This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft File: qw8tGCnW-40kf6TpZY6hfwbACwU.mft (raw, json) Hash identifier: Xy3+OgQqBE+/A9oc4pgQ4evIkkX5nJ+77X7hyZgSCQQ= Subject key identifier: CC:78:74:DA:D5:B6:95:5F:9C:AF:2C:B2:B2:CC:8E:58:81:16:0D:70 Authority key identifier: AB:0F:2D:18:29:D6:FB:8D:24:7F:A4:E9:65:8E:A1:7F:06:C0:0B:05 Certificate issuer: /CN=ab0f2d1829d6fb8d247fa4e9658ea17f06c00b05 Certificate serial: 019AF31BC7F2C061DC2161D678D930C79EDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qw8tGCnW-40kf6TpZY6hfwbACwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft Manifest number: 05F7 Signing time: Sat 06 Dec 2025 10:01:15 +0000 Manifest this update: Sat 06 Dec 2025 10:01:15 +0000 Manifest next update: Sun 07 Dec 2025 10:01:15 +0000 Files and hashes: 1: OUpskfGQwP1azsM6n4Ec-VCqNso.roa (hash: +d2WLz7J+vMS5D/Rs6fGhF8erps5E2C6DQvq3JVrWbY=) 2: qw8tGCnW-40kf6TpZY6hfwbACwU.crl (hash: jCPjhfH5i7R/upLy+94tsGuxMTcjsy1QuOy8CXmu/nQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.crl rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft rsync://rpki.ripe.net/repository/DEFAULT/qw8tGCnW-40kf6TpZY6hfwbACwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:c7:f2:c0:61:dc:21:61:d6:78:d9:30:c7:9e:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0f2d1829d6fb8d247fa4e9658ea17f06c00b05 Validity Not Before: Dec 6 10:01:15 2025 GMT Not After : Dec 7 10:01:15 2025 GMT Subject: CN=cc7874dad5b6955f9caf2cb2b2cc8e5881160d70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6a:15:2a:77:dc:7c:c6:cb:2f:2e:7f:dd:e1: c8:c8:1f:d6:41:fa:d6:eb:db:ba:0c:ed:56:2d:cc: 12:84:19:39:bc:53:5d:35:3f:a5:0d:24:4d:95:a2: cf:c5:8f:7b:17:41:91:a0:b7:fe:4b:cd:06:10:cb: 2f:e9:df:02:ba:35:bc:a6:cf:62:8b:4b:8b:71:d2: c2:70:ac:1a:a7:d9:c3:e7:89:c7:49:3a:b0:9f:96: 9b:15:c8:02:b9:19:fe:6e:e3:0f:44:4d:12:87:a0: b7:8d:e6:a9:68:4b:ee:d5:67:22:b2:5e:b5:f7:13: c2:b4:85:b3:0d:13:66:df:a4:8d:ed:3a:ab:ed:ab: 44:63:af:8f:22:8c:90:45:07:09:eb:b0:81:54:79: a4:7a:93:52:c2:4e:9f:47:cc:ae:4f:ce:76:31:b3: 76:10:34:c9:a4:47:aa:6a:7e:80:42:5a:51:ff:69: 9f:f1:51:b0:5d:a5:a8:30:ad:82:ad:58:2e:f3:b7: 47:1e:b1:72:1f:28:f5:a8:61:67:c3:e2:df:71:f1: d5:a8:a8:b0:c3:32:bf:54:16:16:9a:3e:58:28:d5: 0f:13:35:bf:f5:9e:08:a3:aa:67:70:59:86:a6:c6: e8:dc:1a:6a:e2:69:34:13:20:d5:20:b0:ed:5d:ee: 05:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:78:74:DA:D5:B6:95:5F:9C:AF:2C:B2:B2:CC:8E:58:81:16:0D:70 X509v3 Authority Key Identifier: keyid:AB:0F:2D:18:29:D6:FB:8D:24:7F:A4:E9:65:8E:A1:7F:06:C0:0B:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qw8tGCnW-40kf6TpZY6hfwbACwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:1e:8f:d1:2e:90:4a:a3:91:8b:08:af:a3:a2:4b:f7:98:2f: 7b:e0:3c:7d:b8:fc:32:e5:b8:04:a4:11:a0:3c:be:4c:26:fa: 64:1f:79:95:04:d5:40:22:0a:ae:cd:db:b9:0d:ef:aa:71:63: 66:cf:15:c4:18:68:35:c8:d2:dc:7c:c5:07:37:0f:20:31:5b: a0:ed:1a:5a:f9:d5:fd:06:a5:2c:4e:06:75:87:16:37:ad:cc: 4b:04:54:3c:08:8a:77:27:e3:ca:f1:9e:4b:29:ca:5c:fa:94: bd:06:f1:04:45:f6:97:de:a9:d6:1c:ff:c8:c2:52:b4:0c:17: f3:a6:ec:c8:a0:4b:a9:9f:9b:b9:e4:58:cc:e4:6b:a3:67:c4: 59:d2:fa:0b:55:18:ce:50:10:f0:b9:88:39:0d:71:62:57:a1: de:76:35:84:ee:57:29:26:86:d4:b9:b4:32:75:04:37:16:07: ef:8d:38:08:b3:1b:14:5e:c6:e1:e7:c6:85:91:7d:99:50:ba: ce:6d:cf:c3:dc:ef:21:50:52:79:dd:dd:9f:cc:47:bc:1c:b2: 35:ec:54:7e:38:2a:bb:74:75:5a:2a:2e:c4:7d:3c:1d:9e:bd: be:23:35:73:d4:f8:e1:64:0f:01:16:9c:2f:06:d1:60:cf:a5: 12:97:61:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG8fywGHcIWHWeNkwx57aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMGYyZDE4MjlkNmZiOGQyNDdmYTRlOTY1OGVhMTdmMDZj MDBiMDUwHhcNMjUxMjA2MTAwMTE1WhcNMjUxMjA3MTAwMTE1WjAzMTEwLwYDVQQD EyhjYzc4NzRkYWQ1YjY5NTVmOWNhZjJjYjJiMmNjOGU1ODgxMTYwZDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWoVKnfcfMbLLy5/3eHIyB/WQfrW 69u6DO1WLcwShBk5vFNdNT+lDSRNlaLPxY97F0GRoLf+S80GEMsv6d8CujW8ps9i i0uLcdLCcKwap9nD54nHSTqwn5abFcgCuRn+buMPRE0Sh6C3jeapaEvu1Wcisl61 9xPCtIWzDRNm36SN7Tqr7atEY6+PIoyQRQcJ67CBVHmkepNSwk6fR8yuT852MbN2 EDTJpEeqan6AQlpR/2mf8VGwXaWoMK2CrVgu87dHHrFyHyj1qGFnw+LfcfHVqKiw wzK/VBYWmj5YKNUPEzW/9Z4Io6pncFmGpsbo3Bpq4mk0EyDVILDtXe4FywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMx4dNrVtpVfnK8ssrLMjliBFg1wMB8GA1UdIwQY MBaAFKsPLRgp1vuNJH+k6WWOoX8GwAsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXc4dEdDblctNDBrZjZUcFpZNmhmd2JBQ3dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS83MjYxMjMtYmZjMi00N2VhLTliMDUt NTcwZmVjMjlkMTM5LzEvcXc4dEdDblctNDBrZjZUcFpZNmhmd2JBQ3dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS83MjYxMjMtYmZjMi00N2VhLTliMDUtNTcwZmVjMjlkMTM5 LzEvcXc4dEdDblctNDBrZjZUcFpZNmhmd2JBQ3dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYB6P0S6Q SqORiwivo6JL95gve+A8fbj8MuW4BKQRoDy+TCb6ZB95lQTVQCIKrs3buQ3vqnFj Zs8VxBhoNcjS3HzFBzcPIDFboO0aWvnV/QalLE4GdYcWN63MSwRUPAiKdyfjyvGe SynKXPqUvQbxBEX2l96p1hz/yMJStAwX86bsyKBLqZ+bueRYzORro2fEWdL6C1UY zlAQ8LmIOQ1xYleh3nY1hO5XKSaG1Lm0MnUENxYH7404CLMbFF7G4efGhZF9mVC6 zm3Pw9zvIVBSed3dn8xHvByyNexUfjgqu3R1WiouxH08HZ69viM1c9T44WQPARac LwbRYM+lEpdhRg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:34:59 2025 by rpki-client