This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft File: rqUKTs9FgQz29pyXw8aFz8JJdsI.mft (raw, json) Hash identifier: bRYhpDNcoQ1VRtJLkSWuZttzgcjoR7n2dduHMv3sWYQ= Subject key identifier: 4A:66:29:5B:D4:6C:C5:9B:19:1B:CD:BC:E2:62:5D:08:81:4A:AD:F5 Authority key identifier: AE:A5:0A:4E:CF:45:81:0C:F6:F6:9C:97:C3:C6:85:CF:C2:49:76:C2 Certificate issuer: /CN=aea50a4ecf45810cf6f69c97c3c685cfc24976c2 Certificate serial: 019AF1D23D316258E6D22708BBCB3090204C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft Manifest number: 0226 Signing time: Sat 06 Dec 2025 04:01:18 +0000 Manifest this update: Sat 06 Dec 2025 04:01:18 +0000 Manifest next update: Sun 07 Dec 2025 04:01:18 +0000 Files and hashes: 1: JwcsFNQrZCdoPIC0dUAZcHysppo.roa (hash: FF/t/K7QA2jOU+o41VoGD+jy9dDqvhlPL/hHJRA3zzM=) 2: rqUKTs9FgQz29pyXw8aFz8JJdsI.crl (hash: tqT909JPiIaF+xc3SE0pc2BRrDtiTboheiz3iruRc/M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.crl rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:3d:31:62:58:e6:d2:27:08:bb:cb:30:90:20:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aea50a4ecf45810cf6f69c97c3c685cfc24976c2 Validity Not Before: Dec 6 04:01:18 2025 GMT Not After : Dec 7 04:01:18 2025 GMT Subject: CN=4a66295bd46cc59b191bcdbce2625d08814aadf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d6:8b:ac:91:dc:50:df:b4:63:db:0c:33:83: 98:f0:d5:0c:99:57:e1:8d:20:b4:28:35:c6:17:23: 6a:29:69:5a:ce:07:37:84:ff:1d:26:a7:d3:04:11: ca:25:33:5f:9c:5f:f9:61:61:5e:88:35:ee:7f:d7: c4:f6:fb:ca:1d:f5:82:2f:1d:30:31:ae:40:f7:ac: 6e:3b:60:08:f3:98:24:de:d9:78:6c:9a:28:06:e9: 96:9d:2b:dc:71:7a:7e:8d:f9:ce:66:1a:18:91:cc: 10:57:83:f6:77:11:fa:aa:55:a4:b6:e4:f7:a6:be: 51:8d:e4:11:ad:fb:fd:4b:8e:e3:58:ab:b4:f4:8f: 09:08:15:2e:7d:3c:37:6c:13:f3:46:93:64:11:9f: a5:1b:01:7d:94:53:2b:a2:72:f1:5f:e9:9e:d6:df: a4:6d:d7:ae:62:1c:f0:f8:81:8d:1e:ee:33:9f:e2: 2f:79:6b:85:f0:ce:79:01:7d:70:b2:4b:12:f1:5d: d6:53:1d:3f:c2:43:ae:ea:84:27:ca:85:95:65:fa: fc:21:a2:f2:c8:90:db:e5:9f:8b:9b:52:c3:55:ab: 9f:d2:77:f4:76:64:f1:e9:75:87:08:f3:15:35:df: a6:91:27:03:9c:87:18:b7:b6:b2:fe:ee:05:d1:3c: 5d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:66:29:5B:D4:6C:C5:9B:19:1B:CD:BC:E2:62:5D:08:81:4A:AD:F5 X509v3 Authority Key Identifier: keyid:AE:A5:0A:4E:CF:45:81:0C:F6:F6:9C:97:C3:C6:85:CF:C2:49:76:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:e2:79:ec:3d:81:eb:a8:5d:ed:7e:16:0b:1f:66:09:07:07: c6:3d:31:07:a5:07:a4:90:52:86:57:24:10:2e:82:b0:2e:e9: 13:bf:8e:09:9c:e5:df:c7:42:68:19:a9:b0:bd:84:89:64:e0: 57:39:86:b1:75:3f:35:91:7c:1c:6a:72:42:39:24:cd:0b:a2: 44:bf:3f:2b:20:cd:8a:a1:94:2e:07:f9:b2:8b:4f:d6:58:c0: 02:f0:66:63:7f:8c:51:a0:10:5e:97:0b:f2:7c:14:62:99:df: ef:16:44:b7:97:d4:24:d1:3d:d6:7e:10:a2:e8:87:7a:aa:e0: 6b:6c:70:85:f0:2b:03:73:fd:b5:d3:f3:26:4b:ae:ac:f4:f3: 16:2a:bb:5c:2d:5f:29:5e:bc:00:04:98:75:ab:b3:68:84:e1: ce:ba:e2:8b:d7:15:6b:42:81:4f:d0:e6:27:7f:29:57:e0:c0: a2:20:c3:a9:75:04:25:7a:2a:2f:f0:f5:ab:27:f0:00:c7:66: d4:8c:2a:2f:8c:5b:2b:86:13:d0:91:9e:91:b7:74:81:a4:b0: a0:c5:ae:ed:91:2b:f2:ee:fb:31:be:1f:55:d1:f3:a9:dd:25: fb:cb:cd:ef:01:9d:b6:49:c8:9f:29:89:f9:63:9c:a5:5e:54: 3f:22:a4:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0j0xYljm0icIu8swkCBMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYTUwYTRlY2Y0NTgxMGNmNmY2OWM5N2MzYzY4NWNmYzI0 OTc2YzIwHhcNMjUxMjA2MDQwMTE4WhcNMjUxMjA3MDQwMTE4WjAzMTEwLwYDVQQD Eyg0YTY2Mjk1YmQ0NmNjNTliMTkxYmNkYmNlMjYyNWQwODgxNGFhZGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9aLrJHcUN+0Y9sMM4OY8NUMmVfh jSC0KDXGFyNqKWlazgc3hP8dJqfTBBHKJTNfnF/5YWFeiDXuf9fE9vvKHfWCLx0w Ma5A96xuO2AI85gk3tl4bJooBumWnSvccXp+jfnOZhoYkcwQV4P2dxH6qlWktuT3 pr5RjeQRrfv9S47jWKu09I8JCBUufTw3bBPzRpNkEZ+lGwF9lFMronLxX+me1t+k bdeuYhzw+IGNHu4zn+IveWuF8M55AX1wsksS8V3WUx0/wkOu6oQnyoWVZfr8IaLy yJDb5Z+Lm1LDVauf0nf0dmTx6XWHCPMVNd+mkScDnIcYt7ay/u4F0TxdOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEpmKVvUbMWbGRvNvOJiXQiBSq31MB8GA1UdIwQY MBaAFK6lCk7PRYEM9vacl8PGhc/CSXbCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnFVS1RzOUZnUXoyOXB5WHc4YUZ6OEpKZHNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS82MzA0OTYtZDM1OS00MGE2LWEyNzYt YzcyYTljNmZiOGYyLzEvcnFVS1RzOUZnUXoyOXB5WHc4YUZ6OEpKZHNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS82MzA0OTYtZDM1OS00MGE2LWEyNzYtYzcyYTljNmZiOGYy LzEvcnFVS1RzOUZnUXoyOXB5WHc4YUZ6OEpKZHNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjeJ57D2B 66hd7X4WCx9mCQcHxj0xB6UHpJBShlckEC6CsC7pE7+OCZzl38dCaBmpsL2EiWTg VzmGsXU/NZF8HGpyQjkkzQuiRL8/KyDNiqGULgf5sotP1ljAAvBmY3+MUaAQXpcL 8nwUYpnf7xZEt5fUJNE91n4QouiHeqrga2xwhfArA3P9tdPzJkuurPTzFiq7XC1f KV68AASYdauzaIThzrrii9cVa0KBT9DmJ38pV+DAoiDDqXUEJXoqL/D1qyfwAMdm 1IwqL4xbK4YT0JGekbd0gaSwoMWu7ZEr8u77Mb4fVdHzqd0l+8vN7wGdtknInymJ +WOcpV5UPyKkLQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:58:14 2025 by rpki-client