This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft File: qFfj-rEefTOV3RA9ap-V2SJV9ks.mft (raw, json) Hash identifier: BQFqiljExXUpasi8bDVrRh88X3nqRTZDxVQnGieZfHs= Subject key identifier: 8B:7D:36:02:BB:18:F2:AB:92:AA:C4:6F:7B:DA:C2:5D:5B:F2:71:F4 Authority key identifier: A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B Certificate issuer: /CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b Certificate serial: 019AF1644CC7D2840B78BFE9E99F82C91882 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft Manifest number: 01D9 Signing time: Sat 06 Dec 2025 02:01:13 +0000 Manifest this update: Sat 06 Dec 2025 02:01:13 +0000 Manifest next update: Sun 07 Dec 2025 02:01:13 +0000 Files and hashes: 1: CDUsDykTOJjzj2PfEalP5NWfeaM.roa (hash: MDsxP0rZPQ79FjaH/eHSpSKbqQZrO2HQf+/0HhGuzhE=) 2: qFfj-rEefTOV3RA9ap-V2SJV9ks.crl (hash: 5sItDju+gQQ8DJMOwUziKpLrOEySLDKxhZDmGCpI2Sg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:4c:c7:d2:84:0b:78:bf:e9:e9:9f:82:c9:18:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b Validity Not Before: Dec 6 02:01:13 2025 GMT Not After : Dec 7 02:01:13 2025 GMT Subject: CN=8b7d3602bb18f2ab92aac46f7bdac25d5bf271f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e5:4e:01:38:56:4a:58:23:35:5a:ec:e5:f0: a6:31:55:62:ee:08:49:e6:cd:13:63:e9:60:c5:4d: c8:22:bb:44:c0:80:bb:da:29:45:2d:cb:41:85:a9: bd:eb:7d:43:d5:43:3b:fa:70:1d:f5:c1:c5:d5:7e: 66:ba:27:49:a0:aa:66:3c:4f:99:5d:80:1e:2e:16: 4e:ab:e1:d4:60:55:09:33:6a:f8:76:43:6b:7c:10: f6:69:8a:76:63:e3:7e:c2:13:40:95:62:94:fa:e3: 38:e5:eb:a0:c2:5f:53:be:e4:d8:7d:fa:67:53:fb: 93:00:0e:4b:4a:5c:97:10:90:d8:c2:cb:b1:33:03: 2e:9d:5a:f1:9c:07:b2:a6:06:a3:6a:b4:ba:2b:da: bc:3f:48:54:a4:87:41:b5:22:34:f3:97:5e:e0:be: e2:00:18:e5:74:4f:c1:9e:38:c9:5f:f2:ad:5d:fd: 1e:5f:6a:ae:e1:43:9e:fa:3e:94:a5:d0:61:af:3a: f2:f5:f1:09:a8:41:9d:89:0b:c5:13:c4:a1:18:cf: 19:1d:1d:41:12:a3:03:c5:41:42:f0:bf:24:29:55: a4:8f:cb:0b:c5:57:ca:c6:fc:f8:18:a9:49:ef:3d: e7:10:d5:fb:bf:fa:37:48:33:b6:4f:a0:a9:1b:56: ba:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:7D:36:02:BB:18:F2:AB:92:AA:C4:6F:7B:DA:C2:5D:5B:F2:71:F4 X509v3 Authority Key Identifier: keyid:A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:73:ba:3f:17:16:d6:d5:d3:8e:80:97:01:2b:49:54:71:dd: 03:43:07:5d:ac:4b:d7:7a:d0:eb:dc:c4:70:8d:70:d4:ad:7d: 4b:83:71:a1:6e:c1:e6:58:40:c0:d5:5b:bd:88:e2:4c:ae:2f: 22:8d:96:cc:80:a1:91:2d:33:e3:21:24:66:e8:fc:e4:d5:9c: f2:57:40:7c:c4:6e:72:d8:1c:56:ea:ca:6a:71:5a:4e:3c:85: af:53:28:0b:6b:0e:14:75:3c:d3:71:34:f3:bc:7c:90:ce:3c: 55:ca:8b:37:25:88:0d:44:31:a2:b1:a9:98:f7:b3:08:b8:c4: 31:2e:d5:53:bd:0c:5b:4d:7f:e4:86:a2:aa:5e:1f:ef:f5:7f: 0c:d8:76:97:fe:43:bc:49:34:f3:e6:2e:0a:cf:12:6b:67:7c: 8f:21:3a:74:5e:f8:7a:01:2a:95:81:0f:a6:33:e6:b4:ff:83: fd:e5:e5:83:a7:55:9d:56:d1:d9:0f:3d:34:54:53:c8:a2:55: 69:aa:1d:b1:81:e9:a5:ea:a3:b2:ce:02:41:fc:36:38:45:9b: 3c:e0:51:aa:e7:23:33:92:4c:96:c7:41:cc:65:29:7c:1a:51: 0f:cb:69:a0:59:bb:4d:fe:94:78:61:6d:8e:aa:63:6b:2a:01: 1f:cd:2a:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZEzH0oQLeL/p6Z+CyRiCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NTdlM2ZhYjExZTdkMzM5NWRkMTAzZDZhOWY5NWQ5MjI1 NWY2NGIwHhcNMjUxMjA2MDIwMTEzWhcNMjUxMjA3MDIwMTEzWjAzMTEwLwYDVQQD Eyg4YjdkMzYwMmJiMThmMmFiOTJhYWM0NmY3YmRhYzI1ZDViZjI3MWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuVOAThWSlgjNVrs5fCmMVVi7ghJ 5s0TY+lgxU3IIrtEwIC72ilFLctBham9631D1UM7+nAd9cHF1X5muidJoKpmPE+Z XYAeLhZOq+HUYFUJM2r4dkNrfBD2aYp2Y+N+whNAlWKU+uM45eugwl9TvuTYffpn U/uTAA5LSlyXEJDYwsuxMwMunVrxnAeypgajarS6K9q8P0hUpIdBtSI085de4L7i ABjldE/BnjjJX/KtXf0eX2qu4UOe+j6UpdBhrzry9fEJqEGdiQvFE8ShGM8ZHR1B EqMDxUFC8L8kKVWkj8sLxVfKxvz4GKlJ7z3nENX7v/o3SDO2T6CpG1a6PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIt9NgK7GPKrkqrEb3vawl1b8nH0MB8GA1UdIwQY MBaAFKhX4/qxHn0zld0QPWqfldkiVfZLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUZmai1yRWVmVE9WM1JBOWFwLVYyU0pWOWtzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jNTIyYjAtMDcxOC00Yjc3LWI4ZDYt M2E2YTA2ZTE4OGMzLzEvcUZmai1yRWVmVE9WM1JBOWFwLVYyU0pWOWtzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9jNTIyYjAtMDcxOC00Yjc3LWI4ZDYtM2E2YTA2ZTE4OGMz LzEvcUZmai1yRWVmVE9WM1JBOWFwLVYyU0pWOWtzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARXO6PxcW 1tXTjoCXAStJVHHdA0MHXaxL13rQ69zEcI1w1K19S4NxoW7B5lhAwNVbvYjiTK4v Io2WzIChkS0z4yEkZuj85NWc8ldAfMRuctgcVurKanFaTjyFr1MoC2sOFHU803E0 87x8kM48VcqLNyWIDUQxorGpmPezCLjEMS7VU70MW01/5Iaiql4f7/V/DNh2l/5D vEk08+YuCs8Sa2d8jyE6dF74egEqlYEPpjPmtP+D/eXlg6dVnVbR2Q89NFRTyKJV aaodsYHppeqjss4CQfw2OEWbPOBRqucjM5JMlsdBzGUpfBpRD8tpoFm7Tf6UeGFt jqpjayoBH80q7Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:10:34 2025 by rpki-client