This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft File: qjHJjjyrghyE3e_yBp4CJZvW5hw.mft (raw, json) Hash identifier: TADUjV+80OaHqozuRig/H/MfFz0df8cNZJFlUpLKJLQ= Subject key identifier: 94:9D:FC:F7:AD:2F:25:E3:10:96:2B:96:4C:3C:99:F2:79:E7:A4:55 Authority key identifier: AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C Certificate issuer: /CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c Certificate serial: 019AF23F7984E614D463717CC88CF70822D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft Manifest number: 0CD2 Signing time: Sat 06 Dec 2025 06:00:37 +0000 Manifest this update: Sat 06 Dec 2025 06:00:37 +0000 Manifest next update: Sun 07 Dec 2025 06:00:37 +0000 Files and hashes: 1: AIeHAMlo02ixYJZr9DxoRfeqC_w.roa (hash: r/OyoKCdS9zD7ksUp6W0p8pqS4rPDdjM46a0P82mb/E=) 2: qjHJjjyrghyE3e_yBp4CJZvW5hw.crl (hash: xFVGbM1VF9gMb3fT6jmwEiI9gi2OEOL1UPRRPGXEtJM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:79:84:e6:14:d4:63:71:7c:c8:8c:f7:08:22:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c Validity Not Before: Dec 6 06:00:37 2025 GMT Not After : Dec 7 06:00:37 2025 GMT Subject: CN=949dfcf7ad2f25e310962b964c3c99f279e7a455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cd:72:f8:f9:89:bd:d7:f5:44:2f:94:9a:66: 5c:b1:56:07:42:3e:e2:8b:59:27:5c:73:a7:52:20: fd:4b:46:5a:8d:2b:ad:cc:cb:1a:9c:49:18:2d:07: a0:81:c9:9c:d4:c1:27:e9:9c:81:60:2b:ec:e9:4e: be:8a:58:69:21:48:55:e1:ca:59:1a:9f:a7:33:9b: 84:dd:cc:e6:0b:60:4b:26:86:92:6b:d0:6d:ff:fb: 63:0f:4d:ec:eb:1f:49:21:50:62:a4:0c:21:c1:95: f6:61:43:8b:b9:5b:65:19:b4:52:05:af:c1:cc:ca: 61:e5:4d:49:32:9a:8d:04:ab:ad:df:f8:d2:99:44: 5e:c2:5c:84:7c:d8:cf:b0:26:2d:f3:c6:1c:c5:d4: e8:7f:a9:c5:03:7b:f6:25:ce:3e:ac:04:e3:ae:30: 55:95:86:32:e9:a3:ef:c5:94:6f:42:c2:6d:28:4b: 78:9e:f3:ea:e1:98:87:5a:da:a3:03:82:24:13:68: 22:b1:35:a0:f3:2f:3e:d3:f2:cb:34:b3:57:22:c6: 22:ba:2f:81:61:16:8c:6c:6f:a0:77:5c:b1:41:56: 57:a2:60:1a:a8:fe:75:57:45:a8:61:59:bd:5c:0e: bb:33:32:2e:24:1e:12:19:9e:59:0b:62:b3:d0:6c: 62:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:9D:FC:F7:AD:2F:25:E3:10:96:2B:96:4C:3C:99:F2:79:E7:A4:55 X509v3 Authority Key Identifier: keyid:AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:ed:d4:2f:f0:48:d5:48:66:1d:37:88:0b:0f:d3:65:08:bd: 91:4c:38:6f:12:d9:02:9f:7c:f1:9e:2d:d7:43:e7:f4:4f:93: c9:c5:6d:76:81:d9:c3:6f:4e:8f:04:dd:da:80:01:9f:78:9f: c4:3b:17:cf:98:42:7a:fc:ee:92:3e:f0:5c:8a:0c:b2:7b:bd: cf:60:74:f0:7b:37:49:67:e7:0d:e6:bb:f6:37:dc:47:e3:2f: d3:d3:7d:3a:cb:9e:85:6a:94:1b:08:71:89:6a:bf:f2:a9:e8: cc:1a:7f:30:f3:b1:f8:50:61:80:15:f5:67:36:f1:c8:42:74: 82:a7:9d:d4:72:b3:4f:6a:ef:de:25:99:13:d5:0e:11:fb:e4: 60:11:9b:45:09:ce:32:2d:9b:7a:30:14:53:6c:15:b1:43:9a: 49:cc:a4:81:38:68:9b:34:ae:5a:3e:1f:09:66:d3:2e:cb:48: 9a:8c:7a:c4:63:e1:96:01:66:70:df:62:76:a0:99:15:c3:98: e3:e4:10:8c:7e:c9:b6:cf:b8:65:f7:b3:78:d6:6b:8e:ee:14: 66:bb:c1:16:48:df:19:83:b1:ee:e9:8f:4d:80:34:3e:03:54: a7:52:70:cd:6f:83:c8:f8:75:44:ff:19:6b:80:74:e5:21:8c: 79:e7:15:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3mE5hTUY3F8yIz3CCLRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMzFjOThlM2NhYjgyMWM4NGRkZWZmMjA2OWUwMjI1OWJk NmU2MWMwHhcNMjUxMjA2MDYwMDM3WhcNMjUxMjA3MDYwMDM3WjAzMTEwLwYDVQQD Eyg5NDlkZmNmN2FkMmYyNWUzMTA5NjJiOTY0YzNjOTlmMjc5ZTdhNDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs81y+PmJvdf1RC+UmmZcsVYHQj7i i1knXHOnUiD9S0ZajSutzMsanEkYLQeggcmc1MEn6ZyBYCvs6U6+ilhpIUhV4cpZ Gp+nM5uE3czmC2BLJoaSa9Bt//tjD03s6x9JIVBipAwhwZX2YUOLuVtlGbRSBa/B zMph5U1JMpqNBKut3/jSmURewlyEfNjPsCYt88YcxdTof6nFA3v2Jc4+rATjrjBV lYYy6aPvxZRvQsJtKEt4nvPq4ZiHWtqjA4IkE2gisTWg8y8+0/LLNLNXIsYiui+B YRaMbG+gd1yxQVZXomAaqP51V0WoYVm9XA67MzIuJB4SGZ5ZC2Kz0GxiCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJSd/PetLyXjEJYrlkw8mfJ556RVMB8GA1UdIwQY MBaAFKoxyY48q4IchN3v8gaeAiWb1uYcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWpISmpqeXJnaHlFM2VfeUJwNENKWnZXNWh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny80YjFkNTYtZDI1Zi00ZjY0LThhMGMt MDViZmYzMWM1M2ZlLzEvcWpISmpqeXJnaHlFM2VfeUJwNENKWnZXNWh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny80YjFkNTYtZDI1Zi00ZjY0LThhMGMtMDViZmYzMWM1M2Zl LzEvcWpISmpqeXJnaHlFM2VfeUJwNENKWnZXNWh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAte3UL/BI 1UhmHTeICw/TZQi9kUw4bxLZAp988Z4t10Pn9E+TycVtdoHZw29OjwTd2oABn3if xDsXz5hCevzukj7wXIoMsnu9z2B08Hs3SWfnDea79jfcR+Mv09N9OsuehWqUGwhx iWq/8qnozBp/MPOx+FBhgBX1ZzbxyEJ0gqed1HKzT2rv3iWZE9UOEfvkYBGbRQnO Mi2bejAUU2wVsUOaScykgThomzSuWj4fCWbTLstImox6xGPhlgFmcN9idqCZFcOY 4+QQjH7Jts+4ZfezeNZrju4UZrvBFkjfGYOx7umPTYA0PgNUp1JwzW+DyPh1RP8Z a4B05SGMeecVrw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:28 2025 by rpki-client