This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft File: qgYKY9op1_lWF6b_u09RzMvHhlE.mft (raw, json) Hash identifier: xPLmbv5N5BHK8xqHenbLrITvtkL/AefDpkuZD/+Ih0s= Subject key identifier: 53:92:20:68:17:3D:D1:E4:0D:03:00:AA:CD:5E:96:46:19:22:78:AD Authority key identifier: AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51 Certificate issuer: /CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651 Certificate serial: 019AF31D846B330146275ABD4B570695C22E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft Manifest number: 13D3 Signing time: Sat 06 Dec 2025 10:03:09 +0000 Manifest this update: Sat 06 Dec 2025 10:03:09 +0000 Manifest next update: Sun 07 Dec 2025 10:03:09 +0000 Files and hashes: 1: 6vC7E9fCr2S2YLpYl9NYikdwrIo.roa (hash: 0lbRVN/oMU6y83Ly4EI44/lCqnm0TAJ8jhFyCAz5oJM=) 2: VFWfa5gKi_WVASZxLKD5EBmR-Vk.roa (hash: uLbbbwsMWu+2oa981JmoBqRGb6E5FUC1zqcIAUYzCRg=) 3: qgYKY9op1_lWF6b_u09RzMvHhlE.crl (hash: qNpqJQkwAqQNPJpW2mlozkvP7Z+I5dIdfVfhsiLgM4o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:84:6b:33:01:46:27:5a:bd:4b:57:06:95:c2:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651 Validity Not Before: Dec 6 10:03:09 2025 GMT Not After : Dec 7 10:03:09 2025 GMT Subject: CN=53922068173dd1e40d0300aacd5e9646192278ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c8:2e:c4:69:a3:75:e5:8a:d2:79:3f:6f:7f: 75:a7:a8:c9:49:e3:90:76:c8:3d:69:bb:47:a8:4c: 67:c8:53:22:be:e7:da:f1:0d:fb:c2:e3:3f:51:8f: c2:00:d0:62:7e:7a:0e:66:94:87:8c:68:47:cf:17: 84:66:13:f3:67:27:ab:0c:33:0d:e1:a0:f4:74:c6: 41:99:65:57:96:a4:38:07:f0:7a:15:8f:8d:f2:c0: c2:80:e7:27:53:fb:74:8e:8c:a4:f3:4d:cd:5d:61: 53:61:77:da:c2:d7:4e:4b:70:3f:4a:48:4f:4e:a1: 23:f1:15:c2:a1:cb:6c:0c:7c:0e:d4:31:55:9b:79: 13:21:85:02:85:f9:37:2e:bb:ba:4a:68:65:35:29: 95:18:0b:e9:a8:b0:88:9d:50:8b:28:c7:30:ac:91: 6e:96:72:a5:08:30:db:d6:49:f6:ef:92:4b:45:26: e3:68:cb:51:6b:32:95:f5:d1:ab:cb:7b:fc:4e:ad: c8:28:58:10:57:e0:d8:c3:77:ce:ff:d0:a3:57:21: 15:8b:d6:e5:26:ad:2b:73:bc:01:a9:e5:0d:90:7a: d5:b3:4b:b5:10:ba:1c:4d:2c:72:aa:0f:ea:f1:84: bc:f6:32:f9:30:b7:d7:1e:11:d1:32:e3:bb:4d:06: 56:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:92:20:68:17:3D:D1:E4:0D:03:00:AA:CD:5E:96:46:19:22:78:AD X509v3 Authority Key Identifier: keyid:AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:4d:55:8c:b6:c1:71:7e:f3:2f:7e:48:32:4e:7b:81:bc:b8: 41:7e:78:f8:a5:95:08:23:af:12:34:67:54:83:30:a8:0c:89: 36:f3:d3:7a:51:c9:15:de:cc:b6:47:a3:ff:a2:5e:a0:aa:5d: 22:28:03:37:d8:3d:aa:76:8c:bc:7f:e6:40:77:0f:2f:99:34: 25:72:a2:87:1e:bd:91:40:fc:3d:e1:87:cc:d0:72:5b:fa:2a: 83:4d:f7:9f:3b:7b:19:de:03:67:3c:57:57:bd:00:dc:d9:cf: 9b:9d:e1:66:25:d1:d3:c9:42:cc:81:8a:8b:d1:12:47:b5:ab: 0a:87:f3:96:7a:78:a0:0e:d4:c7:97:ea:a9:b1:49:6e:e4:c5: ce:de:d3:90:2a:10:5c:b3:b5:cf:2c:5a:e2:2a:5d:ae:fa:fe: 40:0c:f1:2f:dc:a3:d9:b2:f2:d8:2a:e2:80:6e:bc:bc:b0:ff: 8d:bc:79:db:43:06:e2:70:96:d5:61:d9:e3:7c:f9:fd:6c:02: c6:1d:1a:d7:e4:e7:de:72:2e:e8:48:b5:47:0b:41:31:e9:60: 48:13:db:49:a4:44:71:31:c8:8e:1f:87:29:fe:02:1e:35:e4: 40:4f:04:12:4a:6c:20:14:fa:ce:d2:46:29:09:86:39:77:19: 69:4d:08:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHYRrMwFGJ1q9S1cGlcIuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMDYwYTYzZGEyOWQ3Zjk1NjE3YTZmZmJiNGY1MWNjY2Jj Nzg2NTEwHhcNMjUxMjA2MTAwMzA5WhcNMjUxMjA3MTAwMzA5WjAzMTEwLwYDVQQD Eyg1MzkyMjA2ODE3M2RkMWU0MGQwMzAwYWFjZDVlOTY0NjE5MjI3OGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcguxGmjdeWK0nk/b391p6jJSeOQ dsg9abtHqExnyFMivufa8Q37wuM/UY/CANBifnoOZpSHjGhHzxeEZhPzZyerDDMN 4aD0dMZBmWVXlqQ4B/B6FY+N8sDCgOcnU/t0joyk803NXWFTYXfawtdOS3A/SkhP TqEj8RXCoctsDHwO1DFVm3kTIYUChfk3Lru6SmhlNSmVGAvpqLCInVCLKMcwrJFu lnKlCDDb1kn275JLRSbjaMtRazKV9dGry3v8Tq3IKFgQV+DYw3fO/9CjVyEVi9bl Jq0rc7wBqeUNkHrVs0u1ELocTSxyqg/q8YS89jL5MLfXHhHRMuO7TQZW2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFOSIGgXPdHkDQMAqs1elkYZInitMB8GA1UdIwQY MBaAFKoGCmPaKdf5Vhem/7tPUczLx4ZRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWdZS1k5b3AxX2xXRjZiX3UwOVJ6TXZIaGxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8xN2U4MmEtMGUwYy00MjZiLWExNzAt NzVmZWE2YTcwZWI3LzEvcWdZS1k5b3AxX2xXRjZiX3UwOVJ6TXZIaGxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8xN2U4MmEtMGUwYy00MjZiLWExNzAtNzVmZWE2YTcwZWI3 LzEvcWdZS1k5b3AxX2xXRjZiX3UwOVJ6TXZIaGxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqk1VjLbB cX7zL35IMk57gby4QX54+KWVCCOvEjRnVIMwqAyJNvPTelHJFd7Mtkej/6JeoKpd IigDN9g9qnaMvH/mQHcPL5k0JXKihx69kUD8PeGHzNByW/oqg033nzt7Gd4DZzxX V70A3NnPm53hZiXR08lCzIGKi9ESR7WrCofzlnp4oA7Ux5fqqbFJbuTFzt7TkCoQ XLO1zyxa4ipdrvr+QAzxL9yj2bLy2CrigG68vLD/jbx520MG4nCW1WHZ43z5/WwC xh0a1+Tn3nIu6Ei1RwtBMelgSBPbSaREcTHIjh+HKf4CHjXkQE8EEkpsIBT6ztJG KQmGOXcZaU0I7Q== -----END CERTIFICATE-----Generated at Sat Dec 6 13:45:48 2025 by rpki-client