This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft File: qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft (raw, json) Hash identifier: poxrmMIam5nrS4/4PqxWgcjRxhMcXEx69zN+YhIhwLQ= Subject key identifier: EA:81:CF:EE:A6:E7:2E:29:76:FE:62:1E:37:C1:A2:1D:9D:2D:98:9B Authority key identifier: A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5 Certificate issuer: /CN=a8010ceb20f2e076a3f000271a5c375761bec2f5 Certificate serial: 019B2E1D9C52648EF8BBDA7E9D5AF8A59F8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft Manifest number: 0CC3 Signing time: Wed 17 Dec 2025 21:00:50 +0000 Manifest this update: Wed 17 Dec 2025 21:00:50 +0000 Manifest next update: Thu 18 Dec 2025 21:00:50 +0000 Files and hashes: 1: cTUW6h8O7oJIMmgLFdy8XjEMwQM.roa (hash: GWLeGo5Tx1NQYnIt9PV3FBH+YZ+jq0YpS9g5boQS2IE=) 2: hefvQQC5HBlbQ-EPV5xNwJ9mr8s.roa (hash: Ud9jnh2NMlpw3d8NsGfrdGK8oljkEFrFbqnJTHG6eJE=) 3: qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl (hash: xDRRBiP/+2UVpeQ9OoPqk5aaqOPngOt9CWiNq/LaMRw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 21:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:1d:9c:52:64:8e:f8:bb:da:7e:9d:5a:f8:a5:9f:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8010ceb20f2e076a3f000271a5c375761bec2f5 Validity Not Before: Dec 17 21:00:50 2025 GMT Not After : Dec 18 21:00:50 2025 GMT Subject: CN=ea81cfeea6e72e2976fe621e37c1a21d9d2d989b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ef:e1:a7:c8:62:8f:7a:1c:2d:71:c6:73:3a: 73:ee:9e:99:94:59:34:2d:90:6c:00:9e:58:87:74: fe:a5:db:55:1e:27:c7:f0:16:1a:be:29:51:4a:dd: 68:63:f9:f1:b6:c6:08:86:7b:13:cf:fc:27:6d:3f: b2:72:42:27:c3:fc:54:13:70:68:0a:80:3c:5c:19: 38:b6:5d:8b:d2:6d:09:2d:3f:b1:ca:aa:90:dc:56: 12:4a:e5:df:b5:81:25:f0:eb:b2:c8:9c:d6:ad:f9: a3:16:07:dd:3c:05:8c:70:a6:17:ec:de:e0:c0:b5: 6c:3f:95:82:90:6d:b1:6d:61:f1:9e:7c:c2:3a:f8: 16:3b:07:41:06:53:99:94:f7:b2:0d:83:79:e1:08: c7:a4:b1:6a:3f:cc:bd:d7:7e:82:07:80:97:2a:6a: a9:da:9e:44:34:e3:78:84:a5:68:11:66:47:32:ff: 0e:9f:bc:bd:ce:90:ae:1a:39:7a:cc:2a:aa:50:c4: 29:9e:53:6c:91:97:1e:4b:29:61:e9:54:5f:3f:1c: 69:c5:79:c7:b1:df:3c:14:b8:3c:af:00:07:38:b5: 7f:32:0f:66:63:1e:15:45:f5:84:48:1e:1d:61:c9: d5:3d:fc:26:dc:7e:8d:dc:4a:d0:0f:1b:ae:79:38: 34:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:81:CF:EE:A6:E7:2E:29:76:FE:62:1E:37:C1:A2:1D:9D:2D:98:9B X509v3 Authority Key Identifier: keyid:A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:b3:5b:68:53:25:0a:8d:83:83:ad:8d:55:5e:38:17:d8:31: af:e8:00:69:ed:ba:05:c4:5f:29:93:c7:ba:13:e0:b3:7a:86: e4:cd:29:1c:58:1a:70:74:60:fc:79:ce:08:2c:e4:4e:1a:62: 18:85:9f:06:16:f4:5d:73:5c:97:9b:d7:0d:80:55:d9:b8:49: a5:4e:21:45:dd:19:58:76:13:6e:ef:f5:0f:48:82:54:ed:c3: 12:16:8b:37:35:9d:bc:1c:53:32:b1:f8:89:cf:24:4a:55:51: 3d:4b:2e:c1:d4:32:a4:3d:a1:66:99:e3:15:bc:4f:3d:cf:67: 60:ec:f3:2e:9c:01:e2:fa:d9:44:bb:cc:b6:b2:f3:28:82:5d: 7d:d0:97:46:fe:64:9d:bb:c0:fb:51:a0:5d:60:03:71:ee:20: 5c:47:8b:58:e7:07:45:ba:5c:f6:9a:8b:7f:88:b9:d2:91:8f: be:07:4a:8c:4a:35:22:a3:fe:1d:2e:28:6d:f3:b3:05:a7:3d: e5:8e:de:e8:b8:96:c8:22:5f:af:e1:e6:93:01:18:7f:bb:bc: 2f:70:7d:55:ee:2a:e2:f8:0e:28:c2:92:d1:e5:7a:f2:ad:02: 0c:39:52:1b:d9:c8:e0:32:1b:0d:56:69:d9:77:46:8c:33:c9: f4:58:dc:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuHZxSZI74u9p+nVr4pZ+NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MDEwY2ViMjBmMmUwNzZhM2YwMDAyNzFhNWMzNzU3NjFi ZWMyZjUwHhcNMjUxMjE3MjEwMDUwWhcNMjUxMjE4MjEwMDUwWjAzMTEwLwYDVQQD EyhlYTgxY2ZlZWE2ZTcyZTI5NzZmZTYyMWUzN2MxYTIxZDlkMmQ5ODliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7O/hp8hij3ocLXHGczpz7p6ZlFk0 LZBsAJ5Yh3T+pdtVHifH8BYavilRSt1oY/nxtsYIhnsTz/wnbT+yckInw/xUE3Bo CoA8XBk4tl2L0m0JLT+xyqqQ3FYSSuXftYEl8OuyyJzWrfmjFgfdPAWMcKYX7N7g wLVsP5WCkG2xbWHxnnzCOvgWOwdBBlOZlPeyDYN54QjHpLFqP8y9136CB4CXKmqp 2p5ENON4hKVoEWZHMv8On7y9zpCuGjl6zCqqUMQpnlNskZceSylh6VRfPxxpxXnH sd88FLg8rwAHOLV/Mg9mYx4VRfWESB4dYcnVPfwm3H6N3ErQDxuueTg0vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqBz+6m5y4pdv5iHjfBoh2dLZibMB8GA1UdIwQY MBaAFKgBDOsg8uB2o/AAJxpcN1dhvsL1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUFFTTZ5RHk0SGFqOEFBbkdsdzNWMkctd3ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mNDQ0YWEtYWU4Yy00ZDE0LWEzYTMt NDlmNjVjNmE0OGJmLzEvcUFFTTZ5RHk0SGFqOEFBbkdsdzNWMkctd3ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9mNDQ0YWEtYWU4Yy00ZDE0LWEzYTMtNDlmNjVjNmE0OGJm LzEvcUFFTTZ5RHk0SGFqOEFBbkdsdzNWMkctd3ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQrNbaFMl Co2Dg62NVV44F9gxr+gAae26BcRfKZPHuhPgs3qG5M0pHFgacHRg/HnOCCzkThpi GIWfBhb0XXNcl5vXDYBV2bhJpU4hRd0ZWHYTbu/1D0iCVO3DEhaLNzWdvBxTMrH4 ic8kSlVRPUsuwdQypD2hZpnjFbxPPc9nYOzzLpwB4vrZRLvMtrLzKIJdfdCXRv5k nbvA+1GgXWADce4gXEeLWOcHRbpc9pqLf4i50pGPvgdKjEo1IqP+HS4obfOzBac9 5Y7e6LiWyCJfr+HmkwEYf7u8L3B9Ve4q4vgOKMKS0eV68q0CDDlSG9nI4DIbDVZp 2XdGjDPJ9Fjccw== -----END CERTIFICATE-----Generated at Thu Dec 18 07:33:48 2025 by rpki-client