This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft File: kq8Dyi32Qjt30O83N7D0eRqgNaM.mft (raw, json) Hash identifier: vpIg5+zMypba3suOGybcERgTMS4GDC4Q2UXzCdh4kjo= Subject key identifier: AB:EC:20:93:16:54:2C:76:97:30:6B:29:A5:F2:52:1F:64:33:24:F6 Authority key identifier: 92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3 Certificate issuer: /CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3 Certificate serial: 019B6F21A141AFA887E17B57826D5C58C16E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft Manifest number: 0C31 Signing time: Tue 30 Dec 2025 12:00:33 +0000 Manifest this update: Tue 30 Dec 2025 12:00:33 +0000 Manifest next update: Wed 31 Dec 2025 12:00:33 +0000 Files and hashes: 1: XFrF4ZD8RKmENGKuXlNfyh9_oV8.roa (hash: Syc9HmjiF/DkUOhl4IVh1oQ9jwD6L7ptWtUgxSy9ut8=) 2: kq8Dyi32Qjt30O83N7D0eRqgNaM.crl (hash: p47oIgV0GG8/hl0CBO6j3ADXFPy5bYL6dtGoV/Q63r8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 12:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:21:a1:41:af:a8:87:e1:7b:57:82:6d:5c:58:c1:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3 Validity Not Before: Dec 30 12:00:33 2025 GMT Not After : Dec 31 12:00:33 2025 GMT Subject: CN=abec209316542c7697306b29a5f2521f643324f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a9:64:ab:b4:90:6b:ed:2e:4f:35:a4:03:01: b1:39:77:d6:79:7b:c2:99:25:0e:80:1f:ab:9c:bf: 4f:1f:dc:c6:15:aa:a0:4e:b2:a8:32:06:33:e9:f8: 75:be:68:e0:ec:af:94:48:e5:8e:72:a1:2e:63:11: 7d:3b:95:fe:1a:28:36:51:56:12:a7:b9:21:ad:e8: d6:08:8c:27:b2:97:53:39:f6:a2:ac:bd:37:17:30: fc:61:2f:fe:9a:40:a8:c6:aa:b7:8d:c8:b7:c9:9c: b9:18:f7:b1:a6:07:10:ec:70:c2:70:d3:e8:76:14: 47:7e:64:c7:a5:57:7a:e4:6b:b3:80:96:53:9e:75: 1d:99:96:f0:fc:76:3c:2a:0b:4b:a2:f5:63:f7:90: b3:56:5e:e6:28:79:4d:30:39:25:53:9c:cb:1d:fb: b6:a2:db:32:b1:f2:85:ad:c3:b6:05:8a:b1:78:95: c1:7a:ed:21:c2:95:08:b9:49:24:09:27:6d:12:eb: 56:b8:da:60:66:a3:a0:a9:fc:72:84:58:76:85:e9: 11:cd:6d:69:be:91:70:f1:76:2d:94:69:c5:2a:5a: 63:8b:e7:d8:69:70:fb:5f:c0:d1:a6:b0:42:1c:04: c2:ed:b0:f6:cb:fa:b0:15:5a:08:5a:ab:17:66:d9: 17:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:EC:20:93:16:54:2C:76:97:30:6B:29:A5:F2:52:1F:64:33:24:F6 X509v3 Authority Key Identifier: keyid:92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:7f:e9:d1:37:94:e5:fc:ac:82:e4:d1:78:b3:e6:d4:7b:c9: 84:ef:72:4a:d8:d2:8d:f3:e8:05:5a:26:6d:1b:00:cf:30:19: d5:5f:47:2e:4a:70:76:e3:71:c8:62:d5:2b:5e:57:9a:78:d7: ca:87:b9:ae:06:c3:35:d5:8a:b7:0c:c9:3c:8e:78:8c:2e:b2: 3c:64:29:5c:4d:7d:ab:ff:94:26:60:79:e0:a3:10:e9:d4:bf: ba:4f:1d:55:a8:5b:e0:da:ca:6a:6e:af:5e:a4:fb:64:d8:ce: 41:13:e0:32:35:c8:47:94:7a:9d:59:d3:6a:a8:56:fe:be:6f: c5:65:79:a2:85:e3:8a:f5:0c:58:6b:2d:00:ac:c2:27:5c:f5: 17:c1:fd:fc:ee:82:eb:a1:8e:a0:b6:0d:55:47:3e:8f:22:e3: 08:45:e5:53:79:d0:26:d6:f0:55:13:db:3f:bb:42:fa:99:4d: 52:76:97:c7:94:73:85:71:88:3c:44:ba:c2:4a:1a:ec:59:38: b3:16:c1:13:6e:ef:d3:71:e4:a9:5c:7f:e1:fd:50:1d:dd:dc: 38:93:fb:2c:c8:d7:38:dd:87:f2:ab:79:98:68:bf:49:98:d5: ee:ba:03:57:6b:90:a3:37:ee:15:83:81:34:ec:c1:d7:8f:fc: 11:ba:7f:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtvIaFBr6iH4XtXgm1cWMFuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYWYwM2NhMmRmNjQyM2I3N2QwZWYzNzM3YjBmNDc5MWFh MDM1YTMwHhcNMjUxMjMwMTIwMDMzWhcNMjUxMjMxMTIwMDMzWjAzMTEwLwYDVQQD EyhhYmVjMjA5MzE2NTQyYzc2OTczMDZiMjlhNWYyNTIxZjY0MzMyNGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1alkq7SQa+0uTzWkAwGxOXfWeXvC mSUOgB+rnL9PH9zGFaqgTrKoMgYz6fh1vmjg7K+USOWOcqEuYxF9O5X+Gig2UVYS p7khrejWCIwnspdTOfairL03FzD8YS/+mkCoxqq3jci3yZy5GPexpgcQ7HDCcNPo dhRHfmTHpVd65GuzgJZTnnUdmZbw/HY8KgtLovVj95CzVl7mKHlNMDklU5zLHfu2 otsysfKFrcO2BYqxeJXBeu0hwpUIuUkkCSdtEutWuNpgZqOgqfxyhFh2hekRzW1p vpFw8XYtlGnFKlpji+fYaXD7X8DRprBCHATC7bD2y/qwFVoIWqsXZtkXJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKvsIJMWVCx2lzBrKaXyUh9kMyT2MB8GA1UdIwQY MBaAFJKvA8ot9kI7d9DvNzew9HkaoDWjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3E4RHlpMzJRanQzME84M043RDBlUnFnTmFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS85ODIyYmMtMTU5My00OThjLThmNmEt NzAzYjZiNzBhN2VjLzEva3E4RHlpMzJRanQzME84M043RDBlUnFnTmFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS85ODIyYmMtMTU5My00OThjLThmNmEtNzAzYjZiNzBhN2Vj LzEva3E4RHlpMzJRanQzME84M043RDBlUnFnTmFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKH/p0TeU 5fysguTReLPm1HvJhO9yStjSjfPoBVombRsAzzAZ1V9HLkpwduNxyGLVK15XmnjX yoe5rgbDNdWKtwzJPI54jC6yPGQpXE19q/+UJmB54KMQ6dS/uk8dVahb4NrKam6v XqT7ZNjOQRPgMjXIR5R6nVnTaqhW/r5vxWV5ooXjivUMWGstAKzCJ1z1F8H9/O6C 66GOoLYNVUc+jyLjCEXlU3nQJtbwVRPbP7tC+plNUnaXx5RzhXGIPES6wkoa7Fk4 sxbBE27v03HkqVx/4f1QHd3cOJP7LMjXON2H8qt5mGi/SZjV7roDV2uQozfuFYOB NOzB14/8Ebp/Xg== -----END CERTIFICATE-----Generated at Tue Dec 30 22:04:16 2025 by rpki-client