This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft File: kQFfA3NVWj9WUfaYypO_SS2LQ90.mft (raw, json) Hash identifier: zK3yAHZN1P000o9u9BYJY6rHFwuqqdcwFSk6iySe+NQ= Subject key identifier: 30:C7:04:BB:F2:DF:6A:C6:BD:95:22:BF:58:56:F9:FE:59:0D:4C:D6 Authority key identifier: 91:01:5F:03:73:55:5A:3F:56:51:F6:98:CA:93:BF:49:2D:8B:43:DD Certificate issuer: /CN=91015f0373555a3f5651f698ca93bf492d8b43dd Certificate serial: 019B06A227CAE74A8F866D6CC5D2EAAD5836 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kQFfA3NVWj9WUfaYypO_SS2LQ90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft Manifest number: 16FD Signing time: Wed 10 Dec 2025 05:00:48 +0000 Manifest this update: Wed 10 Dec 2025 05:00:48 +0000 Manifest next update: Thu 11 Dec 2025 05:00:48 +0000 Files and hashes: 1: kQFfA3NVWj9WUfaYypO_SS2LQ90.crl (hash: ZqPlqj6tG1XKsPlT+PVK0S0vNTwhPs2o1zcn7Hh+wZY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.crl rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft rsync://rpki.ripe.net/repository/DEFAULT/kQFfA3NVWj9WUfaYypO_SS2LQ90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:a2:27:ca:e7:4a:8f:86:6d:6c:c5:d2:ea:ad:58:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91015f0373555a3f5651f698ca93bf492d8b43dd Validity Not Before: Dec 10 05:00:48 2025 GMT Not After : Dec 11 05:00:48 2025 GMT Subject: CN=30c704bbf2df6ac6bd9522bf5856f9fe590d4cd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f1:a4:e7:4f:93:9d:55:6c:d6:f4:06:49:3a: 89:55:11:25:1b:24:e5:9b:2b:8d:04:37:7a:4a:e2: 8d:05:b0:4a:72:26:35:1f:03:00:2a:c2:dd:d4:d5: 2d:01:a2:18:ea:33:33:00:a4:cd:e6:c5:ca:23:12: 85:8e:1d:b2:34:8c:09:68:3a:5e:51:b7:53:f1:1c: 60:ce:ec:a2:5f:ef:7c:4a:56:ca:d7:6a:f5:4f:de: 5e:ca:08:ae:22:af:67:41:54:9e:63:82:76:e6:be: 35:c4:12:6a:a9:c9:b6:37:06:1e:f9:24:15:ca:ae: 83:db:68:ae:77:e4:10:86:1e:91:c0:09:a1:4b:37: f8:fe:54:95:e0:40:64:a4:21:08:fb:de:84:88:47: b2:bc:bc:8f:11:5d:ac:2e:62:ba:71:f4:c5:19:53: 8e:73:9e:7a:85:7d:dd:6a:ab:f0:85:44:aa:ce:2f: 66:00:98:87:b9:02:3b:84:ff:31:49:af:f2:43:88: 7f:53:a6:1a:af:4e:26:ad:85:22:8c:da:f4:c6:68: bd:52:0a:d9:9b:b1:88:b6:0e:f1:3c:db:ff:2a:d3: 2b:e9:1b:0b:c7:5f:43:6a:31:c0:01:b3:8d:26:f5: 57:f3:d3:ca:d9:1d:e9:04:be:53:c8:91:09:18:91: 63:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C7:04:BB:F2:DF:6A:C6:BD:95:22:BF:58:56:F9:FE:59:0D:4C:D6 X509v3 Authority Key Identifier: keyid:91:01:5F:03:73:55:5A:3F:56:51:F6:98:CA:93:BF:49:2D:8B:43:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kQFfA3NVWj9WUfaYypO_SS2LQ90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:0a:51:57:00:69:9c:80:4a:d7:a3:df:6f:fb:a7:2a:49:e4: de:57:f8:55:62:c8:db:60:f5:a9:59:c9:87:7e:6b:10:de:69: 56:71:1f:63:0f:22:8e:78:8f:ad:97:3b:ac:0c:bf:cc:3f:7d: 6f:cb:f5:a2:a7:63:ee:b3:90:6e:24:32:d9:cf:1a:b9:b1:f4: a4:25:27:48:27:6a:b9:0a:0a:1e:15:b7:92:fd:76:4f:7b:b0: e3:e0:32:26:3d:34:d9:93:8d:0d:76:71:3c:cc:9d:c5:61:4c: 2d:f1:cb:f6:08:e7:33:d8:e9:9f:13:eb:82:99:ff:d9:77:aa: cc:71:ef:7e:98:06:44:b3:6b:11:ed:12:cb:b7:91:8a:57:cf: a4:6f:03:bb:e8:16:7d:d3:35:6d:ba:e8:37:e6:09:2f:8c:ea: 96:62:d7:f2:b5:a4:a9:59:d9:f3:07:bb:c5:55:90:7b:99:91: 15:80:e7:c7:be:d2:22:7f:51:d5:62:3e:69:15:20:38:16:d3: 54:90:1f:d9:71:e4:29:cb:32:73:ea:44:d7:96:08:7f:63:26: e3:2c:8a:c6:b6:82:dc:74:7b:9c:2d:76:cb:05:59:5a:39:ee: 1b:6c:83:27:bb:2d:de:c6:43:e3:14:f3:5a:15:be:1f:a0:79: fe:01:46:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsGoifK50qPhm1sxdLqrVg2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxMDE1ZjAzNzM1NTVhM2Y1NjUxZjY5OGNhOTNiZjQ5MmQ4 YjQzZGQwHhcNMjUxMjEwMDUwMDQ4WhcNMjUxMjExMDUwMDQ4WjAzMTEwLwYDVQQD EygzMGM3MDRiYmYyZGY2YWM2YmQ5NTIyYmY1ODU2ZjlmZTU5MGQ0Y2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/Gk50+TnVVs1vQGSTqJVRElGyTl myuNBDd6SuKNBbBKciY1HwMAKsLd1NUtAaIY6jMzAKTN5sXKIxKFjh2yNIwJaDpe UbdT8RxgzuyiX+98SlbK12r1T95eygiuIq9nQVSeY4J25r41xBJqqcm2NwYe+SQV yq6D22iud+QQhh6RwAmhSzf4/lSV4EBkpCEI+96EiEeyvLyPEV2sLmK6cfTFGVOO c556hX3daqvwhUSqzi9mAJiHuQI7hP8xSa/yQ4h/U6Yar04mrYUijNr0xmi9UgrZ m7GItg7xPNv/KtMr6RsLx19DajHAAbONJvVX89PK2R3pBL5TyJEJGJFjrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDDHBLvy32rGvZUiv1hW+f5ZDUzWMB8GA1UdIwQY MBaAFJEBXwNzVVo/VlH2mMqTv0kti0PdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1FGZkEzTlZXajlXVWZhWXlwT19TUzJMUTkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS82NmJlODAtYTcwZi00YzNkLWFkZDct MjhhOGExNTJmMmY2LzEva1FGZkEzTlZXajlXVWZhWXlwT19TUzJMUTkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS82NmJlODAtYTcwZi00YzNkLWFkZDctMjhhOGExNTJmMmY2 LzEva1FGZkEzTlZXajlXVWZhWXlwT19TUzJMUTkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYgpRVwBp nIBK16Pfb/unKknk3lf4VWLI22D1qVnJh35rEN5pVnEfYw8ijniPrZc7rAy/zD99 b8v1oqdj7rOQbiQy2c8aubH0pCUnSCdquQoKHhW3kv12T3uw4+AyJj002ZONDXZx PMydxWFMLfHL9gjnM9jpnxPrgpn/2XeqzHHvfpgGRLNrEe0Sy7eRilfPpG8Du+gW fdM1bbroN+YJL4zqlmLX8rWkqVnZ8we7xVWQe5mRFYDnx77SIn9R1WI+aRUgOBbT VJAf2XHkKcsyc+pE15YIf2Mm4yyKxraC3HR7nC12ywVZWjnuG2yDJ7st3sZD4xTz WhW+H6B5/gFGVQ== -----END CERTIFICATE-----Generated at Wed Dec 10 09:01:49 2025 by rpki-client