This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft File: qQYfL0mm16-epna60D3xzi9QJg0.mft (raw, json) Hash identifier: T7h3oWh7aIXbb9agVeXM28tfoGAVOmEQQC5tCEvWPzg= Subject key identifier: 4D:FB:50:6B:4B:54:95:1C:E2:93:67:74:A0:97:08:7A:22:23:E6:4C Authority key identifier: A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D Certificate issuer: /CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d Certificate serial: 019AF1D184E0B141BEE1A8A2600684EA027E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft Manifest number: 0B52 Signing time: Sat 06 Dec 2025 04:00:31 +0000 Manifest this update: Sat 06 Dec 2025 04:00:31 +0000 Manifest next update: Sun 07 Dec 2025 04:00:31 +0000 Files and hashes: 1: b2Ad3Pubnmsc5v7wEeiy2i9crjU.roa (hash: YMeUe949TNAn7B7dURgw/Dn08QgY72JO978X9Gd4XkM=) 2: qQYfL0mm16-epna60D3xzi9QJg0.crl (hash: 2xsrnd7FHrXZVUDK7nex2UojgOlt81qWk6Wk0nO1kMU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:84:e0:b1:41:be:e1:a8:a2:60:06:84:ea:02:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d Validity Not Before: Dec 6 04:00:31 2025 GMT Not After : Dec 7 04:00:31 2025 GMT Subject: CN=4dfb506b4b54951ce2936774a097087a2223e64c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:76:cb:0d:e9:2d:3c:e4:e1:0f:cc:21:0f:64: af:35:01:ae:43:65:1d:31:3c:bb:7c:c4:b1:08:0c: fe:68:70:11:69:a7:de:27:27:62:b0:a3:98:bf:b0: 27:2c:6f:18:02:b4:cf:df:73:31:2a:ef:c7:4e:6c: 3f:2b:8f:91:00:74:df:f8:7b:a5:99:32:ce:2e:88: 2b:21:d4:8e:5e:8c:02:4b:71:2a:c3:d7:bb:f5:4e: 0c:a5:5f:b8:54:4e:dc:be:d8:0f:c4:72:97:44:ad: 5a:96:2c:d1:fc:dc:13:d8:4c:30:3e:4b:6d:7c:70: 80:13:e7:27:db:01:c4:22:2e:4b:e7:21:d8:d3:f2: 1d:13:8e:85:b4:47:64:ca:57:f7:55:29:e7:99:93: ba:22:56:06:fc:e8:bf:31:74:47:87:f5:cd:6f:f0: 75:0d:db:a4:57:35:5b:57:b3:38:9e:b9:04:41:30: 5f:07:2c:10:3b:00:3e:e6:a2:ec:54:0b:84:1e:32: f0:6c:fa:87:ce:95:ad:89:91:c1:be:39:13:e4:c2: 4d:42:8a:0b:c7:51:52:c0:31:0a:31:ca:d1:04:0c: 46:e1:7b:28:f4:5e:2b:d0:6d:51:07:95:02:02:18: 14:83:85:10:b8:a8:51:96:96:3d:10:4f:cf:f9:ff: bd:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:FB:50:6B:4B:54:95:1C:E2:93:67:74:A0:97:08:7A:22:23:E6:4C X509v3 Authority Key Identifier: keyid:A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:84:6d:7a:11:66:46:c1:50:19:b4:63:b9:98:ab:19:02:b5: ab:ac:8c:2a:52:3a:bd:bf:a6:fb:c0:3e:fe:8a:9d:9c:90:66: b1:cb:0b:45:9f:c1:e8:3d:fd:c9:6a:40:78:f4:de:65:40:96: 1b:11:38:ff:cd:fc:63:cd:76:3a:0b:a3:35:ef:00:9f:6b:ca: b5:65:84:90:df:70:cb:81:51:a7:48:d6:5f:03:44:39:7f:93: 89:76:72:1f:42:74:87:c7:c8:2e:3e:6a:50:ea:bc:68:0c:e6: d6:67:40:29:f4:df:70:73:0a:8a:e0:ce:56:26:6d:60:66:0e: c3:a3:f9:96:2d:fe:6c:ee:b4:f4:c7:c3:20:ad:93:8e:dc:ff: b5:93:c3:30:42:a6:ee:bb:0d:27:ff:92:05:54:df:f8:d2:0f: f5:8f:ae:a4:fa:ee:6a:7f:aa:80:16:24:7e:d1:1e:8e:54:0a: 8c:fb:15:42:0f:fb:c3:b2:92:d5:66:c3:a0:a3:25:92:b4:38: 62:3e:88:51:78:d3:36:65:26:54:dd:ac:97:21:c8:f2:4d:6c: cf:68:f2:16:8b:2a:0b:bc:0a:34:05:c2:f3:07:11:54:73:8e: 7f:e6:4e:51:32:84:b0:77:b9:be:b5:e6:5f:d3:a7:77:08:8f: 25:c0:f8:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0YTgsUG+4aiiYAaE6gJ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MDYxZjJmNDlhNmQ3YWY5ZWE2NzZiYWQwM2RmMWNlMmY1 MDI2MGQwHhcNMjUxMjA2MDQwMDMxWhcNMjUxMjA3MDQwMDMxWjAzMTEwLwYDVQQD Eyg0ZGZiNTA2YjRiNTQ5NTFjZTI5MzY3NzRhMDk3MDg3YTIyMjNlNjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXbLDektPOThD8whD2SvNQGuQ2Ud MTy7fMSxCAz+aHARaafeJydisKOYv7AnLG8YArTP33MxKu/HTmw/K4+RAHTf+Hul mTLOLogrIdSOXowCS3Eqw9e79U4MpV+4VE7cvtgPxHKXRK1alizR/NwT2EwwPktt fHCAE+cn2wHEIi5L5yHY0/IdE46FtEdkylf3VSnnmZO6IlYG/Oi/MXRHh/XNb/B1 DdukVzVbV7M4nrkEQTBfBywQOwA+5qLsVAuEHjLwbPqHzpWtiZHBvjkT5MJNQooL x1FSwDEKMcrRBAxG4Xso9F4r0G1RB5UCAhgUg4UQuKhRlpY9EE/P+f+9dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE37UGtLVJUc4pNndKCXCHoiI+ZMMB8GA1UdIwQY MBaAFKkGHy9JptevnqZ2utA98c4vUCYNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVFZZkwwbW0xNi1lcG5hNjBEM3h6aTlRSmcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTliZTEtMWZhMi00MjUzLWJmMDEt ZjZjMjY4NjEyZmM3LzEvcVFZZkwwbW0xNi1lcG5hNjBEM3h6aTlRSmcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9iYTliZTEtMWZhMi00MjUzLWJmMDEtZjZjMjY4NjEyZmM3 LzEvcVFZZkwwbW0xNi1lcG5hNjBEM3h6aTlRSmcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfYRtehFm RsFQGbRjuZirGQK1q6yMKlI6vb+m+8A+/oqdnJBmscsLRZ/B6D39yWpAePTeZUCW GxE4/838Y812OgujNe8An2vKtWWEkN9wy4FRp0jWXwNEOX+TiXZyH0J0h8fILj5q UOq8aAzm1mdAKfTfcHMKiuDOViZtYGYOw6P5li3+bO609MfDIK2Tjtz/tZPDMEKm 7rsNJ/+SBVTf+NIP9Y+upPruan+qgBYkftEejlQKjPsVQg/7w7KS1WbDoKMlkrQ4 Yj6IUXjTNmUmVN2slyHI8k1sz2jyFosqC7wKNAXC8wcRVHOOf+ZOUTKEsHe5vrXm X9OndwiPJcD4ww== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:27 2025 by rpki-client