This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft File: kUqlV8PT0ea38FJcNMwdSIpakpQ.mft (raw, json) Hash identifier: dxRmdhvyAHASCERfn5oZgufZ/poH9DAjHRjfsEbRs/0= Subject key identifier: 6B:72:E7:3C:CD:19:55:F6:61:95:AA:5D:26:60:F9:59:DD:84:63:B9 Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94 Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294 Certificate serial: 019B3C1009CA114235E4EC6C1B4CE8526DC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft Manifest number: 0364 Signing time: Sat 20 Dec 2025 14:00:42 +0000 Manifest this update: Sat 20 Dec 2025 14:00:42 +0000 Manifest next update: Sun 21 Dec 2025 14:00:42 +0000 Files and hashes: 1: 3e9xcybUyOgWOmdj2KT0VPc-IQ4.roa (hash: h6OpcAY2hGkLVmHjk3z97L6JK9iEJZ7vz8cORcaFzmM=) 2: EY-GYc_OgBsb1UIfjvb41Bwimi4.roa (hash: oR/jgqozL9leyl3DMc7LefEzsfH3jn7fBo/d5r37udY=) 3: Lq4WVGKGsselfZcTJptyW5NxYrs.roa (hash: AGKXTF8CpWwFuAtN+d3P7Q0iDr057cYXvsD6OiqrbrI=) 4: WUcwdVxjGm9MT5dj0KuN5kY8fc0.roa (hash: Va0HPLXWY6KmecVQh7TSAW6BzjPwycNZWbVEYlVLjHk=) 5: kUqlV8PT0ea38FJcNMwdSIpakpQ.crl (hash: eP36aX7xPl5KIbgl8XOwQexBYDrSuNlJ7054d32AcV8=) 6: poqG69mPnb95YSUs8FdptFbAqUw.roa (hash: mqMSlTGBPTy+EqcBaFtlD8JVQdwDJPdpMrV37KzvxOo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:09:ca:11:42:35:e4:ec:6c:1b:4c:e8:52:6d:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294 Validity Not Before: Dec 20 14:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=6b72e73ccd1955f66195aa5d2660f959dd8463b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:27:62:2c:ce:54:f2:cb:e1:7d:e3:0d:a3:8c: be:82:05:7e:5d:99:93:18:62:7c:3c:2d:62:ad:07: 46:9d:f9:50:b2:82:4d:2e:7c:56:d4:c9:9d:04:0c: 76:9c:3e:aa:33:83:39:ff:6c:10:c0:d6:1e:9b:b1: 16:a4:c3:1f:22:e8:10:b7:4d:7c:1d:ab:1c:22:3b: 02:a4:d2:53:2b:34:41:0f:a0:49:d5:db:14:82:62: 09:bf:db:20:e8:c0:c3:1e:c0:93:05:bd:85:28:dc: 08:f8:5c:45:25:6e:ca:ce:28:64:cb:a4:e4:63:35: 45:e8:c2:c9:80:4c:3d:0f:4c:6a:60:74:b7:ed:12: 19:c0:ed:55:c5:2e:91:e2:ae:a8:ad:13:77:fb:4a: 86:09:83:4e:be:04:d0:6d:a1:3e:3e:84:5b:67:e1: 3a:1f:f4:04:48:53:1b:47:4f:e6:6b:e7:5a:da:b9: 08:ec:ff:57:f9:e4:be:49:6f:8d:5f:33:cf:82:92: 7e:1e:0b:6c:95:ae:98:b6:06:ef:d4:63:cb:c9:63: a1:8f:4a:ae:cd:52:f8:c2:64:ab:3b:49:5f:1d:48: 87:ea:ad:2c:f8:f2:de:ad:47:55:da:43:0e:d9:2c: d1:bc:e0:12:50:f9:8b:b1:20:35:ed:1f:6e:17:78: a3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:72:E7:3C:CD:19:55:F6:61:95:AA:5D:26:60:F9:59:DD:84:63:B9 X509v3 Authority Key Identifier: keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:e3:5b:a6:d8:ed:2a:93:0a:68:98:51:26:9c:46:41:b1:91: 36:fd:26:d7:65:ce:c8:2f:2f:30:12:46:d5:d8:df:89:df:de: 72:05:d0:10:8b:59:2a:40:79:2d:a1:8b:98:ab:87:ec:7f:34: 23:66:33:b8:81:3a:fc:20:83:e8:6e:ae:ed:1d:2e:ea:f1:d9: 01:5a:cf:4e:61:f4:7e:9a:38:a2:bb:c1:2f:bb:21:5f:df:cc: b7:b0:61:7f:88:9d:ea:bf:fd:99:4c:3f:43:b9:93:34:f9:4b: ca:4b:6d:70:4a:03:34:86:3e:44:de:01:80:21:36:ee:67:51: d2:a0:42:ea:89:63:e9:6b:82:11:ed:32:cd:f2:8d:bc:8a:9b: 9c:51:a7:1b:b2:62:df:49:f8:b9:3b:b2:d5:e6:9c:b3:49:5b: 06:38:b7:83:98:b5:d1:c3:5f:c4:a7:aa:af:18:4d:76:86:a0: f6:f4:d1:d7:15:f4:49:8f:f4:70:c2:7c:6a:87:e5:49:b6:0d: 61:1b:6b:fd:e7:74:65:1b:48:90:bb:89:62:dd:b7:af:1c:61: 4a:2d:c1:14:f3:2b:f8:a6:38:db:76:71:57:e6:5f:66:02:00: 75:99:d3:cb:bb:af:c8:cd:02:25:31:3c:9a:62:47:05:f8:27: 1d:72:6e:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EAnKEUI15OxsG0zoUm3DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxNGFhNTU3YzNkM2QxZTZiN2YwNTI1YzM0Y2MxZDQ4OGE1 YTkyOTQwHhcNMjUxMjIwMTQwMDQyWhcNMjUxMjIxMTQwMDQyWjAzMTEwLwYDVQQD Eyg2YjcyZTczY2NkMTk1NWY2NjE5NWFhNWQyNjYwZjk1OWRkODQ2M2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSdiLM5U8svhfeMNo4y+ggV+XZmT GGJ8PC1irQdGnflQsoJNLnxW1MmdBAx2nD6qM4M5/2wQwNYem7EWpMMfIugQt018 HascIjsCpNJTKzRBD6BJ1dsUgmIJv9sg6MDDHsCTBb2FKNwI+FxFJW7Kzihky6Tk YzVF6MLJgEw9D0xqYHS37RIZwO1VxS6R4q6orRN3+0qGCYNOvgTQbaE+PoRbZ+E6 H/QESFMbR0/ma+da2rkI7P9X+eS+SW+NXzPPgpJ+Hgtsla6Ytgbv1GPLyWOhj0qu zVL4wmSrO0lfHUiH6q0s+PLerUdV2kMO2SzRvOASUPmLsSA17R9uF3ij6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGty5zzNGVX2YZWqXSZg+VndhGO5MB8GA1UdIwQY MBaAFJFKpVfD09Hmt/BSXDTMHUiKWpKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYt NGEzNDhlN2JlNDQxLzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYtNGEzNDhlN2JlNDQx LzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANONbptjt KpMKaJhRJpxGQbGRNv0m12XOyC8vMBJG1djfid/ecgXQEItZKkB5LaGLmKuH7H80 I2YzuIE6/CCD6G6u7R0u6vHZAVrPTmH0fpo4orvBL7shX9/Mt7Bhf4id6r/9mUw/ Q7mTNPlLykttcEoDNIY+RN4BgCE27mdR0qBC6olj6WuCEe0yzfKNvIqbnFGnG7Ji 30n4uTuy1eacs0lbBji3g5i10cNfxKeqrxhNdoag9vTR1xX0SY/0cMJ8aoflSbYN YRtr/ed0ZRtIkLuJYt23rxxhSi3BFPMr+KY423ZxV+ZfZgIAdZnTy7uvyM0CJTE8 mmJHBfgnHXJunw== -----END CERTIFICATE-----Generated at Sat Dec 20 17:33:20 2025 by rpki-client