This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft File: qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft (raw, json) Hash identifier: J6GQj43iXmsbl9O+Cz5z5BX/dWVKLwnO5wWjc9zpwGM= Subject key identifier: B2:12:F2:BB:3C:DC:B6:A8:D5:8C:8F:9F:58:C6:4A:D8:9A:8C:20:30 Authority key identifier: A8:EF:61:BD:C0:34:FB:56:38:BC:F1:9E:07:EC:21:D9:00:19:D4:2C Certificate issuer: /CN=a8ef61bdc034fb5638bcf19e07ec21d90019d42c Certificate serial: 019AF23FA042D1E683569AA3E93FFC24C05B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 06:00:47 +0000 Manifest this update: Sat 06 Dec 2025 06:00:47 +0000 Manifest next update: Sun 07 Dec 2025 06:00:47 +0000 Files and hashes: 1: qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl (hash: JySqxNIWsKQajG3fo/c0l97uOg982e1iRTRW8LoLtZ8=) 2: uE_fVUsQj_lty3I3lYpDSAIBXSQ.roa (hash: RZlwhFI1FuSzwxiwupmztd/WqpFc9LHBsKw5C8YM+Cc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:a0:42:d1:e6:83:56:9a:a3:e9:3f:fc:24:c0:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8ef61bdc034fb5638bcf19e07ec21d90019d42c Validity Not Before: Dec 6 06:00:47 2025 GMT Not After : Dec 7 06:00:47 2025 GMT Subject: CN=b212f2bb3cdcb6a8d58c8f9f58c64ad89a8c2030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ef:2b:1e:6f:3e:32:42:38:31:c0:de:d7:11: 1f:f0:73:da:81:52:37:6a:bc:56:3b:5c:e3:ac:b6: 25:8d:68:5d:5b:32:6c:32:48:b5:e1:75:8e:5d:cf: 73:a8:72:7a:59:b3:e5:40:a9:a2:4f:83:5d:39:69: 9f:ab:27:cc:e2:29:13:ea:98:6f:61:6f:4b:7e:1f: 2d:6c:e4:7e:9f:a9:c3:44:99:42:d7:ff:bf:76:13: cc:6a:e7:42:13:d7:e1:bd:07:74:ec:58:91:71:c6: c2:b1:d9:80:63:99:01:55:d9:7b:45:4b:32:14:d3: 1c:81:04:07:c6:31:66:6f:8a:25:d1:99:d9:3e:a1: 49:95:17:a5:ac:e6:58:8e:af:4d:42:a9:e0:17:0f: 21:7c:72:11:c5:1d:30:69:68:dc:33:81:9b:cc:8f: df:ae:a7:50:c3:78:2b:24:e6:60:ca:f3:ee:1c:69: d9:bb:17:95:0a:2e:a2:11:1c:f3:a8:97:a5:55:44: b8:05:18:4c:50:ee:80:37:b3:e4:d4:7c:81:d5:39: c8:fe:2b:b9:ed:27:65:dd:1a:2e:8e:ac:27:7b:00: cd:12:58:9c:a2:41:55:ba:fd:61:e3:d2:bd:df:a4: 13:13:d2:98:3e:73:78:f8:f0:07:e0:fd:20:2d:04: 52:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:12:F2:BB:3C:DC:B6:A8:D5:8C:8F:9F:58:C6:4A:D8:9A:8C:20:30 X509v3 Authority Key Identifier: keyid:A8:EF:61:BD:C0:34:FB:56:38:BC:F1:9E:07:EC:21:D9:00:19:D4:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:97:60:ef:12:92:73:55:91:ce:6b:a1:d6:aa:73:89:29:5f: 3b:69:d5:be:2f:f3:f8:a7:e1:e1:75:ae:5a:5d:97:25:67:95: fd:96:e5:82:35:35:4a:0a:73:0a:d9:56:66:e3:2c:df:7b:e2: 31:16:d0:57:5d:67:fb:b3:28:5b:4a:bd:b1:4b:58:fd:bd:1f: 10:e9:88:6d:17:ad:93:1a:5a:32:f9:a6:77:14:12:43:d7:88: e7:c2:9a:17:58:b5:3b:dc:15:0b:14:27:54:9c:59:a2:09:96: 54:77:e1:66:9a:f5:e4:71:9f:4b:51:10:75:70:5c:29:74:33: ee:53:3e:4d:58:05:21:14:03:c3:a0:84:f4:c6:2c:0a:ad:8a: 15:41:7c:5f:a3:d1:c0:88:6e:0c:38:fb:4a:b1:f4:35:6f:45: 68:af:ac:3a:88:9c:a6:84:31:62:9b:61:c4:1c:ee:18:38:0c: 34:fc:e5:96:0b:a3:60:a1:8d:bb:14:43:96:89:fe:d1:a8:4b: de:b9:1c:19:4b:e0:42:b8:7a:30:ac:76:e2:44:5e:71:02:d2: e8:13:12:51:2d:25:73:1f:fb:d5:2f:74:dd:37:c9:75:90:18: c0:af:c7:39:6d:72:f5:29:81:81:90:43:56:0c:f3:aa:0d:a4: 07:1b:ce:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP6BC0eaDVpqj6T/8JMBbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4ZWY2MWJkYzAzNGZiNTYzOGJjZjE5ZTA3ZWMyMWQ5MDAx OWQ0MmMwHhcNMjUxMjA2MDYwMDQ3WhcNMjUxMjA3MDYwMDQ3WjAzMTEwLwYDVQQD EyhiMjEyZjJiYjNjZGNiNmE4ZDU4YzhmOWY1OGM2NGFkODlhOGMyMDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAze8rHm8+MkI4McDe1xEf8HPagVI3 arxWO1zjrLYljWhdWzJsMki14XWOXc9zqHJ6WbPlQKmiT4NdOWmfqyfM4ikT6phv YW9Lfh8tbOR+n6nDRJlC1/+/dhPMaudCE9fhvQd07FiRccbCsdmAY5kBVdl7RUsy FNMcgQQHxjFmb4ol0ZnZPqFJlRelrOZYjq9NQqngFw8hfHIRxR0waWjcM4GbzI/f rqdQw3grJOZgyvPuHGnZuxeVCi6iERzzqJelVUS4BRhMUO6AN7Pk1HyB1TnI/iu5 7Sdl3RoujqwnewDNElicokFVuv1h49K936QTE9KYPnN4+PAH4P0gLQRSfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLIS8rs83Lao1YyPn1jGStiajCAwMB8GA1UdIwQY MBaAFKjvYb3ANPtWOLzxngfsIdkAGdQsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcU85aHZjQTAtMVk0dlBHZUItd2gyUUFaMUN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8zMDAxNjUtMjVjNi00MDFiLTljYmYt MWY0OWJjN2ZkM2JkLzEvcU85aHZjQTAtMVk0dlBHZUItd2gyUUFaMUN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8zMDAxNjUtMjVjNi00MDFiLTljYmYtMWY0OWJjN2ZkM2Jk LzEvcU85aHZjQTAtMVk0dlBHZUItd2gyUUFaMUN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKJdg7xKS c1WRzmuh1qpziSlfO2nVvi/z+Kfh4XWuWl2XJWeV/ZblgjU1SgpzCtlWZuMs33vi MRbQV11n+7MoW0q9sUtY/b0fEOmIbRetkxpaMvmmdxQSQ9eI58KaF1i1O9wVCxQn VJxZogmWVHfhZpr15HGfS1EQdXBcKXQz7lM+TVgFIRQDw6CE9MYsCq2KFUF8X6PR wIhuDDj7SrH0NW9FaK+sOoicpoQxYpthxBzuGDgMNPzllgujYKGNuxRDlon+0ahL 3rkcGUvgQrh6MKx24kRecQLS6BMSUS0lcx/71S903TfJdZAYwK/HOW1y9SmBgZBD Vgzzqg2kBxvO8w== -----END CERTIFICATE-----Generated at Sat Dec 6 12:34:11 2025 by rpki-client