This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft File: _qJ-2VhOB8dA_utA17nlfMrF6VA.mft (raw, json) Hash identifier: LHL53g7IYI17mz/uetM1O9711//pEGAIJON1e/OaoZE= Subject key identifier: AE:46:EE:81:02:0C:56:29:9E:00:6F:63:DE:BD:E2:D6:89:9C:14:E2 Authority key identifier: FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50 Certificate issuer: /CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950 Certificate serial: 019AF12DB5ED788247F627855E4B3BC06A64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft Manifest number: 11E3 Signing time: Sat 06 Dec 2025 01:01:35 +0000 Manifest this update: Sat 06 Dec 2025 01:01:35 +0000 Manifest next update: Sun 07 Dec 2025 01:01:35 +0000 Files and hashes: 1: 8Ua36sQPiROOdvji9D_u-a0zjio.roa (hash: D8ltqCdiAwJv/weW61AlTvYiDIAQY9oit7+M2ExP4Bs=) 2: _qJ-2VhOB8dA_utA17nlfMrF6VA.crl (hash: MLlEMhmgj37pNyCNc88bYc4qn/IuxZg5iiEdIxGXWE8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.crl rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:b5:ed:78:82:47:f6:27:85:5e:4b:3b:c0:6a:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950 Validity Not Before: Dec 6 01:01:35 2025 GMT Not After : Dec 7 01:01:35 2025 GMT Subject: CN=ae46ee81020c56299e006f63debde2d6899c14e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a3:ec:79:54:3e:02:52:f6:18:eb:70:a7:33: 1e:bb:9f:ac:8c:ad:e5:7d:fc:15:32:55:bc:b5:f9: 5e:11:7e:44:6d:f2:a2:7f:2c:4e:77:c9:0e:e9:2a: b3:6a:b1:fd:7d:75:81:fa:b4:77:29:75:41:e4:0a: 84:57:50:bc:ac:9a:e0:08:b6:80:56:7b:5d:6f:b6: dd:76:98:d6:f1:de:50:13:1f:d8:35:39:fc:bd:04: 9d:92:12:25:aa:69:70:bf:09:b4:a9:91:73:33:13: 45:0d:ed:f1:4a:69:90:c3:3a:95:95:03:f9:cf:1d: 88:0d:ec:12:72:f4:a5:35:db:05:36:1f:e7:e6:ab: fa:81:14:eb:8a:53:8d:99:1b:98:c6:8c:b4:65:c0: 9f:e0:c7:87:87:ed:1e:44:56:85:1c:c9:1e:e6:59: 2e:50:50:0a:a7:d5:d2:83:f3:37:09:ae:4b:93:d5: b5:25:d5:02:04:a2:2a:4f:df:62:98:18:a9:bd:e0: 83:2a:1a:fe:24:ff:cc:ab:a5:27:16:37:47:c8:5b: 93:24:30:14:d7:b8:2e:d0:7d:eb:a2:44:4f:d3:6c: b1:b2:d8:14:80:c9:00:2e:9b:b4:5f:23:96:6e:d7: 38:cb:88:40:72:46:74:fa:6a:02:86:6c:36:1f:29: 7e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:46:EE:81:02:0C:56:29:9E:00:6F:63:DE:BD:E2:D6:89:9C:14:E2 X509v3 Authority Key Identifier: keyid:FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:34:ea:2d:a3:f9:32:b3:ea:01:d3:3d:10:f1:2a:f1:7d:43: db:f8:7a:e1:af:0f:97:02:0e:f0:87:2b:48:5e:3b:98:30:99: a3:8b:80:1d:14:3a:f3:5d:2d:e8:b1:08:97:ca:dc:63:c0:b5: 1d:15:6b:44:23:97:c9:f4:72:f1:84:b5:8c:f7:1d:91:87:d3: f2:a4:e3:0b:6a:ee:cc:13:2f:da:dd:51:37:e6:e5:b9:b4:01: c3:a5:70:c8:7a:c0:62:3a:0a:db:c7:6a:73:67:47:15:ed:86: f5:f2:58:96:f3:63:23:3a:b5:00:48:52:3b:f9:95:99:66:44: af:a0:7d:da:84:61:80:f0:45:81:1f:a1:55:94:21:f5:cb:66: ec:d7:39:3a:c2:88:6e:82:12:23:fc:dd:00:0f:ca:08:21:1d: 2d:b4:ae:83:cf:f7:99:a7:c1:0b:97:42:a7:14:8a:de:d3:4a: 2c:5f:28:53:19:7b:94:d7:06:45:65:8e:4b:fc:ca:fd:6f:0a: cd:c3:fb:3e:4f:c8:61:73:74:6c:be:94:89:05:ab:29:79:c3: 6f:08:ae:3a:39:51:e0:2c:13:ce:ac:d5:b6:37:f6:82:7e:30: f4:a2:da:22:22:ab:c2:d9:da:01:b8:0f:89:0b:c1:18:bf:bd: fc:e1:dc:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLbXteIJH9ieFXks7wGpkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYTI3ZWQ5NTg0ZTA3Yzc0MGZlZWI0MGQ3YjllNTdjY2Fj NWU5NTAwHhcNMjUxMjA2MDEwMTM1WhcNMjUxMjA3MDEwMTM1WjAzMTEwLwYDVQQD EyhhZTQ2ZWU4MTAyMGM1NjI5OWUwMDZmNjNkZWJkZTJkNjg5OWMxNGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aPseVQ+AlL2GOtwpzMeu5+sjK3l ffwVMlW8tfleEX5EbfKifyxOd8kO6SqzarH9fXWB+rR3KXVB5AqEV1C8rJrgCLaA Vntdb7bddpjW8d5QEx/YNTn8vQSdkhIlqmlwvwm0qZFzMxNFDe3xSmmQwzqVlQP5 zx2IDewScvSlNdsFNh/n5qv6gRTrilONmRuYxoy0ZcCf4MeHh+0eRFaFHMke5lku UFAKp9XSg/M3Ca5Lk9W1JdUCBKIqT99imBipveCDKhr+JP/Mq6UnFjdHyFuTJDAU 17gu0H3rokRP02yxstgUgMkALpu0XyOWbtc4y4hAckZ0+moChmw2Hyl+MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK5G7oECDFYpngBvY9694taJnBTiMB8GA1UdIwQY MBaAFP6iftlYTgfHQP7rQNe55XzKxelQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3FKLTJWaE9COGRBX3V0QTE3bmxmTXJGNlZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wMGVlOTMtOWIwNi00NDkwLTgwM2Qt OTliNDU2ZmRkOTU0LzEvX3FKLTJWaE9COGRBX3V0QTE3bmxmTXJGNlZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8wMGVlOTMtOWIwNi00NDkwLTgwM2QtOTliNDU2ZmRkOTU0 LzEvX3FKLTJWaE9COGRBX3V0QTE3bmxmTXJGNlZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYjTqLaP5 MrPqAdM9EPEq8X1D2/h64a8PlwIO8IcrSF47mDCZo4uAHRQ6810t6LEIl8rcY8C1 HRVrRCOXyfRy8YS1jPcdkYfT8qTjC2ruzBMv2t1RN+blubQBw6VwyHrAYjoK28dq c2dHFe2G9fJYlvNjIzq1AEhSO/mVmWZEr6B92oRhgPBFgR+hVZQh9ctm7Nc5OsKI boISI/zdAA/KCCEdLbSug8/3mafBC5dCpxSK3tNKLF8oUxl7lNcGRWWOS/zK/W8K zcP7Pk/IYXN0bL6UiQWrKXnDbwiuOjlR4CwTzqzVtjf2gn4w9KLaIiKrwtnaAbgP iQvBGL+9/OHc1A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:15:00 2025 by rpki-client