This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft File: kQRcV5lsmjyeYnekMmsRgyFdW2o.mft (raw, json) Hash identifier: DIvnURiYyZz9ctr2wi2o0B2iX35MGTH+gmjZeWpWeJc= Subject key identifier: 41:C9:D1:E6:4E:35:56:9F:46:69:B7:70:96:67:F2:06:60:46:58:1E Authority key identifier: 91:04:5C:57:99:6C:9A:3C:9E:62:77:A4:32:6B:11:83:21:5D:5B:6A Certificate issuer: /CN=91045c57996c9a3c9e6277a4326b1183215d5b6a Certificate serial: 019B66FB2265D4D286B3D8AFAE759C77F097 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft Manifest number: 1198 Signing time: Sun 28 Dec 2025 22:01:32 +0000 Manifest this update: Sun 28 Dec 2025 22:01:32 +0000 Manifest next update: Mon 29 Dec 2025 22:01:32 +0000 Files and hashes: 1: 75qkVCY5XXIcFQQiW3dyFVzW6eQ.roa (hash: dXFNWNpycxDfWS4F1kZ68a/+XDX33UqEzrugZvo8DVg=) 2: kQRcV5lsmjyeYnekMmsRgyFdW2o.crl (hash: f2ou8vOcXpnhVnBL2KHiS+HEXD7RQHcaT952eoKGFrw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.crl rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 21:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:fb:22:65:d4:d2:86:b3:d8:af:ae:75:9c:77:f0:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91045c57996c9a3c9e6277a4326b1183215d5b6a Validity Not Before: Dec 28 22:01:32 2025 GMT Not After : Dec 29 22:01:32 2025 GMT Subject: CN=41c9d1e64e35569f4669b7709667f2066046581e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bf:a0:c3:8d:d7:13:4b:ed:58:7f:9a:96:23: da:dd:ab:d5:3f:49:d1:bc:39:4d:0b:5a:db:a4:58: 65:f0:1f:2d:ac:15:0c:c1:9a:35:75:56:52:e0:ef: bf:00:0d:25:b4:45:67:a8:d8:19:04:c0:a0:6a:02: 59:e6:c0:4a:9d:e2:71:e0:60:e5:a2:10:76:00:58: 69:60:16:d7:7d:dc:1d:06:c4:b3:24:ba:3d:8e:ac: e1:88:f0:a7:a7:d9:33:4a:53:1a:f0:23:82:56:37: be:e5:77:1d:cd:03:fa:9d:a0:c6:b8:1f:14:64:68: 2d:65:c1:3f:fa:59:fd:01:02:ed:aa:4e:9d:89:2a: 6e:59:5e:89:c1:73:1e:42:98:90:32:60:71:89:81: 14:ec:2a:bb:0c:11:54:17:3b:f8:ba:02:91:72:cf: 7b:47:3a:96:8c:2f:4e:3c:78:9d:84:f5:39:3d:29: 92:94:56:87:ab:a5:05:07:b6:71:7b:e3:87:dc:90: 80:64:1b:3e:36:60:2c:e0:e4:1d:34:52:50:92:3d: 94:b0:13:e4:5e:f0:da:ff:7e:17:e1:d1:19:be:b8: 14:de:f1:c9:38:14:d0:e2:c2:09:c3:34:5c:f9:8f: e9:c9:f4:a3:f3:0c:0f:05:2e:89:6a:3a:a6:f6:24: 16:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C9:D1:E6:4E:35:56:9F:46:69:B7:70:96:67:F2:06:60:46:58:1E X509v3 Authority Key Identifier: keyid:91:04:5C:57:99:6C:9A:3C:9E:62:77:A4:32:6B:11:83:21:5D:5B:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:4a:0f:d1:4e:f5:50:00:cd:48:e7:44:50:15:3b:a2:25:e8: d5:e7:bd:14:92:dd:7f:f6:d2:6e:92:98:e4:b2:02:b7:66:82: 35:73:bc:6e:2d:3f:c4:ae:52:bc:b2:d9:26:c1:5a:b7:bf:12: da:62:f5:34:3a:af:11:da:13:7c:9a:ac:e3:d6:4d:26:0d:6f: d1:77:cb:f3:3f:3a:43:69:b2:ab:9d:9f:29:0c:31:e6:98:c3: cf:f9:84:35:e8:ae:3f:cb:0b:61:41:21:ba:33:a6:8c:c3:d0: 69:55:a5:5c:02:fa:4a:ba:b7:aa:a1:c8:58:f5:c6:2f:c9:9c: ba:0e:3c:37:61:d5:b0:59:67:7f:f5:26:17:d0:31:4d:89:f8: 01:aa:bc:cb:dc:3c:00:2d:9b:c2:42:73:09:6a:17:ef:e4:d3: 9c:0d:d9:39:dc:b5:de:c6:fb:77:b2:e7:43:9f:d1:38:ca:50: a7:e8:d3:60:e1:b0:6a:01:9b:a2:36:d7:8b:9d:fb:ce:5e:e0: 3c:e7:d5:40:97:00:80:29:91:ae:2e:a6:b5:be:64:8a:3d:cd: 9e:37:61:96:d1:a3:af:7d:87:18:8c:ef:88:89:7d:a7:a3:4a: ce:19:ba:4f:06:05:af:48:3d:54:4b:26:82:d0:66:63:2d:f9: 6e:e5:30:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtm+yJl1NKGs9ivrnWcd/CXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxMDQ1YzU3OTk2YzlhM2M5ZTYyNzdhNDMyNmIxMTgzMjE1 ZDViNmEwHhcNMjUxMjI4MjIwMTMyWhcNMjUxMjI5MjIwMTMyWjAzMTEwLwYDVQQD Eyg0MWM5ZDFlNjRlMzU1NjlmNDY2OWI3NzA5NjY3ZjIwNjYwNDY1ODFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqr+gw43XE0vtWH+aliPa3avVP0nR vDlNC1rbpFhl8B8trBUMwZo1dVZS4O+/AA0ltEVnqNgZBMCgagJZ5sBKneJx4GDl ohB2AFhpYBbXfdwdBsSzJLo9jqzhiPCnp9kzSlMa8COCVje+5XcdzQP6naDGuB8U ZGgtZcE/+ln9AQLtqk6diSpuWV6JwXMeQpiQMmBxiYEU7Cq7DBFUFzv4ugKRcs97 RzqWjC9OPHidhPU5PSmSlFaHq6UFB7Zxe+OH3JCAZBs+NmAs4OQdNFJQkj2UsBPk XvDa/34X4dEZvrgU3vHJOBTQ4sIJwzRc+Y/pyfSj8wwPBS6Jajqm9iQWFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEHJ0eZONVafRmm3cJZn8gZgRlgeMB8GA1UdIwQY MBaAFJEEXFeZbJo8nmJ3pDJrEYMhXVtqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1FSY1Y1bHNtanllWW5la01tc1JneUZkVzJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS81ZmE2ODEtMjU2Ni00MGVlLTlmMDQt NWRmNDQyOTViNGM5LzEva1FSY1Y1bHNtanllWW5la01tc1JneUZkVzJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS81ZmE2ODEtMjU2Ni00MGVlLTlmMDQtNWRmNDQyOTViNGM5 LzEva1FSY1Y1bHNtanllWW5la01tc1JneUZkVzJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA0oP0U71 UADNSOdEUBU7oiXo1ee9FJLdf/bSbpKY5LICt2aCNXO8bi0/xK5SvLLZJsFat78S 2mL1NDqvEdoTfJqs49ZNJg1v0XfL8z86Q2myq52fKQwx5pjDz/mENeiuP8sLYUEh ujOmjMPQaVWlXAL6Srq3qqHIWPXGL8mcug48N2HVsFlnf/UmF9AxTYn4Aaq8y9w8 AC2bwkJzCWoX7+TTnA3ZOdy13sb7d7LnQ5/ROMpQp+jTYOGwagGbojbXi537zl7g POfVQJcAgCmRri6mtb5kij3NnjdhltGjr32HGIzviIl9p6NKzhm6TwYFr0g9VEsm gtBmYy35buUwsA== -----END CERTIFICATE-----Generated at Mon Dec 29 06:49:28 2025 by rpki-client