This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft File: qYW1Uh0gkBiCR48PCUGWLD6clPo.mft (raw, json) Hash identifier: 0sSIkicrACrX6vT8aMarvTgaElvaWdpc5HUXLfgyBNg= Subject key identifier: EC:5D:65:23:A9:AB:1C:EB:50:C3:0E:11:14:90:AB:D3:6B:2C:49:09 Authority key identifier: A9:85:B5:52:1D:20:90:18:82:47:8F:0F:09:41:96:2C:3E:9C:94:FA Certificate issuer: /CN=a985b5521d20901882478f0f0941962c3e9c94fa Certificate serial: 019AF2ADA7F75D757103F63E12D66F8C7BC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYW1Uh0gkBiCR48PCUGWLD6clPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft Manifest number: 03E8 Signing time: Sat 06 Dec 2025 08:00:58 +0000 Manifest this update: Sat 06 Dec 2025 08:00:58 +0000 Manifest next update: Sun 07 Dec 2025 08:00:58 +0000 Files and hashes: 1: 5AKIjXxvlD1ejPdjcCa3GKRo67k.roa (hash: tQg1Hre7Hi5yVH1kQPOYLNbXNBUZ5paMSfhayTmbmmc=) 2: qYW1Uh0gkBiCR48PCUGWLD6clPo.crl (hash: n0RDSQOXLJQbWjbdDpX7CbMoJDNJ5rsBP55aLk53Jew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft rsync://rpki.ripe.net/repository/DEFAULT/qYW1Uh0gkBiCR48PCUGWLD6clPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:a7:f7:5d:75:71:03:f6:3e:12:d6:6f:8c:7b:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a985b5521d20901882478f0f0941962c3e9c94fa Validity Not Before: Dec 6 08:00:58 2025 GMT Not After : Dec 7 08:00:58 2025 GMT Subject: CN=ec5d6523a9ab1ceb50c30e111490abd36b2c4909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a0:2c:5f:87:7f:f5:e6:98:82:f1:37:34:d9: 44:52:32:e4:e5:a0:e0:3f:d5:09:e3:1d:f0:ba:83: 4c:21:63:31:6a:c3:17:e6:4d:78:51:62:b7:55:5f: c4:1c:49:af:24:a6:e7:f6:99:15:05:b7:4d:8f:8d: d1:b6:23:47:4e:ec:eb:25:c6:24:5d:02:12:e3:67: f8:45:7b:0f:4f:0f:cf:c8:36:64:7e:26:3b:3d:d4: ee:4b:bb:03:42:d9:2f:04:fc:11:71:e0:69:5d:de: e5:41:97:9c:2f:3e:91:af:0c:81:20:71:31:18:ef: 64:db:51:ff:42:1e:22:83:26:1f:9c:b9:fb:5d:6c: 18:3e:5e:81:41:4f:84:ce:bc:3d:9b:81:fd:ff:6e: b2:58:dd:17:5d:7c:e1:33:44:2d:e7:c6:41:5f:00: 5e:43:c7:ab:97:17:72:95:cd:22:c3:0e:5d:46:d8: 3f:c5:cb:75:b2:ab:96:61:47:93:fb:9c:24:b3:b4: 53:05:70:6c:48:8c:94:fb:ac:50:9f:40:2f:a5:be: d4:12:50:b7:a2:1f:d1:a7:5d:d2:82:6b:55:a4:8c: 8d:5d:a2:4d:3a:17:3a:5d:2b:a0:11:ee:46:53:4f: cb:81:c7:9f:22:f5:24:86:3f:f6:02:ff:4a:9d:57: b4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:5D:65:23:A9:AB:1C:EB:50:C3:0E:11:14:90:AB:D3:6B:2C:49:09 X509v3 Authority Key Identifier: keyid:A9:85:B5:52:1D:20:90:18:82:47:8F:0F:09:41:96:2C:3E:9C:94:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYW1Uh0gkBiCR48PCUGWLD6clPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:a8:ff:f3:e8:17:b4:d9:6d:10:ac:42:05:ad:1a:82:bc:54: 81:1c:03:b7:68:56:d8:dd:e2:da:ff:52:96:ba:d3:c7:2d:37: 2c:50:f1:e3:2d:8e:54:77:0a:bc:20:f6:f7:8a:74:91:3b:50: 8d:6a:5c:1c:33:4e:05:e7:0c:5a:12:f6:c0:e6:fd:96:88:36: cf:dc:4b:47:e5:cb:a0:e9:a8:d6:84:8c:0c:29:00:25:39:de: b5:bd:6a:41:65:14:16:8d:34:7a:e6:5f:cb:b4:25:8e:59:3e: 67:ad:47:ab:f7:6d:07:a7:31:58:59:e3:dd:06:51:a9:59:9b: b7:5c:07:47:39:79:2d:5e:49:f3:84:77:d1:21:f8:82:d1:20: 2c:a8:9e:0e:ff:02:23:3e:cc:11:88:5b:16:98:fd:01:88:4d: 6e:38:39:80:49:b2:ed:f6:f8:8d:59:8c:97:44:4b:84:a9:de: bd:b3:9f:5d:d1:08:9a:ed:22:28:0a:ee:fa:4d:20:f2:85:be: de:37:47:ca:6b:ac:86:2b:78:aa:0e:f1:6a:7f:75:8b:a1:66: 29:13:76:4e:5c:8d:97:3a:e2:c7:14:3f:be:e7:52:c4:0e:48: 59:65:ce:59:87:3d:d5:66:af:31:47:6d:0f:c4:9f:26:ba:17: cf:f0:43:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryraf3XXVxA/Y+EtZvjHvHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ODViNTUyMWQyMDkwMTg4MjQ3OGYwZjA5NDE5NjJjM2U5 Yzk0ZmEwHhcNMjUxMjA2MDgwMDU4WhcNMjUxMjA3MDgwMDU4WjAzMTEwLwYDVQQD EyhlYzVkNjUyM2E5YWIxY2ViNTBjMzBlMTExNDkwYWJkMzZiMmM0OTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaAsX4d/9eaYgvE3NNlEUjLk5aDg P9UJ4x3wuoNMIWMxasMX5k14UWK3VV/EHEmvJKbn9pkVBbdNj43RtiNHTuzrJcYk XQIS42f4RXsPTw/PyDZkfiY7PdTuS7sDQtkvBPwRceBpXd7lQZecLz6RrwyBIHEx GO9k21H/Qh4igyYfnLn7XWwYPl6BQU+Ezrw9m4H9/26yWN0XXXzhM0Qt58ZBXwBe Q8erlxdylc0iww5dRtg/xct1squWYUeT+5wks7RTBXBsSIyU+6xQn0Avpb7UElC3 oh/Rp13SgmtVpIyNXaJNOhc6XSugEe5GU0/LgcefIvUkhj/2Av9KnVe0EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOxdZSOpqxzrUMMOERSQq9NrLEkJMB8GA1UdIwQY MBaAFKmFtVIdIJAYgkePDwlBliw+nJT6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVlXMVVoMGdrQmlDUjQ4UENVR1dMRDZjbFBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83ZmZiM2UtOGE0Yy00MGI3LTg3NmUt NjAwM2Q1YWVlZDFmLzEvcVlXMVVoMGdrQmlDUjQ4UENVR1dMRDZjbFBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS83ZmZiM2UtOGE0Yy00MGI3LTg3NmUtNjAwM2Q1YWVlZDFm LzEvcVlXMVVoMGdrQmlDUjQ4UENVR1dMRDZjbFBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh6j/8+gX tNltEKxCBa0agrxUgRwDt2hW2N3i2v9SlrrTxy03LFDx4y2OVHcKvCD294p0kTtQ jWpcHDNOBecMWhL2wOb9log2z9xLR+XLoOmo1oSMDCkAJTnetb1qQWUUFo00euZf y7Qljlk+Z61Hq/dtB6cxWFnj3QZRqVmbt1wHRzl5LV5J84R30SH4gtEgLKieDv8C Iz7MEYhbFpj9AYhNbjg5gEmy7fb4jVmMl0RLhKnevbOfXdEImu0iKAru+k0g8oW+ 3jdHymushit4qg7xan91i6FmKRN2TlyNlzrixxQ/vudSxA5IWWXOWYc91WavMUdt D8SfJroXz/BD6w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:28 2025 by rpki-client