This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft File: KEQn3OurQOvBmDny0l7qLOClYv8.mft (raw, json) Hash identifier: Zr3sAyCz5llwOU6HZHd/NR1LefzDEQLnlFy3MJq5H/A= Subject key identifier: BA:39:6D:FC:82:47:34:9F:46:C0:AC:40:87:40:60:89:7A:D6:B0:4C Authority key identifier: 28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF Certificate issuer: /CN=284427dcebab40ebc19839f2d25eea2ce0a562ff Certificate serial: 019B3F7F78DF1C62B0160B8BAEA7010AED10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft Manifest number: 0652 Signing time: Sun 21 Dec 2025 06:01:17 +0000 Manifest this update: Sun 21 Dec 2025 06:01:17 +0000 Manifest next update: Mon 22 Dec 2025 06:01:17 +0000 Files and hashes: 1: D46Ir3fESQdKV4ntE1MciVCeNwY.roa (hash: ND9cgWv5J0hNtKyrA/zDulukUC/W3FHSN0hW88QXa3s=) 2: KEQn3OurQOvBmDny0l7qLOClYv8.crl (hash: P+q4HARJwajU/2D70HOzbE96yX1ulc7tbo7mjjGTjCE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:78:df:1c:62:b0:16:0b:8b:ae:a7:01:0a:ed:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=284427dcebab40ebc19839f2d25eea2ce0a562ff Validity Not Before: Dec 21 06:01:17 2025 GMT Not After : Dec 22 06:01:17 2025 GMT Subject: CN=ba396dfc8247349f46c0ac40874060897ad6b04c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ba:b1:14:86:25:b2:ae:43:cb:fa:60:12:92: 6a:5e:c4:ee:75:ab:aa:89:d5:a6:05:66:78:14:ee: d7:2c:34:32:dd:95:21:54:38:d8:67:9a:99:5f:86: fc:0a:da:30:13:fe:24:a2:f6:ef:b8:aa:39:f8:24: 0e:80:e9:37:2b:cc:25:b0:36:39:35:1a:f3:c2:c9: 22:89:63:68:47:13:f1:54:f4:74:07:ac:1c:71:f5: 7f:81:81:fb:3f:dc:48:53:5b:9e:9e:fd:b0:6e:8b: 35:77:6b:a8:c2:39:70:78:82:30:fb:9d:d7:11:81: 60:bb:0b:6d:38:0f:bb:be:86:f7:6b:fa:9f:07:e4: 07:86:6e:38:0f:f4:ce:21:fc:21:51:41:5c:73:d8: 39:ef:44:08:95:2a:b5:4c:cd:0a:6d:43:6e:69:63: 9c:f0:66:bb:e1:09:80:4b:17:7e:41:f9:06:71:50: 33:65:81:20:11:92:aa:47:9c:15:e3:fa:25:d1:eb: 29:d1:16:b0:c5:cd:02:a4:11:7f:46:4c:0a:89:ae: 27:06:3b:55:7b:b4:7d:48:ce:40:89:6f:32:aa:4c: d1:1d:f6:90:e2:0f:2c:14:52:3a:35:ee:68:62:1b: 79:a0:92:a8:a5:f0:ec:03:af:f3:6f:ef:b0:e5:0c: 70:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:39:6D:FC:82:47:34:9F:46:C0:AC:40:87:40:60:89:7A:D6:B0:4C X509v3 Authority Key Identifier: keyid:28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:73:32:6e:eb:a2:7f:22:be:a2:d6:9e:5d:2f:7b:6b:a5:95: 50:90:e6:a0:de:f2:a2:b7:a8:e2:c2:1c:03:4f:29:a1:40:ff: 9a:c8:d2:bb:a9:16:76:be:79:6d:d2:f8:05:31:81:aa:c2:30: 2b:17:44:38:4f:21:e8:25:0c:e4:53:63:3e:86:4f:5d:18:38: 64:ba:53:98:6e:77:ff:2e:62:cc:37:4c:4e:a4:cd:b4:a4:5f: a0:c7:d0:e1:c4:36:48:02:52:4a:c6:b3:d6:81:7e:97:75:dd: e6:06:8b:04:6d:9d:dc:42:07:be:5e:12:b7:5a:03:66:d0:2e: 08:2a:7e:33:8a:6d:96:48:c0:f7:57:d6:27:2e:ed:8b:31:00: 60:27:27:e5:cc:d8:06:24:90:07:ec:db:29:d4:e7:91:54:62: 7c:d3:42:66:08:99:15:8e:15:bf:28:af:3c:76:47:28:8e:71: 34:e5:f3:dc:3c:a9:fa:68:79:22:07:7b:94:c0:5f:1c:60:eb: b8:76:5b:fd:8e:93:f3:56:6b:a7:59:f7:26:d9:ff:73:76:7e: 2a:05:20:8d:cc:8b:8e:96:d0:8e:ec:fe:75:7e:41:1b:36:2d: 42:a1:9e:86:19:77:a3:43:87:92:bc:fc:a3:7d:4f:36:21:1b: ba:81:c9:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/f3jfHGKwFguLrqcBCu0QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4NDQyN2RjZWJhYjQwZWJjMTk4MzlmMmQyNWVlYTJjZTBh NTYyZmYwHhcNMjUxMjIxMDYwMTE3WhcNMjUxMjIyMDYwMTE3WjAzMTEwLwYDVQQD EyhiYTM5NmRmYzgyNDczNDlmNDZjMGFjNDA4NzQwNjA4OTdhZDZiMDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7qxFIYlsq5Dy/pgEpJqXsTudauq idWmBWZ4FO7XLDQy3ZUhVDjYZ5qZX4b8CtowE/4kovbvuKo5+CQOgOk3K8wlsDY5 NRrzwskiiWNoRxPxVPR0B6wccfV/gYH7P9xIU1uenv2wbos1d2uowjlweIIw+53X EYFguwttOA+7vob3a/qfB+QHhm44D/TOIfwhUUFcc9g570QIlSq1TM0KbUNuaWOc 8Ga74QmASxd+QfkGcVAzZYEgEZKqR5wV4/ol0esp0Rawxc0CpBF/RkwKia4nBjtV e7R9SM5AiW8yqkzRHfaQ4g8sFFI6Ne5oYht5oJKopfDsA6/zb++w5QxwnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLo5bfyCRzSfRsCsQIdAYIl61rBMMB8GA1UdIwQY MBaAFChEJ9zrq0DrwZg58tJe6izgpWL/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0VRbjNPdXJRT3ZCbURueTBsN3FMT0NsWXY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS80NmQ4YjQtOGY0Ny00ZTkzLWFjYzIt NTBkMDA1NzgyZmFiLzEvS0VRbjNPdXJRT3ZCbURueTBsN3FMT0NsWXY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS80NmQ4YjQtOGY0Ny00ZTkzLWFjYzItNTBkMDA1NzgyZmFi LzEvS0VRbjNPdXJRT3ZCbURueTBsN3FMT0NsWXY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa3Mybuui fyK+otaeXS97a6WVUJDmoN7yoreo4sIcA08poUD/msjSu6kWdr55bdL4BTGBqsIw KxdEOE8h6CUM5FNjPoZPXRg4ZLpTmG53/y5izDdMTqTNtKRfoMfQ4cQ2SAJSSsaz 1oF+l3Xd5gaLBG2d3EIHvl4St1oDZtAuCCp+M4ptlkjA91fWJy7tizEAYCcn5czY BiSQB+zbKdTnkVRifNNCZgiZFY4VvyivPHZHKI5xNOXz3Dyp+mh5Igd7lMBfHGDr uHZb/Y6T81Zrp1n3Jtn/c3Z+KgUgjcyLjpbQjuz+dX5BGzYtQqGehhl3o0OHkrz8 o31PNiEbuoHJYw== -----END CERTIFICATE-----Generated at Sun Dec 21 09:15:13 2025 by rpki-client