This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft File: qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft (raw, json) Hash identifier: wOfoPvtPu0FbkNKeJu4TUr8RWqsvpX5iQMrmZQlGlMs= Subject key identifier: E2:25:27:EE:8C:52:D1:57:69:E6:FA:DD:0D:08:14:13:65:8B:AF:7D Authority key identifier: A8:D5:2C:C8:70:60:6A:3F:3F:32:C0:FF:F9:7C:F6:93:1F:A6:5C:A3 Certificate issuer: /CN=a8d52cc870606a3f3f32c0fff97cf6931fa65ca3 Certificate serial: 019AF23F8E54AF407E2019309C870ABDF492 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft Manifest number: 13BE Signing time: Sat 06 Dec 2025 06:00:42 +0000 Manifest this update: Sat 06 Dec 2025 06:00:42 +0000 Manifest next update: Sun 07 Dec 2025 06:00:42 +0000 Files and hashes: 1: 9Usz5mjL7Eqg2BKdlKm61_qGXA0.roa (hash: tm7XoNOtROJxqpd0QLHAYI1n3J02MIzjMbI9J6S5daM=) 2: hYQ5Af5d91S_vu2hLfWPZokf1ds.roa (hash: b+J2iWbiq5H0kTA4RnCVkz8UkglYOscwMixBlHnjvIw=) 3: htWv83j5mtpGTlM4Lw1xIRvmIbk.roa (hash: cnK1fN2lnd7WvHE3Ad4lixpuor2/4VBvsHu1sSW/tYg=) 4: qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl (hash: VCNNu3nQiaJKKp9Gf7qXv7pZ/x76PljIDW2JxWSM0Mw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:8e:54:af:40:7e:20:19:30:9c:87:0a:bd:f4:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8d52cc870606a3f3f32c0fff97cf6931fa65ca3 Validity Not Before: Dec 6 06:00:42 2025 GMT Not After : Dec 7 06:00:42 2025 GMT Subject: CN=e22527ee8c52d15769e6fadd0d081413658baf7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a3:38:45:ae:4a:92:b3:17:f1:93:1d:e7:54: 9d:77:ae:6f:1f:1e:e5:2c:f9:97:81:e6:db:83:6f: f8:7c:6f:86:19:0c:bf:e7:cd:68:83:3a:44:a0:0f: 96:d8:29:73:b0:dd:e7:ad:56:b4:b0:58:6c:4b:1d: 8b:f9:10:a4:96:da:f9:01:bb:7f:c8:0a:b6:ac:16: 85:8e:5f:53:a2:83:3b:ca:6f:76:8d:18:96:fc:f8: dc:96:c6:cc:8b:80:0f:fb:61:1f:af:52:75:84:31: d9:42:14:75:f1:31:b2:45:7e:c6:21:65:15:09:08: a3:ae:e6:5c:01:2c:4b:09:96:b0:ad:31:10:b5:2c: fc:4c:4d:fb:2d:1d:0a:47:54:76:9e:e3:90:48:42: 6f:84:01:cf:7b:9c:04:47:cf:6e:5c:48:48:4d:48: f3:a4:c3:d3:e7:e2:c8:32:20:0c:f3:b5:f2:c9:b4: ea:be:11:f9:ad:c6:2f:32:93:33:d7:58:f1:60:24: 71:d7:f1:ad:df:03:c9:b8:1a:bd:bf:bf:ed:3a:d2: ca:9a:0d:4b:6d:73:ec:f3:22:d3:14:c2:54:f1:51: b4:f9:5e:fc:89:0f:9a:d6:3f:ae:b7:9f:e5:59:e7: 6c:fb:9a:fa:63:7f:ce:68:e2:d6:bf:e6:42:89:48: d7:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:25:27:EE:8C:52:D1:57:69:E6:FA:DD:0D:08:14:13:65:8B:AF:7D X509v3 Authority Key Identifier: keyid:A8:D5:2C:C8:70:60:6A:3F:3F:32:C0:FF:F9:7C:F6:93:1F:A6:5C:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:cd:78:98:de:19:b4:c6:c3:41:f6:7f:9d:a4:dd:eb:90:3a: cc:64:5d:2f:0c:16:ff:8b:31:45:95:75:d3:d1:65:20:e5:fd: c8:b7:72:4f:d2:dd:1b:c1:0f:bd:33:a0:f6:e7:a1:82:09:8d: 68:a6:c2:f9:34:90:0f:da:0c:5a:0d:82:a3:8b:e3:e2:9a:12: 3e:5b:80:97:53:a1:99:14:a1:1d:c5:ea:45:93:82:32:fe:a6: c0:bb:93:52:e5:19:4a:b7:18:0c:d6:be:54:05:da:f7:bd:d5: 66:bf:5b:c3:01:36:3c:94:44:64:cf:7c:95:a7:4b:10:60:d7: b2:24:37:83:c8:6c:ab:53:bf:5c:83:80:46:4c:4e:27:d7:70: bd:26:25:9c:99:1c:9d:e8:64:b3:44:4a:72:55:b7:d8:94:9e: a1:1e:90:5c:a6:bb:9a:6b:fe:d3:25:0f:f7:ec:6c:80:0c:30: 09:bf:0f:f7:2f:10:d9:b8:72:b3:56:dd:57:bb:ff:63:a2:86: e1:59:1a:11:78:06:f0:e0:f9:d1:a0:9a:bc:36:09:bf:63:0f: 6f:11:85:8e:0d:90:79:5e:58:70:d9:27:69:0e:16:89:0d:d5: da:b6:f5:5c:e3:34:06:b8:05:56:d8:44:73:dc:24:a2:8b:af: e8:f6:86:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP45Ur0B+IBkwnIcKvfSSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4ZDUyY2M4NzA2MDZhM2YzZjMyYzBmZmY5N2NmNjkzMWZh NjVjYTMwHhcNMjUxMjA2MDYwMDQyWhcNMjUxMjA3MDYwMDQyWjAzMTEwLwYDVQQD EyhlMjI1MjdlZThjNTJkMTU3NjllNmZhZGQwZDA4MTQxMzY1OGJhZjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKM4Ra5KkrMX8ZMd51Sdd65vHx7l LPmXgebbg2/4fG+GGQy/581ogzpEoA+W2ClzsN3nrVa0sFhsSx2L+RCkltr5Abt/ yAq2rBaFjl9TooM7ym92jRiW/PjclsbMi4AP+2Efr1J1hDHZQhR18TGyRX7GIWUV CQijruZcASxLCZawrTEQtSz8TE37LR0KR1R2nuOQSEJvhAHPe5wER89uXEhITUjz pMPT5+LIMiAM87XyybTqvhH5rcYvMpMz11jxYCRx1/Gt3wPJuBq9v7/tOtLKmg1L bXPs8yLTFMJU8VG0+V78iQ+a1j+ut5/lWeds+5r6Y3/OaOLWv+ZCiUjX6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOIlJ+6MUtFXaeb63Q0IFBNli699MB8GA1UdIwQY MBaAFKjVLMhwYGo/PzLA//l89pMfplyjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcU5Vc3lIQmdhajhfTXNEXy1YejJreC1tWEtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mZTEzMWQtYWExMC00YzZiLTgxMjgt ZjU1YmM4YWYxNTA2LzEvcU5Vc3lIQmdhajhfTXNEXy1YejJreC1tWEtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9mZTEzMWQtYWExMC00YzZiLTgxMjgtZjU1YmM4YWYxNTA2 LzEvcU5Vc3lIQmdhajhfTXNEXy1YejJreC1tWEtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzM14mN4Z tMbDQfZ/naTd65A6zGRdLwwW/4sxRZV109FlIOX9yLdyT9LdG8EPvTOg9uehggmN aKbC+TSQD9oMWg2Co4vj4poSPluAl1OhmRShHcXqRZOCMv6mwLuTUuUZSrcYDNa+ VAXa973VZr9bwwE2PJREZM98ladLEGDXsiQ3g8hsq1O/XIOARkxOJ9dwvSYlnJkc nehks0RKclW32JSeoR6QXKa7mmv+0yUP9+xsgAwwCb8P9y8Q2bhys1bdV7v/Y6KG 4VkaEXgG8OD50aCavDYJv2MPbxGFjg2QeV5YcNknaQ4WiQ3V2rb1XOM0BrgFVthE c9wkoouv6PaGqQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:12 2025 by rpki-client