This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft File: kq8Dyi32Qjt30O83N7D0eRqgNaM.mft (raw, json) Hash identifier: Ro2qTs72Ca4JN1i+iYzyYp5S0tvgY5l4X/7oITMLkbY= Subject key identifier: 02:28:C1:DA:09:EC:6D:9B:B3:B4:61:09:CB:0C:26:A5:68:97:3A:8A Authority key identifier: 92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3 Certificate issuer: /CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3 Certificate serial: 019B40C8BD0C966F1EEF00BE10D1D24FDD37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft Manifest number: 0C19 Signing time: Sun 21 Dec 2025 12:00:55 +0000 Manifest this update: Sun 21 Dec 2025 12:00:55 +0000 Manifest next update: Mon 22 Dec 2025 12:00:55 +0000 Files and hashes: 1: XFrF4ZD8RKmENGKuXlNfyh9_oV8.roa (hash: Syc9HmjiF/DkUOhl4IVh1oQ9jwD6L7ptWtUgxSy9ut8=) 2: kq8Dyi32Qjt30O83N7D0eRqgNaM.crl (hash: MZfGTXvbH2shJELBGmracdEtckBSnEcX1bxWghuTb0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:bd:0c:96:6f:1e:ef:00:be:10:d1:d2:4f:dd:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3 Validity Not Before: Dec 21 12:00:55 2025 GMT Not After : Dec 22 12:00:55 2025 GMT Subject: CN=0228c1da09ec6d9bb3b46109cb0c26a568973a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a0:a7:52:16:e8:1d:9a:4b:9e:8f:75:91:95: c2:fa:17:d0:cd:e2:65:e4:85:41:6a:f6:95:a5:63: ca:46:51:0a:d1:1e:65:3d:00:29:8d:e1:4a:c3:2d: 6d:84:62:e0:59:c6:75:6c:71:6d:34:42:55:87:c5: 5f:a4:c7:a8:90:ad:96:ec:95:46:05:6f:02:51:d8: 8c:60:8a:77:36:02:f0:0b:7e:3c:3e:b9:1f:9b:46: 3c:ed:4f:7b:e9:15:c4:25:a0:ab:d9:a1:44:aa:55: 74:d5:ee:16:37:a4:3b:04:ab:ad:23:7e:c0:20:23: 5d:cd:cb:8f:23:54:08:54:43:b3:ea:78:87:eb:c6: b1:8b:3a:23:d0:ae:94:52:8b:f0:db:9b:a3:54:e2: 1f:a4:9b:d5:e8:db:df:86:dc:97:1a:72:4c:ea:29: 02:46:38:b9:11:a7:85:99:0e:63:0b:00:5f:3e:a7: ba:fc:ba:eb:35:aa:dc:f7:80:bd:0a:dd:44:ef:44: ef:e1:77:79:c5:51:77:ea:a9:17:f8:3d:63:69:47: 21:db:a7:0e:52:4b:97:17:e4:3a:1f:be:3f:e2:5e: a0:e8:0b:7f:5e:17:76:57:7c:64:1f:0c:d8:11:1d: ea:a2:3b:0b:47:ec:02:43:e9:72:f0:2e:37:bd:53: 44:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:28:C1:DA:09:EC:6D:9B:B3:B4:61:09:CB:0C:26:A5:68:97:3A:8A X509v3 Authority Key Identifier: keyid:92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:fb:0d:6d:a3:ae:ad:a1:32:62:b4:b1:9f:65:41:40:67:de: 30:62:a0:95:7c:7f:b8:6a:2d:e0:4e:df:76:96:44:d8:67:9d: f3:f0:7d:78:3c:d0:79:c9:62:33:3f:a4:b8:d1:58:e1:fe:38: 17:50:fc:a4:a6:bc:b4:38:68:f1:0e:f3:04:6f:73:e2:a5:aa: c9:db:ed:39:48:4c:c3:90:b1:01:1f:cb:eb:5c:2c:6b:85:37: 56:ed:8d:f5:dd:17:4f:e5:3c:25:2c:d8:46:1a:80:e7:b6:90: 89:9d:bd:b4:27:13:4b:b2:20:08:d3:b9:c8:3f:84:ae:95:4b: ee:c5:53:fe:9f:ae:ea:d2:ce:91:5e:e2:ac:a2:71:cb:bb:4a: 26:72:08:18:b5:0e:fa:7c:81:ba:50:c3:94:e1:79:fd:f6:03: d2:e4:18:1c:ec:88:c5:ec:68:d2:33:44:38:86:eb:69:bc:14: 8a:ed:f9:6d:70:d7:1c:ca:21:10:ff:ed:1d:db:cb:b1:d7:e6: 65:d5:20:90:9c:28:2b:44:6f:7c:a0:18:72:e2:56:d4:58:97: 0a:6f:aa:1e:e1:df:5e:bb:7f:b4:be:c7:0d:31:e8:6b:ac:6a: 61:15:92:1b:78:a7:bf:0c:35:98:21:f5:d0:cb:85:d2:f1:92: 73:7c:07:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyL0Mlm8e7wC+ENHST903MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYWYwM2NhMmRmNjQyM2I3N2QwZWYzNzM3YjBmNDc5MWFh MDM1YTMwHhcNMjUxMjIxMTIwMDU1WhcNMjUxMjIyMTIwMDU1WjAzMTEwLwYDVQQD EygwMjI4YzFkYTA5ZWM2ZDliYjNiNDYxMDljYjBjMjZhNTY4OTczYThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6CnUhboHZpLno91kZXC+hfQzeJl 5IVBavaVpWPKRlEK0R5lPQApjeFKwy1thGLgWcZ1bHFtNEJVh8VfpMeokK2W7JVG BW8CUdiMYIp3NgLwC348Prkfm0Y87U976RXEJaCr2aFEqlV01e4WN6Q7BKutI37A ICNdzcuPI1QIVEOz6niH68axizoj0K6UUovw25ujVOIfpJvV6NvfhtyXGnJM6ikC Rji5EaeFmQ5jCwBfPqe6/LrrNarc94C9Ct1E70Tv4Xd5xVF36qkX+D1jaUch26cO UkuXF+Q6H74/4l6g6At/Xhd2V3xkHwzYER3qojsLR+wCQ+ly8C43vVNE9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAIowdoJ7G2bs7RhCcsMJqVolzqKMB8GA1UdIwQY MBaAFJKvA8ot9kI7d9DvNzew9HkaoDWjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3E4RHlpMzJRanQzME84M043RDBlUnFnTmFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS85ODIyYmMtMTU5My00OThjLThmNmEt NzAzYjZiNzBhN2VjLzEva3E4RHlpMzJRanQzME84M043RDBlUnFnTmFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS85ODIyYmMtMTU5My00OThjLThmNmEtNzAzYjZiNzBhN2Vj LzEva3E4RHlpMzJRanQzME84M043RDBlUnFnTmFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG/sNbaOu raEyYrSxn2VBQGfeMGKglXx/uGot4E7fdpZE2Ged8/B9eDzQecliMz+kuNFY4f44 F1D8pKa8tDho8Q7zBG9z4qWqydvtOUhMw5CxAR/L61wsa4U3Vu2N9d0XT+U8JSzY RhqA57aQiZ29tCcTS7IgCNO5yD+ErpVL7sVT/p+u6tLOkV7irKJxy7tKJnIIGLUO +nyBulDDlOF5/fYD0uQYHOyIxexo0jNEOIbrabwUiu35bXDXHMohEP/tHdvLsdfm ZdUgkJwoK0RvfKAYcuJW1FiXCm+qHuHfXrt/tL7HDTHoa6xqYRWSG3invww1mCH1 0MuF0vGSc3wHCw== -----END CERTIFICATE-----Generated at Sun Dec 21 21:16:23 2025 by rpki-client