This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft File: qvpFpixehQq5yHJqWam_qZLTcbI.mft (raw, json) Hash identifier: vErGVatIL7BrJUdEia8i618ufl5HP8OkacqEN0OzeZQ= Subject key identifier: 7A:7C:A6:50:BF:42:6E:9F:04:D0:E9:E4:86:E9:9E:6B:F4:69:53:9E Authority key identifier: AA:FA:45:A6:2C:5E:85:0A:B9:C8:72:6A:59:A9:BF:A9:92:D3:71:B2 Certificate issuer: /CN=aafa45a62c5e850ab9c8726a59a9bfa992d371b2 Certificate serial: 019AF19BB013C35E6D5AF5158B4D1EA921FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvpFpixehQq5yHJqWam_qZLTcbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 03:01:43 +0000 Manifest this update: Sat 06 Dec 2025 03:01:43 +0000 Manifest next update: Sun 07 Dec 2025 03:01:43 +0000 Files and hashes: 1: FUCX9OW5znsVvJDFK2DPDP4kaXw.roa (hash: 7Yn8lQlQu+p9EOSUqkrA7N+uYFCRbQJhJNvyuVgdZVs=) 2: qvpFpixehQq5yHJqWam_qZLTcbI.crl (hash: r+DOz5Ti1IxVhkKNjcky4Tst8qGdUkFzhXhMglYqSKE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.crl rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft rsync://rpki.ripe.net/repository/DEFAULT/qvpFpixehQq5yHJqWam_qZLTcbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:b0:13:c3:5e:6d:5a:f5:15:8b:4d:1e:a9:21:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aafa45a62c5e850ab9c8726a59a9bfa992d371b2 Validity Not Before: Dec 6 03:01:43 2025 GMT Not After : Dec 7 03:01:43 2025 GMT Subject: CN=7a7ca650bf426e9f04d0e9e486e99e6bf469539e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:75:b2:4f:c9:27:b9:d9:6e:23:63:43:6d:0f: b4:12:e9:8f:5c:55:f2:e8:30:c1:f2:d3:29:e9:0a: ab:ba:7b:ce:0f:b3:f6:c1:cf:95:1e:ad:bf:d2:7b: 99:ad:3f:aa:2a:58:71:9c:51:e3:78:c2:77:ed:24: a2:d1:45:3e:32:8a:6e:42:cc:f0:eb:fc:72:e4:dd: 92:45:ce:22:3c:cc:0f:93:d9:ae:32:26:1c:ab:46: cd:87:77:14:58:f5:48:25:3e:39:29:5e:72:a1:ca: 58:20:8a:d1:fb:9d:1f:bd:27:44:f7:4c:09:d9:a0: 41:2e:f7:07:15:16:5a:10:65:fd:18:cd:b2:8e:80: 3c:cc:83:37:58:61:1e:87:c6:2f:e1:dd:cf:a0:11: 18:67:7b:91:b3:9e:ea:05:62:77:85:5c:0e:87:10: c8:ad:79:e9:57:6e:32:da:b4:24:0c:40:01:b8:f2: 6b:42:9f:8f:b6:f0:2f:40:a1:ec:8e:92:2a:1c:6f: c4:64:c5:f2:34:fe:3f:d3:96:7e:a1:a3:9e:90:b6: 47:15:3d:ae:3e:67:ee:f3:40:9d:85:15:4c:35:13: 6a:b1:4d:e9:1e:42:f4:f1:d6:ca:47:1f:61:ac:50: e8:b3:d5:61:51:ce:33:9d:da:6f:58:a2:85:7b:71: f8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:7C:A6:50:BF:42:6E:9F:04:D0:E9:E4:86:E9:9E:6B:F4:69:53:9E X509v3 Authority Key Identifier: keyid:AA:FA:45:A6:2C:5E:85:0A:B9:C8:72:6A:59:A9:BF:A9:92:D3:71:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvpFpixehQq5yHJqWam_qZLTcbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:e3:5a:74:86:c7:30:d2:93:51:2b:ff:3b:68:d1:34:0f:3f: 36:27:13:93:0b:cc:0b:04:49:50:d9:1b:c5:6e:3d:9f:8e:65: ed:42:9f:cb:a8:d7:28:91:00:44:24:3f:7c:9c:b0:2e:f1:3c: 15:a3:2a:39:bf:eb:78:56:1b:04:8b:c9:13:38:5b:fc:0d:9f: dd:61:11:ae:bf:a6:45:1d:67:60:02:ff:b2:84:dd:c0:9e:34: 92:ef:f2:12:b2:1c:9e:1b:87:5e:13:24:24:40:81:d2:c2:f0: 92:3c:73:ad:28:41:f2:13:cd:c5:7b:9d:67:1c:ca:7b:30:19: 94:f4:16:69:32:0f:3b:60:a6:11:fa:6b:b3:22:21:b3:6e:05: 56:b5:02:fc:36:13:00:93:5b:05:12:9a:96:65:1a:6c:19:87: ce:95:26:cc:91:9c:36:3f:40:8c:d5:7d:b3:76:45:b6:ac:d4: af:e5:1f:a0:9a:2b:7f:1d:5c:f8:f6:49:d6:78:3d:e8:61:2c: 4c:a6:5b:09:c2:a1:94:75:4b:ce:74:72:d6:db:fa:e9:e1:54: 87:41:f7:5e:89:89:81:a8:4f:3e:b5:fb:49:3c:5c:68:63:e1: 5f:e3:8a:ce:9a:1f:6e:42:cd:0b:b4:71:3f:07:77:cb:9d:75: 35:23:fe:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm7ATw15tWvUVi00eqSH6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhZmE0NWE2MmM1ZTg1MGFiOWM4NzI2YTU5YTliZmE5OTJk MzcxYjIwHhcNMjUxMjA2MDMwMTQzWhcNMjUxMjA3MDMwMTQzWjAzMTEwLwYDVQQD Eyg3YTdjYTY1MGJmNDI2ZTlmMDRkMGU5ZTQ4NmU5OWU2YmY0Njk1MzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3WyT8knudluI2NDbQ+0EumPXFXy 6DDB8tMp6QqrunvOD7P2wc+VHq2/0nuZrT+qKlhxnFHjeMJ37SSi0UU+MopuQszw 6/xy5N2SRc4iPMwPk9muMiYcq0bNh3cUWPVIJT45KV5yocpYIIrR+50fvSdE90wJ 2aBBLvcHFRZaEGX9GM2yjoA8zIM3WGEeh8Yv4d3PoBEYZ3uRs57qBWJ3hVwOhxDI rXnpV24y2rQkDEABuPJrQp+PtvAvQKHsjpIqHG/EZMXyNP4/05Z+oaOekLZHFT2u Pmfu80CdhRVMNRNqsU3pHkL08dbKRx9hrFDos9VhUc4zndpvWKKFe3H44QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHp8plC/Qm6fBNDp5Ibpnmv0aVOeMB8GA1UdIwQY MBaAFKr6RaYsXoUKuchyalmpv6mS03GyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXZwRnBpeGVoUXE1eUhKcVdhbV9xWkxUY2JJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy85N2E5YWEtNjk3MC00OWM4LThkMGEt MmIzZGRiY2I3MjM4LzEvcXZwRnBpeGVoUXE1eUhKcVdhbV9xWkxUY2JJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy85N2E5YWEtNjk3MC00OWM4LThkMGEtMmIzZGRiY2I3MjM4 LzEvcXZwRnBpeGVoUXE1eUhKcVdhbV9xWkxUY2JJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG+NadIbH MNKTUSv/O2jRNA8/NicTkwvMCwRJUNkbxW49n45l7UKfy6jXKJEARCQ/fJywLvE8 FaMqOb/reFYbBIvJEzhb/A2f3WERrr+mRR1nYAL/soTdwJ40ku/yErIcnhuHXhMk JECB0sLwkjxzrShB8hPNxXudZxzKezAZlPQWaTIPO2CmEfprsyIhs24FVrUC/DYT AJNbBRKalmUabBmHzpUmzJGcNj9AjNV9s3ZFtqzUr+UfoJorfx1c+PZJ1ng96GEs TKZbCcKhlHVLznRy1tv66eFUh0H3XomJgahPPrX7STxcaGPhX+OKzpofbkLNC7Rx Pwd3y511NSP+vA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:09:43 2025 by rpki-client