This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft File: KqggK00MXBEdN08emLc9tJJNZLE.mft (raw, json) Hash identifier: llfU9IaDB2mDlqAMn86yju++Fe+idlksiQW0rOvVstA= Subject key identifier: 95:FB:EF:D8:7F:44:D9:1D:35:1A:F9:1C:8C:26:C6:05:57:6A:73:34 Authority key identifier: 2A:A8:20:2B:4D:0C:5C:11:1D:37:4F:1E:98:B7:3D:B4:92:4D:64:B1 Certificate issuer: /CN=2aa8202b4d0c5c111d374f1e98b73db4924d64b1 Certificate serial: 019B3EA33AA92852966616F76DFE1566AEF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft Manifest number: 0DBE Signing time: Sun 21 Dec 2025 02:00:43 +0000 Manifest this update: Sun 21 Dec 2025 02:00:43 +0000 Manifest next update: Mon 22 Dec 2025 02:00:43 +0000 Files and hashes: 1: 8nLoMcIcsiOT94ggaJIYQQl2oRM.roa (hash: qT9FeEnewJoNeBMjY4zbOI1Gsyx72sYu0a6uEXjvmkY=) 2: KqggK00MXBEdN08emLc9tJJNZLE.crl (hash: 7JfwDC2XDsHWJousfvfCr9SNVT26ry+kQ/muysq6Ikk=) 3: vT6MkqafH5VOMm1ZMgN21UjQYFs.roa (hash: dIHvBtvVugb4PHXdIHdFzDigve4LKcNg9oX/bIFSdDw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:3a:a9:28:52:96:66:16:f7:6d:fe:15:66:ae:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa8202b4d0c5c111d374f1e98b73db4924d64b1 Validity Not Before: Dec 21 02:00:43 2025 GMT Not After : Dec 22 02:00:43 2025 GMT Subject: CN=95fbefd87f44d91d351af91c8c26c605576a7334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5d:5e:ef:53:75:0b:f3:78:89:2a:a9:6b:84: bb:eb:01:2e:fa:bd:9a:75:a8:38:da:ea:8f:c3:e4: 61:d8:84:a4:b3:11:bb:db:b3:5a:ed:23:25:a4:a0: 26:80:c9:fc:16:d4:88:94:11:1c:c1:8d:83:51:ba: 1a:e3:8e:0f:51:8f:47:9a:c4:a6:7b:f9:f7:7d:50: 45:01:e0:51:49:2f:e7:5a:1c:f9:df:1f:7d:78:15: 22:52:f9:d8:b3:b3:7d:ae:46:c3:b4:6c:4a:68:5d: 39:2c:f8:3c:c3:4b:96:f9:72:a3:8b:c4:de:f9:be: 6d:00:de:36:df:c8:5d:40:2f:c3:2f:d4:07:62:02: dc:58:cb:84:52:52:2c:50:19:ab:38:5d:48:46:64: fa:81:a7:04:19:28:9c:44:5c:41:ca:e1:31:e6:71: 21:e1:81:48:e4:bc:9c:e9:9b:2f:ce:d0:10:05:7f: a0:fc:57:38:84:11:07:43:e9:30:51:8e:5a:8f:15: 1c:9b:37:83:42:6a:c1:c0:e6:9e:8c:47:35:00:c0: 58:05:dd:af:d0:d4:8d:c5:0f:10:47:c8:10:35:f3: 2f:ac:0f:9c:33:3f:6a:06:97:4f:87:17:f0:ae:7a: 51:cc:0b:9a:11:fb:24:58:ed:a6:ff:0e:3a:66:78: 0a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:FB:EF:D8:7F:44:D9:1D:35:1A:F9:1C:8C:26:C6:05:57:6A:73:34 X509v3 Authority Key Identifier: keyid:2A:A8:20:2B:4D:0C:5C:11:1D:37:4F:1E:98:B7:3D:B4:92:4D:64:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:ab:9b:e4:b2:d1:7f:23:7c:80:e0:70:91:d9:b7:cb:34:06: 88:67:18:74:72:b2:6c:cc:d3:8a:19:4c:41:9e:e7:a6:45:04: 44:1e:cf:4f:f0:2b:c5:d0:5c:2a:fa:15:b2:10:8f:88:af:39: d7:88:59:1c:1b:2c:8e:2c:ce:d1:ee:c9:17:43:28:47:9c:68: 3f:9b:12:77:95:42:ad:f4:d7:46:1b:57:8e:87:65:d4:46:2f: bc:4f:7f:c6:cc:a4:4f:2e:a3:43:43:17:4d:14:41:2c:2f:c3: d9:84:33:24:79:3b:79:aa:34:f0:84:d2:59:07:04:3c:36:69: ce:60:17:d1:14:a1:10:3e:1a:d0:30:b3:5c:3f:2f:6b:74:5b: 74:94:ab:9d:7d:2d:ef:f5:c9:63:b6:c7:35:77:63:df:51:26: aa:e4:17:62:68:b1:3c:17:10:16:30:83:54:c1:f8:10:77:4a: 44:98:eb:38:a8:63:ce:8a:5f:b9:d4:b0:04:d4:9b:49:c4:05: ad:28:3b:c2:2a:c4:7b:be:7d:f7:2c:83:6f:91:ee:ed:83:d5: b7:cd:19:57:65:09:98:3a:a1:00:14:74:1d:6b:2d:4d:e3:5c: 91:cc:0a:95:46:8e:63:c2:bc:e8:1b:79:1c:be:9d:e9:fb:8c: 29:60:e8:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+ozqpKFKWZhb3bf4VZq75MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYTgyMDJiNGQwYzVjMTExZDM3NGYxZTk4YjczZGI0OTI0 ZDY0YjEwHhcNMjUxMjIxMDIwMDQzWhcNMjUxMjIyMDIwMDQzWjAzMTEwLwYDVQQD Eyg5NWZiZWZkODdmNDRkOTFkMzUxYWY5MWM4YzI2YzYwNTU3NmE3MzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsV1e71N1C/N4iSqpa4S76wEu+r2a dag42uqPw+Rh2ISksxG727Na7SMlpKAmgMn8FtSIlBEcwY2DUboa444PUY9HmsSm e/n3fVBFAeBRSS/nWhz53x99eBUiUvnYs7N9rkbDtGxKaF05LPg8w0uW+XKji8Te +b5tAN4238hdQC/DL9QHYgLcWMuEUlIsUBmrOF1IRmT6gacEGSicRFxByuEx5nEh 4YFI5Lyc6ZsvztAQBX+g/Fc4hBEHQ+kwUY5ajxUcmzeDQmrBwOaejEc1AMBYBd2v 0NSNxQ8QR8gQNfMvrA+cMz9qBpdPhxfwrnpRzAuaEfskWO2m/w46ZngKwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJX779h/RNkdNRr5HIwmxgVXanM0MB8GA1UdIwQY MBaAFCqoICtNDFwRHTdPHpi3PbSSTWSxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3FnZ0swME1YQkVkTjA4ZW1MYzl0SkpOWkxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8yN2IzYjMtNGIyMi00NzQwLWE2NWEt NmU3YmFlNWZmODk4LzEvS3FnZ0swME1YQkVkTjA4ZW1MYzl0SkpOWkxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8yN2IzYjMtNGIyMi00NzQwLWE2NWEtNmU3YmFlNWZmODk4 LzEvS3FnZ0swME1YQkVkTjA4ZW1MYzl0SkpOWkxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABKub5LLR fyN8gOBwkdm3yzQGiGcYdHKybMzTihlMQZ7npkUERB7PT/ArxdBcKvoVshCPiK85 14hZHBssjizO0e7JF0MoR5xoP5sSd5VCrfTXRhtXjodl1EYvvE9/xsykTy6jQ0MX TRRBLC/D2YQzJHk7eao08ITSWQcEPDZpzmAX0RShED4a0DCzXD8va3RbdJSrnX0t 7/XJY7bHNXdj31EmquQXYmixPBcQFjCDVMH4EHdKRJjrOKhjzopfudSwBNSbScQF rSg7wirEe7599yyDb5Hu7YPVt80ZV2UJmDqhABR0HWstTeNckcwKlUaOY8K86Bt5 HL6d6fuMKWDomQ== -----END CERTIFICATE-----Generated at Sun Dec 21 07:59:35 2025 by rpki-client