This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft File: kq8Dyi32Qjt30O83N7D0eRqgNaM.mft (raw, json) Hash identifier: 9fzFimX7PsNHEUrfU8HhtTqlXYog0IMAaDrsqsnx+aY= Subject key identifier: DE:DE:07:9B:84:BF:5D:FB:8F:D7:43:31:B1:01:6C:7F:BF:A7:1D:E8 Authority key identifier: 92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3 Certificate issuer: /CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3 Certificate serial: 019B3EDAA851107F279D8451CDE0FEEDC0A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft Manifest number: 0C18 Signing time: Sun 21 Dec 2025 03:01:15 +0000 Manifest this update: Sun 21 Dec 2025 03:01:15 +0000 Manifest next update: Mon 22 Dec 2025 03:01:15 +0000 Files and hashes: 1: XFrF4ZD8RKmENGKuXlNfyh9_oV8.roa (hash: Syc9HmjiF/DkUOhl4IVh1oQ9jwD6L7ptWtUgxSy9ut8=) 2: kq8Dyi32Qjt30O83N7D0eRqgNaM.crl (hash: nEHs32QniML0XC8VzgHV1e1YS29qQpYQySilpa834T4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:a8:51:10:7f:27:9d:84:51:cd:e0:fe:ed:c0:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3 Validity Not Before: Dec 21 03:01:15 2025 GMT Not After : Dec 22 03:01:15 2025 GMT Subject: CN=dede079b84bf5dfb8fd74331b1016c7fbfa71de8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:56:ca:e4:47:90:48:85:6e:20:38:f6:80:0a: f4:9d:c6:4c:8c:92:e2:dd:a7:be:31:d0:af:4e:53: d8:00:8a:6e:e2:fc:5d:2f:c9:80:ce:6f:f3:d0:79: 3d:15:eb:96:bd:5b:bb:7e:4e:27:0e:9b:96:ae:cf: cf:09:80:d8:dd:f0:f6:89:af:9a:90:a9:01:ef:e8: 02:4f:c6:a3:a1:83:e9:a1:64:93:b7:b6:a3:30:57: 28:cb:fa:5b:2c:b3:20:a2:3e:c3:0c:25:66:c5:58: e6:48:68:1d:b1:71:e6:18:77:29:2f:d2:6f:5d:9c: 56:87:ed:26:92:94:7d:6c:dd:7e:c1:69:03:c9:5c: c1:51:66:fc:df:97:35:32:6b:01:aa:d9:ef:ce:33: d1:a7:50:b6:aa:a4:c3:51:98:6a:df:97:30:6d:57: ff:94:2e:86:c1:98:a0:7b:02:35:9e:02:81:62:bf: 13:c8:35:45:49:b2:85:4a:d3:6d:f1:b0:e5:5e:16: f2:07:ad:27:a2:fe:a8:6e:fd:e4:12:b4:39:a6:05: 7a:45:e4:19:b2:15:73:a4:e1:4c:f2:d7:4c:a7:f4: 9f:86:eb:34:31:ac:48:f2:cb:b2:29:9b:5f:36:46: 0b:32:fd:8f:ab:8b:4e:1b:aa:37:9a:b6:2e:bd:6c: 97:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:DE:07:9B:84:BF:5D:FB:8F:D7:43:31:B1:01:6C:7F:BF:A7:1D:E8 X509v3 Authority Key Identifier: keyid:92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:a0:f9:54:ab:33:f8:d2:ca:ef:f9:ff:d7:c7:f7:4f:bf:00: b3:36:a9:a2:95:be:d8:d5:05:80:80:ca:8a:26:5a:e1:ca:43: 51:35:d8:66:14:d6:cf:84:06:c1:63:8f:d5:86:83:e3:6c:6f: e1:e0:ad:02:b7:29:bf:c9:35:2d:bf:52:bb:d7:18:5b:32:d0: 98:3d:f1:a3:d5:1b:a3:18:40:69:a8:d9:07:bf:0d:37:74:82: da:fe:a0:8c:cd:f5:62:46:c3:e0:9f:89:95:d5:48:94:71:47: 7c:1a:69:2a:47:49:36:76:49:1c:1e:f7:b7:48:93:8a:51:91: b2:f0:3a:a6:2d:08:5e:b0:67:f6:30:1c:a1:c2:a5:65:ee:52: 3d:f9:9a:98:4c:47:ba:49:c7:fd:a2:83:56:fc:d2:22:57:70: 75:81:3e:13:29:ef:4f:d8:0b:be:ac:dc:06:bc:6d:18:64:2f: ca:2a:6a:77:66:ec:da:10:59:1c:df:2a:59:5e:93:e3:97:b0: b8:90:92:cc:6f:a0:8a:11:26:93:1a:33:4e:62:68:d4:bf:c1: c5:80:d1:95:b9:20:8e:6f:43:7b:39:57:20:64:88:25:f5:77: cc:14:87:36:b8:2e:6c:e9:15:45:ab:08:91:ec:f1:8a:b2:1e: 87:98:2e:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2qhREH8nnYRRzeD+7cCmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYWYwM2NhMmRmNjQyM2I3N2QwZWYzNzM3YjBmNDc5MWFh MDM1YTMwHhcNMjUxMjIxMDMwMTE1WhcNMjUxMjIyMDMwMTE1WjAzMTEwLwYDVQQD EyhkZWRlMDc5Yjg0YmY1ZGZiOGZkNzQzMzFiMTAxNmM3ZmJmYTcxZGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlbK5EeQSIVuIDj2gAr0ncZMjJLi 3ae+MdCvTlPYAIpu4vxdL8mAzm/z0Hk9FeuWvVu7fk4nDpuWrs/PCYDY3fD2ia+a kKkB7+gCT8ajoYPpoWSTt7ajMFcoy/pbLLMgoj7DDCVmxVjmSGgdsXHmGHcpL9Jv XZxWh+0mkpR9bN1+wWkDyVzBUWb835c1MmsBqtnvzjPRp1C2qqTDUZhq35cwbVf/ lC6GwZigewI1ngKBYr8TyDVFSbKFStNt8bDlXhbyB60nov6obv3kErQ5pgV6ReQZ shVzpOFM8tdMp/Sfhus0MaxI8suyKZtfNkYLMv2Pq4tOG6o3mrYuvWyXqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7eB5uEv137j9dDMbEBbH+/px3oMB8GA1UdIwQY MBaAFJKvA8ot9kI7d9DvNzew9HkaoDWjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3E4RHlpMzJRanQzME84M043RDBlUnFnTmFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS85ODIyYmMtMTU5My00OThjLThmNmEt NzAzYjZiNzBhN2VjLzEva3E4RHlpMzJRanQzME84M043RDBlUnFnTmFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS85ODIyYmMtMTU5My00OThjLThmNmEtNzAzYjZiNzBhN2Vj LzEva3E4RHlpMzJRanQzME84M043RDBlUnFnTmFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQqD5VKsz +NLK7/n/18f3T78AszapopW+2NUFgIDKiiZa4cpDUTXYZhTWz4QGwWOP1YaD42xv 4eCtArcpv8k1Lb9Su9cYWzLQmD3xo9UboxhAaajZB78NN3SC2v6gjM31YkbD4J+J ldVIlHFHfBppKkdJNnZJHB73t0iTilGRsvA6pi0IXrBn9jAcocKlZe5SPfmamExH uknH/aKDVvzSIldwdYE+EynvT9gLvqzcBrxtGGQvyipqd2bs2hBZHN8qWV6T45ew uJCSzG+gihEmkxozTmJo1L/BxYDRlbkgjm9DezlXIGSIJfV3zBSHNrgubOkVRasI kezxirIeh5guLg== -----END CERTIFICATE-----Generated at Sun Dec 21 09:03:11 2025 by rpki-client