This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft File: kGQm9IPDaqzahzIySriK1YAMmi0.mft (raw, json) Hash identifier: WVlB4oxxAOdT/rdb8LsBxDIzmDhqq1XlsLGVAAIvfaI= Subject key identifier: EE:51:43:10:49:37:56:B4:10:BF:5D:18:C6:13:A7:95:1B:A5:EA:A9 Authority key identifier: 90:64:26:F4:83:C3:6A:AC:DA:87:32:32:4A:B8:8A:D5:80:0C:9A:2D Certificate issuer: /CN=906426f483c36aacda8732324ab88ad5800c9a2d Certificate serial: 019B503C27F7396B95E3D44B4B98E5F86D6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft Manifest number: 0CB5 Signing time: Wed 24 Dec 2025 12:01:18 +0000 Manifest this update: Wed 24 Dec 2025 12:01:18 +0000 Manifest next update: Thu 25 Dec 2025 12:01:18 +0000 Files and hashes: 1: gLZLrbhpO6mWtu79cX_I9beQtfY.roa (hash: FKC1b4NqDGusVuG1PsHV/OorcR6VfmcWdy6GLsbONNI=) 2: kGQm9IPDaqzahzIySriK1YAMmi0.crl (hash: 8vn6XA8m4E4VcyuDF5Iyk0Rdj1ftpZzNemaDikLzJ3U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 12:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:3c:27:f7:39:6b:95:e3:d4:4b:4b:98:e5:f8:6d:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=906426f483c36aacda8732324ab88ad5800c9a2d Validity Not Before: Dec 24 12:01:18 2025 GMT Not After : Dec 25 12:01:18 2025 GMT Subject: CN=ee514310493756b410bf5d18c613a7951ba5eaa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6d:3d:63:00:ed:ae:b6:20:fa:0b:fb:2f:3a: b1:f7:26:4e:16:d2:d8:87:e7:28:9a:35:a7:fd:4b: 14:a1:1f:58:93:2b:df:54:15:97:92:50:f8:f9:78: a3:b3:cd:85:78:dc:5b:30:bf:e2:de:5c:f5:39:c4: 47:b5:33:3c:11:17:fd:44:23:ff:21:17:2b:68:01: 9c:31:52:39:97:1d:15:7b:e5:2a:aa:ae:08:c0:9e: d4:1d:22:23:e3:d3:21:38:4f:18:42:5f:62:0a:98: 86:0e:ac:8c:10:25:62:bd:a1:d8:00:23:39:69:a5: 2c:32:6f:33:fd:d2:e1:e2:e2:1d:1a:2e:9f:ba:e5: c9:7b:88:6f:c9:98:0c:d7:1e:c4:78:17:c4:3d:e9: 0e:f7:9d:04:57:15:1c:b6:92:f1:6a:f2:e6:20:1c: b3:bc:e6:69:b5:36:a8:f1:b6:9b:dd:73:80:5d:a2: 16:df:e9:13:d8:ec:bd:b2:2d:b5:e4:fb:b5:89:94: 08:cd:15:45:ff:99:92:b1:34:23:6c:e1:e0:3c:c5: fb:e3:49:fc:22:d8:1e:b4:90:91:89:95:58:02:31: a6:fd:96:93:6a:cf:0c:8b:10:e7:80:1f:44:c5:bb: b0:70:c4:0e:8c:62:de:9a:94:19:0d:14:89:9a:ba: 62:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:51:43:10:49:37:56:B4:10:BF:5D:18:C6:13:A7:95:1B:A5:EA:A9 X509v3 Authority Key Identifier: keyid:90:64:26:F4:83:C3:6A:AC:DA:87:32:32:4A:B8:8A:D5:80:0C:9A:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:98:76:0e:2f:61:bc:70:fd:23:54:32:be:7b:a2:8d:07:7f: 3c:68:57:cf:4c:69:96:5a:99:3b:d2:e3:cb:f4:7c:41:fe:69: 22:41:1e:d7:a1:b5:db:1f:5a:8b:51:54:af:69:06:10:8d:e1: 91:d9:3a:c5:ce:52:67:7f:8b:7e:2c:2c:22:e0:9e:92:29:e3: e8:aa:be:bf:31:91:3e:a0:f1:3b:6d:a2:b8:d6:bb:08:1f:30: da:74:02:37:9d:5a:63:b7:9f:69:14:4f:cf:d9:d9:74:a4:7a: bc:49:e6:c7:0e:f1:6c:98:b8:10:42:1c:73:46:dc:13:46:5e: 6a:44:2b:e6:84:09:83:1b:72:28:ec:c3:ec:8f:01:50:99:ee: 50:26:ea:c6:36:0b:c2:ed:51:a8:72:55:81:d6:75:f8:0f:36: 4a:27:07:96:72:33:52:0c:17:7b:f1:ac:15:72:95:37:e3:0f: bd:1e:b4:72:d5:d2:07:27:76:2c:b8:c7:2f:a1:dd:55:dd:bb: 90:14:d2:2c:3a:c8:94:bc:2f:1a:ab:02:e7:80:04:72:5f:4b: 67:8f:0c:04:2a:b1:7f:54:fb:fd:f2:2b:f4:0b:28:85:d7:bd: 3a:f7:e1:93:2d:50:85:fb:28:ff:ad:14:56:a4:3c:17:c3:21: 71:82:2e:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQPCf3OWuV49RLS5jl+G1qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwNjQyNmY0ODNjMzZhYWNkYTg3MzIzMjRhYjg4YWQ1ODAw YzlhMmQwHhcNMjUxMjI0MTIwMTE4WhcNMjUxMjI1MTIwMTE4WjAzMTEwLwYDVQQD EyhlZTUxNDMxMDQ5Mzc1NmI0MTBiZjVkMThjNjEzYTc5NTFiYTVlYWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3G09YwDtrrYg+gv7Lzqx9yZOFtLY h+comjWn/UsUoR9YkyvfVBWXklD4+Xijs82FeNxbML/i3lz1OcRHtTM8ERf9RCP/ IRcraAGcMVI5lx0Ve+Uqqq4IwJ7UHSIj49MhOE8YQl9iCpiGDqyMECVivaHYACM5 aaUsMm8z/dLh4uIdGi6fuuXJe4hvyZgM1x7EeBfEPekO950EVxUctpLxavLmIByz vOZptTao8bab3XOAXaIW3+kT2Oy9si215Pu1iZQIzRVF/5mSsTQjbOHgPMX740n8 ItgetJCRiZVYAjGm/ZaTas8MixDngB9ExbuwcMQOjGLempQZDRSJmrpiEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5RQxBJN1a0EL9dGMYTp5UbpeqpMB8GA1UdIwQY MBaAFJBkJvSDw2qs2ocyMkq4itWADJotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0dRbTlJUERhcXphaHpJeVNyaUsxWUFNbWkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85NGQ0NDEtZDk4Ny00MDYyLTg5YzEt OTRjNWFkMTdhN2EwLzEva0dRbTlJUERhcXphaHpJeVNyaUsxWUFNbWkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85NGQ0NDEtZDk4Ny00MDYyLTg5YzEtOTRjNWFkMTdhN2Ew LzEva0dRbTlJUERhcXphaHpJeVNyaUsxWUFNbWkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlJh2Di9h vHD9I1QyvnuijQd/PGhXz0xpllqZO9Ljy/R8Qf5pIkEe16G12x9ai1FUr2kGEI3h kdk6xc5SZ3+LfiwsIuCekinj6Kq+vzGRPqDxO22iuNa7CB8w2nQCN51aY7efaRRP z9nZdKR6vEnmxw7xbJi4EEIcc0bcE0ZeakQr5oQJgxtyKOzD7I8BUJnuUCbqxjYL wu1RqHJVgdZ1+A82SicHlnIzUgwXe/GsFXKVN+MPvR60ctXSByd2LLjHL6HdVd27 kBTSLDrIlLwvGqsC54AEcl9LZ48MBCqxf1T7/fIr9Asohde9Ovfhky1Qhfso/60U VqQ8F8MhcYIuKw== -----END CERTIFICATE-----Generated at Wed Dec 24 22:06:54 2025 by rpki-client