This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft File: kUqlV8PT0ea38FJcNMwdSIpakpQ.mft (raw, json) Hash identifier: p4y5gNYFXp1fCy3XbLc/LWQ1Y4px/DpR0nSPT8qcdcE= Subject key identifier: 6F:83:E3:65:89:52:B2:F7:1B:97:D4:D0:CF:07:44:DD:43:12:2E:8A Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94 Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294 Certificate serial: 019B43C9C4BAFF9731D4C4A22A6427B84507 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft Manifest number: 0368 Signing time: Mon 22 Dec 2025 02:00:55 +0000 Manifest this update: Mon 22 Dec 2025 02:00:55 +0000 Manifest next update: Tue 23 Dec 2025 02:00:55 +0000 Files and hashes: 1: 3e9xcybUyOgWOmdj2KT0VPc-IQ4.roa (hash: h6OpcAY2hGkLVmHjk3z97L6JK9iEJZ7vz8cORcaFzmM=) 2: EY-GYc_OgBsb1UIfjvb41Bwimi4.roa (hash: oR/jgqozL9leyl3DMc7LefEzsfH3jn7fBo/d5r37udY=) 3: Lq4WVGKGsselfZcTJptyW5NxYrs.roa (hash: AGKXTF8CpWwFuAtN+d3P7Q0iDr057cYXvsD6OiqrbrI=) 4: WUcwdVxjGm9MT5dj0KuN5kY8fc0.roa (hash: Va0HPLXWY6KmecVQh7TSAW6BzjPwycNZWbVEYlVLjHk=) 5: kUqlV8PT0ea38FJcNMwdSIpakpQ.crl (hash: 9dPhm1kNxgKgGbte3XCSMg3RWH688inzCWPJWpefGAg=) 6: poqG69mPnb95YSUs8FdptFbAqUw.roa (hash: mqMSlTGBPTy+EqcBaFtlD8JVQdwDJPdpMrV37KzvxOo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 02:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:c9:c4:ba:ff:97:31:d4:c4:a2:2a:64:27:b8:45:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294 Validity Not Before: Dec 22 02:00:55 2025 GMT Not After : Dec 23 02:00:55 2025 GMT Subject: CN=6f83e3658952b2f71b97d4d0cf0744dd43122e8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c3:07:1a:97:13:a3:2e:ac:70:66:29:96:df: 5c:24:86:e8:02:7b:13:6f:99:2a:11:6f:62:11:e7: 8c:48:49:72:13:93:c1:e8:28:a5:95:ea:71:9e:d4: 46:93:c7:37:18:4b:ac:b8:6d:2a:ea:81:24:ac:fb: d3:98:52:e9:ca:85:6b:c0:8f:62:df:0d:02:80:90: 0a:12:52:db:37:33:14:43:97:07:8b:67:b5:4b:49: c0:27:21:6b:71:46:5b:c1:2e:85:b7:3a:e4:07:74: a3:3b:fd:db:31:88:61:7d:70:e2:c0:c3:7b:19:d3: f8:0b:fc:fe:a5:37:7f:f1:77:78:3a:a8:5e:1b:b6: da:33:b3:62:5a:b0:9c:a7:31:bb:84:97:37:28:e9: 4f:66:e5:a1:21:e6:1e:40:83:e4:57:ad:83:f2:ae: 43:0b:e6:61:bd:26:a6:15:c0:3b:b7:41:9d:02:bd: df:45:fa:79:0e:a5:d8:7f:ad:04:46:82:cd:5b:12: 59:54:53:df:e1:eb:d9:e2:f8:80:b0:c7:b0:23:cf: 40:8f:fe:38:40:51:f6:07:1f:aa:95:40:0a:41:4b: 97:87:d6:92:f2:95:c1:16:64:7a:b6:0d:08:64:9d: 0b:bc:18:46:71:b6:48:c7:01:e7:6c:64:93:d8:51: 09:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:83:E3:65:89:52:B2:F7:1B:97:D4:D0:CF:07:44:DD:43:12:2E:8A X509v3 Authority Key Identifier: keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:e8:ab:ba:0c:f6:23:7c:f4:55:9d:95:81:a4:e3:41:4e:29: 45:2b:ca:10:d7:8f:e6:16:33:20:c6:4e:76:67:66:78:ac:dc: a8:f7:8a:1c:68:e6:7d:f8:3a:90:a3:66:3a:9a:a5:57:38:b5: 40:1d:7b:04:67:c5:1f:2a:f6:e1:66:78:3e:8d:a7:2e:66:ba: e1:25:9c:ac:62:f9:5d:3d:2a:9f:db:e5:6d:a3:8e:89:2f:60: cd:62:5a:7c:ea:5f:f8:19:fb:41:d4:22:98:cc:66:a7:d7:c1: 72:b2:83:ba:b2:da:94:7c:92:2b:75:2b:eb:53:61:c7:ed:ff: cd:a7:aa:f8:f8:4d:fb:08:75:46:56:89:c6:2d:38:59:ad:26: 75:49:c5:d5:39:42:a7:5a:ea:50:81:4e:4b:1b:da:78:ea:3e: 49:6d:35:a0:77:1d:ff:38:dd:a2:94:e4:c1:56:fc:54:90:e5: 92:44:55:fc:6a:90:57:33:b2:55:4b:6d:a8:c7:b8:78:2d:e4: d9:0f:41:f1:2f:d6:1b:2a:39:3a:ac:2d:9d:d8:00:15:19:f6: 30:85:d9:62:51:6b:ad:69:6c:cb:20:f7:e9:63:47:54:bd:36: 93:71:e7:3f:82:f7:c9:b8:4b:b5:68:eb:6a:51:d2:13:8d:6a: 83:cd:68:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDycS6/5cx1MSiKmQnuEUHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxNGFhNTU3YzNkM2QxZTZiN2YwNTI1YzM0Y2MxZDQ4OGE1 YTkyOTQwHhcNMjUxMjIyMDIwMDU1WhcNMjUxMjIzMDIwMDU1WjAzMTEwLwYDVQQD Eyg2ZjgzZTM2NTg5NTJiMmY3MWI5N2Q0ZDBjZjA3NDRkZDQzMTIyZThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8MHGpcToy6scGYplt9cJIboAnsT b5kqEW9iEeeMSElyE5PB6CillepxntRGk8c3GEusuG0q6oEkrPvTmFLpyoVrwI9i 3w0CgJAKElLbNzMUQ5cHi2e1S0nAJyFrcUZbwS6FtzrkB3SjO/3bMYhhfXDiwMN7 GdP4C/z+pTd/8Xd4OqheG7baM7NiWrCcpzG7hJc3KOlPZuWhIeYeQIPkV62D8q5D C+ZhvSamFcA7t0GdAr3fRfp5DqXYf60ERoLNWxJZVFPf4evZ4viAsMewI89Aj/44 QFH2Bx+qlUAKQUuXh9aS8pXBFmR6tg0IZJ0LvBhGcbZIxwHnbGST2FEJAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG+D42WJUrL3G5fU0M8HRN1DEi6KMB8GA1UdIwQY MBaAFJFKpVfD09Hmt/BSXDTMHUiKWpKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYt NGEzNDhlN2JlNDQxLzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYtNGEzNDhlN2JlNDQx LzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADeirugz2 I3z0VZ2VgaTjQU4pRSvKENeP5hYzIMZOdmdmeKzcqPeKHGjmffg6kKNmOpqlVzi1 QB17BGfFHyr24WZ4Po2nLma64SWcrGL5XT0qn9vlbaOOiS9gzWJafOpf+Bn7QdQi mMxmp9fBcrKDurLalHySK3Ur61Nhx+3/zaeq+PhN+wh1RlaJxi04Wa0mdUnF1TlC p1rqUIFOSxvaeOo+SW01oHcd/zjdopTkwVb8VJDlkkRV/GqQVzOyVUttqMe4eC3k 2Q9B8S/WGyo5OqwtndgAFRn2MIXZYlFrrWlsyyD36WNHVL02k3HnP4L3ybhLtWjr alHSE41qg81oeg== -----END CERTIFICATE-----Generated at Mon Dec 22 11:33:34 2025 by rpki-client