This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft File: cqPGykNevb-W__pMXZjkYAgo9xI.mft (raw, json) Hash identifier: W8yaSRCv5fkun4L26aENshw5LKUlX50J41lMWWbsszQ= Subject key identifier: ED:A4:0C:53:12:D3:6F:6D:76:51:11:4E:B5:CB:A6:58:64:37:DE:EE Authority key identifier: 72:A3:C6:CA:43:5E:BD:BF:96:FF:FA:4C:5D:98:E4:60:08:28:F7:12 Certificate issuer: /CN=72a3c6ca435ebdbf96fffa4c5d98e4600828f712 Certificate serial: 019AF4657C2C023E75BE3B416030BA1B8719 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cqPGykNevb-W__pMXZjkYAgo9xI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft Manifest number: 12A5 Signing time: Sat 06 Dec 2025 16:01:22 +0000 Manifest this update: Sat 06 Dec 2025 16:01:22 +0000 Manifest next update: Sun 07 Dec 2025 16:01:22 +0000 Files and hashes: 1: QyiciSZUfA8bsg20fCYi0TNFfDg.roa (hash: nzxPGRU8Smq/P38KhFAc/j16WQcASyHCTt9cYC5aCls=) 2: cqPGykNevb-W__pMXZjkYAgo9xI.crl (hash: Zys8A+zBMAyJyTTY7SwVMHaR+Xg9ZThkYMWZ0q3yP3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft rsync://rpki.ripe.net/repository/DEFAULT/cqPGykNevb-W__pMXZjkYAgo9xI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:7c:2c:02:3e:75:be:3b:41:60:30:ba:1b:87:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72a3c6ca435ebdbf96fffa4c5d98e4600828f712 Validity Not Before: Dec 6 16:01:22 2025 GMT Not After : Dec 7 16:01:22 2025 GMT Subject: CN=eda40c5312d36f6d7651114eb5cba6586437deee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f5:25:25:89:64:f0:40:22:72:5f:30:f4:55: 8f:9d:ac:18:04:53:18:c0:95:a4:39:2e:a6:37:33: e0:1a:ba:62:a5:fd:54:23:6a:75:83:ed:27:45:f6: 83:bc:1e:34:f5:61:11:c0:d8:55:57:29:0b:ac:1e: 59:24:e1:c4:b2:c5:6c:6e:36:03:b3:56:e8:09:d7: 55:58:6e:a4:93:4f:46:b2:db:ca:8b:12:9e:13:b9: 15:10:d0:59:8c:48:5a:36:a8:66:96:8c:82:1c:9a: c1:bf:33:02:6c:60:31:f9:b0:88:7c:6c:25:2d:06: bd:46:5d:2c:d9:39:d8:97:f2:df:19:88:8a:03:6d: 19:4b:89:3f:24:34:0f:45:9a:00:e2:ed:04:fb:51: 79:15:21:8d:11:25:68:78:5d:b1:ba:44:49:a9:2e: 59:78:7c:fe:47:04:e6:57:f7:33:df:86:e9:71:d9: c7:d5:61:a5:cc:5b:41:4d:b2:77:b2:4b:cd:7a:c2: 15:0a:49:d0:b6:c2:b0:a9:c8:81:12:a7:0c:0d:b7: a5:46:b9:4a:5f:1e:26:2f:f4:53:c6:28:91:a5:ea: 35:51:67:18:85:6f:c0:29:cc:df:dc:89:93:c1:c2: c4:e2:5d:19:0a:7b:ec:c8:01:9c:2a:cf:aa:6e:8a: f3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:A4:0C:53:12:D3:6F:6D:76:51:11:4E:B5:CB:A6:58:64:37:DE:EE X509v3 Authority Key Identifier: keyid:72:A3:C6:CA:43:5E:BD:BF:96:FF:FA:4C:5D:98:E4:60:08:28:F7:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqPGykNevb-W__pMXZjkYAgo9xI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:e6:cd:59:8e:80:a4:b1:56:e1:a6:2c:88:63:27:fd:df:2b: 2b:2b:4a:51:63:67:4a:75:27:4b:0b:42:d1:a5:32:fc:dd:52: 8c:d9:5d:56:d9:fc:dd:5b:78:64:a4:30:61:f5:e7:de:98:1a: 5a:86:14:72:46:e6:05:d0:10:0c:5c:35:d5:eb:3d:7d:5a:b2: 8c:98:00:5f:30:68:ea:19:5b:a4:f8:85:fb:be:84:46:27:76: d8:53:5e:7b:d1:df:2e:fb:44:99:9c:e0:c4:87:f7:69:e5:30: 9d:b6:f7:ce:40:1f:d1:af:55:71:12:22:04:7e:bc:9e:a7:ef: 0c:a5:c4:18:b3:5e:5c:24:3b:18:1c:5e:3a:d1:b6:f6:ca:9a: e4:ea:14:48:68:75:ba:dd:c0:69:4c:e2:d3:af:c5:1e:db:14: 57:58:f3:9c:ab:89:cf:15:b8:db:6b:7e:49:a5:cd:79:22:10: e5:a4:c1:8b:3a:7a:5f:a8:08:e2:86:98:97:cb:8d:ef:a9:06: fd:8c:59:a5:32:39:8a:ec:65:9c:51:6e:89:99:04:29:be:4f: a5:e2:24:d7:25:ef:53:aa:5b:cf:b8:d5:77:5d:e1:47:0c:60: 1a:46:e7:4a:b8:23:eb:d6:0a:d3:f5:5c:48:27:b9:e3:14:b5: 48:ad:a2:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZXwsAj51vjtBYDC6G4cZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYTNjNmNhNDM1ZWJkYmY5NmZmZmE0YzVkOThlNDYwMDgy OGY3MTIwHhcNMjUxMjA2MTYwMTIyWhcNMjUxMjA3MTYwMTIyWjAzMTEwLwYDVQQD EyhlZGE0MGM1MzEyZDM2ZjZkNzY1MTExNGViNWNiYTY1ODY0MzdkZWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfUlJYlk8EAicl8w9FWPnawYBFMY wJWkOS6mNzPgGrpipf1UI2p1g+0nRfaDvB409WERwNhVVykLrB5ZJOHEssVsbjYD s1boCddVWG6kk09GstvKixKeE7kVENBZjEhaNqhmloyCHJrBvzMCbGAx+bCIfGwl LQa9Rl0s2TnYl/LfGYiKA20ZS4k/JDQPRZoA4u0E+1F5FSGNESVoeF2xukRJqS5Z eHz+RwTmV/cz34bpcdnH1WGlzFtBTbJ3skvNesIVCknQtsKwqciBEqcMDbelRrlK Xx4mL/RTxiiRpeo1UWcYhW/AKczf3ImTwcLE4l0ZCnvsyAGcKs+qborzoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO2kDFMS029tdlERTrXLplhkN97uMB8GA1UdIwQY MBaAFHKjxspDXr2/lv/6TF2Y5GAIKPcSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3FQR3lrTmV2Yi1XX19wTVhaamtZQWdvOXhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9lZDE1OTQtMmIzZi00OTYyLWFjYWIt Y2ViMjFiOGU4MzJiLzEvY3FQR3lrTmV2Yi1XX19wTVhaamtZQWdvOXhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9lZDE1OTQtMmIzZi00OTYyLWFjYWItY2ViMjFiOGU4MzJi LzEvY3FQR3lrTmV2Yi1XX19wTVhaamtZQWdvOXhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoubNWY6A pLFW4aYsiGMn/d8rKytKUWNnSnUnSwtC0aUy/N1SjNldVtn83Vt4ZKQwYfXn3pga WoYUckbmBdAQDFw11es9fVqyjJgAXzBo6hlbpPiF+76ERid22FNee9HfLvtEmZzg xIf3aeUwnbb3zkAf0a9VcRIiBH68nqfvDKXEGLNeXCQ7GBxeOtG29sqa5OoUSGh1 ut3AaUzi06/FHtsUV1jznKuJzxW422t+SaXNeSIQ5aTBizp6X6gI4oaYl8uN76kG /YxZpTI5iuxlnFFuiZkEKb5PpeIk1yXvU6pbz7jVd13hRwxgGkbnSrgj69YK0/Vc SCe54xS1SK2iIA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:17:35 2025 by rpki-client