This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft File: qmVRVhfXd7VhHdDgs9ACU-oymgc.mft (raw, json) Hash identifier: OR6DJSh7YF6R/UG0uaFCRbgxwXxrfhIQECfvCI6U77M= Subject key identifier: 98:82:CF:F2:45:32:95:D4:04:2C:6C:F7:FA:D0:2F:A7:5B:2C:DD:79 Authority key identifier: AA:65:51:56:17:D7:77:B5:61:1D:D0:E0:B3:D0:02:53:EA:32:9A:07 Certificate issuer: /CN=aa65515617d777b5611dd0e0b3d00253ea329a07 Certificate serial: 019AF0883CC20E9AB4E7B3636D2FF872A96E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft Manifest number: 0D Signing time: Fri 05 Dec 2025 22:00:51 +0000 Manifest this update: Fri 05 Dec 2025 22:00:51 +0000 Manifest next update: Sat 06 Dec 2025 22:00:51 +0000 Files and hashes: 1: pnnodEIfZquOWuX0y07TWspln6c.asa (hash: C3Hpu+scL5kOpXPlMI5stoiSoiNUyScLSjYeEYySHr0=) 2: qmVRVhfXd7VhHdDgs9ACU-oymgc.crl (hash: 1cn2U2iY1vZM+MbTWZXdDTviHmQ0zTCdTW2Iwr59PkE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.crl rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:3c:c2:0e:9a:b4:e7:b3:63:6d:2f:f8:72:a9:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa65515617d777b5611dd0e0b3d00253ea329a07 Validity Not Before: Dec 5 22:00:51 2025 GMT Not After : Dec 6 22:00:51 2025 GMT Subject: CN=9882cff2453295d4042c6cf7fad02fa75b2cdd79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8f:da:98:a3:c7:50:2c:10:84:35:ef:d6:5c: 61:21:8f:c3:59:bf:f6:93:d2:b2:d6:8c:e3:35:01: a7:05:01:c2:ab:5c:59:07:93:6c:ca:db:e8:6e:60: 7b:fc:6b:b1:63:42:57:23:ea:db:04:cc:43:5f:9b: 47:06:3e:dc:07:5b:41:f9:0e:9f:55:00:0b:64:78: 2c:cf:77:53:17:15:cf:59:8d:fd:f0:ee:b2:71:8c: 04:72:78:9b:2b:90:30:34:5a:b4:2e:59:2b:f2:0b: c3:98:4a:1b:7b:be:a9:64:ff:f3:56:50:0a:7d:47: 12:12:1a:af:24:50:79:bf:5e:68:c0:04:55:f3:21: ae:28:a0:eb:49:1c:b8:8f:5c:e9:ee:78:1f:9a:df: 8b:59:3e:d2:56:62:27:1d:a3:ab:d9:fa:73:50:1f: a9:8f:7e:c1:f1:08:b4:f5:3e:d8:74:4a:c4:97:be: 24:fc:f1:6c:cd:fb:29:a8:64:a6:1b:00:62:2d:84: 32:78:ea:f1:42:5c:15:d0:9c:3a:46:d0:ce:90:e0: ba:04:95:38:5a:12:13:66:0f:c4:c8:0e:3e:ba:f2: c4:be:a3:4b:89:f7:8f:8b:b7:50:17:83:cb:75:e1: 38:32:88:07:c3:ce:27:07:ac:49:6f:b4:41:ec:cb: 7f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:82:CF:F2:45:32:95:D4:04:2C:6C:F7:FA:D0:2F:A7:5B:2C:DD:79 X509v3 Authority Key Identifier: keyid:AA:65:51:56:17:D7:77:B5:61:1D:D0:E0:B3:D0:02:53:EA:32:9A:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:cb:df:9c:31:13:15:cc:bf:2e:ca:c7:f1:3a:6d:70:2e:3d: 9c:f2:a3:cd:d2:ad:4a:99:85:5d:f9:25:a9:25:20:98:75:05: 1e:e1:9e:2f:b3:3d:c4:cf:22:fe:72:1f:c3:3e:c2:d8:88:df: 0b:91:22:e7:a4:9a:e5:05:54:40:68:40:a7:88:70:3e:93:f1: 4a:ed:72:4c:9c:1d:15:55:84:32:ec:ff:77:46:04:3e:03:2d: d5:4e:74:59:22:cd:22:be:12:ac:42:0d:54:74:3f:7f:47:00: 49:59:7f:a6:89:6c:b5:84:dd:6d:51:7c:cf:e6:c7:60:2d:47: 86:22:55:d7:78:e2:83:d3:a0:96:e2:c6:93:37:61:b3:f6:6c: 22:18:67:31:93:0e:f7:7e:df:fb:70:f1:e0:a1:14:d3:02:93: 6b:44:4b:c2:1f:d7:88:62:bc:e5:c0:2d:d7:32:7c:5d:52:ad: 72:5e:b2:42:9a:b7:a3:01:1e:55:88:c5:eb:83:86:d6:47:0d: 15:98:8c:b5:3c:af:91:7b:e6:d6:68:e6:e0:8c:46:04:a6:01: c6:bc:7c:84:32:14:09:f9:55:f8:d3:a5:78:da:50:bc:16:fd: b6:d5:cd:b7:3f:a9:2d:b4:9b:39:4a:da:ad:36:a5:15:e7:77: 00:33:d5:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiDzCDpq057NjbS/4cqluMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNjU1MTU2MTdkNzc3YjU2MTFkZDBlMGIzZDAwMjUzZWEz MjlhMDcwHhcNMjUxMjA1MjIwMDUxWhcNMjUxMjA2MjIwMDUxWjAzMTEwLwYDVQQD Eyg5ODgyY2ZmMjQ1MzI5NWQ0MDQyYzZjZjdmYWQwMmZhNzViMmNkZDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2I/amKPHUCwQhDXv1lxhIY/DWb/2 k9Ky1ozjNQGnBQHCq1xZB5NsytvobmB7/GuxY0JXI+rbBMxDX5tHBj7cB1tB+Q6f VQALZHgsz3dTFxXPWY398O6ycYwEcnibK5AwNFq0Llkr8gvDmEobe76pZP/zVlAK fUcSEhqvJFB5v15owARV8yGuKKDrSRy4j1zp7ngfmt+LWT7SVmInHaOr2fpzUB+p j37B8Qi09T7YdErEl74k/PFszfspqGSmGwBiLYQyeOrxQlwV0Jw6RtDOkOC6BJU4 WhITZg/EyA4+uvLEvqNLifePi7dQF4PLdeE4MogHw84nB6xJb7RB7Mt/oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJiCz/JFMpXUBCxs9/rQL6dbLN15MB8GA1UdIwQY MBaAFKplUVYX13e1YR3Q4LPQAlPqMpoHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW1WUlZoZlhkN1ZoSGREZ3M5QUNVLW95bWdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jZDliODktNzU2OC00N2IxLThlNTEt ZTU5MmM3ZDM1ZmYyLzEvcW1WUlZoZlhkN1ZoSGREZ3M5QUNVLW95bWdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9jZDliODktNzU2OC00N2IxLThlNTEtZTU5MmM3ZDM1ZmYy LzEvcW1WUlZoZlhkN1ZoSGREZ3M5QUNVLW95bWdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALcvfnDET Fcy/LsrH8TptcC49nPKjzdKtSpmFXfklqSUgmHUFHuGeL7M9xM8i/nIfwz7C2Ijf C5Ei56Sa5QVUQGhAp4hwPpPxSu1yTJwdFVWEMuz/d0YEPgMt1U50WSLNIr4SrEIN VHQ/f0cASVl/polstYTdbVF8z+bHYC1HhiJV13jig9OgluLGkzdhs/ZsIhhnMZMO 937f+3Dx4KEU0wKTa0RLwh/XiGK85cAt1zJ8XVKtcl6yQpq3owEeVYjF64OG1kcN FZiMtTyvkXvm1mjm4IxGBKYBxrx8hDIUCflV+NOleNpQvBb9ttXNtz+pLbSbOUra rTalFed3ADPV9w== -----END CERTIFICATE-----Generated at Sat Dec 6 05:43:55 2025 by rpki-client