This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft File: qoXGfyIwng2EwwtUJSlyUyhgUVE.mft (raw, json) Hash identifier: 3rkJEWEBmcmTCLVi+HbamEuh7ygVR/RFju1sHvFN/8w= Subject key identifier: AD:34:00:86:11:5C:A8:F3:D8:13:7D:A1:C3:B3:AD:45:91:9F:DC:CC Authority key identifier: AA:85:C6:7F:22:30:9E:0D:84:C3:0B:54:25:29:72:53:28:60:51:51 Certificate issuer: /CN=aa85c67f22309e0d84c30b542529725328605151 Certificate serial: 019AF12D5AB1171BD16C7D3082748B190A45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft Manifest number: 0DE2 Signing time: Sat 06 Dec 2025 01:01:12 +0000 Manifest this update: Sat 06 Dec 2025 01:01:12 +0000 Manifest next update: Sun 07 Dec 2025 01:01:12 +0000 Files and hashes: 1: U6h0E3CpWcLE4IcpdPD5N0_flWE.roa (hash: /MeOIU5IzJfeECJ9wAs+zMCbOflzuiKPgRuM31+tyrU=) 2: qoXGfyIwng2EwwtUJSlyUyhgUVE.crl (hash: ZbMXL1VLZlesSO8k96LogsbLsh/DbvKH+sgfQu2smKc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.crl rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:5a:b1:17:1b:d1:6c:7d:30:82:74:8b:19:0a:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa85c67f22309e0d84c30b542529725328605151 Validity Not Before: Dec 6 01:01:12 2025 GMT Not After : Dec 7 01:01:12 2025 GMT Subject: CN=ad340086115ca8f3d8137da1c3b3ad45919fdccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c0:27:2f:9e:4d:75:18:9a:a1:d3:04:52:0d: aa:04:c9:42:27:5e:5a:50:53:b9:f7:27:0c:48:0a: 41:13:b1:ea:79:4c:d7:3a:ff:c6:5b:09:77:d9:a7: 9b:79:4b:41:f1:e9:14:81:45:93:35:0d:c0:81:e4: 83:b8:fe:1b:a8:bf:63:4b:c0:3c:8c:73:5b:ba:b8: 39:28:fa:52:66:2a:c9:60:99:e1:19:28:65:6b:c4: 92:5a:c4:28:50:21:03:b7:37:c9:bb:70:1a:06:d1: ad:36:68:57:02:f0:3c:26:ca:94:6d:bc:70:ad:63: ba:c9:d4:83:e9:12:e7:8e:28:25:6b:02:b8:f6:c2: 83:0c:e4:e2:61:ed:af:89:36:ed:f2:40:77:69:56: be:9c:a8:09:b2:4c:e1:bd:2d:3b:37:b6:53:63:7f: 2b:1e:68:44:77:c5:93:c1:fd:30:82:94:65:f1:e5: c6:d9:bb:ff:62:f5:61:b0:e0:8f:13:64:55:0c:11: bc:e5:4b:fa:14:fe:16:51:62:ec:3b:01:9d:50:33: 7f:eb:73:a8:a6:58:45:43:c8:0b:1f:dc:67:39:2b: 27:12:a0:41:95:18:5d:93:83:47:c3:08:2c:22:03: 89:2a:f1:41:f9:22:f2:6b:60:95:28:a9:84:44:03: be:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:34:00:86:11:5C:A8:F3:D8:13:7D:A1:C3:B3:AD:45:91:9F:DC:CC X509v3 Authority Key Identifier: keyid:AA:85:C6:7F:22:30:9E:0D:84:C3:0B:54:25:29:72:53:28:60:51:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:6f:7b:aa:b5:8f:a7:53:9c:e2:1a:d3:a9:ae:0e:52:07:5f: fa:80:11:82:97:86:61:39:fc:4b:eb:95:12:85:0f:df:23:55: 6f:bf:41:f6:2b:1e:57:4a:4e:ab:6b:55:2f:ff:49:ef:06:78: f9:50:f8:87:4b:12:e0:21:4b:72:c4:b2:96:66:52:1e:c7:40: 96:07:25:27:2c:af:1a:51:6e:ce:66:26:ef:60:ef:f8:bd:18: 79:66:38:8c:f3:de:7e:54:eb:3d:4e:38:a3:8c:4a:ec:16:35: 45:36:59:47:8d:77:93:6a:4b:34:b3:aa:1d:75:54:05:71:84: c3:77:e7:35:96:97:c3:44:e6:4d:2e:9e:61:ad:4c:2c:eb:52: 28:5a:5c:ca:d3:eb:32:f7:e7:26:00:e9:5d:08:05:61:e9:6b: 1d:1a:b4:42:95:94:74:88:5b:9f:f0:85:b6:dd:8d:88:51:0c: 25:fe:1c:30:0b:e5:f4:c1:cc:a2:3c:c4:95:50:35:86:fa:63: a5:c6:22:f8:ff:7f:1e:0c:f5:d7:74:29:2f:40:15:fa:e2:0e: e4:ab:28:c6:ff:7b:3e:2e:e2:36:c1:e4:d4:40:bb:96:21:db: 33:fc:c5:cb:a4:4e:cc:28:82:96:61:9c:dc:54:63:bf:02:11: d8:b2:f4:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLVqxFxvRbH0wgnSLGQpFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhODVjNjdmMjIzMDllMGQ4NGMzMGI1NDI1Mjk3MjUzMjg2 MDUxNTEwHhcNMjUxMjA2MDEwMTEyWhcNMjUxMjA3MDEwMTEyWjAzMTEwLwYDVQQD EyhhZDM0MDA4NjExNWNhOGYzZDgxMzdkYTFjM2IzYWQ0NTkxOWZkY2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8AnL55NdRiaodMEUg2qBMlCJ15a UFO59ycMSApBE7HqeUzXOv/GWwl32aebeUtB8ekUgUWTNQ3AgeSDuP4bqL9jS8A8 jHNburg5KPpSZirJYJnhGShla8SSWsQoUCEDtzfJu3AaBtGtNmhXAvA8JsqUbbxw rWO6ydSD6RLnjiglawK49sKDDOTiYe2viTbt8kB3aVa+nKgJskzhvS07N7ZTY38r HmhEd8WTwf0wgpRl8eXG2bv/YvVhsOCPE2RVDBG85Uv6FP4WUWLsOwGdUDN/63Oo plhFQ8gLH9xnOSsnEqBBlRhdk4NHwwgsIgOJKvFB+SLya2CVKKmERAO+1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK00AIYRXKjz2BN9ocOzrUWRn9zMMB8GA1UdIwQY MBaAFKqFxn8iMJ4NhMMLVCUpclMoYFFRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW9YR2Z5SXduZzJFd3d0VUpTbHlVeWhnVVZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9lNzkyMDItYWNhYi00YjFhLTk5MmIt MmEyZWQ0NWUyNzEyLzEvcW9YR2Z5SXduZzJFd3d0VUpTbHlVeWhnVVZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9lNzkyMDItYWNhYi00YjFhLTk5MmItMmEyZWQ0NWUyNzEy LzEvcW9YR2Z5SXduZzJFd3d0VUpTbHlVeWhnVVZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe297qrWP p1Oc4hrTqa4OUgdf+oARgpeGYTn8S+uVEoUP3yNVb79B9iseV0pOq2tVL/9J7wZ4 +VD4h0sS4CFLcsSylmZSHsdAlgclJyyvGlFuzmYm72Dv+L0YeWY4jPPeflTrPU44 o4xK7BY1RTZZR413k2pLNLOqHXVUBXGEw3fnNZaXw0TmTS6eYa1MLOtSKFpcytPr MvfnJgDpXQgFYelrHRq0QpWUdIhbn/CFtt2NiFEMJf4cMAvl9MHMojzElVA1hvpj pcYi+P9/Hgz113QpL0AV+uIO5Ksoxv97Pi7iNsHk1EC7liHbM/zFy6ROzCiClmGc 3FRjvwIR2LL0FA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:09 2025 by rpki-client