This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.mft File: q3qquyPNJFv6go-wJSHWRMbVtWY.mft (raw, json) Hash identifier: NZFasX7HOdQFN5ja5TvtK8ef9NasagHDYGu5/Jq8Jl4= Subject key identifier: 95:D7:CE:96:4B:34:79:47:86:BC:F5:B6:78:83:9F:2B:CC:14:89:19 Authority key identifier: AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66 Certificate issuer: /CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566 Certificate serial: 019AF3F813FA34DE5676691B2060EC015D1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.mft Manifest number: 1449 Signing time: Sat 06 Dec 2025 14:01:52 +0000 Manifest this update: Sat 06 Dec 2025 14:01:52 +0000 Manifest next update: Sun 07 Dec 2025 14:01:52 +0000 Files and hashes: 1: bgfztVWShrtQVnnUy79Uwf2ad-U.roa (hash: 6rNqpGYtQ5hCAICw5R79FB5nCbidIpeSHwH6YCdW27k=) 2: q3qquyPNJFv6go-wJSHWRMbVtWY.crl (hash: smZf0Jbcgjq24C/4cApS2goG04TFN57YObL0ewHraxM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.mft rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f8:13:fa:34:de:56:76:69:1b:20:60:ec:01:5d:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566 Validity Not Before: Dec 6 14:01:52 2025 GMT Not After : Dec 7 14:01:52 2025 GMT Subject: CN=95d7ce964b34794786bcf5b678839f2bcc148919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:64:0b:79:28:d7:c0:27:b6:3b:bd:94:28:93: 10:6b:bd:df:aa:37:9f:c2:5c:86:33:c0:f2:e6:5e: 5a:7f:7e:83:49:a8:e4:22:98:c1:5e:bf:40:8b:57: e8:f8:74:2e:a7:5c:ac:ea:5a:55:8c:c3:f8:f3:61: 88:3e:29:0c:e6:95:ab:56:df:0f:78:b2:e9:c7:11: 62:81:64:34:18:3b:4f:29:8d:13:95:5b:3f:0e:ab: 9a:5c:14:d8:85:c6:e7:61:80:bd:bb:87:21:42:ec: 21:5a:ea:cd:e0:aa:a9:c6:ad:b0:f9:ad:f1:5e:55: 5c:14:89:08:22:20:b4:11:37:ee:9b:87:c0:7c:69: dd:ff:ba:59:91:1f:d0:ee:b6:b1:c2:4c:64:25:f7: 84:e5:3c:1e:01:6a:cd:5a:ce:39:17:31:7f:1b:35: 19:e1:00:be:b8:58:12:f4:68:d3:b7:03:8d:aa:b9: 22:b8:9c:71:38:4e:e8:29:4a:34:b5:79:ce:61:cc: be:52:7b:80:5e:e5:61:57:66:b9:a0:34:31:9a:1d: 33:2a:1e:cb:09:e7:ce:58:7d:21:52:97:86:40:ad: 11:61:dc:74:da:f9:2c:4e:90:95:30:5a:8c:6b:b5: 02:2b:82:0b:28:c5:de:32:c0:b9:dd:34:df:da:d9: 4a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D7:CE:96:4B:34:79:47:86:BC:F5:B6:78:83:9F:2B:CC:14:89:19 X509v3 Authority Key Identifier: keyid:AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:b5:4f:88:d2:c3:b8:81:fc:52:37:c5:2b:1f:8c:0b:f7:66: b7:ef:24:35:ad:57:bd:5c:b1:41:64:cd:0b:82:83:9e:59:16: c6:a9:d1:7e:d9:db:ca:05:ec:0a:76:e9:18:b6:93:62:a5:eb: d9:e7:e3:ac:07:25:d9:0f:99:5a:3b:fe:5d:d3:94:75:40:ac: aa:88:82:7d:bc:22:bf:c4:20:a1:4a:d2:64:29:8a:be:a2:df: 99:b9:82:84:80:c1:ba:94:9c:7b:5a:24:e1:ee:ce:d0:bc:32: f3:a1:84:6a:b7:78:24:dd:d3:6b:e4:16:70:f4:91:64:1c:67: cd:ac:77:54:3f:61:a2:6a:27:a5:c6:d2:b2:e2:09:ca:14:fa: 42:62:8a:bc:d9:a5:01:6a:9c:88:02:67:b1:94:d4:c3:d5:be: 3d:5e:52:b7:67:b7:9c:93:6e:ef:a4:25:eb:63:f0:64:b7:22: 71:d2:ca:4e:ce:7e:60:31:19:67:df:78:46:46:f1:d4:fb:04: 17:93:95:b4:76:99:87:b4:e3:f7:f1:1a:f6:13:02:9a:c3:67: 3f:ce:05:b6:7b:b0:2b:99:14:c3:6c:ff:95:a3:77:1f:1d:29: 5d:45:05:eb:10:dc:4b:24:71:52:e5:3b:68:83:5d:d7:10:56: 7e:7f:55:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz+BP6NN5WdmkbIGDsAV0fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiN2FhYWJiMjNjZDI0NWJmYTgyOGZiMDI1MjFkNjQ0YzZk NWI1NjYwHhcNMjUxMjA2MTQwMTUyWhcNMjUxMjA3MTQwMTUyWjAzMTEwLwYDVQQD Eyg5NWQ3Y2U5NjRiMzQ3OTQ3ODZiY2Y1YjY3ODgzOWYyYmNjMTQ4OTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWQLeSjXwCe2O72UKJMQa73fqjef wlyGM8Dy5l5af36DSajkIpjBXr9Ai1fo+HQup1ys6lpVjMP482GIPikM5pWrVt8P eLLpxxFigWQ0GDtPKY0TlVs/DquaXBTYhcbnYYC9u4chQuwhWurN4Kqpxq2w+a3x XlVcFIkIIiC0ETfum4fAfGnd/7pZkR/Q7raxwkxkJfeE5TweAWrNWs45FzF/GzUZ 4QC+uFgS9GjTtwONqrkiuJxxOE7oKUo0tXnOYcy+UnuAXuVhV2a5oDQxmh0zKh7L CefOWH0hUpeGQK0RYdx02vksTpCVMFqMa7UCK4ILKMXeMsC53TTf2tlKfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJXXzpZLNHlHhrz1tniDnyvMFIkZMB8GA1UdIwQY MBaAFKt6qrsjzSRb+oKPsCUh1kTG1bVmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTNxcXV5UE5KRnY2Z28td0pTSFdSTWJWdFdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS80NmRlYzUtYzM4ZC00YzFkLTljZWMt OWVhZDgxZGEyZTQ0LzEvcTNxcXV5UE5KRnY2Z28td0pTSFdSTWJWdFdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS80NmRlYzUtYzM4ZC00YzFkLTljZWMtOWVhZDgxZGEyZTQ0 LzEvcTNxcXV5UE5KRnY2Z28td0pTSFdSTWJWdFdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABrVPiNLD uIH8UjfFKx+MC/dmt+8kNa1XvVyxQWTNC4KDnlkWxqnRftnbygXsCnbpGLaTYqXr 2efjrAcl2Q+ZWjv+XdOUdUCsqoiCfbwiv8QgoUrSZCmKvqLfmbmChIDBupSce1ok 4e7O0Lwy86GEard4JN3Ta+QWcPSRZBxnzax3VD9homonpcbSsuIJyhT6QmKKvNml AWqciAJnsZTUw9W+PV5St2e3nJNu76Ql62PwZLcicdLKTs5+YDEZZ994Rkbx1PsE F5OVtHaZh7Tj9/Ea9hMCmsNnP84FtnuwK5kUw2z/laN3Hx0pXUUF6xDcSyRxUuU7 aINd1xBWfn9VEA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:11:32 2025 by rpki-client