This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft File: KqttsAX47NmhIcY2hYB17xMUXbA.mft (raw, json) Hash identifier: ESHG0a+OtJDtmAoSZCM0HYvLga+Mtfvi8MXh4mov2P8= Subject key identifier: F9:2E:62:0B:A1:41:33:17:2F:5A:CF:8C:AF:6D:74:6C:93:B7:69:D9 Authority key identifier: 2A:AB:6D:B0:05:F8:EC:D9:A1:21:C6:36:85:80:75:EF:13:14:5D:B0 Certificate issuer: /CN=2aab6db005f8ecd9a121c636858075ef13145db0 Certificate serial: 019B5976CB8C054114A8237D0EE84EE0508D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqttsAX47NmhIcY2hYB17xMUXbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft Manifest number: 1192 Signing time: Fri 26 Dec 2025 07:01:56 +0000 Manifest this update: Fri 26 Dec 2025 07:01:56 +0000 Manifest next update: Sat 27 Dec 2025 07:01:56 +0000 Files and hashes: 1: KqttsAX47NmhIcY2hYB17xMUXbA.crl (hash: RhzluO5NYtqQkjAdfnDPCa7Bjp6n92XSX4yFrRIKqX0=) 2: NTwv9MrFUxU0rREuWqapE-DiajI.roa (hash: hq+d0ybPFOeu8D+rx2edFf/i0EP0Jbrx83E12M+26zY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft rsync://rpki.ripe.net/repository/DEFAULT/KqttsAX47NmhIcY2hYB17xMUXbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:cb:8c:05:41:14:a8:23:7d:0e:e8:4e:e0:50:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aab6db005f8ecd9a121c636858075ef13145db0 Validity Not Before: Dec 26 07:01:56 2025 GMT Not After : Dec 27 07:01:56 2025 GMT Subject: CN=f92e620ba14133172f5acf8caf6d746c93b769d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:41:a7:8e:32:9c:38:25:d6:b2:57:85:2a:3a: e5:c4:03:c0:8f:c9:14:bb:14:7d:23:64:52:b6:75: 29:68:02:7e:b2:0d:e0:3c:10:16:cc:41:50:dd:a4: 14:4d:5e:2e:24:0f:4d:28:a5:7e:48:0b:3e:09:17: 79:2a:a4:1f:9e:b2:e5:73:d2:4e:ba:0a:9b:44:5b: 19:95:0b:0f:17:de:ab:84:4a:f9:83:b0:20:18:08: 7a:8e:27:44:4f:b5:fd:1a:96:bf:2a:d7:5e:b9:5d: 53:1a:2f:a4:7d:98:8a:08:f8:3a:94:95:cf:6d:00: 44:e7:3e:d9:23:74:66:17:0b:46:cd:81:0b:db:44: 20:f9:5e:25:ed:c3:d9:e1:86:9d:85:0a:d1:00:35: 92:47:38:59:1d:c0:b4:aa:65:c6:84:22:47:2e:a4: e5:42:b8:e4:ea:21:04:96:eb:64:11:0d:f0:0d:43: da:eb:91:bc:f0:37:93:80:04:fd:85:bc:96:79:3a: c8:53:7a:69:92:bf:52:2d:c3:91:e2:16:bc:12:a9: 48:25:ad:e1:d2:49:27:08:b9:6d:14:1f:c0:d1:9b: d2:cb:63:ab:4b:31:80:74:9b:70:5d:dc:ed:8d:2b: a7:90:0f:76:6b:29:25:32:39:40:36:0a:db:e3:84: 0b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:2E:62:0B:A1:41:33:17:2F:5A:CF:8C:AF:6D:74:6C:93:B7:69:D9 X509v3 Authority Key Identifier: keyid:2A:AB:6D:B0:05:F8:EC:D9:A1:21:C6:36:85:80:75:EF:13:14:5D:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqttsAX47NmhIcY2hYB17xMUXbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:23:d2:87:04:c7:7a:90:0b:8a:16:8a:9b:93:58:06:43:90: b1:fc:3a:97:4f:db:8b:3d:12:b5:70:d6:f7:50:75:2b:5c:53: 8a:78:07:62:4d:ea:0f:92:13:b3:19:cf:d1:92:66:ef:2d:1c: a9:a7:69:53:32:b6:9b:68:22:fe:c5:28:ca:09:5d:11:9f:46: 0c:25:b5:db:0c:42:0a:d8:b0:83:69:77:af:62:37:5a:b1:34: 6e:b2:61:0b:9c:27:92:42:75:7d:f1:b9:fc:1a:a7:9e:71:69: 36:9d:df:26:a6:d2:de:f7:67:bd:22:34:f4:5e:2a:68:6b:88: 44:35:5b:bc:56:06:07:d3:1c:5e:8b:5c:fb:2e:16:9e:2c:93: bf:54:0d:86:d5:b8:55:c2:99:2c:5a:37:44:99:f6:b8:f1:b8: 0e:fa:fa:c4:c5:2a:a3:32:a5:8b:f9:47:56:0d:35:02:96:b4: 4c:dd:8b:34:8b:d1:35:92:c7:55:bd:8d:60:72:b1:bf:86:a1: b5:88:f1:dc:6e:09:1b:2b:c8:a6:62:f5:01:a9:6c:b9:97:9f: 09:9d:ad:97:74:29:e4:b6:77:04:1f:62:f3:b2:22:77:e4:e0: 90:58:9d:b5:93:cc:8a:c6:95:2e:2f:b3:d1:06:43:54:fc:3f: 7a:97:be:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdsuMBUEUqCN9DuhO4FCNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYWI2ZGIwMDVmOGVjZDlhMTIxYzYzNjg1ODA3NWVmMTMx NDVkYjAwHhcNMjUxMjI2MDcwMTU2WhcNMjUxMjI3MDcwMTU2WjAzMTEwLwYDVQQD EyhmOTJlNjIwYmExNDEzMzE3MmY1YWNmOGNhZjZkNzQ2YzkzYjc2OWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kGnjjKcOCXWsleFKjrlxAPAj8kU uxR9I2RStnUpaAJ+sg3gPBAWzEFQ3aQUTV4uJA9NKKV+SAs+CRd5KqQfnrLlc9JO ugqbRFsZlQsPF96rhEr5g7AgGAh6jidET7X9Gpa/KtdeuV1TGi+kfZiKCPg6lJXP bQBE5z7ZI3RmFwtGzYEL20Qg+V4l7cPZ4YadhQrRADWSRzhZHcC0qmXGhCJHLqTl Qrjk6iEElutkEQ3wDUPa65G88DeTgAT9hbyWeTrIU3ppkr9SLcOR4ha8EqlIJa3h 0kknCLltFB/A0ZvSy2OrSzGAdJtwXdztjSunkA92ayklMjlANgrb44QLKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPkuYguhQTMXL1rPjK9tdGyTt2nZMB8GA1UdIwQY MBaAFCqrbbAF+OzZoSHGNoWAde8TFF2wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3F0dHNBWDQ3Tm1oSWNZMmhZQjE3eE1VWGJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84YzE3YmEtNWFiNC00ZjU5LWI0YmUt YWQ2YTgxYjgyYTE3LzEvS3F0dHNBWDQ3Tm1oSWNZMmhZQjE3eE1VWGJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi84YzE3YmEtNWFiNC00ZjU5LWI0YmUtYWQ2YTgxYjgyYTE3 LzEvS3F0dHNBWDQ3Tm1oSWNZMmhZQjE3eE1VWGJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATyPShwTH epALihaKm5NYBkOQsfw6l0/biz0StXDW91B1K1xTingHYk3qD5ITsxnP0ZJm7y0c qadpUzK2m2gi/sUoygldEZ9GDCW12wxCCtiwg2l3r2I3WrE0brJhC5wnkkJ1ffG5 /BqnnnFpNp3fJqbS3vdnvSI09F4qaGuIRDVbvFYGB9McXotc+y4WniyTv1QNhtW4 VcKZLFo3RJn2uPG4Dvr6xMUqozKli/lHVg01Apa0TN2LNIvRNZLHVb2NYHKxv4ah tYjx3G4JGyvIpmL1AalsuZefCZ2tl3Qp5LZ3BB9i87Iid+TgkFidtZPMisaVLi+z 0QZDVPw/epe+jA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:46:22 2025 by rpki-client