This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.mft File: qqng6Jg9netBVxbWHoyRJRCibCQ.mft (raw, json) Hash identifier: SfzSBhrDMYDIc6bTxuzoIuSKwZQu3MH7E3qx/pwLtSU= Subject key identifier: 3B:E9:DC:39:B7:91:00:C5:77:DB:AD:74:02:5D:75:45:38:39:F9:BC Authority key identifier: AA:A9:E0:E8:98:3D:9D:EB:41:57:16:D6:1E:8C:91:25:10:A2:6C:24 Certificate issuer: /CN=aaa9e0e8983d9deb415716d61e8c912510a26c24 Certificate serial: 019AF12E1CD396307DC2D58D83F684549B48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqng6Jg9netBVxbWHoyRJRCibCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.mft Manifest number: 02A6 Signing time: Sat 06 Dec 2025 01:02:02 +0000 Manifest this update: Sat 06 Dec 2025 01:02:02 +0000 Manifest next update: Sun 07 Dec 2025 01:02:02 +0000 Files and hashes: 1: qqng6Jg9netBVxbWHoyRJRCibCQ.crl (hash: PPRrIlJGV9C2u1o7nr7rH8xPIU57PSEEV9d0oZtRNYo=) 2: wSW6JHry9aEuEbZj9sUvZUmXDYs.roa (hash: chgjDOS+AVkY8OsmOxsnvb6k6+1kPmgvTXMxVKADzP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/qqng6Jg9netBVxbWHoyRJRCibCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:1c:d3:96:30:7d:c2:d5:8d:83:f6:84:54:9b:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaa9e0e8983d9deb415716d61e8c912510a26c24 Validity Not Before: Dec 6 01:02:02 2025 GMT Not After : Dec 7 01:02:02 2025 GMT Subject: CN=3be9dc39b79100c577dbad74025d75453839f9bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4c:48:4d:6b:89:c2:9c:f1:51:78:50:5f:60: 47:21:6f:fb:2e:64:06:a8:b6:37:d3:eb:58:2e:d2: 8a:68:77:ee:87:b0:ae:e9:9f:d8:a2:a2:38:65:52: d3:d2:7f:e1:f3:11:cd:cf:83:fe:79:c1:30:14:20: 23:00:c2:08:c0:cc:aa:a1:99:40:82:c6:6c:5c:95: d3:45:02:47:3e:3d:9b:60:77:4d:27:ae:2e:f3:f4: 7e:9a:ae:68:f3:99:7f:5e:42:80:3f:a9:a8:95:03: 50:16:7f:fc:16:28:79:2a:52:01:b1:75:15:5d:cd: 64:f0:0a:4e:f3:14:ad:cc:0b:74:44:63:90:a4:94: 0a:e4:f1:b9:0d:02:75:92:4e:50:d8:96:61:a0:db: bd:fb:e9:18:fd:e0:a9:58:c4:4d:5b:bd:3d:70:8b: 6a:83:21:d5:53:9d:36:64:73:41:34:9d:44:8c:48: ca:37:bc:b7:c4:fc:97:cf:d9:50:6a:da:9c:be:a6: eb:67:ee:a2:36:0e:b4:67:c3:b2:e1:b0:af:ba:63: 5c:84:eb:22:76:4f:ba:6c:34:10:cd:9e:01:8e:c3: 11:94:3f:df:fb:c2:f5:0d:9e:bc:04:4f:12:9d:45: 56:a9:54:4f:59:7d:68:1a:98:0e:ef:35:84:b8:6c: af:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E9:DC:39:B7:91:00:C5:77:DB:AD:74:02:5D:75:45:38:39:F9:BC X509v3 Authority Key Identifier: keyid:AA:A9:E0:E8:98:3D:9D:EB:41:57:16:D6:1E:8C:91:25:10:A2:6C:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqng6Jg9netBVxbWHoyRJRCibCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:7d:37:13:a4:fd:2e:3e:6a:2a:6d:a9:6b:ea:fe:8e:91:29: cb:56:f3:b2:0e:83:e8:e8:5e:f7:36:a1:23:ea:8f:99:69:71: 25:c7:bd:05:d2:1c:fb:30:ed:8d:24:5c:12:3d:88:45:fe:20: 92:a1:85:b4:90:05:65:f0:47:e2:cb:6a:1e:34:8a:f5:c8:2c: 3f:79:a1:9c:86:f9:e8:78:7c:fa:47:5b:e7:23:41:c5:20:01: b1:8b:6f:db:4c:c6:29:bb:21:e0:88:7e:5a:cf:93:39:8e:ed: 77:31:de:7e:3a:c9:65:85:2d:97:76:05:ba:2e:ca:d4:85:21: 39:72:af:9c:28:a0:c0:7e:f7:c6:3d:fe:e2:58:81:ef:37:89: ce:24:38:53:ae:0c:e7:f4:f2:86:d6:4e:b8:27:0c:d4:fb:c7: 34:27:6f:b6:68:b2:39:cd:4b:93:03:b9:62:88:18:c5:23:0b: f1:0c:64:98:d4:bf:4d:0c:08:44:7a:22:4e:f9:26:fd:a1:1f: 76:45:67:0a:6b:c3:d3:03:65:3f:61:3a:54:0e:de:52:b5:ae: dc:7c:9a:15:1c:86:c1:24:96:20:dd:f0:46:0d:63:52:c3:ae: a9:53:2e:55:ac:cf:02:b2:f6:a6:f2:14:42:7b:2e:bb:6a:3b: 86:56:2b:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLhzTljB9wtWNg/aEVJtIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhYTllMGU4OTgzZDlkZWI0MTU3MTZkNjFlOGM5MTI1MTBh MjZjMjQwHhcNMjUxMjA2MDEwMjAyWhcNMjUxMjA3MDEwMjAyWjAzMTEwLwYDVQQD EygzYmU5ZGMzOWI3OTEwMGM1NzdkYmFkNzQwMjVkNzU0NTM4MzlmOWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUxITWuJwpzxUXhQX2BHIW/7LmQG qLY30+tYLtKKaHfuh7Cu6Z/YoqI4ZVLT0n/h8xHNz4P+ecEwFCAjAMIIwMyqoZlA gsZsXJXTRQJHPj2bYHdNJ64u8/R+mq5o85l/XkKAP6molQNQFn/8Fih5KlIBsXUV Xc1k8ApO8xStzAt0RGOQpJQK5PG5DQJ1kk5Q2JZhoNu9++kY/eCpWMRNW709cItq gyHVU502ZHNBNJ1EjEjKN7y3xPyXz9lQatqcvqbrZ+6iNg60Z8Oy4bCvumNchOsi dk+6bDQQzZ4BjsMRlD/f+8L1DZ68BE8SnUVWqVRPWX1oGpgO7zWEuGyvuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDvp3Dm3kQDFd9utdAJddUU4Ofm8MB8GA1UdIwQY MBaAFKqp4OiYPZ3rQVcW1h6MkSUQomwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXFuZzZKZzluZXRCVnhiV0hveVJKUkNpYkNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9hNjY2ZjQtZjZjZi00YWVkLWI5YmMt NDUxYjk2YWZjMmIxLzEvcXFuZzZKZzluZXRCVnhiV0hveVJKUkNpYkNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9hNjY2ZjQtZjZjZi00YWVkLWI5YmMtNDUxYjk2YWZjMmIx LzEvcXFuZzZKZzluZXRCVnhiV0hveVJKUkNpYkNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlX03E6T9 Lj5qKm2pa+r+jpEpy1bzsg6D6Ohe9zahI+qPmWlxJce9BdIc+zDtjSRcEj2IRf4g kqGFtJAFZfBH4stqHjSK9cgsP3mhnIb56Hh8+kdb5yNBxSABsYtv20zGKbsh4Ih+ Ws+TOY7tdzHefjrJZYUtl3YFui7K1IUhOXKvnCigwH73xj3+4liB7zeJziQ4U64M 5/TyhtZOuCcM1PvHNCdvtmiyOc1LkwO5YogYxSML8QxkmNS/TQwIRHoiTvkm/aEf dkVnCmvD0wNlP2E6VA7eUrWu3HyaFRyGwSSWIN3wRg1jUsOuqVMuVazPArL2pvIU Qnsuu2o7hlYrcQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:57:26 2025 by rpki-client