This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.mft File: qqlyrDzBD3FspJhQRaXwgktgyh8.mft (raw, json) Hash identifier: 0P5Ht5qhMmKsIDuwrVyNoz6pbkGgmZnUOA8GWni+wcg= Subject key identifier: 04:20:69:B0:A1:4F:4A:98:98:B2:AE:9D:91:56:5E:49:50:DF:76:42 Authority key identifier: AA:A9:72:AC:3C:C1:0F:71:6C:A4:98:50:45:A5:F0:82:4B:60:CA:1F Certificate issuer: /CN=aaa972ac3cc10f716ca4985045a5f0824b60ca1f Certificate serial: 019AF2769CCDD1EC66545F580AE36AF18B01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqlyrDzBD3FspJhQRaXwgktgyh8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.mft Manifest number: 026D Signing time: Sat 06 Dec 2025 07:00:50 +0000 Manifest this update: Sat 06 Dec 2025 07:00:50 +0000 Manifest next update: Sun 07 Dec 2025 07:00:50 +0000 Files and hashes: 1: qqlyrDzBD3FspJhQRaXwgktgyh8.crl (hash: cOdIUBnd25QPvSSFw42reBq+KRd7tBcRJIq+TdB32Sc=) 2: yIGIxees9MuARoWN6t0oVINh_4A.roa (hash: geAsTIsbC4XBTKHwgmaJ0ZNmwh/Z8F8NnaAnGD8ONe8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.crl rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.mft rsync://rpki.ripe.net/repository/DEFAULT/qqlyrDzBD3FspJhQRaXwgktgyh8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:9c:cd:d1:ec:66:54:5f:58:0a:e3:6a:f1:8b:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaa972ac3cc10f716ca4985045a5f0824b60ca1f Validity Not Before: Dec 6 07:00:50 2025 GMT Not After : Dec 7 07:00:50 2025 GMT Subject: CN=042069b0a14f4a9898b2ae9d91565e4950df7642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ea:07:1a:37:c6:f9:30:cb:e0:b5:e0:c7:fd: aa:71:14:78:43:f2:ba:61:be:71:c8:2c:91:06:53: 58:1a:94:5e:22:e9:27:e8:a4:d2:92:dd:32:58:ba: 33:c4:c8:eb:c3:85:2b:71:52:6e:c8:92:8c:5f:f6: 76:53:1a:13:f3:74:75:f2:5a:df:42:5d:00:75:f3: 0a:ac:ed:e6:74:49:48:26:29:0d:02:ee:a8:8d:40: 78:1b:73:d5:50:5d:52:18:d5:4d:f8:dd:ac:4d:8f: e2:31:4e:e3:46:22:e6:11:f4:98:d1:d7:2d:98:88: cc:e2:c9:0c:80:8b:de:b9:fc:34:8a:62:4c:5f:bb: 9c:f0:29:a2:40:8f:b4:e6:dc:2c:58:6b:37:8f:e8: da:93:89:32:e1:e5:b6:cf:95:0d:25:f8:7d:56:0a: 1e:4f:a9:24:34:60:d4:60:34:30:f3:16:89:2b:f4: ef:31:f4:4c:43:c6:5a:65:26:0a:bb:72:05:ec:29: 63:dd:21:e4:4d:9f:7c:b7:92:67:87:25:1c:cf:08: 0f:a9:d6:57:83:d7:65:08:f8:e3:83:2c:06:f1:0c: b2:eb:2f:e8:3b:9f:bc:23:02:8a:43:d6:6a:f1:c8: 65:42:4e:d4:03:92:a4:f4:0e:f2:bf:9c:1b:5f:4d: c6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:20:69:B0:A1:4F:4A:98:98:B2:AE:9D:91:56:5E:49:50:DF:76:42 X509v3 Authority Key Identifier: keyid:AA:A9:72:AC:3C:C1:0F:71:6C:A4:98:50:45:A5:F0:82:4B:60:CA:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqlyrDzBD3FspJhQRaXwgktgyh8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:41:f2:46:06:58:4b:f2:0a:ac:fb:d3:9e:29:9b:23:e1:ec: 78:46:6b:22:4f:82:c4:1d:89:a7:49:ff:0f:25:6f:72:cf:b9: 37:2c:7c:06:ce:54:5f:80:4e:20:7d:42:20:b1:29:a3:98:02: ad:c3:f0:72:a5:fd:85:8a:37:0a:20:de:96:a5:84:44:4d:aa: 97:66:79:86:21:95:1d:14:f8:b6:47:65:f3:2a:8a:a2:8c:25: 8b:5b:f0:71:52:ca:3a:c7:69:26:c1:18:6b:fe:75:e0:d4:ab: f7:a6:70:2b:3d:6d:7a:52:dc:d7:35:68:ab:70:61:b9:cd:b9: 47:90:60:41:07:c6:0c:0e:c4:14:12:41:89:8d:8b:31:c2:a7: 6b:43:57:60:c4:cb:42:f4:fb:20:38:be:4c:aa:01:83:b9:45: d4:76:e9:f8:2f:63:77:0b:67:55:c6:be:71:f2:67:2d:05:85: cc:80:2a:62:59:a4:c1:35:32:02:90:a4:78:c3:24:a6:a0:a2: 03:1e:8e:1a:94:05:f9:ba:1d:5e:55:20:ac:8d:dd:9f:96:1a: 73:83:52:4f:4c:db:1e:b8:de:8d:c6:9e:ff:79:71:79:52:47: 55:94:17:1d:c3:2b:cc:b2:9b:30:8d:12:39:4b:9c:06:47:e7: 1c:5a:e1:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydpzN0exmVF9YCuNq8YsBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhYTk3MmFjM2NjMTBmNzE2Y2E0OTg1MDQ1YTVmMDgyNGI2 MGNhMWYwHhcNMjUxMjA2MDcwMDUwWhcNMjUxMjA3MDcwMDUwWjAzMTEwLwYDVQQD EygwNDIwNjliMGExNGY0YTk4OThiMmFlOWQ5MTU2NWU0OTUwZGY3NjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+oHGjfG+TDL4LXgx/2qcRR4Q/K6 Yb5xyCyRBlNYGpReIukn6KTSkt0yWLozxMjrw4UrcVJuyJKMX/Z2UxoT83R18lrf Ql0AdfMKrO3mdElIJikNAu6ojUB4G3PVUF1SGNVN+N2sTY/iMU7jRiLmEfSY0dct mIjM4skMgIveufw0imJMX7uc8CmiQI+05twsWGs3j+jak4ky4eW2z5UNJfh9Vgoe T6kkNGDUYDQw8xaJK/TvMfRMQ8ZaZSYKu3IF7Clj3SHkTZ98t5JnhyUczwgPqdZX g9dlCPjjgywG8Qyy6y/oO5+8IwKKQ9Zq8chlQk7UA5Kk9A7yv5wbX03GrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQgabChT0qYmLKunZFWXklQ33ZCMB8GA1UdIwQY MBaAFKqpcqw8wQ9xbKSYUEWl8IJLYMofMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXFseXJEekJEM0ZzcEpoUVJhWHdna3RneWg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kMDlmYjktZjNmYS00NWI4LWE1Y2Qt NzdiNDg5MjQ5ZmE0LzEvcXFseXJEekJEM0ZzcEpoUVJhWHdna3RneWg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9kMDlmYjktZjNmYS00NWI4LWE1Y2QtNzdiNDg5MjQ5ZmE0 LzEvcXFseXJEekJEM0ZzcEpoUVJhWHdna3RneWg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS0HyRgZY S/IKrPvTnimbI+HseEZrIk+CxB2Jp0n/DyVvcs+5Nyx8Bs5UX4BOIH1CILEpo5gC rcPwcqX9hYo3CiDelqWERE2ql2Z5hiGVHRT4tkdl8yqKoowli1vwcVLKOsdpJsEY a/514NSr96ZwKz1telLc1zVoq3Bhuc25R5BgQQfGDA7EFBJBiY2LMcKna0NXYMTL QvT7IDi+TKoBg7lF1Hbp+C9jdwtnVca+cfJnLQWFzIAqYlmkwTUyApCkeMMkpqCi Ax6OGpQF+bodXlUgrI3dn5Yac4NST0zbHrjejcae/3lxeVJHVZQXHcMrzLKbMI0S OUucBkfnHFrhBA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:34:53 2025 by rpki-client