This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft File: KqttsAX47NmhIcY2hYB17xMUXbA.mft (raw, json) Hash identifier: uotqEJXkfwwrm1RVqkg/AoSKtgTjH5zupzwLxD0sV2M= Subject key identifier: FB:B7:FD:78:B8:B4:0D:E4:5C:EE:0B:E8:B9:F2:77:59:34:02:42:E4 Authority key identifier: 2A:AB:6D:B0:05:F8:EC:D9:A1:21:C6:36:85:80:75:EF:13:14:5D:B0 Certificate issuer: /CN=2aab6db005f8ecd9a121c636858075ef13145db0 Certificate serial: 019B2D0BC4704E7C02A7D9C68597B87CF531 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqttsAX47NmhIcY2hYB17xMUXbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft Manifest number: 117B Signing time: Wed 17 Dec 2025 16:01:44 +0000 Manifest this update: Wed 17 Dec 2025 16:01:44 +0000 Manifest next update: Thu 18 Dec 2025 16:01:44 +0000 Files and hashes: 1: KqttsAX47NmhIcY2hYB17xMUXbA.crl (hash: BuRwR2BfIwZ9X92LMYGCkggnrU2yM6r5CZqvP+jeYJE=) 2: NTwv9MrFUxU0rREuWqapE-DiajI.roa (hash: hq+d0ybPFOeu8D+rx2edFf/i0EP0Jbrx83E12M+26zY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft rsync://rpki.ripe.net/repository/DEFAULT/KqttsAX47NmhIcY2hYB17xMUXbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:c4:70:4e:7c:02:a7:d9:c6:85:97:b8:7c:f5:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aab6db005f8ecd9a121c636858075ef13145db0 Validity Not Before: Dec 17 16:01:44 2025 GMT Not After : Dec 18 16:01:44 2025 GMT Subject: CN=fbb7fd78b8b40de45cee0be8b9f27759340242e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e7:59:21:83:90:e8:28:05:3e:70:77:79:66: 0a:1f:17:7d:92:29:b5:63:03:6b:93:86:05:79:cb: d3:04:fd:7e:e4:fb:3f:37:6e:23:2d:3e:b3:97:73: 86:7f:6f:d6:2a:16:e7:a0:b0:7e:13:46:3c:98:25: 48:7b:10:9a:bf:a4:ee:82:9a:57:70:08:5f:fc:f6: 33:ef:1a:fe:0b:73:79:93:72:cc:a5:b3:a5:b2:01: ec:a3:25:dc:bc:90:1b:c9:b1:2f:1a:e9:68:84:87: 33:be:b6:8f:52:5d:fc:a1:f4:ab:83:38:fc:1d:2a: 0c:68:64:fe:eb:7f:c7:e2:79:cc:78:23:9e:a2:1f: 25:57:86:48:57:eb:16:7f:6e:fd:c4:b0:84:94:e0: 7b:41:a4:e8:86:ce:3a:c4:c5:d7:13:e9:1d:23:52: b7:e9:7d:e3:5d:4b:69:e0:92:66:6d:35:c5:46:f0: f6:df:db:08:4b:1f:51:5f:1a:3b:99:2a:54:24:76: 82:42:b8:22:b8:39:6f:9c:94:8e:90:8a:d9:4c:5b: ec:a6:7a:34:2a:32:1a:e3:98:7c:5e:47:d0:f6:2f: 10:75:57:c2:4a:95:24:e6:13:3a:18:2d:74:f7:d4: fc:97:01:5b:bc:c7:ab:41:28:5e:c0:5b:8f:d4:20: ae:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B7:FD:78:B8:B4:0D:E4:5C:EE:0B:E8:B9:F2:77:59:34:02:42:E4 X509v3 Authority Key Identifier: keyid:2A:AB:6D:B0:05:F8:EC:D9:A1:21:C6:36:85:80:75:EF:13:14:5D:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqttsAX47NmhIcY2hYB17xMUXbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:c3:49:f8:57:38:16:ca:56:da:5b:2c:12:64:48:1e:26:67: cf:1c:28:01:c6:4a:62:95:8c:51:8e:5f:9d:6c:75:49:9f:cc: 99:ad:cc:2e:35:e9:c5:2a:04:98:93:95:b5:2e:a8:8a:3b:3e: 02:a2:a4:a6:01:4a:33:20:16:42:6a:26:13:74:f3:33:3e:28: aa:f2:c8:ee:8b:05:f9:ef:7d:f0:e5:94:82:95:e3:cb:df:ec: 42:b8:a7:34:55:5d:dd:ab:ad:dd:6a:d5:3b:65:ed:dc:03:f2: 7e:cf:5f:80:15:e5:70:bf:41:4a:66:6f:77:aa:20:e9:fc:c1: a7:23:30:df:df:91:7f:12:bf:eb:00:9b:4b:d1:0a:3f:00:fd: 0f:55:12:6a:0a:00:38:d1:52:df:29:bc:d5:cc:ba:f0:63:a4: 59:8c:2b:cd:6e:8b:24:dc:b9:73:df:b4:a8:23:34:21:7c:38: 6f:64:55:9b:e1:79:6d:cc:f3:75:7f:89:5f:be:ed:f0:f3:52: 6a:a4:f3:01:2b:c0:34:6f:71:02:87:2b:c2:09:94:4b:4e:81: 06:34:8b:af:e0:13:aa:39:74:7b:2c:f7:6e:53:8a:02:0d:c6: e2:ad:d8:72:b5:c7:ec:51:be:15:a8:3c:32:e8:93:b9:29:a9: ed:df:33:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstC8RwTnwCp9nGhZe4fPUxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYWI2ZGIwMDVmOGVjZDlhMTIxYzYzNjg1ODA3NWVmMTMx NDVkYjAwHhcNMjUxMjE3MTYwMTQ0WhcNMjUxMjE4MTYwMTQ0WjAzMTEwLwYDVQQD EyhmYmI3ZmQ3OGI4YjQwZGU0NWNlZTBiZThiOWYyNzc1OTM0MDI0MmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOdZIYOQ6CgFPnB3eWYKHxd9kim1 YwNrk4YFecvTBP1+5Ps/N24jLT6zl3OGf2/WKhbnoLB+E0Y8mCVIexCav6TugppX cAhf/PYz7xr+C3N5k3LMpbOlsgHsoyXcvJAbybEvGulohIczvraPUl38ofSrgzj8 HSoMaGT+63/H4nnMeCOeoh8lV4ZIV+sWf279xLCElOB7QaTohs46xMXXE+kdI1K3 6X3jXUtp4JJmbTXFRvD239sISx9RXxo7mSpUJHaCQrgiuDlvnJSOkIrZTFvspno0 KjIa45h8XkfQ9i8QdVfCSpUk5hM6GC1099T8lwFbvMerQShewFuP1CCuMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPu3/Xi4tA3kXO4L6Lnyd1k0AkLkMB8GA1UdIwQY MBaAFCqrbbAF+OzZoSHGNoWAde8TFF2wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3F0dHNBWDQ3Tm1oSWNZMmhZQjE3eE1VWGJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84YzE3YmEtNWFiNC00ZjU5LWI0YmUt YWQ2YTgxYjgyYTE3LzEvS3F0dHNBWDQ3Tm1oSWNZMmhZQjE3eE1VWGJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi84YzE3YmEtNWFiNC00ZjU5LWI0YmUtYWQ2YTgxYjgyYTE3 LzEvS3F0dHNBWDQ3Tm1oSWNZMmhZQjE3eE1VWGJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAacNJ+Fc4 FspW2lssEmRIHiZnzxwoAcZKYpWMUY5fnWx1SZ/Mma3MLjXpxSoEmJOVtS6oijs+ AqKkpgFKMyAWQmomE3TzMz4oqvLI7osF+e998OWUgpXjy9/sQrinNFVd3aut3WrV O2Xt3APyfs9fgBXlcL9BSmZvd6og6fzBpyMw39+RfxK/6wCbS9EKPwD9D1USagoA ONFS3ym81cy68GOkWYwrzW6LJNy5c9+0qCM0IXw4b2RVm+F5bczzdX+JX77t8PNS aqTzASvANG9xAocrwgmUS06BBjSLr+ATqjl0eyz3blOKAg3G4q3YcrXH7FG+Fag8 MuiTuSmp7d8zRA== -----END CERTIFICATE-----Generated at Wed Dec 17 18:26:09 2025 by rpki-client