This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft File: qpoWTGVkErfar66FccxnnMb1h9A.mft (raw, json) Hash identifier: wHfIwgOoGFcLm5yBaCIJRh2en6MNd1pR6OJ4IgFzdYo= Subject key identifier: 96:DD:3D:2C:A4:2D:39:28:D4:D6:A7:47:D7:E8:32:B6:5C:E7:EB:49 Authority key identifier: AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0 Certificate issuer: /CN=aa9a164c656412b7daafae8571cc679cc6f587d0 Certificate serial: 019AF31BCA90DCF24B357449BE4EDA3F5B19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 10:01:15 +0000 Manifest this update: Sat 06 Dec 2025 10:01:15 +0000 Manifest next update: Sun 07 Dec 2025 10:01:15 +0000 Files and hashes: 1: VnsTdGec-3pHRJVLeuucM8lE74g.roa (hash: VZlx25MKWdF5CVCWwcXrJ37GBCTfmMAe38xqZnEYBGw=) 2: _1ATULCZ98sbSKA4UnZIqchgnFI.roa (hash: dqzQIeMxGMrNSZ+FakLTrNvjbHnx3VcQtBASfsN8WNM=) 3: qpoWTGVkErfar66FccxnnMb1h9A.crl (hash: Ulzam0SbmMViQ8v6QgY/eyWzoD1fhcjEtiaeVPGoG8Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:ca:90:dc:f2:4b:35:74:49:be:4e:da:3f:5b:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa9a164c656412b7daafae8571cc679cc6f587d0 Validity Not Before: Dec 6 10:01:15 2025 GMT Not After : Dec 7 10:01:15 2025 GMT Subject: CN=96dd3d2ca42d3928d4d6a747d7e832b65ce7eb49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c2:2f:69:0a:16:e5:ef:87:f0:23:b7:2f:f1: 23:f5:99:9c:f4:45:45:e8:c5:b7:ea:15:1a:2e:8f: f0:9c:b3:81:db:14:49:7b:b2:23:37:08:52:91:8c: 35:90:54:1d:52:02:e7:f3:a9:67:44:39:39:73:0b: c6:f9:4a:d1:1d:81:0d:6d:b4:6c:df:db:5c:9b:92: ec:a3:b3:6d:7a:91:ff:56:ef:f6:2a:25:1d:83:31: d9:e9:f0:49:8b:c6:60:fd:a1:b6:af:16:0f:73:4e: d5:43:bd:d8:13:8f:48:8d:63:83:8d:2d:f0:90:fa: c0:32:43:4e:4f:59:a7:cb:3d:d7:a3:4b:f5:93:ed: 8d:6a:f6:a5:bf:b0:d7:c4:28:fb:4a:2a:2f:ae:6e: d4:fe:11:fa:64:67:65:df:ba:d9:15:af:9f:8b:fc: 41:65:a0:0d:e5:2d:16:db:9d:d7:24:1e:cb:a6:74: 64:1c:ad:52:d9:43:5d:2f:db:84:0c:c4:34:9c:d3: 11:ee:21:85:2e:73:be:03:78:57:d0:9f:11:52:97: 5a:9c:0b:de:a6:6a:5c:c7:a9:b7:8e:05:19:c9:dd: bd:ba:8c:ac:b7:04:ff:78:43:12:c9:5a:a5:76:a3: a9:97:41:6e:7a:93:d6:d7:e1:66:40:dc:0b:8c:09: 31:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:DD:3D:2C:A4:2D:39:28:D4:D6:A7:47:D7:E8:32:B6:5C:E7:EB:49 X509v3 Authority Key Identifier: keyid:AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:21:16:c4:42:9b:7d:d7:01:07:b5:ab:59:96:05:56:b8:a9: 7e:03:2b:d0:a1:20:d7:f2:c2:2d:b5:4c:ac:3b:df:b0:f9:91: 98:26:d0:a4:06:0b:11:31:d8:d2:2c:12:47:aa:59:4a:0f:10: f5:32:d3:21:29:a7:73:8a:cb:23:37:c7:0a:11:90:c9:27:67: a5:8a:d6:19:02:af:db:b9:a0:9c:67:50:b4:68:b1:b6:8f:2b: ef:46:db:42:25:77:44:79:35:e8:bd:e3:77:49:ab:be:00:a6: 2d:47:55:8b:b7:90:64:30:e7:96:1c:7f:03:79:b7:aa:f3:35: 87:4c:06:9f:62:d3:cc:df:3d:45:ca:89:bb:2a:0e:b4:43:af: 23:49:03:fc:11:71:72:3c:a1:27:b2:bb:a4:39:81:64:b3:7b: be:6a:6b:c3:7c:e4:5e:7a:5f:2d:53:89:e9:f8:02:c1:65:a2: fa:ff:5f:b6:56:9c:56:74:c2:89:a8:ce:a7:0d:23:82:22:e2: 76:cc:b1:82:91:55:03:cd:03:7a:37:ea:86:e2:b9:e9:10:cf: 70:b2:2a:0c:4a:95:ef:93:6e:1d:0b:6d:04:94:c0:aa:01:03: 91:f1:56:dd:c7:f4:11:05:27:8a:34:70:d1:d6:19:6a:1e:df: 14:5c:e2:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG8qQ3PJLNXRJvk7aP1sZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhOWExNjRjNjU2NDEyYjdkYWFmYWU4NTcxY2M2NzljYzZm NTg3ZDAwHhcNMjUxMjA2MTAwMTE1WhcNMjUxMjA3MTAwMTE1WjAzMTEwLwYDVQQD Eyg5NmRkM2QyY2E0MmQzOTI4ZDRkNmE3NDdkN2U4MzJiNjVjZTdlYjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncIvaQoW5e+H8CO3L/Ej9Zmc9EVF 6MW36hUaLo/wnLOB2xRJe7IjNwhSkYw1kFQdUgLn86lnRDk5cwvG+UrRHYENbbRs 39tcm5Lso7NtepH/Vu/2KiUdgzHZ6fBJi8Zg/aG2rxYPc07VQ73YE49IjWODjS3w kPrAMkNOT1mnyz3Xo0v1k+2Navalv7DXxCj7Siovrm7U/hH6ZGdl37rZFa+fi/xB ZaAN5S0W253XJB7LpnRkHK1S2UNdL9uEDMQ0nNMR7iGFLnO+A3hX0J8RUpdanAve pmpcx6m3jgUZyd29uoystwT/eEMSyVqldqOpl0FuepPW1+FmQNwLjAkxJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJbdPSykLTko1NanR9foMrZc5+tJMB8GA1UdIwQY MBaAFKqaFkxlZBK32q+uhXHMZ5zG9YfQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXBvV1RHVmtFcmZhcjY2RmNjeG5uTWIxaDlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9hZmRhOWEtNjYzMC00YTlmLWI1MjIt Mjg4MjljMDNjNjlhLzEvcXBvV1RHVmtFcmZhcjY2RmNjeG5uTWIxaDlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9hZmRhOWEtNjYzMC00YTlmLWI1MjItMjg4MjljMDNjNjlh LzEvcXBvV1RHVmtFcmZhcjY2RmNjeG5uTWIxaDlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiSEWxEKb fdcBB7WrWZYFVripfgMr0KEg1/LCLbVMrDvfsPmRmCbQpAYLETHY0iwSR6pZSg8Q 9TLTISmnc4rLIzfHChGQySdnpYrWGQKv27mgnGdQtGixto8r70bbQiV3RHk16L3j d0mrvgCmLUdVi7eQZDDnlhx/A3m3qvM1h0wGn2LTzN89RcqJuyoOtEOvI0kD/BFx cjyhJ7K7pDmBZLN7vmprw3zkXnpfLVOJ6fgCwWWi+v9ftlacVnTCiajOpw0jgiLi dsyxgpFVA80DejfqhuK56RDPcLIqDEqV75NuHQttBJTAqgEDkfFW3cf0EQUnijRw 0dYZah7fFFziZQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:33:27 2025 by rpki-client