This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.mft File: qjWMwGHja-A6Ttkq1nF4DwZYm-M.mft (raw, json) Hash identifier: 5PKluiVorReCoTdiKSnperAOq4woqlXOrf1Yug3NM5U= Subject key identifier: 09:78:B2:A0:A7:8C:59:48:63:FC:CF:BC:16:F7:24:16:52:AC:F3:36 Authority key identifier: AA:35:8C:C0:61:E3:6B:E0:3A:4E:D9:2A:D6:71:78:0F:06:58:9B:E3 Certificate issuer: /CN=aa358cc061e36be03a4ed92ad671780f06589be3 Certificate serial: 019AF0F5C8E706D84807C880FE55B11736EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjWMwGHja-A6Ttkq1nF4DwZYm-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.mft Manifest number: 07 Signing time: Sat 06 Dec 2025 00:00:30 +0000 Manifest this update: Sat 06 Dec 2025 00:00:30 +0000 Manifest next update: Sun 07 Dec 2025 00:00:30 +0000 Files and hashes: 1: qjWMwGHja-A6Ttkq1nF4DwZYm-M.crl (hash: gwgpEFBxhqZRUMSSeYVICekJrvDCrynmUvbyFBO3Clg=) 2: xGT7f1yz0oOuqABfbGti4wD4D3s.roa (hash: J+lIBSZRZBhEjrU06xcunhlHb1vFZR3PRfSda8JyHCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.mft rsync://rpki.ripe.net/repository/DEFAULT/qjWMwGHja-A6Ttkq1nF4DwZYm-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:c8:e7:06:d8:48:07:c8:80:fe:55:b1:17:36:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa358cc061e36be03a4ed92ad671780f06589be3 Validity Not Before: Dec 6 00:00:30 2025 GMT Not After : Dec 7 00:00:30 2025 GMT Subject: CN=0978b2a0a78c594863fccfbc16f7241652acf336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:99:83:1e:06:e4:09:5b:f1:00:16:d9:31:55: 72:af:62:45:44:08:f8:81:26:b4:db:03:09:b5:62: fd:cc:0b:ee:7a:2a:75:5e:97:ca:c1:14:5d:58:43: ae:6f:7b:cb:30:96:7c:a3:0d:f8:3f:0f:52:78:88: 38:59:c5:d2:57:a3:2e:b5:c5:e2:f3:19:cf:1d:66: 8b:b4:97:b3:00:5d:86:86:95:51:54:bf:7b:7c:ed: e3:08:59:49:99:27:82:da:40:4c:88:a3:02:47:d8: 58:4b:9d:be:1f:32:4b:12:8a:8c:d3:45:1a:67:30: 19:4c:8a:9b:15:00:93:f7:98:c3:39:36:11:54:2a: 34:0c:a7:33:e3:f0:af:d6:9b:08:3b:ae:9a:ed:cc: aa:66:34:8f:fb:e3:c9:43:8e:a2:69:0f:96:5b:2d: 3e:53:5c:73:6f:06:91:b0:26:d7:fa:9d:90:39:4a: 99:12:2a:23:d6:c9:ad:ed:6a:6c:70:3c:97:de:9d: fc:d4:f0:ad:4b:91:3a:3d:ff:3a:99:dd:fa:6d:b7: 7f:f6:2b:50:e3:1e:7b:41:79:7e:aa:0a:32:3e:48: 99:9e:6c:23:66:c1:88:94:cc:40:64:75:13:24:98: 98:b5:fa:4c:2c:6c:39:34:27:2b:d8:8e:21:bd:94: 7c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:78:B2:A0:A7:8C:59:48:63:FC:CF:BC:16:F7:24:16:52:AC:F3:36 X509v3 Authority Key Identifier: keyid:AA:35:8C:C0:61:E3:6B:E0:3A:4E:D9:2A:D6:71:78:0F:06:58:9B:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjWMwGHja-A6Ttkq1nF4DwZYm-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:a9:2f:a6:ad:31:f4:6e:2c:cc:62:24:10:1a:9c:60:b0:3f: 4d:ec:89:ae:fe:99:dc:67:4c:5a:fb:79:33:43:61:fa:51:14: 73:90:53:fc:13:97:7e:8d:75:9f:e2:1d:44:32:47:52:1e:bb: e4:c3:56:ca:67:74:f0:00:3b:2a:4c:40:26:13:c9:2b:92:04: 95:99:69:48:b0:6f:93:34:fa:2f:f9:3b:fe:67:d4:9a:7b:7b: e6:4e:a2:80:6d:10:73:1a:b2:e5:84:82:15:4d:c7:cd:8f:6f: ae:28:fe:ac:a0:5e:15:5d:f2:7a:19:01:be:67:c2:71:17:55: 59:a8:8a:d6:85:0d:38:a5:a3:c9:03:34:86:14:79:0d:74:03: d4:a1:62:77:59:f0:04:62:2e:3b:e5:5c:69:3a:2e:6e:33:53: 66:8d:fa:44:85:da:6c:08:06:eb:ab:01:e0:7e:7f:9c:3b:1e: 78:24:04:13:75:3c:d8:2b:c2:fc:56:7d:af:06:1c:c5:90:21: 4c:2b:3c:00:e6:09:48:f7:81:19:8f:87:c0:de:4a:33:4b:05: 39:89:1c:10:91:e4:43:78:4f:c4:90:f9:d1:98:ef:83:30:49: 70:59:3b:b1:69:80:9f:2b:eb:43:04:aa:8f:d6:27:c7:b6:95: f8:77:41:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9cjnBthIB8iA/lWxFzbqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMzU4Y2MwNjFlMzZiZTAzYTRlZDkyYWQ2NzE3ODBmMDY1 ODliZTMwHhcNMjUxMjA2MDAwMDMwWhcNMjUxMjA3MDAwMDMwWjAzMTEwLwYDVQQD EygwOTc4YjJhMGE3OGM1OTQ4NjNmY2NmYmMxNmY3MjQxNjUyYWNmMzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpmDHgbkCVvxABbZMVVyr2JFRAj4 gSa02wMJtWL9zAvueip1XpfKwRRdWEOub3vLMJZ8ow34Pw9SeIg4WcXSV6MutcXi 8xnPHWaLtJezAF2GhpVRVL97fO3jCFlJmSeC2kBMiKMCR9hYS52+HzJLEoqM00Ua ZzAZTIqbFQCT95jDOTYRVCo0DKcz4/Cv1psIO66a7cyqZjSP++PJQ46iaQ+WWy0+ U1xzbwaRsCbX+p2QOUqZEioj1smt7WpscDyX3p381PCtS5E6Pf86md36bbd/9itQ 4x57QXl+qgoyPkiZnmwjZsGIlMxAZHUTJJiYtfpMLGw5NCcr2I4hvZR8GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAl4sqCnjFlIY/zPvBb3JBZSrPM2MB8GA1UdIwQY MBaAFKo1jMBh42vgOk7ZKtZxeA8GWJvjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWpXTXdHSGphLUE2VHRrcTFuRjREd1pZbS1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8wOGIyYzctNTkwNy00MzVmLThlZTYt YWJkYWEyYmEyYzdmLzEvcWpXTXdHSGphLUE2VHRrcTFuRjREd1pZbS1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC8wOGIyYzctNTkwNy00MzVmLThlZTYtYWJkYWEyYmEyYzdm LzEvcWpXTXdHSGphLUE2VHRrcTFuRjREd1pZbS1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbakvpq0x 9G4szGIkEBqcYLA/TeyJrv6Z3GdMWvt5M0Nh+lEUc5BT/BOXfo11n+IdRDJHUh67 5MNWymd08AA7KkxAJhPJK5IElZlpSLBvkzT6L/k7/mfUmnt75k6igG0Qcxqy5YSC FU3HzY9vrij+rKBeFV3yehkBvmfCcRdVWaiK1oUNOKWjyQM0hhR5DXQD1KFid1nw BGIuO+VcaToubjNTZo36RIXabAgG66sB4H5/nDseeCQEE3U82CvC/FZ9rwYcxZAh TCs8AOYJSPeBGY+HwN5KM0sFOYkcEJHkQ3hPxJD50ZjvgzBJcFk7sWmAnyvrQwSq j9Ynx7aV+HdBsQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:50 2025 by rpki-client