This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft File: KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft (raw, json) Hash identifier: FZ4cSgP10oJnis6dxCepZMu9ur0HXq1P+i5mp4iAWIw= Subject key identifier: 17:60:5C:49:A6:43:02:34:B0:BE:EF:DD:5B:64:50:D0:D8:6A:59:7E Authority key identifier: 29:02:C9:9C:A7:32:C6:4A:19:C7:D9:73:4A:98:FB:24:E5:45:55:49 Certificate issuer: /CN=2902c99ca732c64a19c7d9734a98fb24e5455549 Certificate serial: 019B3CEBF00E96F3AA93A3E4B6D4D6D4317F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft Manifest number: 10F4 Signing time: Sat 20 Dec 2025 18:00:53 +0000 Manifest this update: Sat 20 Dec 2025 18:00:53 +0000 Manifest next update: Sun 21 Dec 2025 18:00:53 +0000 Files and hashes: 1: KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl (hash: ZrmB6Oi2WaeQXtUSSA4owkSyJp7fKo94WxBk8gP21qg=) 2: kiF2H4Ucoq9Nw51li6ImqM3ctGg.roa (hash: gOoMaXdniQu2tAHNZ6SbwXijF8n71W3w0mmuL2WSkY8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:f0:0e:96:f3:aa:93:a3:e4:b6:d4:d6:d4:31:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2902c99ca732c64a19c7d9734a98fb24e5455549 Validity Not Before: Dec 20 18:00:53 2025 GMT Not After : Dec 21 18:00:53 2025 GMT Subject: CN=17605c49a6430234b0beefdd5b6450d0d86a597e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bf:9e:d0:fb:0c:5d:32:ce:c3:5c:55:39:f1: 38:05:9f:49:77:57:33:14:c8:5d:c0:97:3f:a9:08: 71:ef:dc:9b:00:e4:d2:e4:c4:a0:9d:e4:8a:17:51: 9c:4a:21:e7:42:26:30:39:04:64:d0:42:33:f1:68: f8:5f:12:2d:35:17:41:a6:d4:c0:f7:7a:ef:5a:00: 9b:be:c9:f2:09:9b:c1:69:f0:13:1e:7d:8b:bf:9a: 74:90:7a:dd:08:59:17:17:e4:12:38:57:20:1a:42: 4a:07:4f:06:9d:51:b9:cc:1c:8a:a6:e2:cf:3a:7f: 1a:c8:89:13:18:89:10:8a:69:96:45:ff:2a:b2:1c: 21:ee:30:ac:d2:79:2e:8d:30:0b:a4:75:27:ea:aa: 25:c3:f5:72:de:3d:02:04:d4:52:a5:59:1a:1a:cc: fc:72:4d:1d:2b:9d:1e:90:b2:44:b6:40:b6:a2:5d: c5:39:62:b4:2b:0f:ef:45:96:67:50:d2:13:9f:db: 10:8a:35:3d:26:ed:90:9e:e1:ad:33:82:e5:00:2c: a4:e2:c1:ac:c3:b1:46:df:1f:cd:c9:a1:e0:e4:c7: d6:ee:cc:54:08:e8:1e:fe:d4:99:8c:44:c3:cd:0d: 03:ff:01:1c:cc:a3:ac:20:ec:be:be:8b:7f:7a:6d: db:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:60:5C:49:A6:43:02:34:B0:BE:EF:DD:5B:64:50:D0:D8:6A:59:7E X509v3 Authority Key Identifier: keyid:29:02:C9:9C:A7:32:C6:4A:19:C7:D9:73:4A:98:FB:24:E5:45:55:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:22:e1:9b:12:f0:26:27:6a:bf:21:e1:b6:0d:b0:1e:d5:13: ad:67:cb:08:ce:d4:84:93:31:32:9b:45:5c:de:9d:fa:fd:7c: 7b:69:6f:59:ff:66:fc:4f:60:45:42:25:34:8a:71:76:47:79: 2b:8a:3f:c1:98:4c:cf:4a:4c:19:30:94:c2:a0:63:09:ba:a8: 40:40:78:12:50:02:ec:bf:97:3a:61:0e:83:4f:50:c0:47:dc: b6:cd:20:97:01:9d:06:a9:72:61:e0:ea:ba:83:e3:8c:5d:18: 37:94:98:95:1b:4e:f4:fe:8d:94:a9:03:54:4c:54:a4:1d:31: a0:9d:64:7c:5c:f2:d6:fa:e7:58:20:eb:c6:da:cc:aa:2e:8b: 07:45:ef:eb:56:16:78:0f:1e:68:1f:d4:c0:6c:d2:2b:25:d0: 43:6e:33:4a:f9:dc:fa:49:30:20:8e:4d:fe:36:85:a7:bf:41: c1:f2:63:84:16:17:e2:8a:20:21:ea:dc:9e:d7:09:b8:e9:d6: ca:35:c2:8c:0a:47:fe:f5:57:d6:72:5c:a2:c8:32:c7:f8:47: 4b:f4:39:24:4d:04:59:3e:69:38:71:41:ed:a9:7a:4c:ad:65: 29:a5:e8:ed:84:bb:ac:9d:f1:94:6b:84:fa:01:cc:c9:3a:b5: 0b:75:d3:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs86/AOlvOqk6PkttTW1DF/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MDJjOTljYTczMmM2NGExOWM3ZDk3MzRhOThmYjI0ZTU0 NTU1NDkwHhcNMjUxMjIwMTgwMDUzWhcNMjUxMjIxMTgwMDUzWjAzMTEwLwYDVQQD EygxNzYwNWM0OWE2NDMwMjM0YjBiZWVmZGQ1YjY0NTBkMGQ4NmE1OTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7+e0PsMXTLOw1xVOfE4BZ9Jd1cz FMhdwJc/qQhx79ybAOTS5MSgneSKF1GcSiHnQiYwOQRk0EIz8Wj4XxItNRdBptTA 93rvWgCbvsnyCZvBafATHn2Lv5p0kHrdCFkXF+QSOFcgGkJKB08GnVG5zByKpuLP On8ayIkTGIkQimmWRf8qshwh7jCs0nkujTALpHUn6qolw/Vy3j0CBNRSpVkaGsz8 ck0dK50ekLJEtkC2ol3FOWK0Kw/vRZZnUNITn9sQijU9Ju2QnuGtM4LlACyk4sGs w7FG3x/NyaHg5MfW7sxUCOge/tSZjETDzQ0D/wEczKOsIOy+vot/em3bowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBdgXEmmQwI0sL7v3VtkUNDYall+MB8GA1UdIwQY MBaAFCkCyZynMsZKGcfZc0qY+yTlRVVJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1FMSm5LY3l4a29aeDlselNwajdKT1ZGVlVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81NGNhMjQtNmU1Ni00N2QzLWE0Mjkt YjY0OWE1NzhmODljLzEvS1FMSm5LY3l4a29aeDlselNwajdKT1ZGVlVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi81NGNhMjQtNmU1Ni00N2QzLWE0MjktYjY0OWE1NzhmODlj LzEvS1FMSm5LY3l4a29aeDlselNwajdKT1ZGVlVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAayLhmxLw JidqvyHhtg2wHtUTrWfLCM7UhJMxMptFXN6d+v18e2lvWf9m/E9gRUIlNIpxdkd5 K4o/wZhMz0pMGTCUwqBjCbqoQEB4ElAC7L+XOmEOg09QwEfcts0glwGdBqlyYeDq uoPjjF0YN5SYlRtO9P6NlKkDVExUpB0xoJ1kfFzy1vrnWCDrxtrMqi6LB0Xv61YW eA8eaB/UwGzSKyXQQ24zSvnc+kkwII5N/jaFp79BwfJjhBYX4oogIercntcJuOnW yjXCjApH/vVX1nJcosgyx/hHS/Q5JE0EWT5pOHFB7al6TK1lKaXo7YS7rJ3xlGuE +gHMyTq1C3XTtQ== -----END CERTIFICATE-----Generated at Sat Dec 20 20:01:21 2025 by rpki-client