This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft File: qKp6dXaxsilZDAkP01bDgt_zFbc.mft (raw, json) Hash identifier: pWUUuQJo2AfQwn1kaFX2YyQj1J9bhR2U0nVxrxRpnQY= Subject key identifier: AC:BC:D8:C5:58:5D:00:B3:78:E3:CF:BF:0C:F2:8F:A5:43:0E:F1:E6 Authority key identifier: A8:AA:7A:75:76:B1:B2:29:59:0C:09:0F:D3:56:C3:82:DF:F3:15:B7 Certificate issuer: /CN=a8aa7a7576b1b229590c090fd356c382dff315b7 Certificate serial: 019AF352CE835C94DD1A07292FD8147C37CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKp6dXaxsilZDAkP01bDgt_zFbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft Manifest number: 152B Signing time: Sat 06 Dec 2025 11:01:21 +0000 Manifest this update: Sat 06 Dec 2025 11:01:21 +0000 Manifest next update: Sun 07 Dec 2025 11:01:21 +0000 Files and hashes: 1: YiH83ySN13U92VHOYGZ1qNFCvj0.roa (hash: B8hbjbe1F86HPut31UQL0FZp1i37mwSF9nd5leIYsNo=) 2: qKp6dXaxsilZDAkP01bDgt_zFbc.crl (hash: ndeiCj+SH4PwXKF7avH0Akft/aAZ0QcbkA2sZLviUE8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft rsync://rpki.ripe.net/repository/DEFAULT/qKp6dXaxsilZDAkP01bDgt_zFbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:ce:83:5c:94:dd:1a:07:29:2f:d8:14:7c:37:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8aa7a7576b1b229590c090fd356c382dff315b7 Validity Not Before: Dec 6 11:01:21 2025 GMT Not After : Dec 7 11:01:21 2025 GMT Subject: CN=acbcd8c5585d00b378e3cfbf0cf28fa5430ef1e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:08:99:5b:58:7f:20:48:bf:49:f2:56:97:52: cc:8a:0e:a8:ad:12:64:9c:de:d8:56:1a:c7:e7:2b: b2:3f:31:45:40:62:c4:fe:7d:82:e1:82:28:34:a6: f5:5e:b6:e2:06:a7:e2:05:74:ea:ef:8c:e5:96:42: e1:17:d8:ef:2d:42:ce:6d:a0:c8:00:51:e2:81:cb: 37:06:84:ab:9b:f9:b1:bc:31:ad:76:db:4c:84:2a: 4a:a0:09:98:be:33:98:51:28:65:f9:de:83:e5:de: 55:fa:0d:2c:ec:1e:7d:fa:96:b7:d8:b2:34:da:67: db:63:48:64:10:64:50:35:26:93:1b:7c:ef:ad:32: d0:ea:e0:b6:39:37:e3:d9:71:9d:54:de:35:53:7b: 82:df:46:1c:a8:e8:90:b2:5a:64:92:3c:c1:76:de: 3f:12:e4:af:23:7f:9f:cb:82:21:ea:b7:05:b5:2c: c4:79:40:51:38:59:63:0d:cf:07:85:1b:e0:00:a0: cd:f7:66:06:1f:93:f5:32:8d:b4:ae:19:6a:28:93: 35:fe:87:fc:05:e1:01:3c:08:60:da:05:e9:42:8d: 28:5c:eb:90:23:9a:8f:03:41:53:63:05:cb:27:b1: 96:f0:68:69:9d:8c:6b:c3:cc:89:e0:76:bf:27:c4: 70:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:BC:D8:C5:58:5D:00:B3:78:E3:CF:BF:0C:F2:8F:A5:43:0E:F1:E6 X509v3 Authority Key Identifier: keyid:A8:AA:7A:75:76:B1:B2:29:59:0C:09:0F:D3:56:C3:82:DF:F3:15:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKp6dXaxsilZDAkP01bDgt_zFbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:a1:1d:40:fc:a7:9b:bf:c0:ec:b8:74:09:cf:3b:1d:02:e7: 87:7c:11:6b:46:28:00:f7:d9:21:67:e8:7e:82:53:e8:51:d6: d2:69:e2:12:52:cc:95:47:f4:ac:92:f0:8d:03:af:14:98:69: 40:b7:51:a1:43:ed:ff:21:21:16:de:df:52:1a:1d:ec:97:a3: e3:84:6c:79:b5:42:87:54:87:4c:43:5e:e2:7b:2b:dc:cf:dc: cd:61:5b:d6:2b:3e:df:c9:2b:50:93:e6:ea:b4:e3:68:df:03: 9e:01:7d:6d:09:4c:e9:b3:f8:64:45:c1:9c:67:a2:68:8e:22: d6:ce:f0:ab:3d:cf:a5:45:3f:2c:8c:fc:0d:4d:f2:f7:17:0c: 9a:0a:92:9c:d5:e9:6f:19:6d:58:4f:c4:36:f5:d3:c7:3a:f5: e7:2e:15:b2:b2:5f:c3:d1:9c:33:93:7b:ff:5d:1a:92:92:af: 0e:f3:b9:fc:a8:3a:cc:7c:d2:a5:3f:a3:ba:e2:4a:b3:0d:a7: 3c:2b:cd:ea:55:7f:4d:b0:c4:64:1f:bd:42:b2:4a:c3:d7:ad: 65:de:a4:2f:5d:39:b6:9c:c5:c5:27:ec:73:00:cd:81:49:66: 68:ab:56:75:eb:95:2a:ac:10:a1:04:0e:ad:a9:62:fd:09:32: af:60:ad:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUs6DXJTdGgcpL9gUfDfPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4YWE3YTc1NzZiMWIyMjk1OTBjMDkwZmQzNTZjMzgyZGZm MzE1YjcwHhcNMjUxMjA2MTEwMTIxWhcNMjUxMjA3MTEwMTIxWjAzMTEwLwYDVQQD EyhhY2JjZDhjNTU4NWQwMGIzNzhlM2NmYmYwY2YyOGZhNTQzMGVmMWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4giZW1h/IEi/SfJWl1LMig6orRJk nN7YVhrH5yuyPzFFQGLE/n2C4YIoNKb1XrbiBqfiBXTq74zllkLhF9jvLULObaDI AFHigcs3BoSrm/mxvDGtdttMhCpKoAmYvjOYUShl+d6D5d5V+g0s7B59+pa32LI0 2mfbY0hkEGRQNSaTG3zvrTLQ6uC2OTfj2XGdVN41U3uC30YcqOiQslpkkjzBdt4/ EuSvI3+fy4Ih6rcFtSzEeUBROFljDc8HhRvgAKDN92YGH5P1Mo20rhlqKJM1/of8 BeEBPAhg2gXpQo0oXOuQI5qPA0FTYwXLJ7GW8GhpnYxrw8yJ4Ha/J8RwjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKy82MVYXQCzeOPPvwzyj6VDDvHmMB8GA1UdIwQY MBaAFKiqenV2sbIpWQwJD9NWw4Lf8xW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUtwNmRYYXhzaWxaREFrUDAxYkRndF96RmJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9lNWVkYjMtMGVhOC00NDIyLWIxNzUt Zjc1MzQ1ODQ4ZTNmLzEvcUtwNmRYYXhzaWxaREFrUDAxYkRndF96RmJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9lNWVkYjMtMGVhOC00NDIyLWIxNzUtZjc1MzQ1ODQ4ZTNm LzEvcUtwNmRYYXhzaWxaREFrUDAxYkRndF96RmJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa6EdQPyn m7/A7Lh0Cc87HQLnh3wRa0YoAPfZIWfofoJT6FHW0mniElLMlUf0rJLwjQOvFJhp QLdRoUPt/yEhFt7fUhod7Jej44RsebVCh1SHTENe4nsr3M/czWFb1is+38krUJPm 6rTjaN8DngF9bQlM6bP4ZEXBnGeiaI4i1s7wqz3PpUU/LIz8DU3y9xcMmgqSnNXp bxltWE/ENvXTxzr15y4VsrJfw9GcM5N7/10akpKvDvO5/Kg6zHzSpT+juuJKsw2n PCvN6lV/TbDEZB+9QrJKw9etZd6kL105tpzFxSfscwDNgUlmaKtWdeuVKqwQoQQO rali/Qkyr2CtRg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:54:27 2025 by rpki-client