This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft File: KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft (raw, json) Hash identifier: GWpSVq/MLi90xpSLinXXIeI5ceO8ENDnSFMSxVkIL5Q= Subject key identifier: 09:BB:02:EF:D4:89:CC:EF:44:D1:FA:19:03:B0:59:8F:BA:CF:1E:B6 Authority key identifier: 29:01:D7:64:31:C6:E8:73:D3:C4:47:30:57:1E:1E:50:D6:02:05:7C Certificate issuer: /CN=2901d76431c6e873d3c44730571e1e50d602057c Certificate serial: 019B533D17653D850CA5A8F93349F04984AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft Manifest number: 13A3 Signing time: Thu 25 Dec 2025 02:01:11 +0000 Manifest this update: Thu 25 Dec 2025 02:01:11 +0000 Manifest next update: Fri 26 Dec 2025 02:01:11 +0000 Files and hashes: 1: JePrT9N5p_vpcuN2wLJvV6n4f0o.roa (hash: ec+cmY8FX0sUxq4KIX8YI3T2SVi2Yc81u8O7CEJnLdo=) 2: KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl (hash: OImzXuHsak56FDCTu0HYXHJs6uaKbvapglpDghbvt7I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:3d:17:65:3d:85:0c:a5:a8:f9:33:49:f0:49:84:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2901d76431c6e873d3c44730571e1e50d602057c Validity Not Before: Dec 25 02:01:11 2025 GMT Not After : Dec 26 02:01:11 2025 GMT Subject: CN=09bb02efd489ccef44d1fa1903b0598fbacf1eb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c0:b1:79:cf:1d:68:87:8a:ef:9b:4f:21:aa: 87:64:cc:1b:28:ad:a3:0e:05:96:be:c1:29:97:1a: 18:e8:a8:76:bc:49:55:2a:fd:ba:0b:05:81:5f:62: e8:b6:6d:c5:8a:32:45:45:c4:44:6b:25:91:9a:c6: 89:b9:ca:81:c4:75:0e:45:b9:aa:cf:28:79:c7:1b: 0d:08:e5:63:d8:07:18:d5:33:f3:3c:2b:3f:88:b8: 0d:b8:dd:73:88:21:49:5b:b2:a7:84:ca:e0:bf:db: 55:a1:f6:93:5b:88:07:65:60:ee:91:57:56:a3:48: 74:d7:59:d7:ab:30:6a:d5:8d:e3:7e:3b:17:e7:a4: 8a:e4:8d:a9:6a:c8:20:ef:bd:37:34:6a:5e:c1:a7: 49:15:67:9e:71:85:09:01:cd:a9:36:96:64:82:d0: 5a:d1:08:61:24:43:92:60:33:4c:26:1a:45:10:99: 3a:cb:43:86:c5:8b:1b:64:06:93:6f:40:59:da:a6: c6:63:96:c3:a7:6d:2c:f7:a3:76:07:f0:1b:25:df: 7a:b2:c1:38:47:7e:f0:db:16:0e:59:d8:ae:99:3c: 64:c7:1a:15:04:a0:0b:0e:12:75:93:1a:aa:35:6f: ac:56:22:9f:63:d9:f2:6b:b7:7f:50:74:89:35:5c: 84:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:BB:02:EF:D4:89:CC:EF:44:D1:FA:19:03:B0:59:8F:BA:CF:1E:B6 X509v3 Authority Key Identifier: keyid:29:01:D7:64:31:C6:E8:73:D3:C4:47:30:57:1E:1E:50:D6:02:05:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:40:54:16:a3:cd:f5:23:08:6e:c1:6c:31:2c:84:fd:ed:88: 81:4c:0a:34:1e:e2:43:5d:4f:5e:01:99:0c:01:26:15:4f:04: 9f:0a:38:3a:fc:6d:07:9b:af:e6:77:30:46:6a:55:8a:a6:25: cf:f3:bd:b7:78:d9:cd:d2:8e:77:db:8a:03:40:a2:c1:4b:0a: 7c:9d:20:d8:54:c4:e4:ef:b4:18:e3:87:1a:8f:69:59:88:6e: dc:ff:82:e8:bd:a6:5b:51:c7:ee:ba:60:af:79:56:97:c7:60: ff:97:9f:71:55:4b:57:89:67:97:61:53:30:7f:6b:e7:02:3e: e0:f1:68:3f:8d:dd:4f:7e:bc:91:2f:e4:a6:c5:ee:d0:b0:98: 1a:1a:05:3d:27:38:78:2d:a4:6c:3c:b5:f1:28:b8:e8:62:7d: 34:10:ad:f6:4b:74:76:40:d7:3e:21:37:53:fa:1e:3a:e2:5b: 50:4e:db:40:11:95:7c:a9:ff:0f:71:ec:02:c0:6c:7d:6f:85: 2e:a8:e8:7f:66:22:eb:bc:27:c7:15:76:3d:5f:ec:d0:39:60: ca:74:d1:dd:09:34:f7:a6:f7:ac:1b:14:a6:3f:3c:ac:f8:9e: e6:9b:ae:63:54:d2:82:9a:0d:65:3f:87:72:b5:0d:67:c1:e9: ab:0c:d2:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTPRdlPYUMpaj5M0nwSYSuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MDFkNzY0MzFjNmU4NzNkM2M0NDczMDU3MWUxZTUwZDYw MjA1N2MwHhcNMjUxMjI1MDIwMTExWhcNMjUxMjI2MDIwMTExWjAzMTEwLwYDVQQD EygwOWJiMDJlZmQ0ODljY2VmNDRkMWZhMTkwM2IwNTk4ZmJhY2YxZWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8Cxec8daIeK75tPIaqHZMwbKK2j DgWWvsEplxoY6Kh2vElVKv26CwWBX2Lotm3FijJFRcREayWRmsaJucqBxHUORbmq zyh5xxsNCOVj2AcY1TPzPCs/iLgNuN1ziCFJW7KnhMrgv9tVofaTW4gHZWDukVdW o0h011nXqzBq1Y3jfjsX56SK5I2pasgg7703NGpewadJFWeecYUJAc2pNpZkgtBa 0QhhJEOSYDNMJhpFEJk6y0OGxYsbZAaTb0BZ2qbGY5bDp20s96N2B/AbJd96ssE4 R37w2xYOWdiumTxkxxoVBKALDhJ1kxqqNW+sViKfY9nya7d/UHSJNVyEqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAm7Au/UiczvRNH6GQOwWY+6zx62MB8GA1UdIwQY MBaAFCkB12Qxxuhz08RHMFceHlDWAgV8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1FIWFpESEc2SFBUeEVjd1Z4NGVVTllDQlh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8wNWMzYTEtYzhmZS00MGZmLTljNTIt M2U2ZjAzMjQ0MTBhLzEvS1FIWFpESEc2SFBUeEVjd1Z4NGVVTllDQlh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8wNWMzYTEtYzhmZS00MGZmLTljNTItM2U2ZjAzMjQ0MTBh LzEvS1FIWFpESEc2SFBUeEVjd1Z4NGVVTllDQlh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo0BUFqPN 9SMIbsFsMSyE/e2IgUwKNB7iQ11PXgGZDAEmFU8Enwo4OvxtB5uv5ncwRmpViqYl z/O9t3jZzdKOd9uKA0CiwUsKfJ0g2FTE5O+0GOOHGo9pWYhu3P+C6L2mW1HH7rpg r3lWl8dg/5efcVVLV4lnl2FTMH9r5wI+4PFoP43dT368kS/kpsXu0LCYGhoFPSc4 eC2kbDy18Si46GJ9NBCt9kt0dkDXPiE3U/oeOuJbUE7bQBGVfKn/D3HsAsBsfW+F Lqjof2Yi67wnxxV2PV/s0DlgynTR3Qk096b3rBsUpj88rPie5puuY1TSgpoNZT+H crUNZ8HpqwzSUw== -----END CERTIFICATE-----Generated at Thu Dec 25 04:52:01 2025 by rpki-client