This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft File: qIAb4jY_IRvS9XgYrer5wNvhS9s.mft (raw, json) Hash identifier: t40iEcKPEfisXOpQYbI7lBzeUch+isimAQwSNN5D5i4= Subject key identifier: 80:84:DD:90:54:A4:8E:56:C2:2D:F5:64:2D:FA:53:D7:B1:03:04:49 Authority key identifier: A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB Certificate issuer: /CN=a8801be2363f211bd2f57818adeaf9c0dbe14bdb Certificate serial: 019AF20913A735CF3E708712BBB1D7ECACBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 05:01:12 +0000 Manifest this update: Sat 06 Dec 2025 05:01:12 +0000 Manifest next update: Sun 07 Dec 2025 05:01:12 +0000 Files and hashes: 1: Ioovps5s613OBdQzBzryR2Ja3A0.roa (hash: ATzykv0spHuFN9BLvq9b09tLyJhBjFr/aCEbExY3CKs=) 2: aQTW2xIeYuZvcEH7gsYJNqz73Xs.roa (hash: ga2DmH5h7HfJ0XIXHVbsof3jQ3Sa9KHt/wMuvsxWtEk=) 3: qIAb4jY_IRvS9XgYrer5wNvhS9s.crl (hash: OFd6glC3cSH1mutZDObZv/mvcNI7Sn4TlTTru8d5we4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.crl rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:13:a7:35:cf:3e:70:87:12:bb:b1:d7:ec:ac:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8801be2363f211bd2f57818adeaf9c0dbe14bdb Validity Not Before: Dec 6 05:01:12 2025 GMT Not After : Dec 7 05:01:12 2025 GMT Subject: CN=8084dd9054a48e56c22df5642dfa53d7b1030449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:db:c2:88:12:97:64:d7:25:09:e4:47:ff:e7: ff:2d:f3:9c:bd:a8:4e:cd:98:3b:8f:1c:4e:ce:c6: 97:c7:06:43:76:f8:58:4b:a9:76:79:eb:ec:cd:4f: c6:2a:fc:be:79:44:c0:8b:2a:e1:24:7e:a8:37:64: db:01:f4:c3:45:3c:47:57:2a:86:b6:9b:d2:29:bd: 86:d6:e9:bf:18:3c:55:4a:c6:20:c6:63:5a:65:e2: 30:12:b2:44:1e:52:d3:e1:1a:45:7b:69:af:06:71: 26:af:0e:40:45:43:7a:35:b8:c2:40:a9:8c:b1:14: 34:9b:51:a0:41:51:c7:af:e1:27:13:aa:2c:d1:ae: 17:98:97:b4:69:ea:2a:ae:c5:84:88:f1:ad:d2:28: 05:a9:2b:ed:3b:85:0f:44:be:b4:08:95:37:b4:ae: 57:da:18:7b:d8:01:51:26:8c:20:d5:dc:85:3f:09: d6:4f:eb:2d:ba:a2:8e:af:a1:7e:d1:58:7a:70:0f: 5e:aa:0c:fa:87:95:80:eb:35:f1:bc:23:20:bb:a7: 3e:0a:29:fb:3b:3e:ca:9a:79:ef:89:5a:75:37:8e: 3f:00:ff:ec:23:78:52:c1:bd:90:87:09:f0:16:ce: ad:8a:a9:ed:bd:97:69:1c:83:0a:cd:b1:ad:8e:f6: f9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:84:DD:90:54:A4:8E:56:C2:2D:F5:64:2D:FA:53:D7:B1:03:04:49 X509v3 Authority Key Identifier: keyid:A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:06:fb:c6:fd:41:df:f6:54:ce:99:43:fc:2c:f0:59:eb:a3: 6d:26:4b:12:ee:f8:8d:d7:20:79:cc:94:b9:d4:db:c5:39:85: 20:d8:a5:ab:2a:bf:25:59:cb:9f:74:ec:a1:12:69:f9:dd:43: ef:56:4e:1e:ba:d9:c8:48:a0:9e:6f:d4:04:3a:01:80:31:79: 53:5f:7a:dd:cb:69:7c:7d:31:97:a5:1f:2c:31:0f:d5:f2:41: e7:08:bb:2d:21:17:96:55:22:1a:18:13:24:74:48:30:2d:e2: e1:f1:14:4f:e1:3a:14:d6:bd:f8:bb:f0:a2:7d:34:ce:68:68: 63:45:0c:63:66:15:31:fd:1d:e0:3e:59:b8:b0:f5:9b:2a:fd: 75:9d:43:ed:1f:b1:a1:c9:f4:13:15:f1:b9:75:24:54:8e:62: cd:19:51:50:f1:fb:fd:b1:a8:b5:4f:55:cd:da:ab:71:1d:1f: e7:d3:cd:42:2e:57:20:c8:d5:0a:cc:f3:33:06:1e:85:f4:a5: 94:ee:a6:8a:26:cc:dc:09:10:5d:03:17:78:f2:ae:c2:9f:f7: 4b:2e:45:24:15:78:59:e4:2d:3f:8f:31:e3:05:f4:78:d2:a1: a6:87:19:ac:28:ef:1e:5f:b8:96:da:12:3d:02:be:b2:d4:c9: 69:9b:4f:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCROnNc8+cIcSu7HX7Ky7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4ODAxYmUyMzYzZjIxMWJkMmY1NzgxOGFkZWFmOWMwZGJl MTRiZGIwHhcNMjUxMjA2MDUwMTEyWhcNMjUxMjA3MDUwMTEyWjAzMTEwLwYDVQQD Eyg4MDg0ZGQ5MDU0YTQ4ZTU2YzIyZGY1NjQyZGZhNTNkN2IxMDMwNDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtvCiBKXZNclCeRH/+f/LfOcvahO zZg7jxxOzsaXxwZDdvhYS6l2eevszU/GKvy+eUTAiyrhJH6oN2TbAfTDRTxHVyqG tpvSKb2G1um/GDxVSsYgxmNaZeIwErJEHlLT4RpFe2mvBnEmrw5ARUN6NbjCQKmM sRQ0m1GgQVHHr+EnE6os0a4XmJe0aeoqrsWEiPGt0igFqSvtO4UPRL60CJU3tK5X 2hh72AFRJowg1dyFPwnWT+stuqKOr6F+0Vh6cA9eqgz6h5WA6zXxvCMgu6c+Cin7 Oz7KmnnviVp1N44/AP/sI3hSwb2QhwnwFs6tiqntvZdpHIMKzbGtjvb5SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFICE3ZBUpI5Wwi31ZC36U9exAwRJMB8GA1UdIwQY MBaAFKiAG+I2PyEb0vV4GK3q+cDb4UvbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUlBYjRqWV9JUnZTOVhnWXJlcjV3TnZoUzlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS84MTFlNzMtY2YzMC00OTRkLWFjYWMt ODQyMGFlOWUwNjIyLzEvcUlBYjRqWV9JUnZTOVhnWXJlcjV3TnZoUzlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS84MTFlNzMtY2YzMC00OTRkLWFjYWMtODQyMGFlOWUwNjIy LzEvcUlBYjRqWV9JUnZTOVhnWXJlcjV3TnZoUzlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjwb7xv1B 3/ZUzplD/CzwWeujbSZLEu74jdcgecyUudTbxTmFINilqyq/JVnLn3TsoRJp+d1D 71ZOHrrZyEignm/UBDoBgDF5U1963ctpfH0xl6UfLDEP1fJB5wi7LSEXllUiGhgT JHRIMC3i4fEUT+E6FNa9+Lvwon00zmhoY0UMY2YVMf0d4D5ZuLD1myr9dZ1D7R+x ocn0ExXxuXUkVI5izRlRUPH7/bGotU9VzdqrcR0f59PNQi5XIMjVCszzMwYehfSl lO6miibM3AkQXQMXePKuwp/3Sy5FJBV4WeQtP48x4wX0eNKhpocZrCjvHl+4ltoS PQK+stTJaZtPCg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:55 2025 by rpki-client