This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft File: qGW64ld4vu2IgMCN8tPzf8N6vB4.mft (raw, json) Hash identifier: CUXWEeLXcphye3bFATE7+3uD0nJUNIwR8+dFqurZH3E= Subject key identifier: D8:1E:CF:61:31:95:9D:A5:45:3D:36:C1:24:8F:79:8A:89:05:4E:8F Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E Certificate issuer: /CN=a865bae25778beed8880c08df2d3f37fc37abc1e Certificate serial: 019AF0881432E9E166334BFABFC305866F4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft Manifest number: 0B31 Signing time: Fri 05 Dec 2025 22:00:41 +0000 Manifest this update: Fri 05 Dec 2025 22:00:41 +0000 Manifest next update: Sat 06 Dec 2025 22:00:41 +0000 Files and hashes: 1: 1-Q-SU6M1eWokdvHWYPfiDLf862M.roa (hash: C1hLhsta908XltJUmng5iUBY0gsffPf1N3xCcfgoTn0=) 2: FIO2B6DSj-VNnqIBc_nz9Mg-l_0.roa (hash: hFmNbHGOZOtCeE5eu6qV8WF/VHQWY1SuoXphpTsuE/Y=) 3: _0V8txyjPPqzjlvfK-eiSEPQud8.roa (hash: OuyYUMKPpEltyvzJnMLVyp9dQDUE6+Aj/UBjntoQqiQ=) 4: aQbAdMmw6LGkWrHFISw9gjXbPXE.roa (hash: 3oom+N+bFKVsXUfpHyiTTHfYtfR8rQPSAw7BXiuCfxQ=) 5: om3N9ug1vxTA-JOJ0P_08L7ZWxo.roa (hash: FdL6R9gigrjiaEd9SVuTmcrerTtUR7V2cH9/PXq0cyA=) 6: qGW64ld4vu2IgMCN8tPzf8N6vB4.crl (hash: 2DVE5Bq+IKgceZxar04xxaHjl4aNpbDk9n61Owadz5I=) 7: sRlrf2L_j98uPIoNnChhrs6bing.roa (hash: 1ZhMP4XH7DUgYDZTVYKViXDgJjDrkhtBjx0bS6tr/u4=) 8: tJZkynRy8uV8yQcd4yzCAEqpLIg.roa (hash: TGGA7U/xut49UXeQTIJIPzu7f3fAAJZZSi0PNoulkio=) 9: uPkkzg5i_N9C_QfzlZF7zCoVCpE.roa (hash: MtHvS+JR+Oum24yd4r12c1cN1Y/6sK4FbwymNPm07k4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:14:32:e9:e1:66:33:4b:fa:bf:c3:05:86:6f:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e Validity Not Before: Dec 5 22:00:41 2025 GMT Not After : Dec 6 22:00:41 2025 GMT Subject: CN=d81ecf6131959da5453d36c1248f798a89054e8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:80:aa:df:b2:eb:c9:c0:28:bd:b5:1f:b8:42: 90:c6:9d:a5:87:4c:e1:3c:6e:24:49:7f:a9:62:54: 15:d9:07:a6:60:a5:03:5f:c2:5b:8f:6b:1e:cb:15: e3:d6:f5:96:01:7c:7f:5d:53:b3:39:b2:3e:29:30: 04:a7:2b:b9:22:f3:3a:41:48:c4:fc:09:75:10:d1: e4:cd:ba:0d:9c:00:f7:1b:69:22:ad:4d:d9:9d:c3: 78:0a:27:93:15:30:3c:dc:9e:8c:ed:05:9c:ce:5e: 0e:0a:4e:59:c9:84:9c:08:c7:d0:0c:28:2d:49:e0: d5:db:eb:16:a5:c7:ab:38:78:bc:24:af:8d:c7:d5: 8d:74:7b:95:cc:7a:10:1b:25:9e:4a:d5:07:fe:11: 80:79:16:12:85:42:66:12:68:3d:ec:b2:cb:6a:ac: 24:95:a3:f7:74:f0:f9:1a:3d:b4:1a:4b:f8:40:53: 53:10:a6:2a:65:83:79:fa:fd:70:4d:fc:ba:2a:a2: da:b7:f7:e0:1c:28:1a:3b:26:08:5f:43:96:5d:8c: ba:0c:06:e3:33:f8:90:ab:8a:6e:67:dc:51:ae:2d: 5a:5d:bc:97:9d:82:2d:0d:0d:17:0a:11:a8:18:e7: 2f:db:30:e6:36:89:b4:47:90:30:39:d1:30:05:68: 74:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:1E:CF:61:31:95:9D:A5:45:3D:36:C1:24:8F:79:8A:89:05:4E:8F X509v3 Authority Key Identifier: keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:79:d6:f4:6b:ec:07:b1:7e:c1:bc:6b:ba:88:de:07:c4:3a: 61:48:b9:b1:7d:d9:5e:86:54:85:6c:df:73:eb:3b:ab:92:6d: 6c:a2:a3:d8:ff:a0:f1:ab:ae:d9:5f:bf:1b:9e:be:83:3b:fa: 66:03:99:c7:37:80:49:94:f4:23:4c:58:43:88:53:bc:50:68: 8f:9d:b7:11:c2:80:7e:37:20:9c:35:d7:1f:3d:ac:20:ce:a1: 56:4a:f6:f4:67:e5:18:c4:93:0e:5b:96:e7:b9:c9:b7:6b:5a: 3a:ea:54:28:7c:b0:9f:9d:06:55:96:d0:eb:7c:3e:f6:e9:0d: d8:1c:fc:f4:8b:4a:a5:cd:70:29:2f:03:aa:ab:a1:03:16:f6: dd:f1:0b:47:17:f2:43:ee:6b:98:3b:46:c6:ab:c6:ca:e2:b2: 97:59:10:5e:bb:52:72:f2:aa:6c:f9:7a:f1:7c:1e:f3:b7:e4: ee:a0:bf:ff:d5:45:84:d2:ac:fb:1b:cf:7b:06:a0:96:af:52: c4:3f:94:2b:51:75:98:1d:43:7d:fd:9f:42:d3:48:00:f6:79: 25:bb:d4:fa:94:4b:73:d1:0e:e0:b8:e4:10:83:ed:bb:27:70: 1b:47:ba:61:68:1b:36:15:c9:14:cc:40:36:c9:6a:61:f1:85: 77:4e:c3:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiBQy6eFmM0v6v8MFhm9PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NjViYWUyNTc3OGJlZWQ4ODgwYzA4ZGYyZDNmMzdmYzM3 YWJjMWUwHhcNMjUxMjA1MjIwMDQxWhcNMjUxMjA2MjIwMDQxWjAzMTEwLwYDVQQD EyhkODFlY2Y2MTMxOTU5ZGE1NDUzZDM2YzEyNDhmNzk4YTg5MDU0ZThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyICq37LrycAovbUfuEKQxp2lh0zh PG4kSX+pYlQV2QemYKUDX8Jbj2seyxXj1vWWAXx/XVOzObI+KTAEpyu5IvM6QUjE /Al1ENHkzboNnAD3G2kirU3ZncN4CieTFTA83J6M7QWczl4OCk5ZyYScCMfQDCgt SeDV2+sWpcerOHi8JK+Nx9WNdHuVzHoQGyWeStUH/hGAeRYShUJmEmg97LLLaqwk laP3dPD5Gj20Gkv4QFNTEKYqZYN5+v1wTfy6KqLat/fgHCgaOyYIX0OWXYy6DAbj M/iQq4puZ9xRri1aXbyXnYItDQ0XChGoGOcv2zDmNom0R5AwOdEwBWh0WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgez2ExlZ2lRT02wSSPeYqJBU6PMB8GA1UdIwQY MBaAFKhluuJXeL7tiIDAjfLT83/DerweMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUdXNjRsZDR2dTJJZ01DTjh0UHpmOE42dkI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi82NDQ0ZDEtNWYwMC00ZTUwLTgwMTkt MWI2Zjc1MGNmOWEyLzEvcUdXNjRsZDR2dTJJZ01DTjh0UHpmOE42dkI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi82NDQ0ZDEtNWYwMC00ZTUwLTgwMTktMWI2Zjc1MGNmOWEy LzEvcUdXNjRsZDR2dTJJZ01DTjh0UHpmOE42dkI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvXnW9Gvs B7F+wbxruojeB8Q6YUi5sX3ZXoZUhWzfc+s7q5JtbKKj2P+g8auu2V+/G56+gzv6 ZgOZxzeASZT0I0xYQ4hTvFBoj523EcKAfjcgnDXXHz2sIM6hVkr29GflGMSTDluW 57nJt2taOupUKHywn50GVZbQ63w+9ukN2Bz89ItKpc1wKS8DqquhAxb23fELRxfy Q+5rmDtGxqvGyuKyl1kQXrtScvKqbPl68Xwe87fk7qC//9VFhNKs+xvPewaglq9S xD+UK1F1mB1Dff2fQtNIAPZ5JbvU+pRLc9EO4LjkEIPtuydwG0e6YWgbNhXJFMxA NslqYfGFd07D9w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:32 2025 by rpki-client