This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft File: KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft (raw, json) Hash identifier: yWBgc5zDh5tvP/R4zLjL1Jom6FNq0rrL/Iit1JakIgY= Subject key identifier: 63:E7:1D:72:59:AA:25:6D:2D:46:EA:C6:41:C1:6B:0E:7C:B8:89:3C Authority key identifier: 28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5 Certificate issuer: /CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5 Certificate serial: 019B39466A0E88287160B49EC5DAEE5562EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 01:01:14 +0000 Manifest this update: Sat 20 Dec 2025 01:01:14 +0000 Manifest next update: Sun 21 Dec 2025 01:01:14 +0000 Files and hashes: 1: 5HJN2TYq8z8eJjL58_c0u5IQ5Q8.roa (hash: yhJDGnf72pl9WyOFKwP7I927446gAZjcSsCI8qXComM=) 2: KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl (hash: 0fbR25wiT1EDACa/nOpEc1zhGOa1qAxaQsx1v9E+kpo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:6a:0e:88:28:71:60:b4:9e:c5:da:ee:55:62:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5 Validity Not Before: Dec 20 01:01:14 2025 GMT Not After : Dec 21 01:01:14 2025 GMT Subject: CN=63e71d7259aa256d2d46eac641c16b0e7cb8893c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b1:17:11:3c:b5:5b:90:89:53:ec:69:cf:b8: 40:d0:2c:20:dd:78:d4:be:49:af:b3:8c:52:fd:c4: 19:6a:47:8a:5e:61:19:39:ed:17:52:36:52:48:73: be:14:9b:dc:2d:58:8d:8a:9d:0c:36:96:e4:2e:29: cd:2c:1b:fe:ba:c1:31:38:3d:a4:06:6d:ad:9f:3f: c8:57:99:f2:60:b9:ab:55:d2:41:c5:f6:b6:0f:c5: 6a:e2:51:ae:03:44:f8:0b:3f:a5:07:8a:bd:33:7f: c5:f3:a6:45:72:79:35:58:31:a1:78:16:e6:13:d8: a3:27:35:08:32:e6:b6:4e:8d:62:aa:6b:c4:b4:80: 20:d3:0f:4d:fb:80:75:b2:a9:55:10:29:14:e3:85: 09:d3:13:e5:a5:61:a6:9a:22:a4:44:7c:c9:83:11: 0f:8c:32:bd:42:dd:e8:3a:8b:1a:dc:b1:b5:8f:30: a4:43:4f:e8:53:cd:80:58:dc:b4:d2:1c:93:b4:ff: 5b:13:24:ce:ec:4a:80:f3:20:e2:b2:ce:fa:8d:ab: d8:2c:24:5b:6b:63:a4:4f:d3:34:aa:83:e3:d0:a2: 5a:55:a9:85:6f:ff:b0:b6:0a:f8:b6:a1:41:17:b9: 29:90:c3:eb:4b:c2:94:64:e7:43:ad:09:a5:ba:d6: a4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E7:1D:72:59:AA:25:6D:2D:46:EA:C6:41:C1:6B:0E:7C:B8:89:3C X509v3 Authority Key Identifier: keyid:28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:c0:0a:84:3f:73:5e:1c:ad:07:1f:b5:5c:7f:09:78:fb:f1: a2:41:34:ed:b8:e0:ab:7e:a8:26:93:9c:7b:d2:d2:a3:47:79: 2a:c6:1d:25:43:d1:8d:0f:04:5c:86:4f:8e:28:33:09:fe:f5: ac:23:b1:16:2f:70:8e:fb:0e:0a:2a:33:76:da:81:43:83:3e: b3:8d:15:e3:ec:2a:05:1d:0f:0e:9b:f0:9f:36:03:19:3b:cb: 30:da:57:ae:a0:48:51:fe:ed:a9:b5:e0:36:de:e1:ad:ca:6d: 2a:58:97:c6:fe:6d:e1:5a:79:ce:cc:c7:ef:b9:e8:dc:1b:3b: e1:1d:99:dd:58:31:a6:71:00:4e:8c:34:52:b1:00:e6:c7:df: ba:72:03:83:58:ee:d1:72:cd:b0:6d:8d:ef:7f:7e:e4:00:d6: 91:52:6f:e5:b4:73:3d:1e:8e:5e:f0:6b:7a:6e:eb:f0:af:59: a0:99:12:6b:23:bb:2c:fd:89:bf:76:54:33:c3:0d:2f:c1:90: f0:0b:c2:60:16:37:b8:4e:11:38:ec:f6:26:3c:1c:d7:6f:9b: c3:ea:b7:66:10:b9:cd:97:d2:51:22:2c:f3:82:cb:32:b5:b6: c8:04:c7:5b:e5:b2:be:5e:31:5a:2e:50:64:aa:41:3c:b2:1c: fc:2e:c3:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RmoOiChxYLSexdruVWLvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MjQzNGE5YTAzOGIwZmU3M2NhZjc3NmJjY2Q1NDJmZDNl MmY2YTUwHhcNMjUxMjIwMDEwMTE0WhcNMjUxMjIxMDEwMTE0WjAzMTEwLwYDVQQD Eyg2M2U3MWQ3MjU5YWEyNTZkMmQ0NmVhYzY0MWMxNmIwZTdjYjg4OTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbEXETy1W5CJU+xpz7hA0Cwg3XjU vkmvs4xS/cQZakeKXmEZOe0XUjZSSHO+FJvcLViNip0MNpbkLinNLBv+usExOD2k Bm2tnz/IV5nyYLmrVdJBxfa2D8Vq4lGuA0T4Cz+lB4q9M3/F86ZFcnk1WDGheBbm E9ijJzUIMua2To1iqmvEtIAg0w9N+4B1sqlVECkU44UJ0xPlpWGmmiKkRHzJgxEP jDK9Qt3oOosa3LG1jzCkQ0/oU82AWNy00hyTtP9bEyTO7EqA8yDiss76javYLCRb a2OkT9M0qoPj0KJaVamFb/+wtgr4tqFBF7kpkMPrS8KUZOdDrQmlutakRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGPnHXJZqiVtLUbqxkHBaw58uIk8MB8GA1UdIwQY MBaAFCgkNKmgOLD+c8r3drzNVC/T4valMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0NRMHFhQTRzUDV6eXZkMnZNMVVMOVBpOXFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9lN2ZiZTgtZDk4ZS00NWQyLWIxOWMt MTE2MjdkNzQ2OWFiLzEvS0NRMHFhQTRzUDV6eXZkMnZNMVVMOVBpOXFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9lN2ZiZTgtZDk4ZS00NWQyLWIxOWMtMTE2MjdkNzQ2OWFi LzEvS0NRMHFhQTRzUDV6eXZkMnZNMVVMOVBpOXFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKcAKhD9z XhytBx+1XH8JePvxokE07bjgq36oJpOce9LSo0d5KsYdJUPRjQ8EXIZPjigzCf71 rCOxFi9wjvsOCiozdtqBQ4M+s40V4+wqBR0PDpvwnzYDGTvLMNpXrqBIUf7tqbXg Nt7hrcptKliXxv5t4Vp5zszH77no3Bs74R2Z3VgxpnEATow0UrEA5sffunIDg1ju 0XLNsG2N739+5ADWkVJv5bRzPR6OXvBrem7r8K9ZoJkSayO7LP2Jv3ZUM8MNL8GQ 8AvCYBY3uE4ROOz2Jjwc12+bw+q3ZhC5zZfSUSIs84LLMrW2yATHW+Wyvl4xWi5Q ZKpBPLIc/C7DzA== -----END CERTIFICATE-----Generated at Sat Dec 20 06:54:40 2025 by rpki-client