This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft File: qyftHOpDIcScPKEPOv-v29rVMsI.mft (raw, json) Hash identifier: izNfsJOFFOGORiAhsws25MVXOGL6iHblFpK2zffXP9c= Subject key identifier: E6:58:4E:BA:54:D0:FE:42:4A:C0:F6:F7:C2:8D:62:3C:1A:AF:70:F1 Authority key identifier: AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2 Certificate issuer: /CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2 Certificate serial: 019AF2771EE709E58EB27783071A9FE6AA2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 07:01:24 +0000 Manifest this update: Sat 06 Dec 2025 07:01:24 +0000 Manifest next update: Sun 07 Dec 2025 07:01:24 +0000 Files and hashes: 1: LsR5OcLI6gweexv7IGg_v67BF8g.roa (hash: wQT4g6ONPKKCv+h71REBPVqXb0/wIS8oFMXQ2jJwDUM=) 2: agUI1vHmqHIc2nUx-x5wLY_TV_A.roa (hash: FA12851IZb0A3QT14G2l2dek6vgakWfjtEihLLMc5Fo=) 3: qyftHOpDIcScPKEPOv-v29rVMsI.crl (hash: M+W+G7i0MWkwQRB98eB6CUDybc4u54drLUNkjAw1kNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:1e:e7:09:e5:8e:b2:77:83:07:1a:9f:e6:aa:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2 Validity Not Before: Dec 6 07:01:24 2025 GMT Not After : Dec 7 07:01:24 2025 GMT Subject: CN=e6584eba54d0fe424ac0f6f7c28d623c1aaf70f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:46:0f:da:aa:91:fc:c3:74:60:d9:b6:2d:4b: 5d:4f:4a:5f:af:73:b0:a7:e8:dc:cd:f9:f7:28:d3: c1:65:13:fd:c8:3c:27:2e:e6:11:c2:27:42:7b:98: ff:31:84:7b:a8:3c:5f:f6:1c:b0:ea:bb:05:7f:f9: 32:e4:ff:d2:2f:78:7a:be:db:8f:fe:db:1b:fb:28: cb:0f:7c:bb:e3:ab:3a:97:ac:33:c9:c0:1c:a1:e2: 40:96:fa:cb:b5:f7:17:f4:cc:40:72:aa:5f:fb:f0: 91:6b:18:27:15:d8:88:2b:f6:fa:4f:4f:ac:d9:d8: c0:c8:90:8b:da:a5:72:08:89:99:d9:e1:79:7c:a7: 60:4d:d1:f1:3c:3c:00:36:56:c8:39:8e:6e:3a:b1: 6a:43:5f:19:7c:5b:db:93:5e:f7:db:08:b7:93:d0: 6f:3e:af:e7:90:c7:db:75:9b:18:eb:a5:bd:1b:1e: 4e:aa:12:5d:13:75:30:9c:2b:48:fa:43:b7:2b:96: 37:bb:96:6e:5c:79:93:56:63:70:81:1b:b0:32:61: fc:55:9f:89:58:93:ac:bf:42:05:ab:aa:73:8e:9d: ad:48:7a:9d:42:49:ca:53:39:7c:5b:ea:a7:74:4b: fd:7c:22:02:ab:35:89:5f:8f:b2:b7:73:1b:0f:ad: a6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:58:4E:BA:54:D0:FE:42:4A:C0:F6:F7:C2:8D:62:3C:1A:AF:70:F1 X509v3 Authority Key Identifier: keyid:AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:72:28:c9:34:b5:13:35:93:68:9a:d4:48:4e:86:6a:c9:f5: f9:6e:01:09:77:3a:43:5a:2c:e8:59:55:51:bd:52:cf:9e:06: d2:ce:4f:1e:7a:e7:97:d8:c9:da:d9:bf:5c:c4:f6:a0:10:02: da:e6:91:92:58:98:8e:7b:61:11:da:cb:79:fb:31:12:0f:5b: 3c:ac:41:8c:2a:35:0d:5d:59:48:e3:84:81:47:fc:63:c2:40: be:d2:df:82:f7:62:e1:b2:0e:2e:96:98:f2:0a:e9:a9:26:7c: a3:d3:a2:49:d3:90:03:8d:66:af:fd:2f:b6:a8:b2:00:c8:cf: c3:bc:77:a8:4f:fe:95:c2:24:63:b4:be:37:2c:bc:4d:ff:12: 49:c0:3a:ee:ca:3a:15:5f:67:cd:6f:ac:0c:fe:83:31:44:7b: ba:8a:e1:2a:a3:a0:b9:d7:de:c7:77:cf:71:33:67:b4:a0:3d: 53:cc:ba:d8:6f:e5:9e:8c:2b:39:b9:10:2d:01:40:3f:22:5b: c3:cb:dd:97:6e:e9:7a:aa:94:eb:d3:8e:c7:d8:91:f2:1f:67: a6:ab:f0:4d:82:43:d8:4c:9e:7f:f3:ad:42:a8:c5:12:a1:cb: 83:d8:b7:90:7e:12:de:23:59:80:4d:18:11:81:2f:3c:c4:26: ee:20:a6:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydx7nCeWOsneDBxqf5qotMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMjdlZDFjZWE0MzIxYzQ5YzNjYTEwZjNhZmZhZmRiZGFk NTMyYzIwHhcNMjUxMjA2MDcwMTI0WhcNMjUxMjA3MDcwMTI0WjAzMTEwLwYDVQQD EyhlNjU4NGViYTU0ZDBmZTQyNGFjMGY2ZjdjMjhkNjIzYzFhYWY3MGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUYP2qqR/MN0YNm2LUtdT0pfr3Ow p+jczfn3KNPBZRP9yDwnLuYRwidCe5j/MYR7qDxf9hyw6rsFf/ky5P/SL3h6vtuP /tsb+yjLD3y746s6l6wzycAcoeJAlvrLtfcX9MxAcqpf+/CRaxgnFdiIK/b6T0+s 2djAyJCL2qVyCImZ2eF5fKdgTdHxPDwANlbIOY5uOrFqQ18ZfFvbk1732wi3k9Bv Pq/nkMfbdZsY66W9Gx5OqhJdE3UwnCtI+kO3K5Y3u5ZuXHmTVmNwgRuwMmH8VZ+J WJOsv0IFq6pzjp2tSHqdQknKUzl8W+qndEv9fCICqzWJX4+yt3MbD62mHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZYTrpU0P5CSsD298KNYjwar3DxMB8GA1UdIwQY MBaAFKsn7RzqQyHEnDyhDzr/r9va1TLCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXlmdEhPcERJY1NjUEtFUE92LXYyOXJWTXNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84NjU0OTAtNzhlNy00M2I0LWIyZmQt MWQwYmY1MjA4ZjkwLzEvcXlmdEhPcERJY1NjUEtFUE92LXYyOXJWTXNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi84NjU0OTAtNzhlNy00M2I0LWIyZmQtMWQwYmY1MjA4Zjkw LzEvcXlmdEhPcERJY1NjUEtFUE92LXYyOXJWTXNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVXIoyTS1 EzWTaJrUSE6Gasn1+W4BCXc6Q1os6FlVUb1Sz54G0s5PHnrnl9jJ2tm/XMT2oBAC 2uaRkliYjnthEdrLefsxEg9bPKxBjCo1DV1ZSOOEgUf8Y8JAvtLfgvdi4bIOLpaY 8grpqSZ8o9OiSdOQA41mr/0vtqiyAMjPw7x3qE/+lcIkY7S+Nyy8Tf8SScA67so6 FV9nzW+sDP6DMUR7uorhKqOgudfex3fPcTNntKA9U8y62G/lnowrObkQLQFAPyJb w8vdl27peqqU69OOx9iR8h9npqvwTYJD2Eyef/OtQqjFEqHLg9i3kH4S3iNZgE0Y EYEvPMQm7iCm6Q== -----END CERTIFICATE-----Generated at Sat Dec 6 14:59:10 2025 by rpki-client