This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft File: KqFL_4NIDRDND767gLLLUJH8-C8.mft (raw, json) Hash identifier: ndQIT868efA4Dy8hvdHDyQofEt+MmMU5+KKkyvGNquA= Subject key identifier: A1:8E:24:16:AE:7D:0E:31:2A:0C:6C:D4:68:02:E9:7E:B3:54:71:A1 Authority key identifier: 2A:A1:4B:FF:83:48:0D:10:CD:0F:BE:BB:80:B2:CB:50:91:FC:F8:2F Certificate issuer: /CN=2aa14bff83480d10cd0fbebb80b2cb5091fcf82f Certificate serial: 019B3FB680DFEA8E26577323CA5B34962527 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqFL_4NIDRDND767gLLLUJH8-C8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft Manifest number: 1788 Signing time: Sun 21 Dec 2025 07:01:23 +0000 Manifest this update: Sun 21 Dec 2025 07:01:23 +0000 Manifest next update: Mon 22 Dec 2025 07:01:23 +0000 Files and hashes: 1: 0zY-sGp0Ft0AM9Sf-NYlNdybUWg.roa (hash: eX1zp0GC5bqV6hOy4nxEisONQ8sH8x4mX06jY0ZL3fw=) 2: KqFL_4NIDRDND767gLLLUJH8-C8.crl (hash: AfFHfYC1foJFuPMgFYw0u9AKuIWLpgdUoV5xjbgdHdM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.crl rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft rsync://rpki.ripe.net/repository/DEFAULT/KqFL_4NIDRDND767gLLLUJH8-C8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:80:df:ea:8e:26:57:73:23:ca:5b:34:96:25:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa14bff83480d10cd0fbebb80b2cb5091fcf82f Validity Not Before: Dec 21 07:01:23 2025 GMT Not After : Dec 22 07:01:23 2025 GMT Subject: CN=a18e2416ae7d0e312a0c6cd46802e97eb35471a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:93:13:3f:f8:7f:89:a4:5f:24:3f:5f:ed:8f: 36:a3:fc:8e:89:df:81:21:07:3e:80:c5:0e:66:1e: 26:25:27:69:0e:c0:c1:4c:e2:67:ec:1c:6e:8a:a8: 49:40:ea:f1:2b:89:42:a2:50:e8:84:52:bd:12:41: b7:e5:29:38:9c:77:71:70:a7:6f:49:2c:54:50:24: 4e:fc:b8:cb:3b:80:2c:4d:2c:17:b0:3a:2b:cc:07: d8:55:fb:8e:88:ff:bf:c0:79:25:be:4a:0f:98:63: e2:bd:87:9e:93:de:99:da:1d:fd:03:d3:e5:1a:5e: 63:71:9e:43:08:1a:3f:8e:69:28:50:b4:eb:65:65: 6f:da:52:f2:ad:c8:a3:32:d9:1d:ae:b1:0b:df:e0: 95:11:72:07:bc:0f:a8:91:d7:d2:fd:02:9c:fb:ce: 86:c2:58:9c:7c:68:7c:09:85:e3:fa:7b:93:9a:08: 0c:7b:bb:3c:76:a6:d8:33:13:08:e8:d4:41:f7:5e: d6:2d:12:33:66:eb:63:92:9a:89:68:d0:0d:1f:c0: 9f:59:e9:02:80:6e:6d:cf:09:c1:32:c1:83:63:d1: 7d:cd:93:c0:57:9c:a8:21:a2:b0:00:e4:11:56:d5: f0:65:23:6e:4e:4e:e1:c9:8a:70:96:60:54:4a:50: c4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:8E:24:16:AE:7D:0E:31:2A:0C:6C:D4:68:02:E9:7E:B3:54:71:A1 X509v3 Authority Key Identifier: keyid:2A:A1:4B:FF:83:48:0D:10:CD:0F:BE:BB:80:B2:CB:50:91:FC:F8:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqFL_4NIDRDND767gLLLUJH8-C8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:07:7e:f6:11:79:13:ff:a2:87:ba:2a:11:68:b7:42:71:30: 18:94:c5:29:2f:5c:ea:dd:ed:d1:1b:ca:54:30:ac:53:09:62: 87:6f:a3:71:d8:84:a5:f5:74:2b:b5:57:f6:53:d0:b4:eb:55: 03:ff:f0:ff:b2:8d:6d:0a:d6:de:99:5c:eb:f1:54:35:a7:ab: 63:09:bf:f3:36:8a:9a:01:c5:60:01:82:ca:34:b1:1a:ab:bc: 8e:46:d0:52:39:a2:15:01:1b:58:32:db:8b:c3:e1:9a:cc:f3: b8:e8:73:b0:57:60:bd:69:e7:d7:e4:f8:43:35:24:b6:5f:d9: a2:0a:ae:dc:01:c7:79:94:e0:21:a3:e8:1b:df:bf:bb:54:3e: 7a:26:c9:31:44:c8:7b:44:3d:12:da:ce:5f:28:53:31:9d:eb: bf:b0:64:c4:a4:f9:b0:44:a6:f1:2a:ce:a0:cb:34:9d:2f:5c: bd:57:48:5e:4c:d7:f9:25:34:76:8d:40:4c:22:72:b0:0f:3c: e1:c1:38:7c:64:6f:23:7f:1a:9c:b5:10:a2:7d:b1:54:3e:77: a5:55:65:85:e6:bb:51:ed:dd:0a:e8:28:2f:9e:83:2f:c9:3f: 59:80:2b:7a:da:d8:cf:dd:70:5f:6f:da:10:8c:7b:74:5e:64: a4:a0:10:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/toDf6o4mV3Mjyls0liUnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYTE0YmZmODM0ODBkMTBjZDBmYmViYjgwYjJjYjUwOTFm Y2Y4MmYwHhcNMjUxMjIxMDcwMTIzWhcNMjUxMjIyMDcwMTIzWjAzMTEwLwYDVQQD EyhhMThlMjQxNmFlN2QwZTMxMmEwYzZjZDQ2ODAyZTk3ZWIzNTQ3MWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pMTP/h/iaRfJD9f7Y82o/yOid+B IQc+gMUOZh4mJSdpDsDBTOJn7BxuiqhJQOrxK4lColDohFK9EkG35Sk4nHdxcKdv SSxUUCRO/LjLO4AsTSwXsDorzAfYVfuOiP+/wHklvkoPmGPivYeek96Z2h39A9Pl Gl5jcZ5DCBo/jmkoULTrZWVv2lLyrcijMtkdrrEL3+CVEXIHvA+okdfS/QKc+86G wlicfGh8CYXj+nuTmggMe7s8dqbYMxMI6NRB917WLRIzZutjkpqJaNANH8CfWekC gG5tzwnBMsGDY9F9zZPAV5yoIaKwAOQRVtXwZSNuTk7hyYpwlmBUSlDEIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKGOJBaufQ4xKgxs1GgC6X6zVHGhMB8GA1UdIwQY MBaAFCqhS/+DSA0QzQ++u4Cyy1CR/PgvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3FGTF80TklEUkRORDc2N2dMTExVSkg4LUM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9iMTk4MTEtZmEyMy00N2IwLWI1Nzct MTc2OThmODhjM2JkLzEvS3FGTF80TklEUkRORDc2N2dMTExVSkg4LUM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9iMTk4MTEtZmEyMy00N2IwLWI1NzctMTc2OThmODhjM2Jk LzEvS3FGTF80TklEUkRORDc2N2dMTExVSkg4LUM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYQd+9hF5 E/+ih7oqEWi3QnEwGJTFKS9c6t3t0RvKVDCsUwlih2+jcdiEpfV0K7VX9lPQtOtV A//w/7KNbQrW3plc6/FUNaerYwm/8zaKmgHFYAGCyjSxGqu8jkbQUjmiFQEbWDLb i8PhmszzuOhzsFdgvWnn1+T4QzUktl/Zogqu3AHHeZTgIaPoG9+/u1Q+eibJMUTI e0Q9EtrOXyhTMZ3rv7BkxKT5sESm8SrOoMs0nS9cvVdIXkzX+SU0do1ATCJysA88 4cE4fGRvI38anLUQon2xVD53pVVlhea7Ue3dCugoL56DL8k/WYAretrYz91wX2/a EIx7dF5kpKAQ9A== -----END CERTIFICATE-----Generated at Sun Dec 21 08:38:02 2025 by rpki-client