This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft File: QqYv_JnylBAtzOI13Bo8E9q81po.mft (raw, json) Hash identifier: lJsJeXM9AGZ7AI8JiH4Bi3PPEzrIlbQLHEbVhppYNEA= Subject key identifier: D0:79:30:15:70:99:27:AC:AB:AB:17:52:6D:44:3E:4E:54:E8:12:DA Authority key identifier: 42:A6:2F:FC:99:F2:94:10:2D:CC:E2:35:DC:1A:3C:13:DA:BC:D6:9A Certificate issuer: /CN=42a62ffc99f294102dcce235dc1a3c13dabcd69a Certificate serial: 019AF05162FA10B97010B3BE860B25F6D8DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft Manifest number: 1761 Signing time: Fri 05 Dec 2025 21:00:56 +0000 Manifest this update: Fri 05 Dec 2025 21:00:56 +0000 Manifest next update: Sat 06 Dec 2025 21:00:56 +0000 Files and hashes: 1: QqYv_JnylBAtzOI13Bo8E9q81po.crl (hash: 1jqeEyzACsIGzd1Q6tjBsR35amh6Pwo3RK/3WjL/jv4=) 2: WTARnFcaaxywjD8542Gln8y_dnw.roa (hash: Ftlz5tAZ1Wy4DgBSL6cjF0uXQi2BfjzAEtpVPnOo5XU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.crl rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:62:fa:10:b9:70:10:b3:be:86:0b:25:f6:d8:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42a62ffc99f294102dcce235dc1a3c13dabcd69a Validity Not Before: Dec 5 21:00:56 2025 GMT Not After : Dec 6 21:00:56 2025 GMT Subject: CN=d0793015709927acabab17526d443e4e54e812da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:7e:e6:71:63:2d:ca:f4:ee:9d:b3:af:a8:25: 72:7e:59:a6:b4:76:0d:21:80:37:08:b5:99:67:19: cc:e0:eb:57:53:31:87:0a:36:9b:d9:0a:04:bc:6d: 5c:59:4f:cb:5b:fe:16:e7:5a:6d:23:9a:17:45:4e: 46:01:2d:b6:ce:c1:01:98:2b:17:aa:bc:01:11:0d: 09:49:ab:91:cc:00:f4:88:d4:74:9c:36:4f:e0:68: 55:fa:80:f3:ea:46:cf:81:95:b3:40:50:f7:1a:dc: 67:68:5e:9e:56:c2:08:8e:9a:1c:ee:61:20:db:21: b6:2e:f4:e0:6b:df:85:92:77:08:ea:ab:43:4c:56: 0f:3f:e6:dc:c1:2c:a0:a5:e2:ba:5a:3d:02:b6:5b: 48:35:8e:57:08:62:d1:07:24:cd:9e:6c:42:29:1a: c3:fe:ac:59:4e:85:f9:9a:06:c7:18:15:de:85:d3: 5a:ec:e2:3b:75:f4:48:7e:f2:74:d3:cc:6f:d0:11: 8b:29:62:8c:00:62:65:4f:a1:d6:04:77:fa:ae:54: 28:5f:98:a9:9e:6d:10:47:3e:c1:f0:d9:64:c9:86: f1:12:a5:ce:2a:02:e8:11:48:aa:55:1e:d0:fc:69: 56:37:59:e0:7e:5f:ab:a7:91:d6:c7:17:67:4c:92: 6c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:79:30:15:70:99:27:AC:AB:AB:17:52:6D:44:3E:4E:54:E8:12:DA X509v3 Authority Key Identifier: keyid:42:A6:2F:FC:99:F2:94:10:2D:CC:E2:35:DC:1A:3C:13:DA:BC:D6:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:47:98:40:b6:17:ea:5c:27:49:18:7a:ef:57:9b:bc:82:35: f4:6e:4c:e6:4f:72:fd:b3:11:c8:e9:c4:12:a4:0d:57:25:94: ce:d5:c7:ee:3a:45:d9:67:62:ad:3a:f5:f9:d7:5b:ef:9f:73: f2:80:3b:af:99:af:e0:91:72:ea:8f:82:5d:3f:e1:d1:92:bb: 0a:34:aa:01:1e:1b:33:92:41:71:a6:de:71:7b:3b:41:49:3b: 3f:89:eb:c6:92:89:17:e6:9c:a0:07:62:12:63:e5:5f:f7:3c: 5b:e3:27:83:f1:ba:4b:10:33:9c:0b:27:23:66:fa:cc:b4:e8: 23:a1:17:4e:9d:a2:7b:27:45:fc:a6:1c:2e:53:5e:f8:f2:de: 1d:f1:7b:14:b9:9f:27:d0:2c:57:1b:fe:bf:d0:34:66:c6:50: 3a:81:27:1b:4a:18:55:d0:6d:6a:f9:00:a6:69:e3:f8:25:4b: c9:96:e8:23:ff:b0:0c:43:8a:d1:e5:13:24:29:91:57:1f:92: 22:39:ad:cb:21:6e:94:0e:f1:14:e3:7f:bc:65:5c:32:97:2d: b5:4a:bb:01:6c:b6:d4:46:a8:59:91:42:df:0f:db:a9:70:47: 58:05:08:a1:bd:d5:12:0d:d9:35:25:fe:0d:f4:86:fb:6a:6a: 42:b2:e8:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUWL6ELlwELO+hgsl9tjeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyYTYyZmZjOTlmMjk0MTAyZGNjZTIzNWRjMWEzYzEzZGFi Y2Q2OWEwHhcNMjUxMjA1MjEwMDU2WhcNMjUxMjA2MjEwMDU2WjAzMTEwLwYDVQQD EyhkMDc5MzAxNTcwOTkyN2FjYWJhYjE3NTI2ZDQ0M2U0ZTU0ZTgxMmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3n7mcWMtyvTunbOvqCVyflmmtHYN IYA3CLWZZxnM4OtXUzGHCjab2QoEvG1cWU/LW/4W51ptI5oXRU5GAS22zsEBmCsX qrwBEQ0JSauRzAD0iNR0nDZP4GhV+oDz6kbPgZWzQFD3GtxnaF6eVsIIjpoc7mEg 2yG2LvTga9+FkncI6qtDTFYPP+bcwSygpeK6Wj0CtltINY5XCGLRByTNnmxCKRrD /qxZToX5mgbHGBXehdNa7OI7dfRIfvJ008xv0BGLKWKMAGJlT6HWBHf6rlQoX5ip nm0QRz7B8NlkyYbxEqXOKgLoEUiqVR7Q/GlWN1ngfl+rp5HWxxdnTJJs4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNB5MBVwmSesq6sXUm1EPk5U6BLaMB8GA1UdIwQY MBaAFEKmL/yZ8pQQLcziNdwaPBPavNaaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXFZdl9KbnlsQkF0ek9JMTNCbzhFOXE4MXBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9kYzY2NWQtZGIxMC00MDU5LTgzZWQt MWMyMmRhNDRhMjJkLzEvUXFZdl9KbnlsQkF0ek9JMTNCbzhFOXE4MXBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9kYzY2NWQtZGIxMC00MDU5LTgzZWQtMWMyMmRhNDRhMjJk LzEvUXFZdl9KbnlsQkF0ek9JMTNCbzhFOXE4MXBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUUeYQLYX 6lwnSRh671ebvII19G5M5k9y/bMRyOnEEqQNVyWUztXH7jpF2WdirTr1+ddb759z 8oA7r5mv4JFy6o+CXT/h0ZK7CjSqAR4bM5JBcabecXs7QUk7P4nrxpKJF+acoAdi EmPlX/c8W+Mng/G6SxAznAsnI2b6zLToI6EXTp2ieydF/KYcLlNe+PLeHfF7FLmf J9AsVxv+v9A0ZsZQOoEnG0oYVdBtavkApmnj+CVLyZboI/+wDEOK0eUTJCmRVx+S IjmtyyFulA7xFON/vGVcMpcttUq7AWy21EaoWZFC3w/bqXBHWAUIob3VEg3ZNSX+ DfSG+2pqQrLoNA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:01:15 2025 by rpki-client