23:BC:BE Certificate issuer: /CN=29081d68bddea8bebf26e61821978594f223bcbe Certificate serial: 019B1A2916017F351609F921DA9009BDEC7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft Manifest number: 0976 Signing time: Sun 14 Dec 2025 00:00:58 +0000 Manifest this update: Sun 14 Dec 2025 00:00:58 +0000 Manifest next update: Mon 15 Dec 2025 00:00:58 +0000 Files and hashes: 1: KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl (hash: xohBJJoYYFK5+G1eyeRKjtGSKMav6FYGhN5TeezglDU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 00:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:29:16:01:7f:35:16:09:f9:21:da:90:09:bd:ec:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29081d68bddea8bebf26e61821978594f223bcbe Validity Not Before: Dec 14 00:00:58 2025 GMT Not After : Dec 15 00:00:58 2025 GMT Subject: CN=449053e4bcd63e5c02add2d58ebca50511a6a55d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2b:3e:f9:4b:1e:eb:32:cc:af:f6:2c:70:d6: 31:7e:1b:74:f0:b7:56:0e:0d:ce:35:50:3a:95:b5: 34:05:95:5e:0f:3c:ab:ba:61:ba:60:02:d3:cc:54: 1c:c6:ec:8e:4f:f5:80:74:66:cf:6c:75:26:6e:a4: ac:e7:fa:86:a2:45:65:c2:b9:a3:6e:fc:e9:d1:e3: 38:95:6b:64:13:ce:b1:15:24:a3:1f:46:12:38:12: 8e:9a:dc:1e:41:f5:74:05:54:00:92:21:71:5e:4d: d6:19:43:10:2a:34:6e:87:fc:22:3e:60:c0:13:e4: fe:6e:1e:cc:c2:42:f8:09:9e:e1:4a:05:16:c1:03: 42:50:b3:70:1b:5e:72:71:03:10:12:d9:ae:60:4a: 23:96:5b:6b:ca:46:a4:a8:cb:9d:c5:37:2d:15:ae: f2:c8:d5:fc:a7:88:79:1e:07:8f:bc:a8:42:d7:30: bb:9e:72:8a:26:30:93:c7:5b:d9:64:96:6f:27:71: 85:ef:70:45:fc:39:2d:d6:43:38:da:f6:1e:52:25: da:05:65:54:db:18:ac:09:a4:5b:8d:be:6a:11:b7: 70:b3:01:37:81:c5:16:a6:a7:a1:1a:f7:f9:9d:dd: a1:80:5a:12:2e:80:d3:62:9b:d1:8e:a7:8d:6c:7c: e0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:90:53:E4:BC:D6:3E:5C:02:AD:D2:D5:8E:BC:A5:05:11:A6:A5:5D X509v3 Authority Key Identifier: keyid:29:08:1D:68:BD:DE:A8:BE:BF:26:E6:18:21:97:85:94:F2:23:BC:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:a4:3f:af:21:f0:66:bd:c1:1c:cf:e2:75:d7:d2:f9:f3:3f: c7:c5:de:84:ee:97:41:0e:29:18:9b:28:a8:b3:85:c6:85:5c: 54:24:9d:32:2d:f2:cb:f9:8f:c4:8e:09:46:0c:ab:66:ce:97: b8:e5:d6:b2:f1:1e:f2:6e:66:bd:23:32:0d:d2:e1:fd:40:bf: 5d:ea:cd:39:22:e8:a9:35:18:3a:d8:aa:b0:29:6a:e2:c5:be: 84:83:ee:0c:bc:b5:ac:99:cf:28:91:d9:88:9b:06:4a:eb:8d: ff:c6:fc:37:32:08:d2:6a:f4:96:41:00:a3:d7:63:3e:2e:97: 66:d9:8c:ca:90:bc:0f:9b:e1:b2:b6:cc:76:27:7e:77:6b:94: 99:19:c7:68:1a:a1:a3:1f:99:af:f5:0e:42:d7:95:93:bf:1b: 20:03:a8:13:0a:d9:e9:cd:f2:3c:eb:31:96:16:cf:49:55:06: b5:ae:c3:dd:d9:86:eb:46:22:e9:cf:cc:b1:39:ed:36:db:95: 25:2a:fe:e2:df:c6:ba:7b:24:ae:3e:a9:1c:4c:70:b2:98:67: 4c:20:59:fc:11:1c:6c:6b:5f:c4:be:2d:4f:79:9c:31:98:43: b0:18:7e:28:31:01:50:37:f4:8f:be:cc:e7:6a:e9:1a:41:5f: 46:c6:bc:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKRYBfzUWCfkh2pAJvex9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MDgxZDY4YmRkZWE4YmViZjI2ZTYxODIxOTc4NTk0ZjIy M2JjYmUwHhcNMjUxMjE0MDAwMDU4WhcNMjUxMjE1MDAwMDU4WjAzMTEwLwYDVQQD Eyg0NDkwNTNlNGJjZDYzZTVjMDJhZGQyZDU4ZWJjYTUwNTExYTZhNTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSs++Use6zLMr/YscNYxfht08LdW Dg3ONVA6lbU0BZVeDzyrumG6YALTzFQcxuyOT/WAdGbPbHUmbqSs5/qGokVlwrmj bvzp0eM4lWtkE86xFSSjH0YSOBKOmtweQfV0BVQAkiFxXk3WGUMQKjRuh/wiPmDA E+T+bh7MwkL4CZ7hSgUWwQNCULNwG15ycQMQEtmuYEojlltrykakqMudxTctFa7y yNX8p4h5HgePvKhC1zC7nnKKJjCTx1vZZJZvJ3GF73BF/Dkt1kM42vYeUiXaBWVU 2xisCaRbjb5qEbdwswE3gcUWpqehGvf5nd2hgFoSLoDTYpvRjqeNbHzgPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFESQU+S81j5cAq3S1Y68pQURpqVdMB8GA1UdIwQY MBaAFCkIHWi93qi+vybmGCGXhZTyI7y+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1FnZGFMM2VxTDZfSnVZWUlaZUZsUElqdkw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9iNjhmNmYtOTYwZC00ZTMzLTg3M2Yt NzM2N2MwZjIwYmM5LzEvS1FnZGFMM2VxTDZfSnVZWUlaZUZsUElqdkw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9iNjhmNmYtOTYwZC00ZTMzLTg3M2YtNzM2N2MwZjIwYmM5 LzEvS1FnZGFMM2VxTDZfSnVZWUlaZUZsUElqdkw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEqQ/ryHw Zr3BHM/iddfS+fM/x8XehO6XQQ4pGJsoqLOFxoVcVCSdMi3yy/mPxI4JRgyrZs6X uOXWsvEe8m5mvSMyDdLh/UC/XerNOSLoqTUYOtiqsClq4sW+hIPuDLy1rJnPKJHZ iJsGSuuN/8b8NzII0mr0lkEAo9djPi6XZtmMypC8D5vhsrbMdid+d2uUmRnHaBqh ox+Zr/UOQteVk78bIAOoEwrZ6c3yPOsxlhbPSVUGta7D3dmG60Yi6c/MsTntNtuV JSr+4t/Gunskrj6pHExwsphnTCBZ/BEcbGtfxL4tT3mcMZhDsBh+KDEBUDf0j77M 52rpGkFfRsa8nQ== -----END CERTIFICATE-----Generated at Sun Dec 14 07:49:22 2025 by rpki-client