This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft File: qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft (raw, json) Hash identifier: WDfsY/rAq9PdMg793dP0SmLXs0rBhGzNRfKpJ0BugX8= Subject key identifier: B9:69:AB:33:B8:94:E4:4D:69:FC:CD:18:AC:A6:5B:42:52:2A:AC:65 Authority key identifier: AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E Certificate issuer: /CN=aafc41aafbbccaa96711849745ef722a5260ac7e Certificate serial: 019AF2767CAFEAF6BA9220A8B8ED9A16CF79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft Manifest number: 173A Signing time: Sat 06 Dec 2025 07:00:42 +0000 Manifest this update: Sat 06 Dec 2025 07:00:42 +0000 Manifest next update: Sun 07 Dec 2025 07:00:42 +0000 Files and hashes: 1: EtuX617xzyrB71Hjc1hl3WMzRjI.roa (hash: QSVoTvnTqOuhcGfy2h2iEu7xdB5mNRvXSamlWm6WYuo=) 2: MBp32VcQqAbMoARjt7V1PCPscvg.roa (hash: pI5Os3fewlyJzy3/SsAFuRA7NUz4NSu4MCASZkD0XZY=) 3: qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl (hash: pu96xoez6/EQfvXJ7+dBChb9Cq2x6BGzcRftu3T2Ojg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:7c:af:ea:f6:ba:92:20:a8:b8:ed:9a:16:cf:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aafc41aafbbccaa96711849745ef722a5260ac7e Validity Not Before: Dec 6 07:00:42 2025 GMT Not After : Dec 7 07:00:42 2025 GMT Subject: CN=b969ab33b894e44d69fccd18aca65b42522aac65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:aa:44:20:7c:ae:c8:85:73:fe:9c:1f:43:d6: 7b:eb:43:c4:f9:ea:f8:8a:8b:33:e0:29:c2:17:ac: d8:ab:6c:d1:5b:29:1f:49:8c:66:aa:1c:44:d5:6d: d2:83:93:8c:09:01:21:20:88:cd:47:0c:78:42:cf: 87:f4:ac:0a:62:38:55:ba:50:56:72:ba:c2:51:2e: 3b:84:56:41:f5:ec:08:92:46:b1:63:d9:25:8f:f6: 9c:89:d0:00:fa:d9:4f:5e:89:38:4f:e2:aa:8a:e9: 9a:f7:56:c7:15:ea:a7:2f:2e:5a:71:5c:01:16:75: 08:88:95:b8:8e:66:bb:4c:50:9d:b4:ab:87:6d:a1: 8b:ec:6b:ec:7f:46:cd:71:8b:3f:ca:22:25:a4:be: 26:9d:4a:3f:0b:9a:c7:9a:c2:f6:9c:d1:69:71:00: df:47:92:5d:3d:27:9c:df:44:6f:e5:ee:35:5b:c3: f8:11:d8:2f:56:74:6b:4d:05:1b:aa:ae:bc:3c:fa: 7c:ed:fb:ea:bb:f1:7e:6e:44:69:92:19:d6:27:bc: c6:5b:70:fd:16:2d:ba:de:94:ca:0f:c6:0b:90:f1: 8f:60:35:95:18:c6:0b:9a:63:f9:ef:cd:32:49:3c: e9:d1:b7:a4:a5:ca:05:f5:70:94:39:8d:1b:91:8e: 28:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:69:AB:33:B8:94:E4:4D:69:FC:CD:18:AC:A6:5B:42:52:2A:AC:65 X509v3 Authority Key Identifier: keyid:AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:4f:bd:00:ec:83:96:69:c8:2e:89:d6:d2:ca:11:a9:9e:d7: 01:ae:b0:4a:61:e0:eb:b6:cc:01:89:32:f1:f0:ae:70:33:d6: 68:82:21:1b:8f:ca:3e:52:ed:a2:2c:65:91:a4:86:e0:94:b3: 27:b8:24:9c:51:25:30:28:ab:a4:ee:2b:c9:a7:c0:86:9d:1f: 7c:6c:23:13:f2:31:08:40:83:03:40:8f:9c:b8:8a:c1:ba:85: 82:66:b6:9e:55:1e:e3:f5:74:5d:4e:9d:bc:cf:76:37:f5:b1: 56:fa:02:50:77:c4:91:77:de:38:8d:77:11:4c:8d:91:be:4b: 07:c2:a9:1c:17:6f:74:eb:f8:bc:8e:e5:38:77:4b:b2:ac:f4: 0c:35:08:47:ee:53:0d:26:16:07:ea:90:a1:27:68:fd:b4:67: 6b:67:19:a1:28:f6:13:87:38:39:7f:b0:db:8e:c2:20:54:e9: 30:6d:9e:d4:2b:43:c1:9d:d2:15:8b:cf:54:cd:3c:7f:1f:f1: c7:d9:36:6d:a1:7e:c3:8b:5d:70:4e:5f:f1:2c:5b:4d:16:bf: 54:25:a0:d3:83:cf:ef:60:ff:84:02:c7:81:09:f8:eb:37:12: 54:02:a8:d6:8e:1f:4c:c7:28:9d:94:20:d8:67:ce:03:68:fc: 33:44:e8:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydnyv6va6kiCouO2aFs95MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhZmM0MWFhZmJiY2NhYTk2NzExODQ5NzQ1ZWY3MjJhNTI2 MGFjN2UwHhcNMjUxMjA2MDcwMDQyWhcNMjUxMjA3MDcwMDQyWjAzMTEwLwYDVQQD EyhiOTY5YWIzM2I4OTRlNDRkNjlmY2NkMThhY2E2NWI0MjUyMmFhYzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KpEIHyuyIVz/pwfQ9Z760PE+er4 iosz4CnCF6zYq2zRWykfSYxmqhxE1W3Sg5OMCQEhIIjNRwx4Qs+H9KwKYjhVulBW crrCUS47hFZB9ewIkkaxY9klj/acidAA+tlPXok4T+Kqiuma91bHFeqnLy5acVwB FnUIiJW4jma7TFCdtKuHbaGL7Gvsf0bNcYs/yiIlpL4mnUo/C5rHmsL2nNFpcQDf R5JdPSec30Rv5e41W8P4EdgvVnRrTQUbqq68PPp87fvqu/F+bkRpkhnWJ7zGW3D9 Fi263pTKD8YLkPGPYDWVGMYLmmP5780ySTzp0bekpcoF9XCUOY0bkY4oewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLlpqzO4lORNafzNGKymW0JSKqxlMB8GA1UdIwQY MBaAFKr8Qar7vMqpZxGEl0XvcipSYKx+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXZ4QnF2dTh5cWxuRVlTWFJlOXlLbEpnckg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85ZmRkZDQtNTI2YS00ODA3LWIxMjct MWJjMzFjNjI0MDFmLzEvcXZ4QnF2dTh5cWxuRVlTWFJlOXlLbEpnckg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS85ZmRkZDQtNTI2YS00ODA3LWIxMjctMWJjMzFjNjI0MDFm LzEvcXZ4QnF2dTh5cWxuRVlTWFJlOXlLbEpnckg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC0+9AOyD lmnILonW0soRqZ7XAa6wSmHg67bMAYky8fCucDPWaIIhG4/KPlLtoixlkaSG4JSz J7gknFElMCirpO4ryafAhp0ffGwjE/IxCECDA0CPnLiKwbqFgma2nlUe4/V0XU6d vM92N/WxVvoCUHfEkXfeOI13EUyNkb5LB8KpHBdvdOv4vI7lOHdLsqz0DDUIR+5T DSYWB+qQoSdo/bRna2cZoSj2E4c4OX+w247CIFTpMG2e1CtDwZ3SFYvPVM08fx/x x9k2baF+w4tdcE5f8SxbTRa/VCWg04PP72D/hALHgQn46zcSVAKo1o4fTMconZQg 2GfOA2j8M0Toxg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:40:43 2025 by rpki-client