This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft File: Kq8k6REaiJ202uCH5ICeEIbjP4I.mft (raw, json) Hash identifier: /r8scjaF3TO+MZ2LqSwTSx9dMCgAiB3QWzz+g+6rhxQ= Subject key identifier: 6D:89:5D:D9:21:0A:B3:FE:C3:F8:34:B0:7C:6A:CB:A4:7E:B6:CC:B1 Authority key identifier: 2A:AF:24:E9:11:1A:88:9D:B4:DA:E0:87:E4:80:9E:10:86:E3:3F:82 Certificate issuer: /CN=2aaf24e9111a889db4dae087e4809e1086e33f82 Certificate serial: 019B6F591776EC7DC2565DFF888E5DCAE631 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kq8k6REaiJ202uCH5ICeEIbjP4I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft Manifest number: 16FE Signing time: Tue 30 Dec 2025 13:01:08 +0000 Manifest this update: Tue 30 Dec 2025 13:01:08 +0000 Manifest next update: Wed 31 Dec 2025 13:01:08 +0000 Files and hashes: 1: 5sMxgmIczAQ4fn8JJ0_j3DrMjS0.roa (hash: VTfvZnzv8Q2Rd2Q6njhUyXmObqB+4ygm6Iue4TDP3ic=) 2: Kq8k6REaiJ202uCH5ICeEIbjP4I.crl (hash: j1SCotCBR+2S5Kn8fDqiOzbKUUo7PKKqqI5Kp9igUkY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.crl rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft rsync://rpki.ripe.net/repository/DEFAULT/Kq8k6REaiJ202uCH5ICeEIbjP4I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 13:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:59:17:76:ec:7d:c2:56:5d:ff:88:8e:5d:ca:e6:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aaf24e9111a889db4dae087e4809e1086e33f82 Validity Not Before: Dec 30 13:01:08 2025 GMT Not After : Dec 31 13:01:08 2025 GMT Subject: CN=6d895dd9210ab3fec3f834b07c6acba47eb6ccb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:52:71:d6:dc:f8:09:53:2c:32:c3:99:90:4a: b5:cb:ba:85:46:23:27:d8:0b:96:ba:a7:5e:40:72: 48:24:b3:90:33:39:6c:65:80:ef:4c:e2:1d:95:c4: 35:1a:26:11:6d:10:e3:d1:f6:e7:8a:eb:5f:12:a3: d0:64:7d:f1:c6:4f:62:3b:53:e7:ce:6b:98:a1:a0: d0:0a:30:30:87:9f:f3:0d:b7:d5:1e:2c:69:d3:da: c1:ad:44:be:03:e9:73:19:ee:3b:89:f7:4d:d1:fd: 6c:07:46:5d:2a:fe:5d:22:7b:13:2e:f0:08:8f:a5: ff:0b:bf:d4:a5:9d:18:71:3c:92:c4:c1:48:ca:40: 04:0f:44:50:d0:3c:8d:1f:5d:26:30:8d:9c:d5:00: 36:4f:e0:c4:ee:ec:ed:4c:5f:c8:70:b8:2e:57:64: a7:58:d5:89:0b:38:09:a0:6c:7e:61:8f:3d:e5:80: 73:8c:bc:f1:20:e8:67:c8:c2:c9:a6:fe:91:c6:12: ec:7d:28:0a:83:0c:27:72:4f:50:8a:2e:b5:e8:c0: 6f:f6:1a:11:2a:1f:e1:f1:5e:c4:1b:5b:23:8d:41: 82:e9:b4:e5:bb:52:12:9f:17:61:60:4d:ad:56:4f: 88:73:62:ed:92:1c:19:10:66:ab:07:73:5b:c0:ae: db:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:89:5D:D9:21:0A:B3:FE:C3:F8:34:B0:7C:6A:CB:A4:7E:B6:CC:B1 X509v3 Authority Key Identifier: keyid:2A:AF:24:E9:11:1A:88:9D:B4:DA:E0:87:E4:80:9E:10:86:E3:3F:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kq8k6REaiJ202uCH5ICeEIbjP4I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:5e:91:fc:e1:7d:bc:b7:7c:32:35:70:41:85:6b:34:df:af: 5a:f0:13:86:76:fe:da:62:9e:ec:8a:4b:da:8b:34:85:29:db: 99:f0:64:29:ee:a2:cb:20:e3:ed:c2:c2:71:b6:26:ae:27:8a: 24:95:02:f6:d6:94:be:f6:a6:52:af:60:8e:a1:ea:d4:fe:39: 79:52:a0:3d:81:3d:e8:8d:cc:3f:d2:6b:5f:66:6f:80:73:d5: 0b:74:cf:71:71:c9:7b:44:75:19:58:37:58:ad:cb:62:be:1f: 93:ae:df:bb:cc:a7:ad:2f:ae:c4:9b:6e:4d:bb:ab:5d:98:67: 67:de:96:c1:17:34:51:db:63:f4:a8:6b:15:e1:6d:f3:2c:4b: 65:2d:97:c8:62:06:a3:21:e4:cc:be:1a:a0:37:2b:c8:48:91: a9:f7:d8:35:03:88:88:5b:34:cb:6b:d7:d4:21:a2:8a:f7:b1: 75:3a:ac:2d:1c:aa:33:d7:55:f3:42:cd:c6:0f:da:ec:cc:4a: 05:d7:58:16:78:5b:dd:15:dc:58:e1:74:2d:c5:c3:47:92:42: f4:57:70:77:40:98:dc:1c:7f:9a:c9:59:6a:50:7b:0d:a6:61: 3e:24:9e:e4:05:90:15:0a:65:f1:11:b6:d9:46:1f:18:dd:64: 3c:95:9d:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtvWRd27H3CVl3/iI5dyuYxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYWYyNGU5MTExYTg4OWRiNGRhZTA4N2U0ODA5ZTEwODZl MzNmODIwHhcNMjUxMjMwMTMwMTA4WhcNMjUxMjMxMTMwMTA4WjAzMTEwLwYDVQQD Eyg2ZDg5NWRkOTIxMGFiM2ZlYzNmODM0YjA3YzZhY2JhNDdlYjZjY2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFJx1tz4CVMsMsOZkEq1y7qFRiMn 2AuWuqdeQHJIJLOQMzlsZYDvTOIdlcQ1GiYRbRDj0fbniutfEqPQZH3xxk9iO1Pn zmuYoaDQCjAwh5/zDbfVHixp09rBrUS+A+lzGe47ifdN0f1sB0ZdKv5dInsTLvAI j6X/C7/UpZ0YcTySxMFIykAED0RQ0DyNH10mMI2c1QA2T+DE7uztTF/IcLguV2Sn WNWJCzgJoGx+YY895YBzjLzxIOhnyMLJpv6RxhLsfSgKgwwnck9Qii616MBv9hoR Kh/h8V7EG1sjjUGC6bTlu1ISnxdhYE2tVk+Ic2LtkhwZEGarB3NbwK7bWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG2JXdkhCrP+w/g0sHxqy6R+tsyxMB8GA1UdIwQY MBaAFCqvJOkRGoidtNrgh+SAnhCG4z+CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3E4azZSRWFpSjIwMnVDSDVJQ2VFSWJqUDRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9jODA4OTYtYzM2ZS00NjI3LTgzNTMt MzQxYzNmYTQ1YjQzLzEvS3E4azZSRWFpSjIwMnVDSDVJQ2VFSWJqUDRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9jODA4OTYtYzM2ZS00NjI3LTgzNTMtMzQxYzNmYTQ1YjQz LzEvS3E4azZSRWFpSjIwMnVDSDVJQ2VFSWJqUDRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYV6R/OF9 vLd8MjVwQYVrNN+vWvAThnb+2mKe7IpL2os0hSnbmfBkKe6iyyDj7cLCcbYmrieK JJUC9taUvvamUq9gjqHq1P45eVKgPYE96I3MP9JrX2ZvgHPVC3TPcXHJe0R1GVg3 WK3LYr4fk67fu8ynrS+uxJtuTburXZhnZ96WwRc0Udtj9KhrFeFt8yxLZS2XyGIG oyHkzL4aoDcryEiRqffYNQOIiFs0y2vX1CGiivexdTqsLRyqM9dV80LNxg/a7MxK BddYFnhb3RXcWOF0LcXDR5JC9Fdwd0CY3Bx/mslZalB7DaZhPiSe5AWQFQpl8RG2 2UYfGN1kPJWdlw== -----END CERTIFICATE-----Generated at Tue Dec 30 21:59:51 2025 by rpki-client