This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft File: KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft (raw, json) Hash identifier: kaRcItfLsNTAqzSz8WF1WN75IyhvQyFDwMwa1/rySMw= Subject key identifier: BF:EA:BA:54:90:DE:26:72:ED:B5:2C:23:AA:3C:F7:81:5C:F3:82:F6 Authority key identifier: 2A:A1:7E:D4:07:43:2C:41:8B:1C:9E:AF:61:FD:1C:A1:CB:FF:6A:74 Certificate issuer: /CN=2aa17ed407432c418b1c9eaf61fd1ca1cbff6a74 Certificate serial: 019B18DF6D71108857E8F12629090966E637 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft Manifest number: 0B5F Signing time: Sat 13 Dec 2025 18:00:54 +0000 Manifest this update: Sat 13 Dec 2025 18:00:54 +0000 Manifest next update: Sun 14 Dec 2025 18:00:54 +0000 Files and hashes: 1: B-4mThf4e-80zWpEOjTSvUoatyg.roa (hash: iLGZvkSCMs5F+PZw6Uabdz+fABoTG9YghxbSRDf22wI=) 2: KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl (hash: s93WhIr3kh3A3SogbKUBGoQi/Sv4/MYkafnko6hAcfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:df:6d:71:10:88:57:e8:f1:26:29:09:09:66:e6:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa17ed407432c418b1c9eaf61fd1ca1cbff6a74 Validity Not Before: Dec 13 18:00:54 2025 GMT Not After : Dec 14 18:00:54 2025 GMT Subject: CN=bfeaba5490de2672edb52c23aa3cf7815cf382f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:29:3e:0b:be:d4:99:b7:e7:11:4a:61:20:d8: 9f:29:8d:13:b4:bd:c5:d8:d9:e7:54:7b:4a:df:c8: 9b:dc:21:7e:15:9c:72:8b:1d:09:3e:97:b4:79:fd: 58:aa:26:88:7e:c9:83:25:70:2a:99:04:6c:c2:a5: 98:dc:e2:d1:fb:ca:10:3e:ab:42:bc:a8:39:a6:f6: d2:dd:5f:5c:81:13:dc:f8:8a:92:e5:18:99:5e:59: 5f:54:40:cc:c5:79:bc:ad:00:9b:84:50:0d:55:f2: 43:ac:07:43:15:75:64:70:82:80:76:2d:9e:93:7c: 75:8f:50:cd:5c:06:04:da:88:fc:3e:07:57:db:6a: b2:1e:06:04:00:79:47:91:77:16:d5:b6:80:e1:a1: 08:82:b2:31:9e:72:84:96:db:10:cb:76:12:6f:49: e4:81:ea:c5:5f:92:17:68:d1:2b:4a:96:5a:52:4b: a4:c4:16:e5:8d:5e:5f:69:03:bf:d1:ee:86:26:27: 4c:e6:df:ac:c1:ae:66:01:62:12:99:6a:1c:00:d6: 78:66:d2:81:70:b8:e7:2c:fa:39:2f:cc:90:37:1e: a4:00:1f:9e:d2:67:4c:52:53:93:15:2b:56:e9:7b: 66:9b:d1:5a:1e:27:7a:88:7f:6b:43:9f:d0:c3:72: f1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:EA:BA:54:90:DE:26:72:ED:B5:2C:23:AA:3C:F7:81:5C:F3:82:F6 X509v3 Authority Key Identifier: keyid:2A:A1:7E:D4:07:43:2C:41:8B:1C:9E:AF:61:FD:1C:A1:CB:FF:6A:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:ee:c7:5c:31:0b:84:9b:21:59:cf:2d:52:87:29:6b:ed:c6: b3:41:f0:00:91:c2:ec:01:e5:ed:02:38:97:17:6f:ad:a2:b4: 1c:64:40:47:bc:4f:10:69:26:f8:f2:7a:95:26:76:c2:c4:44: 45:45:41:22:74:ba:bb:78:6b:fb:1e:47:57:3c:1e:b8:77:1a: 5a:d1:a8:db:07:72:d1:33:fa:28:ed:c6:e2:62:95:da:6e:31: d4:e5:2c:cc:82:c3:f5:2b:f7:fb:1e:07:50:62:d7:23:d9:11: 03:a9:92:6f:0d:e3:13:f8:92:33:40:6f:59:00:38:7f:de:b3: e9:f7:77:6c:4e:d1:d7:7c:1f:68:a7:3a:04:4d:f8:7c:a3:07: fe:c8:18:db:3f:a4:74:19:db:30:6b:2a:15:10:0f:45:ad:ff: 8f:40:0f:85:b1:58:42:0d:e7:e7:d4:1a:7a:ba:36:c9:19:35: 17:b0:06:21:80:74:ac:7a:d6:02:1e:fd:51:cd:4a:9a:ce:77: d5:29:7e:00:38:73:ab:dd:0b:fb:c2:73:b3:99:18:8e:25:fc: 38:b5:c3:93:ad:88:c2:01:e6:f3:24:1f:24:42:a3:15:71:47: 59:8b:c7:25:ed:28:bf:18:8f:77:1d:77:6c:15:e7:2f:2a:30: b7:da:f0:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsY321xEIhX6PEmKQkJZuY3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYTE3ZWQ0MDc0MzJjNDE4YjFjOWVhZjYxZmQxY2ExY2Jm ZjZhNzQwHhcNMjUxMjEzMTgwMDU0WhcNMjUxMjE0MTgwMDU0WjAzMTEwLwYDVQQD EyhiZmVhYmE1NDkwZGUyNjcyZWRiNTJjMjNhYTNjZjc4MTVjZjM4MmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Ck+C77UmbfnEUphINifKY0TtL3F 2NnnVHtK38ib3CF+FZxyix0JPpe0ef1YqiaIfsmDJXAqmQRswqWY3OLR+8oQPqtC vKg5pvbS3V9cgRPc+IqS5RiZXllfVEDMxXm8rQCbhFANVfJDrAdDFXVkcIKAdi2e k3x1j1DNXAYE2oj8PgdX22qyHgYEAHlHkXcW1baA4aEIgrIxnnKEltsQy3YSb0nk gerFX5IXaNErSpZaUkukxBbljV5faQO/0e6GJidM5t+swa5mAWISmWocANZ4ZtKB cLjnLPo5L8yQNx6kAB+e0mdMUlOTFStW6Xtmm9FaHid6iH9rQ5/Qw3LxRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/qulSQ3iZy7bUsI6o894Fc84L2MB8GA1UdIwQY MBaAFCqhftQHQyxBixyer2H9HKHL/2p0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3FGLTFBZERMRUdMSEo2dllmMGNvY3ZfYW5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni81NGQ0MzctYTI3Ny00MWJkLTk4OGYt OTUwZjBhMDEwMWE5LzEvS3FGLTFBZERMRUdMSEo2dllmMGNvY3ZfYW5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni81NGQ0MzctYTI3Ny00MWJkLTk4OGYtOTUwZjBhMDEwMWE5 LzEvS3FGLTFBZERMRUdMSEo2dllmMGNvY3ZfYW5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWe7HXDEL hJshWc8tUocpa+3Gs0HwAJHC7AHl7QI4lxdvraK0HGRAR7xPEGkm+PJ6lSZ2wsRE RUVBInS6u3hr+x5HVzweuHcaWtGo2wdy0TP6KO3G4mKV2m4x1OUszILD9Sv3+x4H UGLXI9kRA6mSbw3jE/iSM0BvWQA4f96z6fd3bE7R13wfaKc6BE34fKMH/sgY2z+k dBnbMGsqFRAPRa3/j0APhbFYQg3n59Qaero2yRk1F7AGIYB0rHrWAh79Uc1Kms53 1Sl+ADhzq90L+8Jzs5kYjiX8OLXDk62IwgHm8yQfJEKjFXFHWYvHJe0ovxiPdx13 bBXnLyowt9rwjA== -----END CERTIFICATE-----Generated at Sun Dec 14 01:52:39 2025 by rpki-client