This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft File: qQIAoAAN9dhFudsoTQotvuZ2xag.mft (raw, json) Hash identifier: 43je/SDm/kBZtOuBBvcI6PrVwF2GaxWWWzVpLcbSyTE= Subject key identifier: 55:8E:47:C8:9D:AA:4B:0D:1B:F7:1F:E6:08:69:6A:F1:B5:0D:93:21 Authority key identifier: A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8 Certificate issuer: /CN=a90200a0000df5d845b9db284d0a2dbee676c5a8 Certificate serial: 019AF276E8EC22651642ADCDDF97227E0B16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft Manifest number: 1065 Signing time: Sat 06 Dec 2025 07:01:10 +0000 Manifest this update: Sat 06 Dec 2025 07:01:10 +0000 Manifest next update: Sun 07 Dec 2025 07:01:10 +0000 Files and hashes: 1: XVxrMXrjLDQVv9bac22qQ0QMNvQ.roa (hash: Yc8aZeN9qk7mkDqbHTwdGKZnQ52FHThS1w10bQxAp2w=) 2: i3VEozY7zHl6WOCVl59PVxz43a8.roa (hash: jzz5iRsaOnS+mlLDbSWuuSqGL3bfQAaKxsPDmiylUHA=) 3: qQIAoAAN9dhFudsoTQotvuZ2xag.crl (hash: zSidVjZb6cm/ku+O4t2Smuz/QkOLSVx/oTHgS69WrII=) 4: uC9PLmr5O8CehNSZEFEDNzHH7Us.roa (hash: rxEdnwW/DBAsm5BXVYbjYVnepXH4Kn8/IHHbh9uyU6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:e8:ec:22:65:16:42:ad:cd:df:97:22:7e:0b:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a90200a0000df5d845b9db284d0a2dbee676c5a8 Validity Not Before: Dec 6 07:01:10 2025 GMT Not After : Dec 7 07:01:10 2025 GMT Subject: CN=558e47c89daa4b0d1bf71fe608696af1b50d9321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a6:26:43:db:3b:00:0c:91:b1:c4:9e:36:cf: ac:94:de:aa:2a:fb:28:b6:49:e6:4b:28:bf:ac:f5: e7:89:ec:eb:92:8e:9a:b7:35:74:78:eb:54:57:7c: 1d:b2:3a:2e:f1:f2:ee:09:49:d3:45:23:61:0c:aa: 5f:50:d1:0e:2b:88:a9:7b:74:f1:d3:c0:15:fd:db: dc:d3:e9:5e:a8:dd:d6:cd:d4:a2:cc:fe:dc:d6:49: 1d:d8:7a:2d:2a:9c:79:fc:c7:d5:08:e0:13:b5:be: 72:d6:6b:59:15:73:5f:af:66:fb:af:e7:84:a2:cd: 00:3f:f6:4f:18:01:e2:d6:e0:43:18:af:9a:d4:db: ee:eb:bc:4a:6b:25:85:8d:c6:cc:04:b1:21:ac:72: 03:f9:0e:95:71:79:45:38:c5:96:65:b6:e7:17:99: 85:6c:2b:74:f0:b4:15:69:13:06:95:c6:cb:15:0b: 4b:b0:4b:cd:66:08:3a:0c:8c:ba:4a:38:48:8d:20: 54:cf:21:7e:5a:3c:16:49:2d:0a:2c:3d:e6:c4:55: f9:3f:2f:0d:93:1c:d7:c3:ba:45:54:2d:3b:cf:4d: c0:7f:3c:3e:ca:de:b8:c7:c9:82:3c:08:df:03:bd: f2:1c:18:5d:34:af:b5:44:52:2c:09:a4:96:29:03: db:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:8E:47:C8:9D:AA:4B:0D:1B:F7:1F:E6:08:69:6A:F1:B5:0D:93:21 X509v3 Authority Key Identifier: keyid:A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:32:2f:09:e6:59:88:6d:43:3e:68:bc:36:8a:fd:31:fd:87: c4:76:8c:b9:2b:f2:42:cc:0e:de:a9:a3:3b:8f:82:26:07:c0: 28:8e:ad:d5:dc:aa:f0:42:0b:e0:bc:77:62:d0:73:f6:87:89: 8c:db:4a:7d:8f:cf:b9:bb:8d:71:a7:68:13:d2:5a:87:17:8d: 51:c5:7e:c6:ea:dc:e6:0f:9b:cd:a8:fd:3b:36:3f:f2:9c:77: d9:15:e9:bf:54:56:38:3d:0d:5e:e7:18:50:1f:47:20:bb:06: 54:e8:8c:a0:66:bd:6c:c2:b7:82:b7:7e:59:56:2f:64:e5:a1: 1f:ba:79:14:e0:97:f6:35:2a:07:71:2e:3b:49:8a:b1:11:48: bf:24:8f:88:81:b8:c4:41:d5:b4:8c:6a:b4:38:63:0e:14:5f: 70:40:16:bb:2d:8f:d4:40:a5:48:ed:37:74:f0:e0:a9:d5:aa: 09:3f:fb:2e:80:09:4b:c3:aa:5e:fa:0a:92:d8:98:f2:6e:14: a5:2b:a8:89:59:9d:86:b5:cf:b1:2c:90:96:f9:1f:07:3d:ec: 1d:71:55:91:f9:54:e4:37:31:e6:e7:55:97:cb:2f:77:1d:52: 85:ce:8e:96:30:a3:4c:f4:2c:79:32:09:95:d1:5f:de:66:58: 43:12:84:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydujsImUWQq3N35cifgsWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MDIwMGEwMDAwZGY1ZDg0NWI5ZGIyODRkMGEyZGJlZTY3 NmM1YTgwHhcNMjUxMjA2MDcwMTEwWhcNMjUxMjA3MDcwMTEwWjAzMTEwLwYDVQQD Eyg1NThlNDdjODlkYWE0YjBkMWJmNzFmZTYwODY5NmFmMWI1MGQ5MzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqYmQ9s7AAyRscSeNs+slN6qKvso tknmSyi/rPXniezrko6atzV0eOtUV3wdsjou8fLuCUnTRSNhDKpfUNEOK4ipe3Tx 08AV/dvc0+leqN3WzdSizP7c1kkd2HotKpx5/MfVCOATtb5y1mtZFXNfr2b7r+eE os0AP/ZPGAHi1uBDGK+a1Nvu67xKayWFjcbMBLEhrHID+Q6VcXlFOMWWZbbnF5mF bCt08LQVaRMGlcbLFQtLsEvNZgg6DIy6SjhIjSBUzyF+WjwWSS0KLD3mxFX5Py8N kxzXw7pFVC07z03Afzw+yt64x8mCPAjfA73yHBhdNK+1RFIsCaSWKQPbEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFWOR8idqksNG/cf5ghpavG1DZMhMB8GA1UdIwQY MBaAFKkCAKAADfXYRbnbKE0KLb7mdsWoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVFJQW9BQU45ZGhGdWRzb1RRb3R2dVoyeGFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9iMWUzZTEtOGI3ZC00ZTIyLTg3MGMt NThmNTc0NDk1YmI4LzEvcVFJQW9BQU45ZGhGdWRzb1RRb3R2dVoyeGFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9iMWUzZTEtOGI3ZC00ZTIyLTg3MGMtNThmNTc0NDk1YmI4 LzEvcVFJQW9BQU45ZGhGdWRzb1RRb3R2dVoyeGFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAszIvCeZZ iG1DPmi8Nor9Mf2HxHaMuSvyQswO3qmjO4+CJgfAKI6t1dyq8EIL4Lx3YtBz9oeJ jNtKfY/PubuNcadoE9JahxeNUcV+xurc5g+bzaj9OzY/8px32RXpv1RWOD0NXucY UB9HILsGVOiMoGa9bMK3grd+WVYvZOWhH7p5FOCX9jUqB3EuO0mKsRFIvySPiIG4 xEHVtIxqtDhjDhRfcEAWuy2P1EClSO03dPDgqdWqCT/7LoAJS8OqXvoKktiY8m4U pSuoiVmdhrXPsSyQlvkfBz3sHXFVkflU5Dcx5udVl8svdx1Shc6OljCjTPQseTIJ ldFf3mZYQxKE5A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:09:51 2025 by rpki-client