This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft File: KEQn3OurQOvBmDny0l7qLOClYv8.mft (raw, json) Hash identifier: 4D8yOov/qyt5au1t/agoaGstcXENh0rl12gZp3wngfo= Subject key identifier: 85:7B:A1:4A:18:E9:72:12:21:8B:F4:B1:68:1E:6D:F1:C1:AD:53:D1 Authority key identifier: 28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF Certificate issuer: /CN=284427dcebab40ebc19839f2d25eea2ce0a562ff Certificate serial: 019B5A88B6217711939C9BBE11DD1FFDBA02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft Manifest number: 0660 Signing time: Fri 26 Dec 2025 12:01:07 +0000 Manifest this update: Fri 26 Dec 2025 12:01:07 +0000 Manifest next update: Sat 27 Dec 2025 12:01:07 +0000 Files and hashes: 1: D46Ir3fESQdKV4ntE1MciVCeNwY.roa (hash: ND9cgWv5J0hNtKyrA/zDulukUC/W3FHSN0hW88QXa3s=) 2: KEQn3OurQOvBmDny0l7qLOClYv8.crl (hash: iQk7k/eLmruPGKRwSCF1NlFfFuP+CwzTyE4Wo6+ZBkA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:b6:21:77:11:93:9c:9b:be:11:dd:1f:fd:ba:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=284427dcebab40ebc19839f2d25eea2ce0a562ff Validity Not Before: Dec 26 12:01:07 2025 GMT Not After : Dec 27 12:01:07 2025 GMT Subject: CN=857ba14a18e97212218bf4b1681e6df1c1ad53d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d9:2e:24:23:27:10:f9:b9:45:8d:10:ee:e1: 71:73:9d:3a:ce:8d:e7:49:b0:77:3d:2a:bd:99:63: 4a:f3:ba:7e:61:84:cb:cf:fc:1c:53:1e:0c:45:a1: 5e:8e:e6:72:ab:03:15:89:f6:a7:4b:04:bf:bd:e8: 58:1c:e4:29:3c:be:3c:89:9a:25:23:cf:1d:71:67: 37:0c:80:97:e9:a6:0c:b3:c7:45:2c:e6:4a:ef:f3: 49:72:83:09:1e:c3:b1:30:d5:0f:c4:f7:8f:4a:af: d1:e6:61:ec:08:b5:8b:23:28:eb:f0:f1:98:f8:c9: bf:4d:34:41:08:a9:69:3b:07:aa:87:2e:82:63:eb: 49:a5:9f:29:1e:c5:86:05:d5:a8:1e:67:c6:17:56: dd:33:f1:8b:f4:70:e9:a2:b2:9e:f2:0a:e7:19:87: 57:59:20:0f:40:d7:29:d2:32:cf:28:c9:8e:1a:48: 08:dc:97:f3:f0:97:d6:41:66:7e:29:52:17:40:01: ff:23:c8:de:69:ca:3c:fd:73:b9:10:26:8d:2e:06: 2a:5f:53:aa:b9:fd:a5:4b:aa:4f:c5:c0:2f:3a:95: 66:37:90:0b:e1:ab:1a:a5:d7:1f:37:70:06:7d:52: 11:82:f9:03:c9:02:ed:8e:21:b1:9c:67:07:d0:d4: 8e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:7B:A1:4A:18:E9:72:12:21:8B:F4:B1:68:1E:6D:F1:C1:AD:53:D1 X509v3 Authority Key Identifier: keyid:28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:79:40:06:ad:5e:4c:40:2c:14:da:7d:e9:75:5a:78:a8:61: 50:68:3c:af:84:cd:bf:38:82:2f:98:8d:d0:2e:50:5b:f4:a9: bd:08:b9:8d:b1:e0:b0:4a:14:0a:be:51:7b:03:ff:84:79:49: a9:37:49:bd:08:2a:84:50:08:99:6b:59:f8:fd:bc:98:98:9e: cd:c4:81:92:ce:2e:fa:f9:50:d2:d0:d8:0f:55:e6:f9:5d:d5: dc:e7:f4:39:ee:70:0d:ba:14:0d:55:b2:d0:47:a8:36:f1:7e: b2:fe:ac:0f:5c:e1:6c:88:d7:29:23:98:8d:29:54:62:b5:88: b9:e0:96:e1:1e:36:43:f8:3b:31:a6:57:af:78:96:a8:f4:6b: de:8d:4c:47:15:0b:b3:2f:01:74:48:6d:4a:6e:1b:9e:61:90: 5e:5a:0f:1a:08:6a:5d:b6:3a:08:61:88:37:e9:e1:c3:a8:28: 57:2d:9c:3e:b0:0b:44:b6:a2:26:fe:ab:e9:c9:d9:5d:c8:5b: 42:be:0d:a4:dc:c4:6f:5b:a3:7f:52:99:19:1f:53:06:c4:d6: df:78:2d:7c:28:03:31:85:5d:48:08:00:11:f4:70:53:0b:8d: 4b:16:4c:66:af:1d:75:94:42:2d:b0:dd:2a:43:e4:7a:6a:3c: ba:a8:06:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiLYhdxGTnJu+Ed0f/boCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4NDQyN2RjZWJhYjQwZWJjMTk4MzlmMmQyNWVlYTJjZTBh NTYyZmYwHhcNMjUxMjI2MTIwMTA3WhcNMjUxMjI3MTIwMTA3WjAzMTEwLwYDVQQD Eyg4NTdiYTE0YTE4ZTk3MjEyMjE4YmY0YjE2ODFlNmRmMWMxYWQ1M2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNkuJCMnEPm5RY0Q7uFxc506zo3n SbB3PSq9mWNK87p+YYTLz/wcUx4MRaFejuZyqwMVifanSwS/vehYHOQpPL48iZol I88dcWc3DICX6aYMs8dFLOZK7/NJcoMJHsOxMNUPxPePSq/R5mHsCLWLIyjr8PGY +Mm/TTRBCKlpOweqhy6CY+tJpZ8pHsWGBdWoHmfGF1bdM/GL9HDporKe8grnGYdX WSAPQNcp0jLPKMmOGkgI3Jfz8JfWQWZ+KVIXQAH/I8jeaco8/XO5ECaNLgYqX1Oq uf2lS6pPxcAvOpVmN5AL4asapdcfN3AGfVIRgvkDyQLtjiGxnGcH0NSOdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIV7oUoY6XISIYv0sWgebfHBrVPRMB8GA1UdIwQY MBaAFChEJ9zrq0DrwZg58tJe6izgpWL/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0VRbjNPdXJRT3ZCbURueTBsN3FMT0NsWXY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS80NmQ4YjQtOGY0Ny00ZTkzLWFjYzIt NTBkMDA1NzgyZmFiLzEvS0VRbjNPdXJRT3ZCbURueTBsN3FMT0NsWXY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS80NmQ4YjQtOGY0Ny00ZTkzLWFjYzItNTBkMDA1NzgyZmFi LzEvS0VRbjNPdXJRT3ZCbURueTBsN3FMT0NsWXY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn3lABq1e TEAsFNp96XVaeKhhUGg8r4TNvziCL5iN0C5QW/SpvQi5jbHgsEoUCr5RewP/hHlJ qTdJvQgqhFAImWtZ+P28mJiezcSBks4u+vlQ0tDYD1Xm+V3V3Of0Oe5wDboUDVWy 0EeoNvF+sv6sD1zhbIjXKSOYjSlUYrWIueCW4R42Q/g7MaZXr3iWqPRr3o1MRxUL sy8BdEhtSm4bnmGQXloPGghqXbY6CGGIN+nhw6goVy2cPrALRLaiJv6r6cnZXchb Qr4NpNzEb1ujf1KZGR9TBsTW33gtfCgDMYVdSAgAEfRwUwuNSxZMZq8ddZRCLbDd KkPkemo8uqgGlg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:04 2025 by rpki-client