This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft File: qERxpm95BxB-RTRxa_pCCNQGlp8.mft (raw, json) Hash identifier: DeA8AKFVByRHn4ea3JbT79PazknLw/T0wmvBLUPukCs= Subject key identifier: 64:8A:E2:D8:F6:C6:E8:2E:C0:47:AA:5F:BC:A0:74:BD:F8:61:28:64 Authority key identifier: A8:44:71:A6:6F:79:07:10:7E:45:34:71:6B:FA:42:08:D4:06:96:9F Certificate issuer: /CN=a84471a66f7907107e4534716bfa4208d406969f Certificate serial: 019AF1D1BD9572AC909B665F56A4598D6E7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 04:00:45 +0000 Manifest this update: Sat 06 Dec 2025 04:00:45 +0000 Manifest next update: Sun 07 Dec 2025 04:00:45 +0000 Files and hashes: 1: JTBFzZ_Xd-qKEEB1M2yH_cqN0L8.roa (hash: UtmE2VrYOG/N+bYO3QuLYMQZyMdAh9FYCP1pfkSwK6Q=) 2: qERxpm95BxB-RTRxa_pCCNQGlp8.crl (hash: AIXirq7C4bb+jRWlIc6ky61no5rqzA0JW38kguP1q7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.crl rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:bd:95:72:ac:90:9b:66:5f:56:a4:59:8d:6e:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a84471a66f7907107e4534716bfa4208d406969f Validity Not Before: Dec 6 04:00:45 2025 GMT Not After : Dec 7 04:00:45 2025 GMT Subject: CN=648ae2d8f6c6e82ec047aa5fbca074bdf8612864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e9:e0:b8:40:43:ba:ea:02:61:f6:63:fd:d7: 6b:9d:c1:44:3a:57:24:ae:72:3d:f5:07:74:51:e7: 3e:72:7c:60:d8:29:72:cc:94:57:3c:f7:c6:b5:c5: fb:f1:96:4f:93:b5:e7:c3:6c:e2:06:16:a1:3e:b7: b7:8a:51:1a:ee:a5:a8:22:4e:e4:34:52:10:f1:2d: be:9a:1b:86:01:23:2b:3f:83:95:4f:b9:8c:60:72: c2:38:b3:3b:b6:da:d4:9d:15:2d:da:38:93:6e:4e: c6:34:80:32:92:8f:0f:32:a0:d8:d9:9b:f3:0c:5e: d6:85:d4:b3:6a:70:40:f6:87:ce:bf:15:11:e1:8a: 6e:bd:0c:d2:c4:a4:21:2c:58:1e:87:94:2f:75:24: dc:10:46:f7:fa:b3:56:97:6f:c0:d1:59:e1:6f:80: 0c:3b:61:bd:a4:ed:fd:51:df:b7:83:4f:77:f2:3a: ee:54:3f:d4:4e:10:e1:59:b5:8a:32:e9:32:a6:e9: 67:e7:df:dd:81:4a:36:cf:dd:95:18:e8:db:f6:00: a2:42:2a:60:ee:ee:dc:1d:46:b3:b1:a8:77:85:bd: 56:da:2e:08:89:ca:a4:75:c6:72:9b:e4:a9:e1:c9: 8b:75:e7:15:0b:31:37:34:4f:be:a6:8d:6c:9f:b1: a2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:8A:E2:D8:F6:C6:E8:2E:C0:47:AA:5F:BC:A0:74:BD:F8:61:28:64 X509v3 Authority Key Identifier: keyid:A8:44:71:A6:6F:79:07:10:7E:45:34:71:6B:FA:42:08:D4:06:96:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:b6:a5:58:a5:20:d3:ea:4f:52:1f:7b:61:2c:8b:20:f9:fc: 38:d2:df:59:11:71:53:9a:1a:7e:43:29:7b:3f:e1:c9:43:2c: 12:76:7f:92:b0:a4:d8:bd:b8:5a:df:62:ec:30:3b:9a:19:2a: c4:43:cf:88:79:5a:66:67:f9:bb:30:ed:12:5c:c8:37:ac:5c: 5c:0b:ca:24:57:13:95:c7:6e:e6:78:3c:ef:20:a5:74:3f:57: 76:7b:43:30:fb:7e:f3:e9:f3:0e:3b:24:98:31:dc:16:b4:e7: b5:9a:d8:1a:e6:11:8b:0b:d9:46:8e:e9:10:a6:56:d9:79:25: 7f:cd:8e:fa:8f:24:58:44:3d:74:8c:59:09:e4:13:eb:aa:cf: e0:af:10:8b:f5:8c:6e:2a:a0:13:02:d5:fe:d0:69:81:f3:c4: 79:77:67:a7:5e:39:fe:ad:73:c6:4f:02:28:04:6e:66:49:fe: 8b:55:e5:a7:cd:a6:28:d1:26:58:6a:ba:ed:0f:04:8f:23:d6: ff:3e:21:d7:08:36:0e:bb:31:12:93:fb:f4:ad:d6:98:a7:82: 9e:30:f1:23:4f:c2:ac:90:75:dc:72:11:a2:c0:62:d6:52:27: a9:a3:fc:ff:1a:19:f1:80:e8:3d:36:1b:30:44:ea:46:e7:46: 0e:bb:c1:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0b2VcqyQm2ZfVqRZjW57MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NDQ3MWE2NmY3OTA3MTA3ZTQ1MzQ3MTZiZmE0MjA4ZDQw Njk2OWYwHhcNMjUxMjA2MDQwMDQ1WhcNMjUxMjA3MDQwMDQ1WjAzMTEwLwYDVQQD Eyg2NDhhZTJkOGY2YzZlODJlYzA0N2FhNWZiY2EwNzRiZGY4NjEyODY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+nguEBDuuoCYfZj/ddrncFEOlck rnI99Qd0Uec+cnxg2ClyzJRXPPfGtcX78ZZPk7Xnw2ziBhahPre3ilEa7qWoIk7k NFIQ8S2+mhuGASMrP4OVT7mMYHLCOLM7ttrUnRUt2jiTbk7GNIAyko8PMqDY2Zvz DF7WhdSzanBA9ofOvxUR4YpuvQzSxKQhLFgeh5QvdSTcEEb3+rNWl2/A0Vnhb4AM O2G9pO39Ud+3g0938jruVD/UThDhWbWKMukypuln59/dgUo2z92VGOjb9gCiQipg 7u7cHUazsah3hb1W2i4IicqkdcZym+Sp4cmLdecVCzE3NE++po1sn7GiYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGSK4tj2xuguwEeqX7ygdL34YShkMB8GA1UdIwQY MBaAFKhEcaZveQcQfkU0cWv6QgjUBpafMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUVSeHBtOTVCeEItUlRSeGFfcENDTlFHbHA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC84NWQwOTctMDE1My00OTAyLWFmN2Et YjhjMzMxYTg0OGFhLzEvcUVSeHBtOTVCeEItUlRSeGFfcENDTlFHbHA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC84NWQwOTctMDE1My00OTAyLWFmN2EtYjhjMzMxYTg0OGFh LzEvcUVSeHBtOTVCeEItUlRSeGFfcENDTlFHbHA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbralWKUg 0+pPUh97YSyLIPn8ONLfWRFxU5oafkMpez/hyUMsEnZ/krCk2L24Wt9i7DA7mhkq xEPPiHlaZmf5uzDtElzIN6xcXAvKJFcTlcdu5ng87yCldD9XdntDMPt+8+nzDjsk mDHcFrTntZrYGuYRiwvZRo7pEKZW2Xklf82O+o8kWEQ9dIxZCeQT66rP4K8Qi/WM biqgEwLV/tBpgfPEeXdnp145/q1zxk8CKARuZkn+i1Xlp82mKNEmWGq67Q8EjyPW /z4h1wg2DrsxEpP79K3WmKeCnjDxI0/CrJB13HIRosBi1lInqaP8/xoZ8YDoPTYb METqRudGDrvBsQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:11:06 2025 by rpki-client