This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft File: kq8Dyi32Qjt30O83N7D0eRqgNaM.mft (raw, json) Hash identifier: 6iKkODz7KLLAGF2t4gdvs5gPyYrolbXgWtn3435Rg+c= Subject key identifier: FB:35:AE:85:21:D7:23:24:06:76:E1:B2:9D:4D:FB:3E:DD:69:8D:46 Authority key identifier: 92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3 Certificate issuer: /CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3 Certificate serial: 019B12702E87480A33111EA49774195694E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft Manifest number: 0C01 Signing time: Fri 12 Dec 2025 12:01:40 +0000 Manifest this update: Fri 12 Dec 2025 12:01:40 +0000 Manifest next update: Sat 13 Dec 2025 12:01:40 +0000 Files and hashes: 1: XFrF4ZD8RKmENGKuXlNfyh9_oV8.roa (hash: Syc9HmjiF/DkUOhl4IVh1oQ9jwD6L7ptWtUgxSy9ut8=) 2: kq8Dyi32Qjt30O83N7D0eRqgNaM.crl (hash: PfxU0D5lkhsxx4wpYZTUov/9g5Em26kkk7qDzfnm2Cg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:70:2e:87:48:0a:33:11:1e:a4:97:74:19:56:94:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3 Validity Not Before: Dec 12 12:01:40 2025 GMT Not After : Dec 13 12:01:40 2025 GMT Subject: CN=fb35ae8521d723240676e1b29d4dfb3edd698d46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:89:4c:8b:fb:fb:5c:4e:39:2e:96:1a:fb:35: 92:5c:a9:b5:9f:9d:11:0f:19:80:a5:7f:00:cd:b4: bf:a7:5b:b4:be:41:b6:84:ae:03:6b:49:84:8a:bf: d5:9a:57:86:f2:54:6b:ac:82:9c:44:dc:c2:76:55: 50:fb:92:54:c3:55:95:37:fb:03:cd:b8:99:c1:19: 3b:62:22:44:7a:b7:ef:31:b6:f0:c9:0a:3d:ea:77: 37:47:e0:e6:33:61:f6:29:a7:eb:44:8e:e4:8a:f6: b6:5f:45:c1:f2:d6:e8:0a:47:14:fe:f9:6e:fb:37: c5:da:6b:ac:93:bb:d1:c9:1e:53:82:2b:3c:0f:72: a9:ba:4a:7e:f7:4e:26:d1:fa:13:3c:6d:27:fc:3d: bc:d8:3d:e4:ec:6f:f3:d8:1c:31:be:96:8d:9b:9e: 0b:5b:a1:78:a8:58:9f:23:e5:63:58:3a:0a:1b:8f: b1:8c:8e:87:b7:6f:5a:4e:f3:96:4b:d5:6c:24:9e: 9f:f6:87:05:e9:b3:71:fa:21:76:02:59:16:f0:85: 3a:7c:22:6b:db:19:e0:a4:58:0f:5f:56:04:ed:f7: 9c:4d:97:98:5c:06:53:19:41:f5:0f:4f:9f:a4:92: ac:2f:aa:34:c5:19:61:62:b8:01:b1:db:1e:5c:24: c1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:35:AE:85:21:D7:23:24:06:76:E1:B2:9D:4D:FB:3E:DD:69:8D:46 X509v3 Authority Key Identifier: keyid:92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:7d:ba:61:f1:52:28:ce:2d:04:6d:31:f0:42:70:fe:38:8a: b3:6c:6c:da:2c:db:3f:ad:fc:21:72:d3:63:97:3e:6c:4c:67: be:7a:bb:8a:e1:d4:78:cb:e1:a1:b5:60:08:df:63:df:a8:a6: 24:8c:3e:6c:ac:4d:60:a4:bb:3d:d7:97:e8:2d:81:97:7e:e6: b6:50:c2:11:c1:fb:6f:75:50:78:3d:5f:37:30:6f:e7:66:b5: 33:c2:64:ca:89:49:83:a4:b0:0a:5c:59:90:c6:05:62:91:dd: ee:19:2b:28:1d:a3:fe:e2:30:3d:45:ce:e1:02:5f:e6:57:ed: d4:56:61:7c:b3:e8:e6:f3:fd:97:65:46:27:a2:a7:a4:59:f2: 5b:1f:62:dc:d5:fa:f4:9f:36:e6:5e:0c:b2:1f:d7:8d:1a:38: 62:cf:7e:bf:76:4f:8d:60:6b:ad:b8:2c:b4:c1:63:2c:4c:a3: 04:63:bf:20:09:31:20:15:5a:59:3e:b2:95:df:b8:f3:40:19: cb:ba:48:e3:60:0d:20:ef:d1:7a:5c:4c:93:21:50:8c:ec:b7: a8:d6:f6:34:e3:41:86:4e:e8:7e:d9:43:1f:5c:bf:dd:72:1d: 37:b0:22:7c:98:7c:26:64:63:11:fd:5f:ff:fa:72:bc:02:51: 6d:e7:fb:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsScC6HSAozER6kl3QZVpThMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYWYwM2NhMmRmNjQyM2I3N2QwZWYzNzM3YjBmNDc5MWFh MDM1YTMwHhcNMjUxMjEyMTIwMTQwWhcNMjUxMjEzMTIwMTQwWjAzMTEwLwYDVQQD EyhmYjM1YWU4NTIxZDcyMzI0MDY3NmUxYjI5ZDRkZmIzZWRkNjk4ZDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIlMi/v7XE45LpYa+zWSXKm1n50R DxmApX8AzbS/p1u0vkG2hK4Da0mEir/VmleG8lRrrIKcRNzCdlVQ+5JUw1WVN/sD zbiZwRk7YiJEerfvMbbwyQo96nc3R+DmM2H2KafrRI7kiva2X0XB8tboCkcU/vlu +zfF2musk7vRyR5Tgis8D3Kpukp+904m0foTPG0n/D282D3k7G/z2BwxvpaNm54L W6F4qFifI+VjWDoKG4+xjI6Ht29aTvOWS9VsJJ6f9ocF6bNx+iF2AlkW8IU6fCJr 2xngpFgPX1YE7fecTZeYXAZTGUH1D0+fpJKsL6o0xRlhYrgBsdseXCTBnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPs1roUh1yMkBnbhsp1N+z7daY1GMB8GA1UdIwQY MBaAFJKvA8ot9kI7d9DvNzew9HkaoDWjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3E4RHlpMzJRanQzME84M043RDBlUnFnTmFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS85ODIyYmMtMTU5My00OThjLThmNmEt NzAzYjZiNzBhN2VjLzEva3E4RHlpMzJRanQzME84M043RDBlUnFnTmFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS85ODIyYmMtMTU5My00OThjLThmNmEtNzAzYjZiNzBhN2Vj LzEva3E4RHlpMzJRanQzME84M043RDBlUnFnTmFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB326YfFS KM4tBG0x8EJw/jiKs2xs2izbP638IXLTY5c+bExnvnq7iuHUeMvhobVgCN9j36im JIw+bKxNYKS7PdeX6C2Bl37mtlDCEcH7b3VQeD1fNzBv52a1M8JkyolJg6SwClxZ kMYFYpHd7hkrKB2j/uIwPUXO4QJf5lft1FZhfLPo5vP9l2VGJ6KnpFnyWx9i3NX6 9J825l4Msh/XjRo4Ys9+v3ZPjWBrrbgstMFjLEyjBGO/IAkxIBVaWT6yld+480AZ y7pI42ANIO/RelxMkyFQjOy3qNb2NONBhk7oftlDH1y/3XIdN7AifJh8JmRjEf1f //pyvAJRbef72Q== -----END CERTIFICATE-----Generated at Fri Dec 12 14:22:49 2025 by rpki-client