This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft File: KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft (raw, json) Hash identifier: pxqRQ1KMXSRrb5D/2DzrWgfrILGqbRlGmUCkAkBTP2s= Subject key identifier: 74:91:96:37:13:BA:7E:B9:FA:D0:95:B3:DD:24:A7:40:13:0B:14:CC Authority key identifier: 2A:36:9C:A9:BA:84:AD:84:7D:49:D3:1E:27:46:5F:AF:57:BF:28:E4 Certificate issuer: /CN=2a369ca9ba84ad847d49d31e27465faf57bf28e4 Certificate serial: 019B4091B5A3F72B6528164B2B4A10C71E5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft Manifest number: 1788 Signing time: Sun 21 Dec 2025 11:00:49 +0000 Manifest this update: Sun 21 Dec 2025 11:00:49 +0000 Manifest next update: Mon 22 Dec 2025 11:00:49 +0000 Files and hashes: 1: AAnX94FZ-tQzXcJk_elGxuLR8aQ.roa (hash: D5KLLlx/C1ALQLS5LYzAlXJyxWisqcBsxXVALk1wu4g=) 2: KjacqbqErYR9SdMeJ0Zfr1e_KOQ.crl (hash: wLKvyNl12H1voM92r4G1mT7e4pQTYooK4xOWsol+T34=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:b5:a3:f7:2b:65:28:16:4b:2b:4a:10:c7:1e:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a369ca9ba84ad847d49d31e27465faf57bf28e4 Validity Not Before: Dec 21 11:00:49 2025 GMT Not After : Dec 22 11:00:49 2025 GMT Subject: CN=7491963713ba7eb9fad095b3dd24a740130b14cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:8a:a6:bd:19:e7:77:d2:f8:52:0a:7e:4e:76: b8:29:e1:8a:f6:2d:39:a0:51:f9:a2:f2:b3:cb:77: 29:53:5b:11:7f:cc:b2:3b:21:18:99:71:ed:b3:1a: 71:3f:56:30:df:ac:16:89:e8:69:98:ef:26:ff:09: 9a:bc:2e:6e:45:75:f6:66:8e:1a:b7:9c:3f:ce:1a: 43:2c:d3:48:7e:ac:83:ba:ce:0d:4f:7f:bf:00:46: 84:71:2d:d9:6f:35:d9:89:5a:d3:ff:24:9c:1a:4d: fc:c2:03:36:16:9a:1f:ef:b8:ce:d1:ab:f0:2c:76: 39:b9:07:aa:1a:7c:a5:36:8c:20:d7:08:3d:7a:61: 0f:14:38:f1:01:49:ec:20:e8:64:b6:9f:44:95:90: b0:09:e8:d9:94:94:be:52:90:b3:14:14:8b:ad:60: 86:b6:dd:f8:b6:a7:2e:5b:f3:e1:04:d7:a3:85:31: 66:d1:eb:4a:74:ab:f9:87:7b:70:2b:1a:33:4f:1f: 6c:bc:49:77:bb:8c:d9:e0:0d:99:fd:63:96:99:30: a5:c1:90:ab:e1:2d:a5:02:dd:61:e4:a1:db:d2:d9: cd:dd:87:e3:45:79:da:11:1e:19:9b:27:9c:b3:d8: 27:f0:2b:52:31:20:e1:c1:0e:ad:c3:f1:9b:49:2c: 8c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:91:96:37:13:BA:7E:B9:FA:D0:95:B3:DD:24:A7:40:13:0B:14:CC X509v3 Authority Key Identifier: keyid:2A:36:9C:A9:BA:84:AD:84:7D:49:D3:1E:27:46:5F:AF:57:BF:28:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:9b:91:2c:15:7b:4b:c3:4d:5c:a8:3e:a4:83:b6:9d:df:26: 20:74:5b:23:1a:42:bb:74:c9:df:97:17:a6:16:a6:81:a4:05: af:0c:4e:d2:84:11:b7:9f:1b:2a:5a:b0:1f:67:e5:e8:58:42: e4:b9:65:0d:6a:2b:cc:d4:b2:cb:a6:75:5c:04:0c:3a:3a:cc: 51:c9:b4:8b:3d:8c:df:23:8f:33:54:97:ed:a6:f8:3d:64:9e: b0:b6:df:fb:9a:81:d3:a1:e5:de:6a:50:54:36:e7:cc:dd:74: 84:84:3e:19:d7:56:17:de:f6:39:a0:34:dc:81:a4:d9:c4:06: f7:4d:d3:ae:e6:c1:70:f1:f4:cb:1b:9c:bb:71:64:cd:1e:ee: 40:22:10:a5:da:46:c0:56:d2:f6:9f:4b:db:4d:3a:d5:5c:ba: 1d:ab:f8:83:18:2c:8b:e6:f0:2e:c7:97:bd:2f:c9:60:50:55: b4:c6:da:ae:2e:38:90:c2:dd:d9:ed:a9:df:95:6f:14:dc:92: df:64:b4:68:d3:37:c4:bc:b0:f7:97:a9:2b:e8:ba:35:f4:e8: e1:28:7d:b8:af:c2:2f:c4:84:3f:b9:12:73:a4:64:ee:08:12: 86:6c:9d:c8:2e:1e:b9:26:43:c8:12:be:3b:4e:0a:d1:13:0e: 9c:b1:47:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkbWj9ytlKBZLK0oQxx5eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhMzY5Y2E5YmE4NGFkODQ3ZDQ5ZDMxZTI3NDY1ZmFmNTdi ZjI4ZTQwHhcNMjUxMjIxMTEwMDQ5WhcNMjUxMjIyMTEwMDQ5WjAzMTEwLwYDVQQD Eyg3NDkxOTYzNzEzYmE3ZWI5ZmFkMDk1YjNkZDI0YTc0MDEzMGIxNGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54qmvRnnd9L4Ugp+Tna4KeGK9i05 oFH5ovKzy3cpU1sRf8yyOyEYmXHtsxpxP1Yw36wWiehpmO8m/wmavC5uRXX2Zo4a t5w/zhpDLNNIfqyDus4NT3+/AEaEcS3ZbzXZiVrT/yScGk38wgM2Fpof77jO0avw LHY5uQeqGnylNowg1wg9emEPFDjxAUnsIOhktp9ElZCwCejZlJS+UpCzFBSLrWCG tt34tqcuW/PhBNejhTFm0etKdKv5h3twKxozTx9svEl3u4zZ4A2Z/WOWmTClwZCr 4S2lAt1h5KHb0tnN3YfjRXnaER4Zmyecs9gn8CtSMSDhwQ6tw/GbSSyMDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHSRljcTun65+tCVs90kp0ATCxTMMB8GA1UdIwQY MBaAFCo2nKm6hK2EfUnTHidGX69XvyjkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2phY3FicUVyWVI5U2RNZUowWmZyMWVfS09RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9hMGIyNjYtM2M5ZS00ZTBjLThhNmQt NTg5NWI2OWQxODllLzEvS2phY3FicUVyWVI5U2RNZUowWmZyMWVfS09RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9hMGIyNjYtM2M5ZS00ZTBjLThhNmQtNTg5NWI2OWQxODll LzEvS2phY3FicUVyWVI5U2RNZUowWmZyMWVfS09RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPZuRLBV7 S8NNXKg+pIO2nd8mIHRbIxpCu3TJ35cXphamgaQFrwxO0oQRt58bKlqwH2fl6FhC 5LllDWorzNSyy6Z1XAQMOjrMUcm0iz2M3yOPM1SX7ab4PWSesLbf+5qB06Hl3mpQ VDbnzN10hIQ+GddWF972OaA03IGk2cQG903TrubBcPH0yxucu3FkzR7uQCIQpdpG wFbS9p9L20061Vy6Hav4gxgsi+bwLseXvS/JYFBVtMbari44kMLd2e2p35VvFNyS 32S0aNM3xLyw95epK+i6NfTo4Sh9uK/CL8SEP7kSc6Rk7ggShmydyC4euSZDyBK+ O04K0RMOnLFH6A== -----END CERTIFICATE-----Generated at Sun Dec 21 15:36:41 2025 by rpki-client