This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft File: kQRcV5lsmjyeYnekMmsRgyFdW2o.mft (raw, json) Hash identifier: oRkqGHbPfwAmfcQu6Enh+uDxCMS0738WaL2qbabfeME= Subject key identifier: DD:12:75:92:82:9E:9A:1F:CC:FB:B9:30:6F:42:B7:EE:B6:FC:A5:6F Authority key identifier: 91:04:5C:57:99:6C:9A:3C:9E:62:77:A4:32:6B:11:83:21:5D:5B:6A Certificate issuer: /CN=91045c57996c9a3c9e6277a4326b1183215d5b6a Certificate serial: 019B3E6C61075101E9215BE5AB1B7CB033E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft Manifest number: 1183 Signing time: Sun 21 Dec 2025 01:00:48 +0000 Manifest this update: Sun 21 Dec 2025 01:00:48 +0000 Manifest next update: Mon 22 Dec 2025 01:00:48 +0000 Files and hashes: 1: 75qkVCY5XXIcFQQiW3dyFVzW6eQ.roa (hash: dXFNWNpycxDfWS4F1kZ68a/+XDX33UqEzrugZvo8DVg=) 2: kQRcV5lsmjyeYnekMmsRgyFdW2o.crl (hash: AUwMPvZrVvwZiN8Kd2mi2aiWubtOmwjvBPTNoW57Uho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.crl rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:61:07:51:01:e9:21:5b:e5:ab:1b:7c:b0:33:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91045c57996c9a3c9e6277a4326b1183215d5b6a Validity Not Before: Dec 21 01:00:48 2025 GMT Not After : Dec 22 01:00:48 2025 GMT Subject: CN=dd127592829e9a1fccfbb9306f42b7eeb6fca56f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6d:37:68:8f:71:e5:7d:92:a4:8b:37:0b:51: 58:d4:25:fd:df:0a:1d:72:b4:f3:24:d7:00:f8:2b: 76:3c:a3:0a:b6:04:84:a0:db:99:80:51:8a:32:2b: 7c:17:9a:38:3d:3c:9d:02:5f:3d:dd:b2:84:3f:a6: 91:5d:a0:eb:ca:55:92:1c:77:de:00:4e:ea:4e:3e: 71:66:08:89:ab:e1:cb:3c:c8:6d:42:e0:af:de:59: 57:6f:a1:b9:67:66:69:2d:07:43:69:76:ae:e8:6a: 8a:93:3d:6e:2d:44:c5:4e:76:a0:0d:ec:e3:d9:fc: bb:8d:55:ab:e9:7f:d0:4e:13:9a:fb:86:51:3c:6c: e8:94:a9:64:98:c6:e4:44:4f:c8:be:e6:23:d5:10: 56:c0:00:96:05:ab:33:f5:e3:eb:5d:74:ac:d5:b1: a3:4c:16:05:e3:2d:2a:e3:f1:32:00:0b:53:37:1d: c9:8e:41:70:35:67:0b:37:d0:af:94:cd:18:a7:65: ee:aa:ec:61:7d:1f:27:b2:4b:87:48:2e:53:40:31: af:5f:d2:9b:46:2b:f2:9d:fd:60:a2:51:b9:c5:a8: 1b:15:95:50:69:a2:1c:1f:75:c0:c9:56:2e:38:de: e6:38:75:2e:a1:b9:15:52:de:2b:16:13:7e:0e:9e: 70:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:12:75:92:82:9E:9A:1F:CC:FB:B9:30:6F:42:B7:EE:B6:FC:A5:6F X509v3 Authority Key Identifier: keyid:91:04:5C:57:99:6C:9A:3C:9E:62:77:A4:32:6B:11:83:21:5D:5B:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:01:10:f8:79:cf:1d:88:7b:f1:14:2c:4b:ef:df:90:9d:19: d9:3a:ef:ce:00:e8:84:77:6b:7f:b8:e3:f8:c9:07:d2:20:73: 5e:77:46:a9:d7:bd:42:51:f5:72:17:b8:eb:df:5d:22:3a:84: 44:95:07:ac:84:22:9e:71:fa:ae:79:8a:fa:b0:5c:19:91:8b: 82:e6:dc:ec:1b:f2:ab:e7:29:a0:64:6c:37:1b:ac:25:56:71: bf:c2:07:30:7e:27:dd:e5:1a:54:40:ed:a1:30:d9:c7:35:d5: e7:aa:16:e2:3e:3f:5a:8b:5e:f5:5c:c3:7d:16:f6:4c:da:5d: f4:ac:07:31:e9:c7:53:11:79:91:be:9b:7b:3e:45:3c:aa:92: 15:a3:97:b4:ad:9d:23:dd:8d:ec:ab:09:a4:d5:6e:52:c5:cc: 30:72:ac:81:29:7a:ae:b5:4c:f8:9b:22:fd:26:17:5f:8b:50: 02:19:19:ee:df:b8:33:36:2a:8b:a3:93:63:43:ec:a9:09:a0: f1:40:b8:39:d4:b1:ff:f7:d9:30:c1:92:7d:11:b5:22:8f:95: 86:6d:07:3a:34:80:8e:33:5c:6a:1b:18:76:cb:0d:97:cc:e2: 1f:5d:cc:42:d9:da:b8:9f:bf:c7:d2:8e:f9:8b:3c:e3:dc:a6: d7:35:ee:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bGEHUQHpIVvlqxt8sDPiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxMDQ1YzU3OTk2YzlhM2M5ZTYyNzdhNDMyNmIxMTgzMjE1 ZDViNmEwHhcNMjUxMjIxMDEwMDQ4WhcNMjUxMjIyMDEwMDQ4WjAzMTEwLwYDVQQD EyhkZDEyNzU5MjgyOWU5YTFmY2NmYmI5MzA2ZjQyYjdlZWI2ZmNhNTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1W03aI9x5X2SpIs3C1FY1CX93wod crTzJNcA+Ct2PKMKtgSEoNuZgFGKMit8F5o4PTydAl893bKEP6aRXaDrylWSHHfe AE7qTj5xZgiJq+HLPMhtQuCv3llXb6G5Z2ZpLQdDaXau6GqKkz1uLUTFTnagDezj 2fy7jVWr6X/QThOa+4ZRPGzolKlkmMbkRE/IvuYj1RBWwACWBasz9ePrXXSs1bGj TBYF4y0q4/EyAAtTNx3JjkFwNWcLN9CvlM0Yp2XuquxhfR8nskuHSC5TQDGvX9Kb Rivynf1golG5xagbFZVQaaIcH3XAyVYuON7mOHUuobkVUt4rFhN+Dp5wBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN0SdZKCnpofzPu5MG9Ct+62/KVvMB8GA1UdIwQY MBaAFJEEXFeZbJo8nmJ3pDJrEYMhXVtqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1FSY1Y1bHNtanllWW5la01tc1JneUZkVzJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS81ZmE2ODEtMjU2Ni00MGVlLTlmMDQt NWRmNDQyOTViNGM5LzEva1FSY1Y1bHNtanllWW5la01tc1JneUZkVzJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS81ZmE2ODEtMjU2Ni00MGVlLTlmMDQtNWRmNDQyOTViNGM5 LzEva1FSY1Y1bHNtanllWW5la01tc1JneUZkVzJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOAEQ+HnP HYh78RQsS+/fkJ0Z2TrvzgDohHdrf7jj+MkH0iBzXndGqde9QlH1che4699dIjqE RJUHrIQinnH6rnmK+rBcGZGLgubc7Bvyq+cpoGRsNxusJVZxv8IHMH4n3eUaVEDt oTDZxzXV56oW4j4/Wote9VzDfRb2TNpd9KwHMenHUxF5kb6bez5FPKqSFaOXtK2d I92N7KsJpNVuUsXMMHKsgSl6rrVM+Jsi/SYXX4tQAhkZ7t+4MzYqi6OTY0PsqQmg 8UC4OdSx//fZMMGSfRG1Io+Vhm0HOjSAjjNcahsYdssNl8ziH13MQtnauJ+/x9KO +Ys849ym1zXuzw== -----END CERTIFICATE-----Generated at Sun Dec 21 06:07:33 2025 by rpki-client