This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft File: qKumPoBqIdRgNcpunTRbA9vI5VM.mft (raw, json) Hash identifier: BuJtbGYsSs1CxaQXIbxpPXxmTU+0UFxwGWhGZJiI1uk= Subject key identifier: 10:D4:4B:6A:B8:2F:5D:78:74:43:71:B9:CD:58:44:7E:09:87:CF:7C Authority key identifier: A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53 Certificate issuer: /CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553 Certificate serial: 019B3CEC3EFDA62259D2FB03598CE72E9FCF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft Manifest number: 0814 Signing time: Sat 20 Dec 2025 18:01:14 +0000 Manifest this update: Sat 20 Dec 2025 18:01:14 +0000 Manifest next update: Sun 21 Dec 2025 18:01:14 +0000 Files and hashes: 1: hLWYDKGkI0R5I2b6JbMOAvEbobg.roa (hash: aHTGbClBDx12Nmfza+jRQVDlfN2BuzhbxoY4KmHz1F0=) 2: qKumPoBqIdRgNcpunTRbA9vI5VM.crl (hash: IyRzD5H8gBrkcWYICChGBG/QFn9s4X7zhM/CH+l2Pvc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:3e:fd:a6:22:59:d2:fb:03:59:8c:e7:2e:9f:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553 Validity Not Before: Dec 20 18:01:14 2025 GMT Not After : Dec 21 18:01:14 2025 GMT Subject: CN=10d44b6ab82f5d78744371b9cd58447e0987cf7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:db:54:19:29:94:d4:4c:d4:14:6f:93:d1:26: 1e:89:4c:60:2e:24:79:f7:ab:a4:33:76:c0:15:a5: 5b:79:25:21:23:74:0f:b2:57:e6:cd:2f:03:23:b0: 6e:56:80:fe:00:c1:40:98:d2:e9:b0:a9:c6:e4:64: 9e:a3:42:81:a6:55:39:6f:be:c3:bf:a5:37:be:c2: 93:65:b4:54:bd:af:34:17:69:f1:8f:2f:db:b4:68: cf:4e:e4:2f:04:8b:e4:73:20:3c:90:ac:cd:fc:2b: 02:1e:bb:cb:af:86:35:82:ea:6e:50:d8:43:7a:9f: c1:cc:4d:93:86:68:61:0a:02:44:64:1b:21:77:92: 0f:14:85:a0:cd:6b:d7:64:a9:2a:9e:60:a4:99:b6: 12:c6:23:87:a0:03:27:b8:a0:a3:85:47:cb:11:4e: 17:96:be:a3:f1:de:96:82:b2:e0:20:ce:78:0c:a5: 50:08:0e:33:9d:25:5e:da:23:20:73:bb:55:4d:ea: 7d:44:3a:94:7e:0e:2d:d9:7b:21:26:fc:0f:d5:d6: 7c:31:63:e2:b2:a4:c9:6e:da:29:34:04:60:e8:17: 32:3e:b6:e6:29:06:9b:39:bb:fb:03:87:4e:f6:78: 1a:b9:b7:f8:93:4c:5d:ef:0c:21:5a:bf:95:bf:08: 54:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D4:4B:6A:B8:2F:5D:78:74:43:71:B9:CD:58:44:7E:09:87:CF:7C X509v3 Authority Key Identifier: keyid:A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:b2:43:9c:07:2d:be:85:db:e5:26:65:9b:e6:60:a9:92:af: 77:2b:5a:59:96:3a:2e:d5:c9:5e:36:83:d8:09:d6:62:ce:37: bd:f9:41:ee:9b:39:56:54:c1:a8:43:44:a0:c5:12:b3:e8:3b: ae:a5:05:96:02:8e:51:82:14:d0:34:ef:25:c6:4d:9d:cb:74: 2c:07:bb:60:ea:31:27:8a:7d:50:b9:98:b6:aa:27:3a:51:13: 90:70:17:f6:7e:71:f5:e5:be:7a:30:cf:c7:6b:2a:20:69:b0: b6:db:74:73:92:46:93:43:2f:89:03:d7:1e:2e:4f:09:32:d2: 98:f0:5e:63:59:cf:29:e4:6c:9d:f5:4c:6b:73:6a:99:4f:eb: 9d:91:b6:21:0f:ed:a4:18:a0:84:31:60:dc:70:2d:86:0d:ad: 47:73:84:cf:3e:9c:50:f1:84:14:42:70:66:19:f1:67:79:e9: e5:47:9a:40:04:60:d6:93:d1:fd:1a:a7:01:69:b7:9f:a8:8c: cc:d7:ea:14:90:02:16:2b:7b:94:f8:55:4f:f1:f4:dd:51:36: f2:ad:ef:7f:95:b0:5d:85:81:99:d2:f0:af:8e:1f:9c:42:87: 6d:67:91:8c:07:5f:8e:63:e9:89:f0:d5:86:00:d9:f7:ac:d5: 10:ec:ad:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87D79piJZ0vsDWYznLp/PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4YWJhNjNlODA2YTIxZDQ2MDM1Y2E2ZTlkMzQ1YjAzZGJj OGU1NTMwHhcNMjUxMjIwMTgwMTE0WhcNMjUxMjIxMTgwMTE0WjAzMTEwLwYDVQQD EygxMGQ0NGI2YWI4MmY1ZDc4NzQ0MzcxYjljZDU4NDQ3ZTA5ODdjZjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+9tUGSmU1EzUFG+T0SYeiUxgLiR5 96ukM3bAFaVbeSUhI3QPslfmzS8DI7BuVoD+AMFAmNLpsKnG5GSeo0KBplU5b77D v6U3vsKTZbRUva80F2nxjy/btGjPTuQvBIvkcyA8kKzN/CsCHrvLr4Y1gupuUNhD ep/BzE2ThmhhCgJEZBshd5IPFIWgzWvXZKkqnmCkmbYSxiOHoAMnuKCjhUfLEU4X lr6j8d6WgrLgIM54DKVQCA4znSVe2iMgc7tVTep9RDqUfg4t2XshJvwP1dZ8MWPi sqTJbtopNARg6BcyPrbmKQabObv7A4dO9ngaubf4k0xd7wwhWr+VvwhUkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBDUS2q4L114dENxuc1YRH4Jh898MB8GA1UdIwQY MBaAFKirpj6AaiHUYDXKbp00WwPbyOVTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUt1bVBvQnFJZFJnTmNwdW5UUmJBOXZJNVZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82MTg2ZGEtNTFkNC00NjE4LTk1Zjkt ZjRhMzllMThjZmI0LzEvcUt1bVBvQnFJZFJnTmNwdW5UUmJBOXZJNVZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi82MTg2ZGEtNTFkNC00NjE4LTk1ZjktZjRhMzllMThjZmI0 LzEvcUt1bVBvQnFJZFJnTmNwdW5UUmJBOXZJNVZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJLJDnAct voXb5SZlm+ZgqZKvdytaWZY6LtXJXjaD2AnWYs43vflB7ps5VlTBqENEoMUSs+g7 rqUFlgKOUYIU0DTvJcZNnct0LAe7YOoxJ4p9ULmYtqonOlETkHAX9n5x9eW+ejDP x2sqIGmwttt0c5JGk0MviQPXHi5PCTLSmPBeY1nPKeRsnfVMa3NqmU/rnZG2IQ/t pBighDFg3HAthg2tR3OEzz6cUPGEFEJwZhnxZ3np5UeaQARg1pPR/RqnAWm3n6iM zNfqFJACFit7lPhVT/H03VE28q3vf5WwXYWBmdLwr44fnEKHbWeRjAdfjmPpifDV hgDZ96zVEOytFQ== -----END CERTIFICATE-----Generated at Sun Dec 21 00:55:09 2025 by rpki-client