This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft File: KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft (raw, json) Hash identifier: Sk8dVykXkdOTIGl6YwAIbHSE1CRF3+EE3uxMEM8iDcA= Subject key identifier: 4C:68:1A:7E:B8:D3:D0:A6:5D:AF:1C:8F:36:16:F2:F3:99:84:52:2B Authority key identifier: 2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC Certificate issuer: /CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc Certificate serial: 019B0FA5D3D9ABF5A6D7FBA7B51A23E1FCD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft Manifest number: 107C Signing time: Thu 11 Dec 2025 23:01:24 +0000 Manifest this update: Thu 11 Dec 2025 23:01:24 +0000 Manifest next update: Fri 12 Dec 2025 23:01:24 +0000 Files and hashes: 1: KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl (hash: Wose0xCw6KDU4xNefDinaw7NbbcKs0LrHAig55Iqr/U=) 2: UZvnE-CaTB9qoHVdVXMgB-LiNEM.roa (hash: Ycg6B0Rffq0DfziTHdPyE76c/wB4R/dWXA7Fjbacvbs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:d3:d9:ab:f5:a6:d7:fb:a7:b5:1a:23:e1:fc:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc Validity Not Before: Dec 11 23:01:24 2025 GMT Not After : Dec 12 23:01:24 2025 GMT Subject: CN=4c681a7eb8d3d0a65daf1c8f3616f2f39984522b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b4:05:aa:81:f9:4b:1d:aa:d2:be:cb:a8:2a: 63:bc:13:8a:91:c0:cc:67:88:b6:1d:2c:d4:a6:7d: 15:18:c6:0a:e0:b7:86:cd:fd:5b:b1:e0:61:8c:8e: c1:27:fd:04:83:5e:e7:31:7e:d2:48:c3:f0:39:a0: 3e:07:a9:c1:82:eb:03:fc:43:b1:44:5e:20:aa:13: e2:13:b7:48:a7:13:b9:b5:e2:8e:2f:8b:33:52:48: 2b:6e:e6:42:c9:df:13:2a:65:a7:ca:32:49:31:58: 8f:bc:33:af:cf:42:20:60:13:4c:4c:96:6b:ff:aa: 84:21:63:f3:05:91:4b:f1:8a:ea:dd:24:65:4e:d8: c2:d9:39:b9:b7:be:9d:4a:25:f1:41:81:e3:b9:dc: ab:a5:50:22:84:e6:c1:b7:76:a2:d0:c0:e6:51:31: 33:79:84:a7:cd:5b:d7:4c:bc:79:35:49:cc:cd:98: a8:79:aa:ea:21:e4:0c:43:ee:1f:07:55:9c:c6:be: 38:9f:35:0e:ba:71:e1:04:88:cc:da:62:f9:ae:7d: 6f:ac:22:59:41:2d:d6:40:6b:a0:de:41:7a:6d:8f: 7c:7d:11:d5:7e:ef:22:82:31:ec:ab:fc:b4:b3:9a: d4:01:df:6a:2f:65:29:aa:eb:a7:da:0a:92:3e:bc: b1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:68:1A:7E:B8:D3:D0:A6:5D:AF:1C:8F:36:16:F2:F3:99:84:52:2B X509v3 Authority Key Identifier: keyid:2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:4b:09:a9:f1:6b:06:de:6e:95:d6:b5:10:23:ce:0c:5b:bd: 89:d9:2c:fd:27:86:11:e9:d1:58:57:b9:f6:70:96:5d:e2:30: 5e:03:96:0e:9f:f0:c5:55:ab:8f:db:12:31:79:29:b1:8d:f6: 48:7a:af:1c:28:c3:01:c1:3f:80:ed:27:b3:3b:0c:75:05:4d: 86:37:27:fb:5b:c0:2b:02:11:de:78:9a:7e:76:35:08:69:05: 6b:a8:65:fb:72:f0:44:f7:4c:81:4a:b1:f1:b2:d5:1c:3b:10: da:1d:5e:12:ff:8d:49:39:09:cb:0f:ff:49:c0:d7:2a:3a:20: ae:b1:bf:91:6c:98:b2:38:8e:78:50:67:86:87:67:4c:4a:fa: 86:ce:d4:c5:7a:d7:be:9e:41:a1:a4:c5:96:56:31:49:cd:09: dd:d8:49:13:67:94:05:ba:83:23:1d:c1:8a:9f:da:69:be:d2: cb:91:3f:a2:d9:af:16:38:2a:ef:9a:cf:65:b9:13:5e:67:e9: df:ae:85:4f:15:e1:56:fe:e7:69:1b:69:f6:35:b5:3d:71:0f: 1a:11:a0:15:5f:ac:8c:18:d6:e3:80:dd:45:ff:85:9c:61:7f: 39:9a:12:f3:04:72:15:93:b5:bc:1d:e5:31:65:df:6a:3a:f5: 4d:19:51:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpdPZq/Wm1/untRoj4fzZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYTNjOTlmZjU4YjhmNzMzZWYyYzYyYTc3NzJjMGMxZjI5 ZTU3ZmMwHhcNMjUxMjExMjMwMTI0WhcNMjUxMjEyMjMwMTI0WjAzMTEwLwYDVQQD Eyg0YzY4MWE3ZWI4ZDNkMGE2NWRhZjFjOGYzNjE2ZjJmMzk5ODQ1MjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7QFqoH5Sx2q0r7LqCpjvBOKkcDM Z4i2HSzUpn0VGMYK4LeGzf1bseBhjI7BJ/0Eg17nMX7SSMPwOaA+B6nBgusD/EOx RF4gqhPiE7dIpxO5teKOL4szUkgrbuZCyd8TKmWnyjJJMViPvDOvz0IgYBNMTJZr /6qEIWPzBZFL8Yrq3SRlTtjC2Tm5t76dSiXxQYHjudyrpVAihObBt3ai0MDmUTEz eYSnzVvXTLx5NUnMzZioearqIeQMQ+4fB1Wcxr44nzUOunHhBIjM2mL5rn1vrCJZ QS3WQGug3kF6bY98fRHVfu8igjHsq/y0s5rUAd9qL2Upquun2gqSPryxqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFExoGn6409CmXa8cjzYW8vOZhFIrMB8GA1UdIwQY MBaAFCqjyZ/1i49zPvLGKndywMHynlf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3FQSm5fV0xqM00tOHNZcWQzTEF3ZktlVl93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hMGI2M2UtMTE2Ni00NmI1LTllM2Ut MzhiNWQxNzg4MDA3LzEvS3FQSm5fV0xqM00tOHNZcWQzTEF3ZktlVl93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hMGI2M2UtMTE2Ni00NmI1LTllM2UtMzhiNWQxNzg4MDA3 LzEvS3FQSm5fV0xqM00tOHNZcWQzTEF3ZktlVl93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASUsJqfFr Bt5ulda1ECPODFu9idks/SeGEenRWFe59nCWXeIwXgOWDp/wxVWrj9sSMXkpsY32 SHqvHCjDAcE/gO0nszsMdQVNhjcn+1vAKwIR3niafnY1CGkFa6hl+3LwRPdMgUqx 8bLVHDsQ2h1eEv+NSTkJyw//ScDXKjogrrG/kWyYsjiOeFBnhodnTEr6hs7UxXrX vp5BoaTFllYxSc0J3dhJE2eUBbqDIx3Bip/aab7Sy5E/otmvFjgq75rPZbkTXmfp 366FTxXhVv7naRtp9jW1PXEPGhGgFV+sjBjW44DdRf+FnGF/OZoS8wRyFZO1vB3l MWXfajr1TRlRew== -----END CERTIFICATE-----Generated at Fri Dec 12 08:15:36 2025 by rpki-client