This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft File: qKumPoBqIdRgNcpunTRbA9vI5VM.mft (raw, json) Hash identifier: NDvU7AjhqTLUOffCojRMDE5SkVsL8z3c2Fvbhz/uL4g= Subject key identifier: A0:6C:CF:5D:7E:67:D4:F5:BC:BA:B5:6D:0B:A8:61:37:8E:5E:68:B2 Authority key identifier: A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53 Certificate issuer: /CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553 Certificate serial: 019B42B75E3C52A702CE447C462682947D70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft Manifest number: 0817 Signing time: Sun 21 Dec 2025 21:01:11 +0000 Manifest this update: Sun 21 Dec 2025 21:01:11 +0000 Manifest next update: Mon 22 Dec 2025 21:01:11 +0000 Files and hashes: 1: hLWYDKGkI0R5I2b6JbMOAvEbobg.roa (hash: aHTGbClBDx12Nmfza+jRQVDlfN2BuzhbxoY4KmHz1F0=) 2: qKumPoBqIdRgNcpunTRbA9vI5VM.crl (hash: WtWxoaI7+iAqvcWQdMAr87+qKr3C2wXpC9DBjf9HGis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:5e:3c:52:a7:02:ce:44:7c:46:26:82:94:7d:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553 Validity Not Before: Dec 21 21:01:11 2025 GMT Not After : Dec 22 21:01:11 2025 GMT Subject: CN=a06ccf5d7e67d4f5bcbab56d0ba861378e5e68b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:92:a7:80:4e:96:fb:c2:06:7a:c8:d1:04:e7: 1c:19:2b:5d:bd:c4:21:3e:22:6c:d8:e6:e4:bb:72: 45:95:0c:c7:4e:3d:08:fe:e8:76:6b:af:3f:c4:05: 91:46:00:df:33:a2:e2:aa:8a:f3:2a:b4:2c:f6:07: 31:7d:c7:67:45:ab:e4:15:f4:fd:2d:58:ab:ae:97: 80:d0:29:9e:13:f5:74:e1:1b:48:60:bb:9e:26:b4: d1:25:89:7d:bd:14:08:5f:04:62:e9:32:8d:28:cc: a7:ee:3e:26:41:cc:54:50:b4:78:42:da:7d:74:a2: a9:08:0f:2d:6a:03:58:00:85:9e:da:41:95:0e:13: 37:4e:3f:af:e3:81:f3:9f:a6:f6:ef:ec:4a:67:40: c5:f4:ee:d4:2e:5a:00:b3:59:73:4d:9a:6d:ed:69: ca:53:ff:72:81:f9:7d:72:f8:0d:5e:63:72:15:3d: 8c:b3:08:82:50:3a:9a:85:58:6c:26:0c:5f:c7:ab: 8e:2e:92:4d:26:f2:1b:93:bc:1e:e8:29:f3:ce:c4: ea:9e:00:5f:96:51:38:ba:9c:6b:7a:0e:a9:c4:47: 02:fe:c9:8d:cb:52:37:bc:9b:19:a4:3e:f5:91:4b: d0:af:20:aa:ab:81:67:3e:a0:3f:a8:2d:3a:5b:8f: ba:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:6C:CF:5D:7E:67:D4:F5:BC:BA:B5:6D:0B:A8:61:37:8E:5E:68:B2 X509v3 Authority Key Identifier: keyid:A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:db:95:04:c9:14:60:bf:da:2e:fc:6a:25:8f:87:7e:0d:2e: 9a:d3:b3:2f:4d:96:5d:b4:86:57:69:ab:81:1c:f1:68:4f:75: 3d:77:17:68:97:05:e0:e8:01:84:17:6b:d7:06:fa:58:7f:af: 98:eb:e6:e2:bc:ee:bb:30:89:9e:82:93:94:a7:a1:1d:7e:06: 00:1a:a1:9e:eb:27:27:36:46:62:f7:80:56:72:dd:3c:ad:39: 8f:f0:91:59:90:2a:16:05:ff:3e:45:c3:dc:94:71:9e:77:84: 60:5c:73:a8:9a:ee:15:79:20:10:e3:2a:2a:0b:e3:ee:d4:d5: e8:17:ae:d1:94:8e:94:3c:b2:4c:64:6d:86:37:33:8a:63:c0: bf:26:db:15:fc:64:47:93:9b:e0:79:18:69:aa:13:9c:01:d2: e6:bd:57:16:de:60:64:80:d7:0d:6a:72:c4:de:f4:90:3d:d7: 91:86:48:4a:43:ed:bc:1c:a5:b7:1d:7e:7d:c8:87:b3:b4:a1: 64:31:ab:b9:6c:8a:d4:b3:d0:fd:dc:76:e2:30:f4:c4:40:de: d4:d6:37:a4:cd:44:0a:a9:f6:9c:5c:be:21:3d:f1:ae:72:5f: 70:a0:26:00:b2:0b:46:44:ba:db:e7:b1:15:de:71:27:ce:84: 58:8b:67:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt148UqcCzkR8RiaClH1wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4YWJhNjNlODA2YTIxZDQ2MDM1Y2E2ZTlkMzQ1YjAzZGJj OGU1NTMwHhcNMjUxMjIxMjEwMTExWhcNMjUxMjIyMjEwMTExWjAzMTEwLwYDVQQD EyhhMDZjY2Y1ZDdlNjdkNGY1YmNiYWI1NmQwYmE4NjEzNzhlNWU2OGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupKngE6W+8IGesjRBOccGStdvcQh PiJs2Obku3JFlQzHTj0I/uh2a68/xAWRRgDfM6LiqorzKrQs9gcxfcdnRavkFfT9 LVirrpeA0CmeE/V04RtIYLueJrTRJYl9vRQIXwRi6TKNKMyn7j4mQcxUULR4Qtp9 dKKpCA8tagNYAIWe2kGVDhM3Tj+v44Hzn6b27+xKZ0DF9O7ULloAs1lzTZpt7WnK U/9ygfl9cvgNXmNyFT2MswiCUDqahVhsJgxfx6uOLpJNJvIbk7we6CnzzsTqngBf llE4upxreg6pxEcC/smNy1I3vJsZpD71kUvQryCqq4FnPqA/qC06W4+64wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBsz11+Z9T1vLq1bQuoYTeOXmiyMB8GA1UdIwQY MBaAFKirpj6AaiHUYDXKbp00WwPbyOVTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUt1bVBvQnFJZFJnTmNwdW5UUmJBOXZJNVZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82MTg2ZGEtNTFkNC00NjE4LTk1Zjkt ZjRhMzllMThjZmI0LzEvcUt1bVBvQnFJZFJnTmNwdW5UUmJBOXZJNVZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi82MTg2ZGEtNTFkNC00NjE4LTk1ZjktZjRhMzllMThjZmI0 LzEvcUt1bVBvQnFJZFJnTmNwdW5UUmJBOXZJNVZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABtuVBMkU YL/aLvxqJY+Hfg0umtOzL02WXbSGV2mrgRzxaE91PXcXaJcF4OgBhBdr1wb6WH+v mOvm4rzuuzCJnoKTlKehHX4GABqhnusnJzZGYveAVnLdPK05j/CRWZAqFgX/PkXD 3JRxnneEYFxzqJruFXkgEOMqKgvj7tTV6Beu0ZSOlDyyTGRthjczimPAvybbFfxk R5Ob4HkYaaoTnAHS5r1XFt5gZIDXDWpyxN70kD3XkYZISkPtvByltx1+fciHs7Sh ZDGruWyK1LPQ/dx24jD0xEDe1NY3pM1ECqn2nFy+IT3xrnJfcKAmALILRkS62+ex Fd5xJ86EWItn/Q== -----END CERTIFICATE-----Generated at Sun Dec 21 23:12:39 2025 by rpki-client