This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.mft File: qvIogBSZWTJzeuf5_CJN8QIUElU.mft (raw, json) Hash identifier: J2b63lXzX2A3JrRHDfyxwoAZD7t0p5QWde1r38SZu6c= Subject key identifier: 39:7A:B1:F1:2D:14:2E:00:F4:D4:0A:24:96:DF:1A:F4:1A:C6:75:9A Authority key identifier: AA:F2:28:80:14:99:59:32:73:7A:E7:F9:FC:22:4D:F1:02:14:12:55 Certificate issuer: /CN=aaf2288014995932737ae7f9fc224df102141255 Certificate serial: 019AF3F72F0EBCB8527C159555BFAC30390F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvIogBSZWTJzeuf5_CJN8QIUElU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.mft Manifest number: 149D Signing time: Sat 06 Dec 2025 14:00:54 +0000 Manifest this update: Sat 06 Dec 2025 14:00:54 +0000 Manifest next update: Sun 07 Dec 2025 14:00:54 +0000 Files and hashes: 1: qvIogBSZWTJzeuf5_CJN8QIUElU.crl (hash: pr8HLHPH08N4iBGjnUPt6wTQahvxKWdYxTg8BttWThg=) 2: ssFjFRP8rOyA12qsYqju5Tngnd4.roa (hash: hIS1+X5/5zlmutztUW28Al86ZCC1Pn71/f8lra8GU0U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.mft rsync://rpki.ripe.net/repository/DEFAULT/qvIogBSZWTJzeuf5_CJN8QIUElU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:2f:0e:bc:b8:52:7c:15:95:55:bf:ac:30:39:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf2288014995932737ae7f9fc224df102141255 Validity Not Before: Dec 6 14:00:54 2025 GMT Not After : Dec 7 14:00:54 2025 GMT Subject: CN=397ab1f12d142e00f4d40a2496df1af41ac6759a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:91:0a:c9:90:4e:51:55:14:b1:75:66:a0:ed: 7a:4e:3d:53:f6:34:e5:bb:28:2c:2b:da:d3:6d:4e: 62:da:ff:fb:30:02:de:be:23:11:cb:77:b2:df:92: 11:9b:29:b6:2b:e1:ea:80:36:f2:66:5f:7e:64:39: 8e:ba:f4:d0:94:55:3a:35:7f:3f:d9:39:32:4e:fa: 34:35:44:2a:31:dd:2f:e0:ec:f6:39:1c:08:81:68: aa:73:11:d0:bb:06:43:f2:59:ad:f3:70:32:25:ec: 1d:cf:d2:72:4f:90:79:09:9a:1b:ee:00:ca:fe:b6: 61:12:62:ad:45:64:1f:db:ea:9d:17:02:af:ce:4d: e6:1f:33:bf:bb:1c:e2:a4:7a:89:61:23:5b:5e:95: 6f:0a:37:3d:3a:5f:b1:28:cc:9c:e1:a6:fc:c7:e1: 60:f8:75:64:6d:27:e7:3c:fa:5b:bd:ea:aa:ea:16: a7:a9:b2:b2:53:76:aa:25:9e:65:df:1a:6e:db:ac: 7f:ab:0e:fb:7f:b6:18:6b:b5:87:2c:e5:a7:b5:39: 35:2d:e0:70:a4:78:0c:ff:3d:30:e3:ea:3e:5a:8e: 9d:4b:67:0c:37:db:02:51:93:32:71:8e:a2:8a:3a: 29:0e:5a:c9:04:1a:32:94:c2:b7:c2:6e:54:6c:ac: 56:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:7A:B1:F1:2D:14:2E:00:F4:D4:0A:24:96:DF:1A:F4:1A:C6:75:9A X509v3 Authority Key Identifier: keyid:AA:F2:28:80:14:99:59:32:73:7A:E7:F9:FC:22:4D:F1:02:14:12:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvIogBSZWTJzeuf5_CJN8QIUElU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:08:33:7c:44:24:ff:72:a7:f4:1a:c0:59:28:37:d0:b5:6e: c9:fb:24:61:19:a7:51:e0:af:e8:33:3a:f3:fc:aa:c9:d7:7b: 40:47:b9:a3:b0:7d:19:22:ec:67:76:70:59:c6:07:5b:a3:d5: ca:30:ae:80:ab:dd:5b:fd:72:13:01:9e:94:06:86:e0:29:00: 01:c0:13:9f:e1:2f:ca:d6:f6:bb:30:32:51:94:d7:4a:0e:f3: 29:75:c2:c2:db:2a:dc:4c:e0:53:18:07:b3:b4:54:fe:d3:50: d0:52:93:cc:28:08:07:9f:bb:3a:63:24:39:66:a8:48:94:a7: a1:ff:ef:92:32:3e:22:6b:ea:84:c6:3f:ee:ed:77:35:2d:bc: 08:23:f6:ab:ac:5b:95:65:b7:fe:90:77:9c:cd:12:aa:70:a5: f0:3a:27:cd:c5:ac:06:2d:41:2f:26:a7:f3:f3:70:23:92:3b: 40:82:86:67:ce:7c:ac:c1:81:9a:99:cc:5c:f9:40:27:dc:fe: 52:1d:f1:f9:09:0f:6c:a2:1d:db:0b:41:19:38:9f:5b:2c:b7: 62:83:d6:5e:76:77:66:51:4a:a2:a8:58:88:01:81:11:1d:cf: 8c:95:29:45:ad:3c:07:89:c1:cf:43:c9:83:d3:17:10:16:3c: e7:18:40:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9y8OvLhSfBWVVb+sMDkPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhZjIyODgwMTQ5OTU5MzI3MzdhZTdmOWZjMjI0ZGYxMDIx NDEyNTUwHhcNMjUxMjA2MTQwMDU0WhcNMjUxMjA3MTQwMDU0WjAzMTEwLwYDVQQD EygzOTdhYjFmMTJkMTQyZTAwZjRkNDBhMjQ5NmRmMWFmNDFhYzY3NTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZEKyZBOUVUUsXVmoO16Tj1T9jTl uygsK9rTbU5i2v/7MALeviMRy3ey35IRmym2K+HqgDbyZl9+ZDmOuvTQlFU6NX8/ 2TkyTvo0NUQqMd0v4Oz2ORwIgWiqcxHQuwZD8lmt83AyJewdz9JyT5B5CZob7gDK /rZhEmKtRWQf2+qdFwKvzk3mHzO/uxzipHqJYSNbXpVvCjc9Ol+xKMyc4ab8x+Fg +HVkbSfnPPpbveqq6hanqbKyU3aqJZ5l3xpu26x/qw77f7YYa7WHLOWntTk1LeBw pHgM/z0w4+o+Wo6dS2cMN9sCUZMycY6iijopDlrJBBoylMK3wm5UbKxWnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDl6sfEtFC4A9NQKJJbfGvQaxnWaMB8GA1UdIwQY MBaAFKryKIAUmVkyc3rn+fwiTfECFBJVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXZJb2dCU1pXVEp6ZXVmNV9DSk44UUlVRWxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9lYTA2MjMtMzZjMS00ZjNhLWJmZjMt NjMxNGI5OGJkYTQyLzEvcXZJb2dCU1pXVEp6ZXVmNV9DSk44UUlVRWxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9lYTA2MjMtMzZjMS00ZjNhLWJmZjMtNjMxNGI5OGJkYTQy LzEvcXZJb2dCU1pXVEp6ZXVmNV9DSk44UUlVRWxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPwgzfEQk /3Kn9BrAWSg30LVuyfskYRmnUeCv6DM68/yqydd7QEe5o7B9GSLsZ3ZwWcYHW6PV yjCugKvdW/1yEwGelAaG4CkAAcATn+Evytb2uzAyUZTXSg7zKXXCwtsq3EzgUxgH s7RU/tNQ0FKTzCgIB5+7OmMkOWaoSJSnof/vkjI+ImvqhMY/7u13NS28CCP2q6xb lWW3/pB3nM0SqnCl8DonzcWsBi1BLyan8/NwI5I7QIKGZ858rMGBmpnMXPlAJ9z+ Uh3x+QkPbKId2wtBGTifWyy3YoPWXnZ3ZlFKoqhYiAGBER3PjJUpRa08B4nBz0PJ g9MXEBY85xhAaw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:00:19 2025 by rpki-client