This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft File: Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft (raw, json) Hash identifier: x20W1Hv5jTo7p8x+mUZnYbFdGsZ+XiEyHYn2bMw+W+A= Subject key identifier: D6:D0:42:6C:7A:73:D6:29:09:2D:AB:E1:B2:9F:FB:0F:9C:5E:A4:0B Authority key identifier: 42:FE:55:E6:28:8A:1B:47:02:F9:EB:E7:F8:C6:06:0B:6C:FB:B1:BC Certificate issuer: /CN=42fe55e6288a1b4702f9ebe7f8c6060b6cfbb1bc Certificate serial: 019AF12D958B63A191B0DD70CD574D87B1B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qv5V5iiKG0cC-evn-MYGC2z7sbw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft Manifest number: 0AAD Signing time: Sat 06 Dec 2025 01:01:27 +0000 Manifest this update: Sat 06 Dec 2025 01:01:27 +0000 Manifest next update: Sun 07 Dec 2025 01:01:27 +0000 Files and hashes: 1: 1hk2beP_0noowMbOmNtoNb3trEI.roa (hash: yPaUkjXMWXPL0Y518Fz9alSB7qRK1+1Dm8ayCL/j/eg=) 2: Qv5V5iiKG0cC-evn-MYGC2z7sbw.crl (hash: gVSMVpWVXYi6Fw5xyJP2OY46zizQxVtgjMnb3p8tb2k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.crl rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft rsync://rpki.ripe.net/repository/DEFAULT/Qv5V5iiKG0cC-evn-MYGC2z7sbw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:95:8b:63:a1:91:b0:dd:70:cd:57:4d:87:b1:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42fe55e6288a1b4702f9ebe7f8c6060b6cfbb1bc Validity Not Before: Dec 6 01:01:27 2025 GMT Not After : Dec 7 01:01:27 2025 GMT Subject: CN=d6d0426c7a73d629092dabe1b29ffb0f9c5ea40b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c6:48:5d:0a:e8:ec:98:c8:b1:6d:d8:a1:65: 17:78:70:14:26:b5:3b:3f:2a:2c:4f:3f:4d:9f:2d: 58:3f:d5:15:45:dd:c9:36:73:d8:a3:f9:00:4a:1d: f2:4d:b6:58:cf:5c:8b:7d:df:21:15:1f:c9:fc:6f: 80:68:f1:a4:ac:2f:23:9e:6f:c8:31:b4:ae:07:68: 24:85:92:b2:ff:dd:c3:5b:04:11:50:0f:b6:59:c4: dc:88:8e:0a:e6:b3:5a:c5:24:dd:f2:63:16:3f:12: d2:aa:d7:5a:63:ae:94:4f:42:4f:87:41:07:ec:fd: a6:48:cc:23:8d:d5:66:5b:cc:67:ac:91:0b:a4:e2: 77:f6:98:2b:47:25:fb:bd:e2:8b:ad:67:0f:45:68: d8:a3:9f:76:a3:5d:f1:0b:a4:8e:60:02:9a:63:c5: b6:2b:1c:8e:a2:52:c6:f0:e0:8a:2e:13:26:a4:b4: 1a:a1:f6:12:00:50:50:97:d5:f4:24:7b:d5:33:12: fc:f5:9d:5f:0f:3e:5b:ba:dc:54:03:12:ce:ce:e5: be:07:9d:a2:53:29:83:d7:bd:98:f0:5d:b4:b4:3b: 5a:de:be:05:40:d5:69:92:e7:7d:5e:f3:27:6e:8f: 06:0c:18:6c:b8:39:2f:60:7a:f5:43:79:d2:09:89: a4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:D0:42:6C:7A:73:D6:29:09:2D:AB:E1:B2:9F:FB:0F:9C:5E:A4:0B X509v3 Authority Key Identifier: keyid:42:FE:55:E6:28:8A:1B:47:02:F9:EB:E7:F8:C6:06:0B:6C:FB:B1:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qv5V5iiKG0cC-evn-MYGC2z7sbw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:77:6f:bb:04:5a:27:d5:9c:51:45:09:e0:70:f0:16:32:9d: e1:55:f3:d5:b4:d7:7b:d9:c5:5b:b0:e9:ed:65:8f:29:e5:e1: 9a:c6:59:fb:ba:32:41:04:0b:51:a3:07:69:73:de:91:8a:9a: 94:2c:d7:90:7e:4c:4c:fe:d4:7b:98:78:98:f3:ff:d4:7e:4c: b4:a8:6b:7d:be:e5:42:c9:30:33:cc:94:d6:40:82:e7:09:d9: b9:e5:41:34:2c:7f:14:bf:88:8a:c8:67:46:20:7f:20:fc:9e: 77:6e:dd:f0:ee:bb:cf:85:75:3e:58:32:15:f0:3e:07:bb:31: 91:60:18:fa:53:09:17:5d:dd:e9:52:3f:1d:43:8a:ac:cb:e5: 07:f6:8b:f3:e9:fa:4a:31:08:d5:db:77:5a:b7:ae:a5:01:a3: 7d:d2:33:78:86:96:ba:74:4c:21:ba:1e:f2:5c:2b:c6:c0:e7: 56:8e:5e:1b:a3:ff:f3:a3:c0:9d:99:12:46:52:fb:6d:92:2c: 42:53:d9:cf:84:14:76:d8:98:1d:5e:0c:29:bf:a3:39:91:6c: ee:bd:20:2d:f2:0c:b3:f0:65:f9:64:48:f7:06:53:b4:33:58: 01:f3:82:e8:a4:f3:ef:71:b9:51:0c:dc:3f:45:36:4e:4c:28: 98:79:32:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZWLY6GRsN1wzVdNh7G3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZmU1NWU2Mjg4YTFiNDcwMmY5ZWJlN2Y4YzYwNjBiNmNm YmIxYmMwHhcNMjUxMjA2MDEwMTI3WhcNMjUxMjA3MDEwMTI3WjAzMTEwLwYDVQQD EyhkNmQwNDI2YzdhNzNkNjI5MDkyZGFiZTFiMjlmZmIwZjljNWVhNDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMZIXQro7JjIsW3YoWUXeHAUJrU7 PyosTz9Nny1YP9UVRd3JNnPYo/kASh3yTbZYz1yLfd8hFR/J/G+AaPGkrC8jnm/I MbSuB2gkhZKy/93DWwQRUA+2WcTciI4K5rNaxSTd8mMWPxLSqtdaY66UT0JPh0EH 7P2mSMwjjdVmW8xnrJELpOJ39pgrRyX7veKLrWcPRWjYo592o13xC6SOYAKaY8W2 KxyOolLG8OCKLhMmpLQaofYSAFBQl9X0JHvVMxL89Z1fDz5butxUAxLOzuW+B52i UymD172Y8F20tDta3r4FQNVpkud9XvMnbo8GDBhsuDkvYHr1Q3nSCYmkBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbQQmx6c9YpCS2r4bKf+w+cXqQLMB8GA1UdIwQY MBaAFEL+VeYoihtHAvnr5/jGBgts+7G8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXY1VjVpaUtHMGNDLWV2bi1NWUdDMno3c2J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC84MTQxZGQtNDQ5Yi00ZDFmLTgxMWEt ZDYxOTBjY2Y3ODU3LzEvUXY1VjVpaUtHMGNDLWV2bi1NWUdDMno3c2J3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC84MTQxZGQtNDQ5Yi00ZDFmLTgxMWEtZDYxOTBjY2Y3ODU3 LzEvUXY1VjVpaUtHMGNDLWV2bi1NWUdDMno3c2J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM3dvuwRa J9WcUUUJ4HDwFjKd4VXz1bTXe9nFW7Dp7WWPKeXhmsZZ+7oyQQQLUaMHaXPekYqa lCzXkH5MTP7Ue5h4mPP/1H5MtKhrfb7lQskwM8yU1kCC5wnZueVBNCx/FL+Iishn RiB/IPyed27d8O67z4V1PlgyFfA+B7sxkWAY+lMJF13d6VI/HUOKrMvlB/aL8+n6 SjEI1dt3WreupQGjfdIzeIaWunRMIboe8lwrxsDnVo5eG6P/86PAnZkSRlL7bZIs QlPZz4QUdtiYHV4MKb+jOZFs7r0gLfIMs/Bl+WRI9wZTtDNYAfOC6KTz73G5UQzc P0U2TkwomHkyag== -----END CERTIFICATE-----Generated at Sat Dec 6 10:14:54 2025 by rpki-client