This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft File: qjJY2XybwoTUhXvO498JCDa80hI.mft (raw, json) Hash identifier: vjuabpipmv5cvmHbPWPlUv+9qT9W4QU6XQoB8C1vJIs= Subject key identifier: 9A:50:38:5C:93:3F:B8:4D:CD:BE:62:BF:FC:08:0F:13:82:16:F3:FA Authority key identifier: AA:32:58:D9:7C:9B:C2:84:D4:85:7B:CE:E3:DF:09:08:36:BC:D2:12 Certificate issuer: /CN=aa3258d97c9bc284d4857bcee3df090836bcd212 Certificate serial: 019AF31CCF90D4A1D401CF374663FFD50941 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjJY2XybwoTUhXvO498JCDa80hI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft Manifest number: 169B Signing time: Sat 06 Dec 2025 10:02:22 +0000 Manifest this update: Sat 06 Dec 2025 10:02:22 +0000 Manifest next update: Sun 07 Dec 2025 10:02:22 +0000 Files and hashes: 1: qjJY2XybwoTUhXvO498JCDa80hI.crl (hash: HOtNcvdtMi/Z14kUmB0lbQqaOnj0dJAoQ2hSVgviYFE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.crl rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft rsync://rpki.ripe.net/repository/DEFAULT/qjJY2XybwoTUhXvO498JCDa80hI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:cf:90:d4:a1:d4:01:cf:37:46:63:ff:d5:09:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa3258d97c9bc284d4857bcee3df090836bcd212 Validity Not Before: Dec 6 10:02:22 2025 GMT Not After : Dec 7 10:02:22 2025 GMT Subject: CN=9a50385c933fb84dcdbe62bffc080f138216f3fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:71:cc:d3:b2:33:5b:9f:0a:78:a9:90:1d:74: ab:86:10:b2:ae:ad:ae:2b:9f:0e:03:b2:e0:ef:14: b3:c6:f5:5c:55:fe:3c:98:2d:03:19:65:ca:b8:7d: a3:93:70:bf:c7:13:4e:8f:ed:f2:24:27:00:85:5e: 00:45:f1:05:60:3d:67:c4:05:a9:e7:2f:0e:b5:6e: cc:a2:4e:32:6c:bf:1d:01:e0:60:a9:66:ec:9b:9c: 27:ee:e2:c2:ab:55:b4:97:40:e0:41:a8:4c:81:b3: 4c:f0:c5:f9:17:f3:3e:bf:35:22:26:b3:50:13:b1: 20:ea:51:e8:21:ee:d5:ed:55:af:a7:e8:0b:3c:90: 61:2f:22:4e:9c:62:46:dd:6a:ca:3b:f0:59:43:a7: 56:ee:70:67:61:ab:87:c4:d9:0b:69:da:b8:76:74: 30:5e:b5:6f:fd:9d:48:81:11:7a:21:18:18:d8:ef: 9f:b3:01:7e:90:17:00:16:a9:09:ea:49:77:f2:55: 2d:e4:68:c0:5d:fb:fd:32:89:c5:3c:ee:0d:37:dc: af:f3:c1:80:08:75:02:b1:e7:b4:97:de:25:3c:0a: e5:34:ae:72:d7:e3:bd:ac:91:c3:7d:8b:62:ab:a7: f8:24:89:e9:a1:a9:0b:d4:67:1a:ed:fb:1a:41:48: 2a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:50:38:5C:93:3F:B8:4D:CD:BE:62:BF:FC:08:0F:13:82:16:F3:FA X509v3 Authority Key Identifier: keyid:AA:32:58:D9:7C:9B:C2:84:D4:85:7B:CE:E3:DF:09:08:36:BC:D2:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjJY2XybwoTUhXvO498JCDa80hI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:f2:81:45:6c:2f:6b:fb:dd:42:8e:40:73:da:ab:19:2e:33: ca:02:92:b4:83:87:bd:9c:1a:d4:be:23:cb:f9:d4:b0:3f:c7: f1:2d:62:28:1c:8a:b8:9a:7a:69:3d:6a:08:8c:2e:a0:f4:96: 20:0a:54:ed:ae:6d:60:de:80:e6:d1:88:08:7d:48:f1:f5:f1: f7:73:2e:e6:74:d4:6f:00:96:2d:22:3d:65:37:85:8c:2e:e5: b4:63:53:f9:0d:26:b2:b0:00:48:4f:05:c9:83:cb:67:fa:f5: bd:6c:03:6c:02:ba:0a:fe:ea:14:60:87:5e:71:03:b9:4d:6f: da:58:94:74:47:ed:87:21:5b:e3:03:d1:1d:36:f9:ef:ed:1e: c5:2f:2b:9f:2a:c0:e9:ba:49:02:ef:f1:ed:a6:ad:7d:9f:b0: 66:bf:44:90:83:ff:95:7a:1e:9a:6d:7a:65:7f:d5:bb:9c:c1: 32:e0:e8:c4:dc:2c:f2:d3:d5:fe:8b:20:9d:2c:1d:c0:d4:59: 74:64:de:03:b5:63:f5:cb:e0:04:6e:93:e9:fb:9a:5b:75:b7: 54:3a:de:39:8a:bb:16:03:a0:48:35:f7:fa:d7:b4:4d:fd:56: a7:5b:cb:b2:9b:0d:1e:0a:1f:b2:2d:44:18:e3:23:be:f3:f9: a8:92:07:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHM+Q1KHUAc83RmP/1QlBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMzI1OGQ5N2M5YmMyODRkNDg1N2JjZWUzZGYwOTA4MzZi Y2QyMTIwHhcNMjUxMjA2MTAwMjIyWhcNMjUxMjA3MTAwMjIyWjAzMTEwLwYDVQQD Eyg5YTUwMzg1YzkzM2ZiODRkY2RiZTYyYmZmYzA4MGYxMzgyMTZmM2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3HM07IzW58KeKmQHXSrhhCyrq2u K58OA7Lg7xSzxvVcVf48mC0DGWXKuH2jk3C/xxNOj+3yJCcAhV4ARfEFYD1nxAWp 5y8OtW7Mok4ybL8dAeBgqWbsm5wn7uLCq1W0l0DgQahMgbNM8MX5F/M+vzUiJrNQ E7Eg6lHoIe7V7VWvp+gLPJBhLyJOnGJG3WrKO/BZQ6dW7nBnYauHxNkLadq4dnQw XrVv/Z1IgRF6IRgY2O+fswF+kBcAFqkJ6kl38lUt5GjAXfv9MonFPO4NN9yv88GA CHUCsee0l94lPArlNK5y1+O9rJHDfYtiq6f4JInpoakL1Gca7fsaQUgqZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJpQOFyTP7hNzb5iv/wIDxOCFvP6MB8GA1UdIwQY MBaAFKoyWNl8m8KE1IV7zuPfCQg2vNISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWpKWTJYeWJ3b1RVaFh2TzQ5OEpDRGE4MGhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85OGExNDEtYzQyZS00MTVlLWEzY2It Zjk4ZGM1MzM4ZDJiLzEvcWpKWTJYeWJ3b1RVaFh2TzQ5OEpDRGE4MGhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85OGExNDEtYzQyZS00MTVlLWEzY2ItZjk4ZGM1MzM4ZDJi LzEvcWpKWTJYeWJ3b1RVaFh2TzQ5OEpDRGE4MGhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHPKBRWwv a/vdQo5Ac9qrGS4zygKStIOHvZwa1L4jy/nUsD/H8S1iKByKuJp6aT1qCIwuoPSW IApU7a5tYN6A5tGICH1I8fXx93Mu5nTUbwCWLSI9ZTeFjC7ltGNT+Q0msrAASE8F yYPLZ/r1vWwDbAK6Cv7qFGCHXnEDuU1v2liUdEfthyFb4wPRHTb57+0exS8rnyrA 6bpJAu/x7aatfZ+wZr9EkIP/lXoemm16ZX/Vu5zBMuDoxNws8tPV/osgnSwdwNRZ dGTeA7Vj9cvgBG6T6fuaW3W3VDreOYq7FgOgSDX3+te0Tf1Wp1vLspsNHgofsi1E GOMjvvP5qJIHrg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:09:32 2025 by rpki-client