This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft File: qvpFpixehQq5yHJqWam_qZLTcbI.mft (raw, json) Hash identifier: 89CnOfqP8xjoO/RU/73WFYSHzL8RsBYaDatN4Vr5H7Y= Subject key identifier: 03:95:BD:DC:04:2C:8E:14:AE:30:E8:56:E0:C2:D0:73:E2:98:C8:1D Authority key identifier: AA:FA:45:A6:2C:5E:85:0A:B9:C8:72:6A:59:A9:BF:A9:92:D3:71:B2 Certificate issuer: /CN=aafa45a62c5e850ab9c8726a59a9bfa992d371b2 Certificate serial: 019B2F677548F3AD45CB576309B6F97EB50B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvpFpixehQq5yHJqWam_qZLTcbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 03:01:07 +0000 Manifest this update: Thu 18 Dec 2025 03:01:07 +0000 Manifest next update: Fri 19 Dec 2025 03:01:07 +0000 Files and hashes: 1: FUCX9OW5znsVvJDFK2DPDP4kaXw.roa (hash: 7Yn8lQlQu+p9EOSUqkrA7N+uYFCRbQJhJNvyuVgdZVs=) 2: qvpFpixehQq5yHJqWam_qZLTcbI.crl (hash: ln4bw/m4XEcdD7Jz5qvazjdDOtxHdB1v5DbcPiXKUuo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.crl rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft rsync://rpki.ripe.net/repository/DEFAULT/qvpFpixehQq5yHJqWam_qZLTcbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:75:48:f3:ad:45:cb:57:63:09:b6:f9:7e:b5:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aafa45a62c5e850ab9c8726a59a9bfa992d371b2 Validity Not Before: Dec 18 03:01:07 2025 GMT Not After : Dec 19 03:01:07 2025 GMT Subject: CN=0395bddc042c8e14ae30e856e0c2d073e298c81d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:87:09:22:9f:9a:00:e4:83:f7:30:25:28:37: 46:9d:ef:4c:70:2a:dd:b1:ef:37:6d:43:c6:3d:f5: 2b:19:32:bd:75:92:d9:cf:08:1f:44:4c:af:6b:8e: 8a:b1:1b:70:d8:c2:b8:09:fc:b0:1e:8a:d7:c1:c9: 4d:53:26:8d:0a:aa:57:da:26:07:b9:57:db:e6:26: fd:f5:ba:c9:2b:6d:a5:a3:bb:b9:8b:b9:dc:5d:01: 36:a3:48:99:06:10:56:11:3a:3f:65:2f:e4:c2:6f: f4:ab:9c:a0:2b:15:61:5c:b8:f7:1e:8e:ca:8d:00: 25:c6:fa:71:1a:72:c6:bc:1a:eb:38:1a:93:cf:83: c3:84:b6:bf:bc:4e:93:33:d3:f4:61:30:82:ff:4e: 19:d1:3c:35:45:97:b9:f1:b8:43:1d:51:48:63:9e: 31:66:f3:af:e0:3c:1a:02:cd:1f:f1:65:7f:9e:de: 17:c3:68:c6:cd:b9:c0:d7:32:1a:30:f3:98:4c:12: 09:41:0b:55:1b:05:1d:7b:f9:c9:a4:f6:71:5e:99: 70:0a:dc:73:01:d8:25:48:4d:3a:eb:43:a3:f1:de: 53:0c:0d:6f:2a:47:e6:7e:e6:43:52:05:c7:0a:b4: b1:94:79:66:be:eb:60:3d:c0:98:ad:d2:0a:25:ec: 8f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:95:BD:DC:04:2C:8E:14:AE:30:E8:56:E0:C2:D0:73:E2:98:C8:1D X509v3 Authority Key Identifier: keyid:AA:FA:45:A6:2C:5E:85:0A:B9:C8:72:6A:59:A9:BF:A9:92:D3:71:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvpFpixehQq5yHJqWam_qZLTcbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:65:b2:e0:80:2d:86:2d:6d:ff:c9:af:31:21:cf:1a:81:ec: 29:ae:02:e4:bf:d9:fd:40:05:ee:d5:82:64:31:b0:27:d9:df: 09:f0:85:68:3d:d3:4e:05:6a:c9:11:ad:88:95:90:95:15:e9: 93:51:5c:fa:94:2f:7a:0c:4f:fa:5d:8d:ee:06:30:8a:08:75: f7:f1:a9:e4:44:ed:7b:ea:ca:a5:10:7a:3b:59:f9:7e:7d:6d: 5a:6a:db:11:fc:c3:80:55:80:77:ce:2f:83:da:f0:72:10:eb: 88:7c:37:37:e7:c7:85:4b:0a:47:de:a6:56:fd:42:60:2f:eb: c7:92:c4:36:63:6e:83:24:45:cf:3b:a9:82:f8:c1:16:d0:74: ee:c5:35:22:de:b7:51:9b:9d:b3:d1:2e:0e:38:4e:61:a6:14: a5:4d:05:7f:a9:80:8a:79:cd:94:f2:5d:73:c6:41:be:8b:c7: 13:ce:4b:e1:1c:5c:87:7c:03:18:9b:bf:c8:16:f9:82:0b:ae: 24:a9:3c:27:0d:0a:2e:84:41:50:be:71:09:d0:18:40:37:d3: 2c:7e:85:9d:f0:be:21:2d:47:bc:0a:73:e8:c6:d6:a0:c7:69: 42:6f:f6:5f:fd:7a:ec:06:53:51:92:59:4d:c3:34:84:1a:a8: 71:f1:b8:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ3VI861Fy1djCbb5frULMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhZmE0NWE2MmM1ZTg1MGFiOWM4NzI2YTU5YTliZmE5OTJk MzcxYjIwHhcNMjUxMjE4MDMwMTA3WhcNMjUxMjE5MDMwMTA3WjAzMTEwLwYDVQQD EygwMzk1YmRkYzA0MmM4ZTE0YWUzMGU4NTZlMGMyZDA3M2UyOThjODFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYcJIp+aAOSD9zAlKDdGne9McCrd se83bUPGPfUrGTK9dZLZzwgfREyva46KsRtw2MK4CfywHorXwclNUyaNCqpX2iYH uVfb5ib99brJK22lo7u5i7ncXQE2o0iZBhBWETo/ZS/kwm/0q5ygKxVhXLj3Ho7K jQAlxvpxGnLGvBrrOBqTz4PDhLa/vE6TM9P0YTCC/04Z0Tw1RZe58bhDHVFIY54x ZvOv4DwaAs0f8WV/nt4Xw2jGzbnA1zIaMPOYTBIJQQtVGwUde/nJpPZxXplwCtxz AdglSE0660Oj8d5TDA1vKkfmfuZDUgXHCrSxlHlmvutgPcCYrdIKJeyPLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAOVvdwELI4UrjDoVuDC0HPimMgdMB8GA1UdIwQY MBaAFKr6RaYsXoUKuchyalmpv6mS03GyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXZwRnBpeGVoUXE1eUhKcVdhbV9xWkxUY2JJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy85N2E5YWEtNjk3MC00OWM4LThkMGEt MmIzZGRiY2I3MjM4LzEvcXZwRnBpeGVoUXE1eUhKcVdhbV9xWkxUY2JJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy85N2E5YWEtNjk3MC00OWM4LThkMGEtMmIzZGRiY2I3MjM4 LzEvcXZwRnBpeGVoUXE1eUhKcVdhbV9xWkxUY2JJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQGWy4IAt hi1t/8mvMSHPGoHsKa4C5L/Z/UAF7tWCZDGwJ9nfCfCFaD3TTgVqyRGtiJWQlRXp k1Fc+pQvegxP+l2N7gYwigh19/Gp5ETte+rKpRB6O1n5fn1tWmrbEfzDgFWAd84v g9rwchDriHw3N+fHhUsKR96mVv1CYC/rx5LENmNugyRFzzupgvjBFtB07sU1It63 UZuds9EuDjhOYaYUpU0Ff6mAinnNlPJdc8ZBvovHE85L4Rxch3wDGJu/yBb5gguu JKk8Jw0KLoRBUL5xCdAYQDfTLH6FnfC+IS1HvApz6MbWoMdpQm/2X/167AZTUZJZ TcM0hBqocfG4hA== -----END CERTIFICATE-----Generated at Thu Dec 18 07:10:24 2025 by rpki-client