This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft File: qYW1Uh0gkBiCR48PCUGWLD6clPo.mft (raw, json) Hash identifier: zO2LFINNOHpXJIZYb6XGllhKaolMFitlwmUyB/gqT6E= Subject key identifier: 88:09:A1:25:19:3C:7F:F7:CB:43:C0:61:AC:F3:79:CF:76:AF:F2:0E Authority key identifier: A9:85:B5:52:1D:20:90:18:82:47:8F:0F:09:41:96:2C:3E:9C:94:FA Certificate issuer: /CN=a985b5521d20901882478f0f0941962c3e9c94fa Certificate serial: 019B2AAEEC47B4044363099E5EC30F4BB43A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYW1Uh0gkBiCR48PCUGWLD6clPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft Manifest number: 0405 Signing time: Wed 17 Dec 2025 05:01:05 +0000 Manifest this update: Wed 17 Dec 2025 05:01:05 +0000 Manifest next update: Thu 18 Dec 2025 05:01:05 +0000 Files and hashes: 1: 5AKIjXxvlD1ejPdjcCa3GKRo67k.roa (hash: tQg1Hre7Hi5yVH1kQPOYLNbXNBUZ5paMSfhayTmbmmc=) 2: qYW1Uh0gkBiCR48PCUGWLD6clPo.crl (hash: ZzUZxpPkxGJEgAfR3VyUG0fo+TEM61L6Vv/aWpkgR3w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft rsync://rpki.ripe.net/repository/DEFAULT/qYW1Uh0gkBiCR48PCUGWLD6clPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 05:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:ae:ec:47:b4:04:43:63:09:9e:5e:c3:0f:4b:b4:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a985b5521d20901882478f0f0941962c3e9c94fa Validity Not Before: Dec 17 05:01:05 2025 GMT Not After : Dec 18 05:01:05 2025 GMT Subject: CN=8809a125193c7ff7cb43c061acf379cf76aff20e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ee:8b:c1:80:51:6e:50:64:06:40:30:8e:46: 94:49:72:b9:d5:53:95:c5:a6:3b:62:2c:39:a0:0e: 21:77:c5:14:6e:13:6f:eb:ca:2f:8d:00:1d:83:df: 12:75:83:b1:36:2b:24:a7:87:1e:9c:86:eb:69:d6: e8:3f:84:d2:a4:2e:61:7b:ff:73:2c:41:77:c4:3a: 75:20:6f:ee:0a:46:e1:98:2e:b6:74:22:0f:dd:15: 0b:e4:43:70:52:04:13:93:dd:e0:e3:5e:02:76:9d: c1:95:36:b7:19:07:37:20:a9:ee:79:cb:63:b0:75: 79:e0:a1:82:ee:4b:0a:39:da:23:67:1a:c6:13:fd: bc:58:fe:00:24:6c:ce:ed:d4:03:e5:ec:a0:dc:cc: 7c:d5:22:51:01:2c:52:e5:f2:ba:fb:ca:cc:de:1d: 5a:5f:62:5b:cf:36:3a:9c:05:4c:70:ae:60:3f:eb: 0a:8c:f1:33:23:ad:ed:b9:13:b1:4d:47:52:ca:78: 79:f1:c5:a6:0e:9e:38:94:ac:44:8e:e4:9c:4c:62: f4:73:06:34:d6:e4:ff:76:2c:a7:23:ca:5a:68:8c: 8f:9d:62:01:60:ab:0d:f7:d3:0f:df:6a:26:1e:6a: c7:f1:a5:46:e1:ee:b3:c9:28:9b:18:02:48:2a:0c: 91:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:09:A1:25:19:3C:7F:F7:CB:43:C0:61:AC:F3:79:CF:76:AF:F2:0E X509v3 Authority Key Identifier: keyid:A9:85:B5:52:1D:20:90:18:82:47:8F:0F:09:41:96:2C:3E:9C:94:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYW1Uh0gkBiCR48PCUGWLD6clPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:b4:5c:7a:54:d9:31:db:cf:11:d8:10:95:62:9a:41:e0:b5: e9:5a:2c:6a:2f:59:79:17:3d:cf:52:5b:0d:82:72:34:8c:3e: 49:78:be:c1:a1:9b:c8:1b:94:87:50:ba:b0:43:01:cf:86:cb: 7e:14:66:73:49:cd:3f:c7:4d:8d:2a:94:5e:47:5e:d5:02:72: 10:12:3e:70:7a:98:14:b6:26:8b:fe:50:e9:86:1f:eb:ae:10: 0c:4d:db:72:56:73:fd:39:81:34:7b:6a:f4:56:7f:ee:93:4d: bb:ff:fd:98:19:46:eb:a9:b1:59:da:67:d8:8c:94:67:8e:ad: 2c:0a:e9:9c:a6:b4:0a:e4:51:95:3c:15:b8:12:da:06:b3:7e: 65:8b:d9:d0:3f:a4:4e:22:36:d7:cc:78:df:87:49:f1:83:f0: 7b:98:cd:1c:44:08:5d:85:41:21:a2:cf:94:e0:ad:07:57:9e: e2:01:42:28:15:cf:8d:fa:00:40:89:e2:ec:cb:4c:bf:50:26: f2:22:26:b3:3f:e2:e6:ec:b8:52:5b:23:22:62:f1:a2:24:16: 27:4f:2d:5d:de:30:f3:12:93:51:77:e3:b6:bf:a5:67:27:ea: c7:39:fc:de:e2:bb:1c:1d:72:a6:50:05:d5:59:18:85:31:74: 52:c3:0c:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqruxHtARDYwmeXsMPS7Q6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ODViNTUyMWQyMDkwMTg4MjQ3OGYwZjA5NDE5NjJjM2U5 Yzk0ZmEwHhcNMjUxMjE3MDUwMTA1WhcNMjUxMjE4MDUwMTA1WjAzMTEwLwYDVQQD Eyg4ODA5YTEyNTE5M2M3ZmY3Y2I0M2MwNjFhY2YzNzljZjc2YWZmMjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAue6LwYBRblBkBkAwjkaUSXK51VOV xaY7Yiw5oA4hd8UUbhNv68ovjQAdg98SdYOxNiskp4cenIbradboP4TSpC5he/9z LEF3xDp1IG/uCkbhmC62dCIP3RUL5ENwUgQTk93g414Cdp3BlTa3GQc3IKnuectj sHV54KGC7ksKOdojZxrGE/28WP4AJGzO7dQD5eyg3Mx81SJRASxS5fK6+8rM3h1a X2JbzzY6nAVMcK5gP+sKjPEzI63tuROxTUdSynh58cWmDp44lKxEjuScTGL0cwY0 1uT/diynI8paaIyPnWIBYKsN99MP32omHmrH8aVG4e6zySibGAJIKgyRzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIgJoSUZPH/3y0PAYazzec92r/IOMB8GA1UdIwQY MBaAFKmFtVIdIJAYgkePDwlBliw+nJT6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVlXMVVoMGdrQmlDUjQ4UENVR1dMRDZjbFBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83ZmZiM2UtOGE0Yy00MGI3LTg3NmUt NjAwM2Q1YWVlZDFmLzEvcVlXMVVoMGdrQmlDUjQ4UENVR1dMRDZjbFBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS83ZmZiM2UtOGE0Yy00MGI3LTg3NmUtNjAwM2Q1YWVlZDFm LzEvcVlXMVVoMGdrQmlDUjQ4UENVR1dMRDZjbFBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFbRcelTZ MdvPEdgQlWKaQeC16Vosai9ZeRc9z1JbDYJyNIw+SXi+waGbyBuUh1C6sEMBz4bL fhRmc0nNP8dNjSqUXkde1QJyEBI+cHqYFLYmi/5Q6YYf664QDE3bclZz/TmBNHtq 9FZ/7pNNu//9mBlG66mxWdpn2IyUZ46tLArpnKa0CuRRlTwVuBLaBrN+ZYvZ0D+k TiI218x434dJ8YPwe5jNHEQIXYVBIaLPlOCtB1ee4gFCKBXPjfoAQIni7MtMv1Am 8iImsz/i5uy4UlsjImLxoiQWJ08tXd4w8xKTUXfjtr+lZyfqxzn83uK7HB1yplAF 1VkYhTF0UsMMqg== -----END CERTIFICATE-----Generated at Wed Dec 17 13:41:52 2025 by rpki-client