This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.mft File: a0qh49jPQ6NrQbuyXcj6K6ccNYQ.mft (raw, json) Hash identifier: 5qjWkmDl3mQu9EifkwVeMCO6jUfdwan7Y2QJZUA17kM= Subject key identifier: 4F:FC:10:8E:F6:70:BC:96:BF:A5:35:01:38:2B:28:7F:2C:24:C1:A8 Authority key identifier: 6B:4A:A1:E3:D8:CF:43:A3:6B:41:BB:B2:5D:C8:FA:2B:A7:1C:35:84 Certificate issuer: /CN=6b4aa1e3d8cf43a36b41bbb25dc8fa2ba71c3584 Certificate serial: 019AF42E5A0121251D170083FCAFB952C043 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 15:01:09 +0000 Manifest this update: Sat 06 Dec 2025 15:01:09 +0000 Manifest next update: Sun 07 Dec 2025 15:01:09 +0000 Files and hashes: 1: a0qh49jPQ6NrQbuyXcj6K6ccNYQ.crl (hash: dOs6Dpg2A3mkt7534loP/mW8no1q73EjvH9fTvfOjWA=) 2: iOsVPSzZeKu_GpAxh4HElCaSMFU.roa (hash: AzLs0VLFJkqJP3rzT9WbseTSbDWK38sW9aaDyk0oNy4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:5a:01:21:25:1d:17:00:83:fc:af:b9:52:c0:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b4aa1e3d8cf43a36b41bbb25dc8fa2ba71c3584 Validity Not Before: Dec 6 15:01:09 2025 GMT Not After : Dec 7 15:01:09 2025 GMT Subject: CN=4ffc108ef670bc96bfa53501382b287f2c24c1a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e4:9a:4c:bd:aa:8c:e8:26:ef:f0:f8:34:19: d0:19:77:06:a6:b4:5e:79:ee:3d:e3:84:eb:f5:8f: 4f:a7:31:d3:82:0c:75:a4:3d:d1:c0:ff:7a:fd:7b: be:25:19:45:10:6e:48:a5:a1:8f:02:67:62:cd:9f: 1c:eb:51:27:3e:4a:02:f5:78:6e:83:8b:b7:0a:54: 24:c7:46:47:45:83:56:b7:d0:53:8f:a2:0d:27:f3: 88:1a:bb:08:35:cf:16:9f:66:96:a0:09:d5:35:33: 6f:c4:c1:a1:35:48:e5:1b:d0:12:0d:1f:6a:d9:28: 06:b1:86:84:43:c9:dc:ed:ed:b9:62:42:e6:4d:e7: d4:51:7d:c1:f6:f2:0c:5a:9e:84:a7:fb:22:0c:01: d9:57:68:e9:97:39:bd:5d:c3:ca:71:86:39:1e:4b: 6b:2b:f5:13:8b:f0:17:a7:69:60:34:f3:b1:51:4b: d4:cd:d7:1a:12:9e:8f:d8:ee:42:ce:59:c6:aa:ba: 43:df:f0:7e:01:4b:1f:7b:67:81:f8:7e:e0:6e:b7: 6d:f8:d5:95:49:e3:b6:59:46:55:f3:94:d3:33:4b: 28:ab:97:69:8c:3b:2d:f4:0d:b2:f1:4c:85:2f:29: 92:8a:7a:e3:9c:dd:c5:88:9c:65:ab:45:4b:dc:28: 3b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:FC:10:8E:F6:70:BC:96:BF:A5:35:01:38:2B:28:7F:2C:24:C1:A8 X509v3 Authority Key Identifier: keyid:6B:4A:A1:E3:D8:CF:43:A3:6B:41:BB:B2:5D:C8:FA:2B:A7:1C:35:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:d9:ce:1e:bf:c3:20:47:49:3c:1e:58:e2:11:38:fb:44:ef: 4f:ac:de:11:8f:77:36:ea:e4:ac:e6:67:e6:b2:b6:d1:0b:15: 1c:df:64:f1:cd:02:a7:4f:85:d8:cc:10:b5:28:4d:34:8e:c5: 44:82:80:39:a5:8e:45:d5:42:0b:b8:5a:25:ae:73:08:6c:c5: 8c:44:23:46:38:ec:e2:7d:96:97:07:6b:6a:4f:0b:7d:20:c5: 89:ee:7e:0c:51:d7:c1:88:66:6e:d3:ac:eb:7e:48:fc:59:eb: 6d:b0:b5:66:ee:4f:e4:b1:a1:6b:7b:8c:a5:7e:a5:52:7e:69: cb:7d:c3:4b:d5:f6:bc:42:7f:4e:af:51:ea:0d:4f:cf:fa:0b: dd:f0:6f:ae:fe:ae:df:43:aa:10:cd:9e:2b:72:c8:0b:dd:87: bb:40:3a:26:c0:d6:70:07:ca:6d:cd:2c:3c:66:e4:c5:36:69: a4:f9:67:d9:a1:fe:95:ae:26:3e:a6:50:59:af:d4:6a:e4:f4: 7d:c3:1a:7a:2d:cf:f3:f4:a8:20:49:34:33:89:ac:55:68:0e: a5:8a:41:b2:03:62:da:0d:bc:ae:e1:ac:2d:fb:7e:1d:73:ce: 3e:b6:5b:dc:33:01:e0:36:0f:92:8b:0d:6a:37:b3:fc:0e:3b: da:4b:8c:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LloBISUdFwCD/K+5UsBDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNGFhMWUzZDhjZjQzYTM2YjQxYmJiMjVkYzhmYTJiYTcx YzM1ODQwHhcNMjUxMjA2MTUwMTA5WhcNMjUxMjA3MTUwMTA5WjAzMTEwLwYDVQQD Eyg0ZmZjMTA4ZWY2NzBiYzk2YmZhNTM1MDEzODJiMjg3ZjJjMjRjMWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuSaTL2qjOgm7/D4NBnQGXcGprRe ee4944Tr9Y9PpzHTggx1pD3RwP96/Xu+JRlFEG5IpaGPAmdizZ8c61EnPkoC9Xhu g4u3ClQkx0ZHRYNWt9BTj6INJ/OIGrsINc8Wn2aWoAnVNTNvxMGhNUjlG9ASDR9q 2SgGsYaEQ8nc7e25YkLmTefUUX3B9vIMWp6Ep/siDAHZV2jplzm9XcPKcYY5Hktr K/UTi/AXp2lgNPOxUUvUzdcaEp6P2O5CzlnGqrpD3/B+AUsfe2eB+H7gbrdt+NWV SeO2WUZV85TTM0soq5dpjDst9A2y8UyFLymSinrjnN3FiJxlq0VL3Cg7swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/8EI72cLyWv6U1ATgrKH8sJMGoMB8GA1UdIwQY MBaAFGtKoePYz0Oja0G7sl3I+iunHDWEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTBxaDQ5alBRNk5yUWJ1eVhjajZLNmNjTllRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9iMDUyNjgtOGQxOC00NTIxLWFiYjYt NGIyOWU5ZGM3NGM1LzEvYTBxaDQ5alBRNk5yUWJ1eVhjajZLNmNjTllRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9iMDUyNjgtOGQxOC00NTIxLWFiYjYtNGIyOWU5ZGM3NGM1 LzEvYTBxaDQ5alBRNk5yUWJ1eVhjajZLNmNjTllRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHdnOHr/D IEdJPB5Y4hE4+0TvT6zeEY93NurkrOZn5rK20QsVHN9k8c0Cp0+F2MwQtShNNI7F RIKAOaWORdVCC7haJa5zCGzFjEQjRjjs4n2Wlwdrak8LfSDFie5+DFHXwYhmbtOs 635I/FnrbbC1Zu5P5LGha3uMpX6lUn5py33DS9X2vEJ/Tq9R6g1Pz/oL3fBvrv6u 30OqEM2eK3LIC92Hu0A6JsDWcAfKbc0sPGbkxTZppPln2aH+la4mPqZQWa/UauT0 fcMaei3P8/SoIEk0M4msVWgOpYpBsgNi2g28ruGsLft+HXPOPrZb3DMB4DYPkosN ajez/A472kuMsA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:36:14 2025 by rpki-client