This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft File: KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft (raw, json) Hash identifier: mZRcGP4vl+wJ69Q4ce2beeFig9ZxYHX/kbzwG75HRPQ= Subject key identifier: 0C:BE:97:06:D8:35:70:EC:E3:A9:47:BE:B7:1C:9C:21:A2:78:3C:27 Authority key identifier: 2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC Certificate issuer: /CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc Certificate serial: 019B119400ECD6D96CB16CD8FBB51EFE99A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft Manifest number: 107D Signing time: Fri 12 Dec 2025 08:01:10 +0000 Manifest this update: Fri 12 Dec 2025 08:01:10 +0000 Manifest next update: Sat 13 Dec 2025 08:01:10 +0000 Files and hashes: 1: KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl (hash: OMFDrWU0NCm2qfdt5mTCEHzk+vOlPmHNLhbTVIB+zo0=) 2: UZvnE-CaTB9qoHVdVXMgB-LiNEM.roa (hash: Ycg6B0Rffq0DfziTHdPyE76c/wB4R/dWXA7Fjbacvbs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 07:47:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:94:00:ec:d6:d9:6c:b1:6c:d8:fb:b5:1e:fe:99:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc Validity Not Before: Dec 12 08:01:10 2025 GMT Not After : Dec 13 08:01:10 2025 GMT Subject: CN=0cbe9706d83570ece3a947beb71c9c21a2783c27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:97:1e:ed:1f:63:e8:b7:88:a6:78:3d:e1:b7: f3:9b:19:d9:ec:e8:cb:96:39:32:63:c3:77:fc:4d: fd:94:11:0a:13:c8:17:20:7e:80:a0:03:c1:84:69: 55:a4:cd:2e:5a:6a:ef:98:19:44:24:1a:b3:c8:fa: 25:5d:44:a7:6f:b4:56:b5:49:a7:ec:ab:7d:7b:42: 25:a9:b8:4a:8c:53:25:86:d1:7a:79:c8:8c:da:9f: a0:fe:c9:42:ad:0a:43:a4:9e:d3:ff:50:ac:2c:24: da:7d:47:8b:07:23:6e:06:9a:96:bd:f9:f0:a1:e7: e6:7c:05:fb:68:bd:ba:ea:a1:7b:fd:d7:4a:a5:ad: 44:90:11:f6:a1:d2:90:21:07:f0:ed:11:70:8c:2d: 90:7b:1c:64:87:40:27:d5:4f:74:63:70:ec:55:1c: a3:87:ec:40:75:f7:0b:b5:28:f4:6a:42:76:0b:13: 85:ed:ed:04:a0:6c:04:54:22:62:1a:87:e9:c4:be: 38:29:25:1a:82:76:2a:67:c8:af:4b:31:dd:66:d4: 0d:1e:07:15:e4:1a:de:da:5d:89:b3:91:f2:91:63: 90:f7:18:37:43:7f:4d:cb:cc:fe:7f:28:b2:06:87: 51:9b:88:af:24:d1:48:ee:db:1b:b7:dc:7d:41:81: 9a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:BE:97:06:D8:35:70:EC:E3:A9:47:BE:B7:1C:9C:21:A2:78:3C:27 X509v3 Authority Key Identifier: keyid:2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:7f:f3:ee:ff:56:fd:d4:b3:ea:0f:87:a1:d7:7a:b3:b2:a9: ae:92:c7:cc:67:ba:9a:43:68:fb:bd:68:1c:4c:58:c3:f6:43: 8c:58:4c:3b:9b:b6:b2:84:4d:57:d6:f9:f2:1d:86:79:6c:49: 0e:03:b6:71:dc:ce:90:fa:c1:11:ff:29:f0:9c:78:c0:39:53: 09:83:42:5b:25:e0:32:3f:87:95:cb:39:f1:7a:21:d8:f5:49: f7:cd:5c:33:44:12:98:ce:c3:5b:29:d8:dc:17:8e:df:93:70: 11:bf:78:a4:a4:d1:93:95:34:e9:08:91:93:06:da:5f:39:3c: d0:9d:42:12:89:e4:13:e0:e6:3d:02:d2:4d:e6:c8:b0:cb:c9: 64:f9:42:b9:e2:2a:b5:b9:8f:06:0d:21:8e:4b:51:56:e1:fc: 1e:63:0a:c4:b0:bc:40:4c:70:19:c4:68:a4:e2:c8:19:96:4f: fc:40:50:55:b2:51:ea:50:34:ea:e7:51:d4:33:7e:15:3e:ee: 21:99:02:92:01:b5:63:a1:4c:b5:a5:6c:da:5f:dd:88:bf:5b: f4:19:46:f6:38:20:20:b2:50:10:da:6e:8a:28:a5:c5:79:f0: 41:bd:9b:1e:46:cc:4e:f9:10:b9:94:4f:5f:33:06:02:60:41: 0b:57:92:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRlADs1tlssWzY+7Ue/pmoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYTNjOTlmZjU4YjhmNzMzZWYyYzYyYTc3NzJjMGMxZjI5 ZTU3ZmMwHhcNMjUxMjEyMDgwMTEwWhcNMjUxMjEzMDgwMTEwWjAzMTEwLwYDVQQD EygwY2JlOTcwNmQ4MzU3MGVjZTNhOTQ3YmViNzFjOWMyMWEyNzgzYzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJce7R9j6LeIpng94bfzmxnZ7OjL ljkyY8N3/E39lBEKE8gXIH6AoAPBhGlVpM0uWmrvmBlEJBqzyPolXUSnb7RWtUmn 7Kt9e0IlqbhKjFMlhtF6eciM2p+g/slCrQpDpJ7T/1CsLCTafUeLByNuBpqWvfnw oefmfAX7aL266qF7/ddKpa1EkBH2odKQIQfw7RFwjC2Qexxkh0An1U90Y3DsVRyj h+xAdfcLtSj0akJ2CxOF7e0EoGwEVCJiGofpxL44KSUagnYqZ8ivSzHdZtQNHgcV 5Bre2l2Js5HykWOQ9xg3Q39Ny8z+fyiyBodRm4ivJNFI7tsbt9x9QYGaJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAy+lwbYNXDs46lHvrccnCGieDwnMB8GA1UdIwQY MBaAFCqjyZ/1i49zPvLGKndywMHynlf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3FQSm5fV0xqM00tOHNZcWQzTEF3ZktlVl93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hMGI2M2UtMTE2Ni00NmI1LTllM2Ut MzhiNWQxNzg4MDA3LzEvS3FQSm5fV0xqM00tOHNZcWQzTEF3ZktlVl93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hMGI2M2UtMTE2Ni00NmI1LTllM2UtMzhiNWQxNzg4MDA3 LzEvS3FQSm5fV0xqM00tOHNZcWQzTEF3ZktlVl93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEn/z7v9W /dSz6g+Hodd6s7KprpLHzGe6mkNo+71oHExYw/ZDjFhMO5u2soRNV9b58h2GeWxJ DgO2cdzOkPrBEf8p8Jx4wDlTCYNCWyXgMj+Hlcs58Xoh2PVJ981cM0QSmM7DWynY 3BeO35NwEb94pKTRk5U06QiRkwbaXzk80J1CEonkE+DmPQLSTebIsMvJZPlCueIq tbmPBg0hjktRVuH8HmMKxLC8QExwGcRopOLIGZZP/EBQVbJR6lA06udR1DN+FT7u IZkCkgG1Y6FMtaVs2l/diL9b9BlG9jggILJQENpuiiilxXnwQb2bHkbMTvkQuZRP XzMGAmBBC1eSLA== -----END CERTIFICATE-----Generated at Fri Dec 12 09:23:40 2025 by rpki-client