This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft File: kqH7oqss0QEUipWef4wI96Qbw8U.mft (raw, json) Hash identifier: 9hVfX6gKbRq0WT8h+rdCTAT76TQzrXp11hwdaWN7zhE= Subject key identifier: 84:55:BE:CC:CA:86:4F:26:00:A2:7A:0D:37:DD:B4:41:5D:F4:07:1B Authority key identifier: 92:A1:FB:A2:AB:2C:D1:01:14:8A:95:9E:7F:8C:08:F7:A4:1B:C3:C5 Certificate issuer: /CN=92a1fba2ab2cd101148a959e7f8c08f7a41bc3c5 Certificate serial: 019B5977368737FFDC06D749F704E038DE59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft Manifest number: 1342 Signing time: Fri 26 Dec 2025 07:02:23 +0000 Manifest this update: Fri 26 Dec 2025 07:02:23 +0000 Manifest next update: Sat 27 Dec 2025 07:02:23 +0000 Files and hashes: 1: kqH7oqss0QEUipWef4wI96Qbw8U.crl (hash: NB4W1mySMyj1gq3sNkS8ZjV6k+w7pplyhQVyBYR0kL0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.crl rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft rsync://rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 07:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:36:87:37:ff:dc:06:d7:49:f7:04:e0:38:de:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92a1fba2ab2cd101148a959e7f8c08f7a41bc3c5 Validity Not Before: Dec 26 07:02:23 2025 GMT Not After : Dec 27 07:02:23 2025 GMT Subject: CN=8455beccca864f2600a27a0d37ddb4415df4071b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:98:7d:b8:1f:ee:f5:84:2d:6e:f5:37:c1:7f: bb:53:6e:51:f5:9a:57:4f:d6:c1:81:4e:d2:15:eb: 41:86:60:9a:13:9a:d5:3b:fb:a6:38:21:4d:07:76: 5b:26:c0:cb:8d:41:1c:b1:21:26:57:97:fb:84:6c: 23:30:ba:93:26:b4:6b:55:4f:06:33:59:44:bb:a3: 72:89:b1:44:e0:e9:b3:b4:28:78:42:56:8d:11:f7: c1:88:40:80:f6:49:ce:ae:08:a5:47:21:16:2e:f4: 82:74:68:94:6c:5c:4e:1b:51:24:7b:04:b5:ab:35: 4f:e0:d3:f9:79:5b:e6:fe:53:a5:c2:bb:eb:95:23: 57:5c:64:b1:3f:92:f4:7c:26:c9:97:c3:58:ee:0d: 03:74:54:dc:a8:47:f1:f2:b0:b7:dd:c6:6b:af:19: 93:d1:2f:1f:ab:d8:5f:68:f3:03:3e:2a:0d:57:42: 22:40:4b:da:9a:45:56:63:24:15:17:c9:85:76:40: 3f:c7:45:43:03:45:61:43:06:20:51:f6:da:ec:80: 97:6e:86:0d:86:78:37:e9:e0:71:b7:3c:3c:d0:80: 89:76:42:60:98:73:69:c2:16:87:d6:67:08:db:10: 3a:ca:d8:ea:10:a8:34:75:d9:e6:ca:9c:04:ab:51: 89:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:55:BE:CC:CA:86:4F:26:00:A2:7A:0D:37:DD:B4:41:5D:F4:07:1B X509v3 Authority Key Identifier: keyid:92:A1:FB:A2:AB:2C:D1:01:14:8A:95:9E:7F:8C:08:F7:A4:1B:C3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:7a:68:fc:f2:c5:f3:e3:22:a3:59:e0:27:26:59:0d:96:6d: fc:9f:9b:0d:d7:b6:ba:c1:b9:9a:c5:73:e2:80:14:b9:68:c7: c4:7e:03:4b:00:ab:81:23:8b:3b:23:c6:ab:ff:31:d7:20:f6: 54:3a:d9:be:ee:87:0a:48:cb:3e:77:b8:b2:12:22:a6:14:17: 24:3d:a7:42:9e:16:ec:d6:34:85:bd:d0:41:97:ca:67:59:e2: 9f:3a:cc:54:a4:74:5a:e7:7b:4b:66:e0:1c:ed:69:2a:d9:ca: 77:9e:93:04:9c:df:37:86:11:47:c1:0e:d6:8d:98:49:ee:a3: ea:56:d2:88:8c:69:1f:7e:7a:36:ee:d7:c8:59:3c:29:0d:8c: f1:07:a6:8a:21:75:1e:04:74:99:f2:2b:e8:fd:b1:8a:ff:97: 40:54:eb:c1:35:42:3f:07:df:f0:d5:91:6a:81:08:3b:27:4e: 1f:8b:c2:02:5b:68:0f:e5:60:1b:8c:0e:e2:80:0d:c1:45:dd: b6:bc:a2:91:79:fd:af:74:c3:40:aa:8f:ae:db:09:52:7d:96: 06:c5:12:2d:30:5b:67:ea:b5:28:5f:b6:da:68:34:15:d1:53: 78:48:0e:f1:e9:e7:08:2e:cf:c1:31:9d:2f:48:7a:aa:e2:2e: 2b:55:c2:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdzaHN//cBtdJ9wTgON5ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYTFmYmEyYWIyY2QxMDExNDhhOTU5ZTdmOGMwOGY3YTQx YmMzYzUwHhcNMjUxMjI2MDcwMjIzWhcNMjUxMjI3MDcwMjIzWjAzMTEwLwYDVQQD Eyg4NDU1YmVjY2NhODY0ZjI2MDBhMjdhMGQzN2RkYjQ0MTVkZjQwNzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5h9uB/u9YQtbvU3wX+7U25R9ZpX T9bBgU7SFetBhmCaE5rVO/umOCFNB3ZbJsDLjUEcsSEmV5f7hGwjMLqTJrRrVU8G M1lEu6NyibFE4OmztCh4QlaNEffBiECA9knOrgilRyEWLvSCdGiUbFxOG1EkewS1 qzVP4NP5eVvm/lOlwrvrlSNXXGSxP5L0fCbJl8NY7g0DdFTcqEfx8rC33cZrrxmT 0S8fq9hfaPMDPioNV0IiQEvamkVWYyQVF8mFdkA/x0VDA0VhQwYgUfba7ICXboYN hng36eBxtzw80ICJdkJgmHNpwhaH1mcI2xA6ytjqEKg0ddnmypwEq1GJnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIRVvszKhk8mAKJ6DTfdtEFd9AcbMB8GA1UdIwQY MBaAFJKh+6KrLNEBFIqVnn+MCPekG8PFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3FIN29xc3MwUUVVaXBXZWY0d0k5NlFidzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kZDgyNjgtZjI5Zi00M2I1LTlhNWYt ZGM5YzNhZTdlMzBiLzEva3FIN29xc3MwUUVVaXBXZWY0d0k5NlFidzhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9kZDgyNjgtZjI5Zi00M2I1LTlhNWYtZGM5YzNhZTdlMzBi LzEva3FIN29xc3MwUUVVaXBXZWY0d0k5NlFidzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVXpo/PLF 8+Mio1ngJyZZDZZt/J+bDde2usG5msVz4oAUuWjHxH4DSwCrgSOLOyPGq/8x1yD2 VDrZvu6HCkjLPne4shIiphQXJD2nQp4W7NY0hb3QQZfKZ1ninzrMVKR0Wud7S2bg HO1pKtnKd56TBJzfN4YRR8EO1o2YSe6j6lbSiIxpH356Nu7XyFk8KQ2M8QemiiF1 HgR0mfIr6P2xiv+XQFTrwTVCPwff8NWRaoEIOydOH4vCAltoD+VgG4wO4oANwUXd tryikXn9r3TDQKqPrtsJUn2WBsUSLTBbZ+q1KF+22mg0FdFTeEgO8ennCC7PwTGd L0h6quIuK1XCqA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:58 2025 by rpki-client