This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/qklDGDthG-Ogd1OCUJSQBIsK1zg.mft File: qklDGDthG-Ogd1OCUJSQBIsK1zg.mft (raw, json) Hash identifier: XWLC8ljpZjCIH0qoPeUj0TwG2O84T9BtdpSJ2KnPHKk= Subject key identifier: 4B:F0:93:77:76:BE:2C:15:F8:23:F1:15:13:5E:92:BE:49:57:99:64 Authority key identifier: AA:49:43:18:3B:61:1B:E3:A0:77:53:82:50:94:90:04:8B:0A:D7:38 Certificate issuer: /CN=aa4943183b611be3a0775382509490048b0ad738 Certificate serial: 019AF23FAF556DEE4DA80FB52BEC4FB94943 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qklDGDthG-Ogd1OCUJSQBIsK1zg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/qklDGDthG-Ogd1OCUJSQBIsK1zg.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 06:00:51 +0000 Manifest this update: Sat 06 Dec 2025 06:00:51 +0000 Manifest next update: Sun 07 Dec 2025 06:00:51 +0000 Files and hashes: 1: _b9uzDBnaBhrr4RiKYd-HrjhIyY.roa (hash: zuVo5YCjE6oxIWEPlMV6dA4fTWapSfHiFlgPsUG/qhk=) 2: qklDGDthG-Ogd1OCUJSQBIsK1zg.crl (hash: ctDJPUFu3Ng+MR9arfIN/mbQbJ6fmp+34Jh9BcEBANc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/qklDGDthG-Ogd1OCUJSQBIsK1zg.crl rsync://rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/qklDGDthG-Ogd1OCUJSQBIsK1zg.mft rsync://rpki.ripe.net/repository/DEFAULT/qklDGDthG-Ogd1OCUJSQBIsK1zg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:af:55:6d:ee:4d:a8:0f:b5:2b:ec:4f:b9:49:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa4943183b611be3a0775382509490048b0ad738 Validity Not Before: Dec 6 06:00:51 2025 GMT Not After : Dec 7 06:00:51 2025 GMT Subject: CN=4bf0937776be2c15f823f115135e92be49579964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:64:66:f8:c4:ab:d6:91:b9:42:38:b8:13:0d: a5:8e:38:fe:2b:ce:48:5b:a0:6f:50:47:c3:99:f6: af:be:48:2f:af:2c:47:b1:9f:3f:26:1e:59:c9:2e: 6d:05:a1:2c:57:e3:c0:d1:16:94:d1:af:b0:e9:fb: f5:73:82:44:c7:f6:1c:26:18:71:74:7d:14:8a:8a: 88:dc:eb:2c:92:ec:5a:1b:0e:13:11:3c:b6:37:88: 47:5d:96:2d:11:d6:35:eb:e8:f0:d8:a2:d7:4b:43: fe:00:d6:60:fb:2e:ad:bc:b0:af:f3:16:34:05:62: 2e:63:29:36:1e:c4:3c:ab:80:99:60:f4:e4:df:a3: de:ee:70:dd:4c:b2:93:51:c0:65:81:b0:bf:bd:32: 37:cb:c7:ab:c3:5d:61:90:c6:e4:0d:f7:a7:be:8a: b3:4c:f9:e1:b6:b5:67:ab:9e:ca:aa:e2:3e:ba:63: d1:41:4f:10:66:19:44:c0:cf:c0:93:19:80:47:bc: 71:71:b1:df:fa:80:30:b1:0f:41:c7:d1:a1:31:d1: 1b:d3:c1:a4:e3:11:42:7b:8f:30:5e:d9:04:a9:da: eb:85:e6:f8:e2:67:f6:77:a9:a5:f3:5d:be:5e:db: 05:df:51:5b:7c:cd:16:c7:a1:61:bc:15:20:24:03: 43:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F0:93:77:76:BE:2C:15:F8:23:F1:15:13:5E:92:BE:49:57:99:64 X509v3 Authority Key Identifier: keyid:AA:49:43:18:3B:61:1B:E3:A0:77:53:82:50:94:90:04:8B:0A:D7:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qklDGDthG-Ogd1OCUJSQBIsK1zg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/qklDGDthG-Ogd1OCUJSQBIsK1zg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/qklDGDthG-Ogd1OCUJSQBIsK1zg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:39:3e:3b:01:60:51:8a:59:87:11:91:fe:04:eb:f4:ea:0b: ef:ec:b1:2b:f1:93:76:a1:e6:0b:b0:f4:00:17:af:15:a4:e0: 8b:7e:9a:d7:78:5f:ad:3e:5c:3f:7b:52:78:41:a3:7f:24:d3: da:ad:38:33:a5:9e:df:e6:a5:44:9f:fd:4b:7a:4f:5a:52:f9: dc:a8:e4:56:6e:7a:3e:a7:69:0b:02:38:32:fc:ff:bd:30:13: 1c:68:c3:37:5e:25:71:b9:78:d3:ec:4e:6c:ae:b5:8c:c4:21: df:9e:0a:25:d4:5d:25:1a:28:00:dc:0b:09:66:fb:33:82:b0: f7:85:0e:51:f4:6f:43:80:bd:d5:25:1e:97:ec:5c:38:fc:eb: f4:10:fa:24:9e:dd:97:fd:02:1c:87:e5:d0:41:01:ec:dd:a2: c6:3c:c6:33:28:37:08:81:3c:e8:dc:41:3e:cd:2e:ec:13:13: 3c:2f:f1:db:09:6f:eb:d6:79:2a:8a:52:97:9b:84:d2:af:c4: 68:c8:3b:a4:34:b7:4d:40:8e:ab:16:6b:4a:07:33:b9:87:b1: dc:2b:e0:77:f3:17:31:c0:b2:17:c9:da:58:74:b2:52:9b:06: 27:12:63:a1:9f:0d:c3:c1:d4:f7:b4:5f:d5:7c:32:8b:2d:9f: fa:dd:46:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP69Vbe5NqA+1K+xPuUlDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNDk0MzE4M2I2MTFiZTNhMDc3NTM4MjUwOTQ5MDA0OGIw YWQ3MzgwHhcNMjUxMjA2MDYwMDUxWhcNMjUxMjA3MDYwMDUxWjAzMTEwLwYDVQQD Eyg0YmYwOTM3Nzc2YmUyYzE1ZjgyM2YxMTUxMzVlOTJiZTQ5NTc5OTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA52Rm+MSr1pG5Qji4Ew2ljjj+K85I W6BvUEfDmfavvkgvryxHsZ8/Jh5ZyS5tBaEsV+PA0RaU0a+w6fv1c4JEx/YcJhhx dH0UioqI3OsskuxaGw4TETy2N4hHXZYtEdY16+jw2KLXS0P+ANZg+y6tvLCv8xY0 BWIuYyk2HsQ8q4CZYPTk36Pe7nDdTLKTUcBlgbC/vTI3y8erw11hkMbkDfenvoqz TPnhtrVnq57KquI+umPRQU8QZhlEwM/AkxmAR7xxcbHf+oAwsQ9Bx9GhMdEb08Gk 4xFCe48wXtkEqdrrheb44mf2d6ml812+XtsF31FbfM0Wx6FhvBUgJANDAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEvwk3d2viwV+CPxFRNekr5JV5lkMB8GA1UdIwQY MBaAFKpJQxg7YRvjoHdTglCUkASLCtc4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWtsREdEdGhHLU9nZDFPQ1VKU1FCSXNLMXpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS83YmIwMzgtMDFiYy00ZDg1LTlmMDQt ZDIyMjc0YmJhNzEzLzEvcWtsREdEdGhHLU9nZDFPQ1VKU1FCSXNLMXpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS83YmIwMzgtMDFiYy00ZDg1LTlmMDQtZDIyMjc0YmJhNzEz LzEvcWtsREdEdGhHLU9nZDFPQ1VKU1FCSXNLMXpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzjk+OwFg UYpZhxGR/gTr9OoL7+yxK/GTdqHmC7D0ABevFaTgi36a13hfrT5cP3tSeEGjfyTT 2q04M6We3+alRJ/9S3pPWlL53KjkVm56PqdpCwI4Mvz/vTATHGjDN14lcbl40+xO bK61jMQh354KJdRdJRooANwLCWb7M4Kw94UOUfRvQ4C91SUel+xcOPzr9BD6JJ7d l/0CHIfl0EEB7N2ixjzGMyg3CIE86NxBPs0u7BMTPC/x2wlv69Z5KopSl5uE0q/E aMg7pDS3TUCOqxZrSgczuYex3Cvgd/MXMcCyF8naWHSyUpsGJxJjoZ8Nw8HU97Rf 1Xwyiy2f+t1GbQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:26 2025 by rpki-client