This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft File: Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft (raw, json) Hash identifier: M67kmMlLCqmdUX/jIuBrEpi05aeNSMqY5iAWh2sio6U= Subject key identifier: B9:00:47:AF:D3:13:5C:F9:DA:6C:4A:3A:BE:67:CD:44:F8:B5:BE:45 Authority key identifier: 43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44 Certificate issuer: /CN=430e4026ca964cf3512940b26b11e64871c47944 Certificate serial: 019AF68AB15E8F9F60199858B6A393AB0EB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft Manifest number: 16AF Signing time: Sun 07 Dec 2025 02:01:15 +0000 Manifest this update: Sun 07 Dec 2025 02:01:15 +0000 Manifest next update: Mon 08 Dec 2025 02:01:15 +0000 Files and hashes: 1: Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl (hash: 6OadNNcSWW8+wrTnKCDWb5Uf7+kTE8x79065qxUevUI=) 2: xkuriOxhH9L4osrYS3niaHQqN-k.roa (hash: K/CvJAstY6jQItpyuZ+KxEg8C5FknWg2U5h6YOrdb90=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:b1:5e:8f:9f:60:19:98:58:b6:a3:93:ab:0e:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=430e4026ca964cf3512940b26b11e64871c47944 Validity Not Before: Dec 7 02:01:15 2025 GMT Not After : Dec 8 02:01:15 2025 GMT Subject: CN=b90047afd3135cf9da6c4a3abe67cd44f8b5be45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:79:e3:c6:53:45:bb:66:21:8c:d8:4f:c7:b9: f6:82:27:df:9f:d9:55:fc:5f:77:a8:67:d2:ad:01: 17:e3:14:b5:4b:db:f5:77:d9:49:12:95:34:17:8d: 23:a7:b3:f2:0b:6f:3d:c3:3c:61:c3:d1:a9:3c:b1: 8d:dd:e7:53:41:a4:ec:e1:f5:d6:37:a5:0a:51:5c: db:97:dc:ee:a7:07:93:5d:a9:f6:1e:c5:bd:e5:96: 08:07:5f:71:fd:56:6a:c4:bc:59:25:8c:e1:01:6f: 2f:00:3e:db:e6:86:a3:66:8c:1a:9e:76:51:95:ec: 10:57:23:dd:40:68:70:ac:a1:02:ef:5f:04:a1:38: e3:41:f1:66:a5:d3:88:d1:76:24:ca:be:23:83:c5: 19:5e:2b:e5:86:f2:c2:a7:81:df:1e:9b:3e:9d:e1: 6a:bc:19:24:ea:09:31:0f:c1:ef:59:ea:51:2a:20: fe:44:2d:3f:f3:fe:2b:e6:eb:0d:70:bc:fc:07:45: e5:54:3c:a3:61:d6:9d:96:03:54:d0:a8:5a:1a:2f: 07:8c:e5:ce:86:d0:4e:a5:8c:aa:0c:75:d7:f3:60: 2a:25:e8:9a:d6:e5:37:a1:ed:7b:e8:89:a6:4f:83: 09:14:0a:09:b0:a5:30:eb:81:fd:be:62:f0:e7:a3: 1b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:00:47:AF:D3:13:5C:F9:DA:6C:4A:3A:BE:67:CD:44:F8:B5:BE:45 X509v3 Authority Key Identifier: keyid:43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:10:6a:43:56:98:a6:33:b6:f1:71:ba:f1:8c:d6:70:01:f7: 76:69:f2:b0:8c:94:ae:78:81:95:12:cc:83:f3:85:ca:71:c2: cb:89:de:b8:2d:c3:09:84:0f:8e:ed:64:53:77:b0:dc:98:87: 4b:fc:d4:e4:bd:9b:ce:b8:a8:81:58:c1:9b:46:4b:52:f4:27: 1e:ea:d4:35:54:8a:a3:6c:2a:21:bb:e6:b2:28:b8:10:50:cc: 6b:99:d7:00:f9:5e:41:c1:eb:15:3c:9c:aa:4c:fe:33:81:86: 6b:86:9c:c6:26:e6:47:2e:4f:5a:30:81:5d:63:25:67:e5:4c: 64:eb:b9:87:0d:99:1f:fe:90:bc:db:83:ed:5f:f3:ee:7a:76: 87:5a:a2:65:90:c7:2f:10:f9:04:93:6f:c4:b5:19:5c:7f:4f: ad:6b:22:c0:50:9e:75:c2:9f:7a:a3:f8:c7:21:2b:5a:6c:87: 95:82:eb:a6:11:7b:76:5c:ff:17:9b:64:a7:47:a6:50:c0:5f: 97:e8:60:7e:4d:ea:45:99:2a:04:92:07:45:a7:a9:65:d8:aa: 79:38:cd:82:48:47:94:5d:6b:9f:ab:4f:d3:df:87:f8:c8:19: 65:f7:79:ca:1b:65:3e:2c:fd:76:6b:0e:57:0a:17:ff:53:70: 15:f7:40:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2irFej59gGZhYtqOTqw6xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMGU0MDI2Y2E5NjRjZjM1MTI5NDBiMjZiMTFlNjQ4NzFj NDc5NDQwHhcNMjUxMjA3MDIwMTE1WhcNMjUxMjA4MDIwMTE1WjAzMTEwLwYDVQQD EyhiOTAwNDdhZmQzMTM1Y2Y5ZGE2YzRhM2FiZTY3Y2Q0NGY4YjViZTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3njxlNFu2YhjNhPx7n2giffn9lV /F93qGfSrQEX4xS1S9v1d9lJEpU0F40jp7PyC289wzxhw9GpPLGN3edTQaTs4fXW N6UKUVzbl9zupweTXan2HsW95ZYIB19x/VZqxLxZJYzhAW8vAD7b5oajZowannZR lewQVyPdQGhwrKEC718EoTjjQfFmpdOI0XYkyr4jg8UZXivlhvLCp4HfHps+neFq vBkk6gkxD8HvWepRKiD+RC0/8/4r5usNcLz8B0XlVDyjYdadlgNU0KhaGi8HjOXO htBOpYyqDHXX82AqJeia1uU3oe176ImmT4MJFAoJsKUw64H9vmLw56Mb6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLkAR6/TE1z52mxKOr5nzUT4tb5FMB8GA1UdIwQY MBaAFEMOQCbKlkzzUSlAsmsR5khxxHlEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXc1QUpzcVdUUE5SS1VDeWF4SG1TSEhFZVVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8xMzI0MTAtNDgzOS00MTc0LThkZTIt MTExM2FlNTYzMzY5LzEvUXc1QUpzcVdUUE5SS1VDeWF4SG1TSEhFZVVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8xMzI0MTAtNDgzOS00MTc0LThkZTItMTExM2FlNTYzMzY5 LzEvUXc1QUpzcVdUUE5SS1VDeWF4SG1TSEhFZVVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYRBqQ1aY pjO28XG68YzWcAH3dmnysIyUrniBlRLMg/OFynHCy4neuC3DCYQPju1kU3ew3JiH S/zU5L2bzriogVjBm0ZLUvQnHurUNVSKo2wqIbvmsii4EFDMa5nXAPleQcHrFTyc qkz+M4GGa4acxibmRy5PWjCBXWMlZ+VMZOu5hw2ZH/6QvNuD7V/z7np2h1qiZZDH LxD5BJNvxLUZXH9PrWsiwFCedcKfeqP4xyErWmyHlYLrphF7dlz/F5tkp0emUMBf l+hgfk3qRZkqBJIHRaepZdiqeTjNgkhHlF1rn6tP09+H+MgZZfd5yhtlPiz9dmsO VwoX/1NwFfdAMw== -----END CERTIFICATE-----Generated at Sun Dec 7 03:42:00 2025 by rpki-client