This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft File: qR_iZyyPHBKyetoPzLqnwhLL1xw.mft (raw, json) Hash identifier: Ybz3n/c2CRkNnEjqsA3owao0su2tEjLgBaqKI4/HBd0= Subject key identifier: F3:05:5C:27:FA:8A:66:DF:4F:18:22:C5:F2:81:66:6B:38:51:8F:61 Authority key identifier: A9:1F:E2:67:2C:8F:1C:12:B2:7A:DA:0F:CC:BA:A7:C2:12:CB:D7:1C Certificate issuer: /CN=a91fe2672c8f1c12b27ada0fccbaa7c212cbd71c Certificate serial: 019AF23FD79308A5C0986146728240E7E916 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qR_iZyyPHBKyetoPzLqnwhLL1xw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 06:01:01 +0000 Manifest this update: Sat 06 Dec 2025 06:01:01 +0000 Manifest next update: Sun 07 Dec 2025 06:01:01 +0000 Files and hashes: 1: 2Q0kx85pwBzfIMwLp9ldarIpih0.roa (hash: D6p/IFbJlNokn2XAUVSHhwdlOMDmGJADmbqv1d/nsjg=) 2: qR_iZyyPHBKyetoPzLqnwhLL1xw.crl (hash: /63xBKfH6fQK53brldYmdCK1PLhzDZwcqasASTfMYO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft rsync://rpki.ripe.net/repository/DEFAULT/qR_iZyyPHBKyetoPzLqnwhLL1xw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:d7:93:08:a5:c0:98:61:46:72:82:40:e7:e9:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a91fe2672c8f1c12b27ada0fccbaa7c212cbd71c Validity Not Before: Dec 6 06:01:01 2025 GMT Not After : Dec 7 06:01:01 2025 GMT Subject: CN=f3055c27fa8a66df4f1822c5f281666b38518f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f5:67:18:f8:bc:52:9d:a5:72:f4:b8:dd:84: 0c:82:1f:ce:6f:eb:4e:d7:40:59:be:78:7f:e4:ca: 46:2e:f3:75:8e:de:69:52:bb:ef:6b:ac:48:fd:27: 45:97:c3:94:fa:9e:bb:2b:1b:4d:ad:75:25:8b:b5: 84:6c:26:8a:b7:be:34:85:b4:95:20:58:32:51:55: 22:48:3d:20:ed:4e:73:fe:0f:c7:a8:11:be:32:9d: b4:39:28:e6:fc:c1:49:3a:a2:63:cf:3a:ba:41:1f: a6:b8:ba:3c:2f:98:34:e1:f4:1f:8b:52:67:a7:10: 26:57:12:58:c6:9f:e2:6c:a9:d6:df:23:a2:8b:20: 8e:eb:08:be:61:7f:a4:10:a9:7b:8b:90:da:9e:fb: 52:6a:4b:13:8c:5b:5a:0f:3c:1d:af:61:88:2c:59: 64:08:eb:6c:57:eb:df:c4:d9:0f:1c:5e:1c:d4:58: bd:e7:a4:c6:ce:93:3d:5f:fa:55:36:3e:74:9b:8a: 82:23:98:ec:28:43:5c:25:7d:6d:c4:16:6c:77:4f: 43:dd:5b:6d:12:d6:17:82:ec:cc:bd:e9:ef:a0:24: 0d:c1:e6:2d:83:98:a1:77:cc:dc:1d:89:73:41:c3: 5c:65:1a:a7:60:b7:00:81:e6:3e:dd:1b:67:79:ee: 3a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:05:5C:27:FA:8A:66:DF:4F:18:22:C5:F2:81:66:6B:38:51:8F:61 X509v3 Authority Key Identifier: keyid:A9:1F:E2:67:2C:8F:1C:12:B2:7A:DA:0F:CC:BA:A7:C2:12:CB:D7:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qR_iZyyPHBKyetoPzLqnwhLL1xw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:4a:37:81:a8:76:85:25:99:57:a7:1e:ce:f2:e4:50:c6:a1: ac:ad:27:1e:f4:c1:fc:3f:b5:7f:5e:62:ca:8a:97:43:70:da: ef:87:a5:51:38:8a:60:35:b6:a1:83:32:07:57:6d:8f:88:ef: f2:7e:2b:12:d3:0f:a3:bd:b7:5f:14:b6:aa:d6:6d:f5:ca:67: 47:b5:5c:09:ef:69:ec:61:16:28:d8:59:25:32:32:c6:94:86: 6c:ea:a4:61:c3:99:2d:84:5d:d6:be:c9:62:55:ae:31:59:c1: 09:1b:8b:22:3b:86:e6:0c:f4:6f:b1:1f:04:13:7a:62:dc:66: ca:a8:f7:4a:85:a4:76:f8:60:0d:f3:42:2a:09:35:d3:40:8c: 14:e6:b4:68:39:41:fb:ec:e0:c9:19:b2:16:9e:6d:a2:e6:e8: 50:32:c5:7c:e2:94:f2:17:ff:f9:40:07:8e:02:9e:49:f0:6a: 98:e4:ac:a1:55:5d:33:e9:d6:c5:ce:f1:5a:2a:bd:ab:ad:dc: a5:7b:6f:71:63:01:6b:ba:16:33:00:02:17:c7:1c:65:70:65: f3:d5:48:7b:f1:dc:d0:8f:7b:37:50:9f:e4:7b:a7:91:6a:0b: e7:c3:a9:e4:f1:15:16:21:28:f0:4e:45:21:fa:22:19:9d:4b: 38:37:56:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9eTCKXAmGFGcoJA5+kWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MWZlMjY3MmM4ZjFjMTJiMjdhZGEwZmNjYmFhN2MyMTJj YmQ3MWMwHhcNMjUxMjA2MDYwMTAxWhcNMjUxMjA3MDYwMTAxWjAzMTEwLwYDVQQD EyhmMzA1NWMyN2ZhOGE2NmRmNGYxODIyYzVmMjgxNjY2YjM4NTE4ZjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PVnGPi8Up2lcvS43YQMgh/Ob+tO 10BZvnh/5MpGLvN1jt5pUrvva6xI/SdFl8OU+p67KxtNrXUli7WEbCaKt740hbSV IFgyUVUiSD0g7U5z/g/HqBG+Mp20OSjm/MFJOqJjzzq6QR+muLo8L5g04fQfi1Jn pxAmVxJYxp/ibKnW3yOiiyCO6wi+YX+kEKl7i5DanvtSaksTjFtaDzwdr2GILFlk COtsV+vfxNkPHF4c1Fi956TGzpM9X/pVNj50m4qCI5jsKENcJX1txBZsd09D3Vtt EtYXguzMvenvoCQNweYtg5ihd8zcHYlzQcNcZRqnYLcAgeY+3Rtnee46BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPMFXCf6imbfTxgixfKBZms4UY9hMB8GA1UdIwQY MBaAFKkf4mcsjxwSsnraD8y6p8ISy9ccMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVJfaVp5eVBIQkt5ZXRvUHpMcW53aExMMXh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82YzA2YzktM2Y0Ni00NjU4LWFlODkt OWJmMjI2NDAyZmQ0LzEvcVJfaVp5eVBIQkt5ZXRvUHpMcW53aExMMXh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS82YzA2YzktM2Y0Ni00NjU4LWFlODktOWJmMjI2NDAyZmQ0 LzEvcVJfaVp5eVBIQkt5ZXRvUHpMcW53aExMMXh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEUo3gah2 hSWZV6cezvLkUMahrK0nHvTB/D+1f15iyoqXQ3Da74elUTiKYDW2oYMyB1dtj4jv 8n4rEtMPo723XxS2qtZt9cpnR7VcCe9p7GEWKNhZJTIyxpSGbOqkYcOZLYRd1r7J YlWuMVnBCRuLIjuG5gz0b7EfBBN6Ytxmyqj3SoWkdvhgDfNCKgk100CMFOa0aDlB ++zgyRmyFp5touboUDLFfOKU8hf/+UAHjgKeSfBqmOSsoVVdM+nWxc7xWiq9q63c pXtvcWMBa7oWMwACF8ccZXBl89VIe/Hc0I97N1Cf5HunkWoL58Op5PEVFiEo8E5F IfoiGZ1LODdW0A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:20:06 2025 by rpki-client