This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft File: qnp9oeIjsYMKC5G11hyDrSYMERs.mft (raw, json) Hash identifier: V1IXN2/lLhTLBJySEb5+b4P0hMVMPWSHKeoJkeDTNwI= Subject key identifier: 4C:B6:86:C1:B8:94:26:0C:4B:7D:D4:DE:3B:2B:B5:F5:F8:DC:A4:A4 Authority key identifier: AA:7A:7D:A1:E2:23:B1:83:0A:0B:91:B5:D6:1C:83:AD:26:0C:11:1B Certificate issuer: /CN=aa7a7da1e223b1830a0b91b5d61c83ad260c111b Certificate serial: 019AF50BD5710646B9BCA63A9AE69318B5C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft Manifest number: 132C Signing time: Sat 06 Dec 2025 19:03:04 +0000 Manifest this update: Sat 06 Dec 2025 19:03:04 +0000 Manifest next update: Sun 07 Dec 2025 19:03:04 +0000 Files and hashes: 1: B2uv5t_GiMUr8rM-r5uKbUdnEoQ.roa (hash: YpVmIqGmMDZopEuL6KgYwvjCxwixGKfs5u+qFRIV/jw=) 2: qnp9oeIjsYMKC5G11hyDrSYMERs.crl (hash: JbkO5r7wnurrx3XKdCnNMZpv0ZztPbBR6BeX9ObfFqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:03:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:d5:71:06:46:b9:bc:a6:3a:9a:e6:93:18:b5:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa7a7da1e223b1830a0b91b5d61c83ad260c111b Validity Not Before: Dec 6 19:03:04 2025 GMT Not After : Dec 7 19:03:04 2025 GMT Subject: CN=4cb686c1b894260c4b7dd4de3b2bb5f5f8dca4a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ca:37:6e:81:91:31:7b:a7:be:69:40:6e:d5: fb:31:51:9b:e4:9f:0e:68:73:d4:b1:8f:25:4a:75: 30:30:68:b7:3c:7c:95:22:a2:e8:f7:85:d4:ca:99: af:3a:6f:0d:5d:05:64:d8:e2:72:73:c2:a0:35:6a: 6e:e8:65:be:74:39:6e:8b:e9:41:54:a8:f5:02:b9: 37:21:e1:7d:35:9c:a9:11:96:95:0a:f3:81:2f:65: 56:51:d4:f4:44:23:52:e0:cd:c2:a2:e2:32:c1:ef: f1:ff:8c:fd:59:9c:75:5e:21:08:dd:ee:c3:c0:74: 1b:f8:12:6f:4d:c6:ec:80:c8:06:c9:62:7c:32:a5: e7:7f:3f:04:4d:00:40:fc:3c:e4:31:a8:92:9e:a3: 9a:e2:34:ed:fb:eb:4e:7c:d7:3d:81:80:f0:77:84: 42:43:0e:64:12:73:52:51:01:7b:64:e7:e4:86:9b: 00:e4:45:e3:44:e3:5b:3e:f6:ea:c6:53:23:34:e5: 97:b0:de:fe:a3:71:fd:c7:65:d9:57:f5:d7:6b:e9: b7:50:6d:44:75:0d:1c:ee:23:4a:6f:6f:ef:a1:b0: 5f:fb:a3:31:1a:40:ff:2b:9e:56:94:bc:ad:4e:fb: dd:2e:29:c0:bf:0e:b5:ac:cd:bb:cb:30:94:dd:52: 56:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B6:86:C1:B8:94:26:0C:4B:7D:D4:DE:3B:2B:B5:F5:F8:DC:A4:A4 X509v3 Authority Key Identifier: keyid:AA:7A:7D:A1:E2:23:B1:83:0A:0B:91:B5:D6:1C:83:AD:26:0C:11:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:40:c3:d7:6e:77:b3:0d:b2:db:8e:ea:74:c9:ee:bc:33:df: 90:41:63:dc:6e:3d:fd:57:81:f9:e8:ce:f5:30:7f:ed:1e:79: f7:0f:b8:f9:8a:5b:6d:6a:a2:74:12:32:eb:c4:11:11:06:4d: 7d:b0:05:19:96:98:e7:e0:c9:09:91:81:bb:5a:88:2b:2a:e9: bf:72:ce:ea:66:43:6f:9d:8e:ec:a1:3b:08:52:37:d8:68:e9: 8c:5d:aa:38:59:6f:6f:8f:5f:94:78:c8:d7:b6:39:f9:d7:ed: 47:7c:2e:1a:a1:d5:2d:a8:2d:1f:a9:e1:20:9b:f3:3c:6f:78: 3d:bf:84:47:33:b3:f0:9b:6d:23:47:12:d3:79:b4:f1:95:9d: af:14:f9:cf:c3:f1:88:a5:d2:f4:93:85:00:5d:4e:a9:a2:fe: 7c:1f:81:50:33:0d:e9:94:ce:16:ee:81:c4:2d:70:ac:83:85: fc:57:c7:08:7c:67:49:a3:7b:6a:c2:90:32:17:7c:d2:87:be: 4b:a8:81:f4:69:7b:aa:2c:8b:8d:58:4e:6f:e3:5c:89:16:8c: ee:95:fe:97:5e:1b:55:68:f1:96:6e:3b:cf:8b:7e:62:17:bb: e8:8b:dd:1e:ff:38:20:18:2a:15:e2:1b:32:ef:8f:f1:9a:2c: e7:a0:c1:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C9VxBka5vKY6muaTGLXGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhN2E3ZGExZTIyM2IxODMwYTBiOTFiNWQ2MWM4M2FkMjYw YzExMWIwHhcNMjUxMjA2MTkwMzA0WhcNMjUxMjA3MTkwMzA0WjAzMTEwLwYDVQQD Eyg0Y2I2ODZjMWI4OTQyNjBjNGI3ZGQ0ZGUzYjJiYjVmNWY4ZGNhNGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0co3boGRMXunvmlAbtX7MVGb5J8O aHPUsY8lSnUwMGi3PHyVIqLo94XUypmvOm8NXQVk2OJyc8KgNWpu6GW+dDlui+lB VKj1Ark3IeF9NZypEZaVCvOBL2VWUdT0RCNS4M3CouIywe/x/4z9WZx1XiEI3e7D wHQb+BJvTcbsgMgGyWJ8MqXnfz8ETQBA/DzkMaiSnqOa4jTt++tOfNc9gYDwd4RC Qw5kEnNSUQF7ZOfkhpsA5EXjRONbPvbqxlMjNOWXsN7+o3H9x2XZV/XXa+m3UG1E dQ0c7iNKb2/vobBf+6MxGkD/K55WlLytTvvdLinAvw61rM27yzCU3VJWWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEy2hsG4lCYMS33U3jsrtfX43KSkMB8GA1UdIwQY MBaAFKp6faHiI7GDCguRtdYcg60mDBEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW5wOW9lSWpzWU1LQzVHMTFoeURyU1lNRVJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lNTdmYjEtMmQ1YS00NjYxLTgwMWQt MGViOGYzN2EwMTc5LzEvcW5wOW9lSWpzWU1LQzVHMTFoeURyU1lNRVJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9lNTdmYjEtMmQ1YS00NjYxLTgwMWQtMGViOGYzN2EwMTc5 LzEvcW5wOW9lSWpzWU1LQzVHMTFoeURyU1lNRVJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbUDD1253 sw2y247qdMnuvDPfkEFj3G49/VeB+ejO9TB/7R559w+4+YpbbWqidBIy68QREQZN fbAFGZaY5+DJCZGBu1qIKyrpv3LO6mZDb52O7KE7CFI32GjpjF2qOFlvb49flHjI 17Y5+dftR3wuGqHVLagtH6nhIJvzPG94Pb+ERzOz8JttI0cS03m08ZWdrxT5z8Px iKXS9JOFAF1OqaL+fB+BUDMN6ZTOFu6BxC1wrIOF/FfHCHxnSaN7asKQMhd80oe+ S6iB9Gl7qiyLjVhOb+NciRaM7pX+l14bVWjxlm47z4t+Yhe76IvdHv84IBgqFeIb Mu+P8Zos56DB1Q== -----END CERTIFICATE-----Generated at Sun Dec 7 00:33:12 2025 by rpki-client