This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft File: qqMUWS716ou-hNBkslYXH-KvyD4.mft (raw, json) Hash identifier: Tg0iL2hwBiHerDBt7Xngu1l5x881qleH1mythGg6GO8= Subject key identifier: 15:CC:73:26:91:8D:27:FE:4D:89:98:AB:33:E2:4B:C7:42:74:FE:E1 Authority key identifier: AA:A3:14:59:2E:F5:EA:8B:BE:84:D0:64:B2:56:17:1F:E2:AF:C8:3E Certificate issuer: /CN=aaa314592ef5ea8bbe84d064b256171fe2afc83e Certificate serial: 019AF19B864083390C9F96D413AC24DC5889 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqMUWS716ou-hNBkslYXH-KvyD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft Manifest number: 0BE3 Signing time: Sat 06 Dec 2025 03:01:32 +0000 Manifest this update: Sat 06 Dec 2025 03:01:32 +0000 Manifest next update: Sun 07 Dec 2025 03:01:32 +0000 Files and hashes: 1: qqMUWS716ou-hNBkslYXH-KvyD4.crl (hash: 4A0nU1mu5i2JnfraYVervb2pwHPcZ5Ws+HVJ7339Zdg=) 2: svg34J6rFMVB3i_8SEjkmyJCwjg.roa (hash: sxr7df0i+WFpR1Zcb5aW78WjZKAtxDkC7tuYAw5Z5pw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.crl rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft rsync://rpki.ripe.net/repository/DEFAULT/qqMUWS716ou-hNBkslYXH-KvyD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:86:40:83:39:0c:9f:96:d4:13:ac:24:dc:58:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaa314592ef5ea8bbe84d064b256171fe2afc83e Validity Not Before: Dec 6 03:01:32 2025 GMT Not After : Dec 7 03:01:32 2025 GMT Subject: CN=15cc7326918d27fe4d8998ab33e24bc74274fee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:16:a6:40:34:9b:d6:ab:59:91:98:ec:99:a8: ce:e9:ab:a0:cf:82:84:94:3c:b5:99:7b:5c:5b:0c: 93:96:ad:0b:e8:b7:55:1f:f4:69:66:7f:ee:d2:44: 1d:a0:0b:18:5d:7a:b8:a1:25:78:80:4f:9c:e2:00: 8b:15:90:4c:50:10:1f:2b:60:32:3d:90:55:83:7c: e7:08:a0:18:5c:61:e5:8b:03:02:f3:dd:ed:97:3f: 0d:f4:ce:21:d7:06:2d:6b:21:60:f9:92:b8:80:b4: d6:f6:32:1c:f6:79:77:49:1b:da:c1:c8:b0:91:18: 02:ac:95:0e:61:fa:f7:5d:fc:b3:7a:00:08:56:bd: 76:2a:7d:1b:e3:30:21:19:21:14:f4:4d:e1:71:46: 9a:84:34:2d:09:4a:79:f5:c2:20:3a:96:23:6b:2c: dd:c1:f7:97:53:29:e0:91:ae:0c:5c:62:62:af:ee: d9:ec:67:76:b0:f3:80:d7:e1:af:e6:4c:4d:34:13: 89:4f:b2:f3:e3:a7:00:ab:66:66:ab:63:49:f1:f3: 5d:52:f7:67:51:81:76:37:e5:08:b8:6f:31:d5:f6: 2b:a5:cf:8d:58:a7:d2:20:0d:5d:40:64:c1:3b:f3: 9a:a9:19:10:fd:81:53:4b:2a:4e:c7:2d:17:69:d3: 9d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:CC:73:26:91:8D:27:FE:4D:89:98:AB:33:E2:4B:C7:42:74:FE:E1 X509v3 Authority Key Identifier: keyid:AA:A3:14:59:2E:F5:EA:8B:BE:84:D0:64:B2:56:17:1F:E2:AF:C8:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqMUWS716ou-hNBkslYXH-KvyD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:04:0e:5b:d4:b2:ff:09:65:f3:3c:69:95:08:49:d6:f7:4b: 28:17:69:ac:a0:4e:39:d5:72:e2:0a:4c:e2:61:09:e9:af:f9: c4:3e:2f:aa:8c:e3:e3:86:e5:38:a0:52:46:53:cf:e2:95:50: d3:ce:1e:49:15:af:01:f6:bb:79:11:19:7f:86:34:90:54:06: 46:76:9a:e0:e1:58:a3:84:b1:7a:5c:ef:65:c6:28:6b:86:20: 56:55:30:73:3c:d5:8f:2a:41:3e:0d:37:3f:72:ad:98:9e:eb: 3b:06:a5:63:46:62:45:17:fb:00:d1:83:8f:bf:97:ce:50:00: 7c:1d:16:06:8e:0d:e1:b4:68:cf:7c:b0:ca:83:98:99:3e:70: 1b:f1:82:27:58:8a:28:a1:c9:68:e0:0e:fa:ea:0b:2d:98:2d: 55:5f:6c:d9:56:a4:67:e3:19:36:57:67:32:af:45:a8:53:61: ee:b2:39:2e:8a:02:fd:71:09:7e:42:f1:08:3c:72:3b:85:09: 75:af:0f:b9:6a:c2:73:54:b8:ea:b8:a0:8a:bd:6c:6f:f2:e9: 12:39:2c:3d:af:8f:72:da:d2:ea:1a:9d:0a:bc:49:82:44:20: 55:1f:a7:c0:0b:6f:ca:7b:99:3a:aa:a0:6b:8f:34:ea:21:8c: 9f:b9:e8:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm4ZAgzkMn5bUE6wk3FiJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhYTMxNDU5MmVmNWVhOGJiZTg0ZDA2NGIyNTYxNzFmZTJh ZmM4M2UwHhcNMjUxMjA2MDMwMTMyWhcNMjUxMjA3MDMwMTMyWjAzMTEwLwYDVQQD EygxNWNjNzMyNjkxOGQyN2ZlNGQ4OTk4YWIzM2UyNGJjNzQyNzRmZWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhamQDSb1qtZkZjsmajO6augz4KE lDy1mXtcWwyTlq0L6LdVH/RpZn/u0kQdoAsYXXq4oSV4gE+c4gCLFZBMUBAfK2Ay PZBVg3znCKAYXGHliwMC893tlz8N9M4h1wYtayFg+ZK4gLTW9jIc9nl3SRvawciw kRgCrJUOYfr3XfyzegAIVr12Kn0b4zAhGSEU9E3hcUaahDQtCUp59cIgOpYjayzd wfeXUyngka4MXGJir+7Z7Gd2sPOA1+Gv5kxNNBOJT7Lz46cAq2Zmq2NJ8fNdUvdn UYF2N+UIuG8x1fYrpc+NWKfSIA1dQGTBO/OaqRkQ/YFTSypOxy0XadOdjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBXMcyaRjSf+TYmYqzPiS8dCdP7hMB8GA1UdIwQY MBaAFKqjFFku9eqLvoTQZLJWFx/ir8g+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXFNVVdTNzE2b3UtaE5Ca3NsWVhILUt2eUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83ZThjMTctZTIwMS00ZmY0LTgzNjYt ZjBkZjIzODk4ZjY0LzEvcXFNVVdTNzE2b3UtaE5Ca3NsWVhILUt2eUQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC83ZThjMTctZTIwMS00ZmY0LTgzNjYtZjBkZjIzODk4ZjY0 LzEvcXFNVVdTNzE2b3UtaE5Ca3NsWVhILUt2eUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbwQOW9Sy /wll8zxplQhJ1vdLKBdprKBOOdVy4gpM4mEJ6a/5xD4vqozj44blOKBSRlPP4pVQ 084eSRWvAfa7eREZf4Y0kFQGRnaa4OFYo4SxelzvZcYoa4YgVlUwczzVjypBPg03 P3KtmJ7rOwalY0ZiRRf7ANGDj7+XzlAAfB0WBo4N4bRoz3ywyoOYmT5wG/GCJ1iK KKHJaOAO+uoLLZgtVV9s2VakZ+MZNldnMq9FqFNh7rI5LooC/XEJfkLxCDxyO4UJ da8PuWrCc1S46rigir1sb/LpEjksPa+PctrS6hqdCrxJgkQgVR+nwAtvynuZOqqg a4806iGMn7norQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:38:11 2025 by rpki-client