This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft File: KqrPxdXjsmjyxrpDNrzJQfXI168.mft (raw, json) Hash identifier: 0Hq+qkdYy/+3zpDPFy9J8M/0a6OOo1g8U8nZO5/7BDA= Subject key identifier: 7E:34:5D:FB:1E:7B:8D:C7:EE:24:00:24:CB:49:83:8C:0E:0C:CE:62 Authority key identifier: 2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF Certificate issuer: /CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af Certificate serial: 019B69FB431D2C225ACAF92B4629E7357B07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft Manifest number: 1186 Signing time: Mon 29 Dec 2025 12:00:32 +0000 Manifest this update: Mon 29 Dec 2025 12:00:32 +0000 Manifest next update: Tue 30 Dec 2025 12:00:32 +0000 Files and hashes: 1: KqrPxdXjsmjyxrpDNrzJQfXI168.crl (hash: PJJBysT2lBHUXEHQhxFiVFpBTqcsgW+8i0svsHSMhos=) 2: YHCQmZQSLzGov9OQrOkdfN0GjNg.roa (hash: LJHw2nmrIzxX+QIoapfr72Feky+nKytQhXLYrU9sSE0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 12:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:fb:43:1d:2c:22:5a:ca:f9:2b:46:29:e7:35:7b:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af Validity Not Before: Dec 29 12:00:32 2025 GMT Not After : Dec 30 12:00:32 2025 GMT Subject: CN=7e345dfb1e7b8dc7ee240024cb49838c0e0cce62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:98:38:e8:3e:69:83:dd:b2:8a:d8:1f:77:51: 0d:70:f6:2e:29:3e:ec:56:d0:63:7c:35:9c:60:ea: d2:0c:be:7c:5e:1a:fa:e6:f5:6c:63:fe:3e:bc:c9: f9:28:91:da:0d:06:38:b4:32:64:cb:60:23:7b:7c: 3a:3e:d9:c5:3d:f5:e4:52:ad:2c:93:48:7e:17:e6: cb:1b:fa:0f:3a:c2:c3:f2:c2:9c:8b:4d:97:39:8b: 85:f2:10:f7:7b:bc:4e:4e:12:3d:96:75:49:ec:f6: b8:49:d5:56:d8:2c:5e:4d:10:a8:a8:37:f5:09:53: 15:4f:39:19:e0:cb:f6:0e:3a:15:3d:17:7f:0c:16: 51:c3:cc:78:bb:19:74:8c:3d:bc:82:33:00:f8:c8: be:37:35:a8:1a:c4:77:30:72:5c:92:9c:b7:93:12: 5a:b5:4a:47:1c:6c:e6:ee:86:b2:7b:a3:ba:78:78: 93:e2:5a:e5:ad:b3:61:63:93:c5:d9:0e:8e:ce:9e: 1a:f9:fb:3a:6d:cf:3a:88:99:70:59:c9:d1:e0:84: fb:6e:ec:cb:f2:61:01:8c:61:ee:87:cc:c4:b6:bf: 1f:d3:dc:76:2b:5f:86:ef:83:28:9d:81:b3:d0:06: a0:e8:dd:25:29:14:bf:29:36:48:c7:f6:68:3e:b8: 6d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:34:5D:FB:1E:7B:8D:C7:EE:24:00:24:CB:49:83:8C:0E:0C:CE:62 X509v3 Authority Key Identifier: keyid:2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:2c:ba:6f:98:57:77:16:74:0a:96:fd:34:e2:6b:b0:4b:25: fc:80:d6:c6:d3:5c:be:f6:bd:17:75:09:bd:76:1a:3d:f1:84: 6b:60:e8:29:d6:c6:a4:ff:c1:48:70:a7:18:ee:17:be:80:1e: ee:43:3e:e6:a8:42:ba:bf:b1:ef:07:24:ac:c8:a9:7c:5b:36: 65:5a:c4:0c:9a:01:fc:15:ea:49:2a:ad:e2:ba:f8:2c:0c:47: 6a:a0:65:85:e0:23:18:83:11:4b:0d:07:82:e1:b4:4c:d9:36: 1a:82:42:ba:37:66:cd:0d:a1:24:d8:e1:22:6a:b7:e8:70:76: 9c:c4:42:34:c1:ae:b4:e7:91:20:28:39:d8:ef:6c:ac:d0:2c: cd:79:43:de:bf:89:cd:da:34:d2:ae:89:66:3b:13:63:ee:06: 3c:e4:7f:89:da:fc:3e:e9:97:06:e3:ee:1d:12:c0:d7:f6:77: d5:ef:cc:bc:4e:a4:8c:0c:79:4b:a5:68:a9:20:53:f2:ce:db: db:3f:b7:4b:43:2f:68:15:b6:1a:74:04:a0:64:26:ea:5a:93: 09:21:57:4d:ca:ea:0e:32:a8:9d:b0:26:58:8e:94:69:60:e0: e9:03:e2:52:00:25:34:0e:d8:b0:ca:fd:b3:3e:bf:3c:60:e9: 77:7c:55:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtp+0MdLCJayvkrRinnNXsHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYWFjZmM1ZDVlM2IyNjhmMmM2YmE0MzM2YmNjOTQxZjVj OGQ3YWYwHhcNMjUxMjI5MTIwMDMyWhcNMjUxMjMwMTIwMDMyWjAzMTEwLwYDVQQD Eyg3ZTM0NWRmYjFlN2I4ZGM3ZWUyNDAwMjRjYjQ5ODM4YzBlMGNjZTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJg46D5pg92yitgfd1ENcPYuKT7s VtBjfDWcYOrSDL58Xhr65vVsY/4+vMn5KJHaDQY4tDJky2Aje3w6PtnFPfXkUq0s k0h+F+bLG/oPOsLD8sKci02XOYuF8hD3e7xOThI9lnVJ7Pa4SdVW2CxeTRCoqDf1 CVMVTzkZ4Mv2DjoVPRd/DBZRw8x4uxl0jD28gjMA+Mi+NzWoGsR3MHJckpy3kxJa tUpHHGzm7oaye6O6eHiT4lrlrbNhY5PF2Q6Ozp4a+fs6bc86iJlwWcnR4IT7buzL 8mEBjGHuh8zEtr8f09x2K1+G74MonYGz0Aag6N0lKRS/KTZIx/ZoPrhtOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH40Xfsee43H7iQAJMtJg4wODM5iMB8GA1UdIwQY MBaAFCqqz8XV47Jo8sa6Qza8yUH1yNevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3FyUHhkWGpzbWp5eHJwRE5yekpRZlhJMTY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9jNTJkNDQtMWJiNi00ZGMwLTg2YmEt NDRjYjRlOTUzMDI3LzEvS3FyUHhkWGpzbWp5eHJwRE5yekpRZlhJMTY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9jNTJkNDQtMWJiNi00ZGMwLTg2YmEtNDRjYjRlOTUzMDI3 LzEvS3FyUHhkWGpzbWp5eHJwRE5yekpRZlhJMTY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtiy6b5hX dxZ0Cpb9NOJrsEsl/IDWxtNcvva9F3UJvXYaPfGEa2DoKdbGpP/BSHCnGO4XvoAe 7kM+5qhCur+x7wckrMipfFs2ZVrEDJoB/BXqSSqt4rr4LAxHaqBlheAjGIMRSw0H guG0TNk2GoJCujdmzQ2hJNjhImq36HB2nMRCNMGutOeRICg52O9srNAszXlD3r+J zdo00q6JZjsTY+4GPOR/idr8PumXBuPuHRLA1/Z31e/MvE6kjAx5S6VoqSBT8s7b 2z+3S0MvaBW2GnQEoGQm6lqTCSFXTcrqDjKonbAmWI6UaWDg6QPiUgAlNA7YsMr9 sz6/PGDpd3xV0w== -----END CERTIFICATE-----Generated at Mon Dec 29 16:45:01 2025 by rpki-client