This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft File: qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft (raw, json) Hash identifier: wSziTTUDW6zmT7zIVbefgkmQVxnpeJc5qCqIYprIlgA= Subject key identifier: D0:2B:D3:AE:0E:09:E2:BE:1E:21:EB:A6:21:55:E7:02:81:2F:A3:24 Authority key identifier: A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74 Certificate issuer: /CN=a9480cf18fd7859df9ad997940013a99b8dee374 Certificate serial: 019AF2AD8D41D3DF547323D8941516DE2E7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 08:00:51 +0000 Manifest this update: Sat 06 Dec 2025 08:00:51 +0000 Manifest next update: Sun 07 Dec 2025 08:00:51 +0000 Files and hashes: 1: 1-498Z7vh8fq99O9xScVcy6k-waA.roa (hash: 5X65ydohKF6qHxzYtE3Ac9naZbToLy0QuSQ9mwUuJtg=) 2: YCaC2D8L5OtL6F6domigXArqF2c.roa (hash: 3VcxChRnU4HThrx+KUbxRb/2EVyI8+silVMvgGd2Xn0=) 3: qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl (hash: qjM1Fe4dFjU9AEOlrQmHrSGXFv8/hcrOyD4HdBYR+yU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:8d:41:d3:df:54:73:23:d8:94:15:16:de:2e:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9480cf18fd7859df9ad997940013a99b8dee374 Validity Not Before: Dec 6 08:00:51 2025 GMT Not After : Dec 7 08:00:51 2025 GMT Subject: CN=d02bd3ae0e09e2be1e21eba62155e702812fa324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:d5:c7:ab:20:15:f7:97:9f:72:94:a9:94:27: 02:b7:1f:e0:15:3c:d3:8d:a2:86:5c:04:88:a7:ce: 7b:0e:16:d5:14:2f:94:97:a8:65:89:7b:07:09:f4: c9:e3:f8:89:5f:c2:7f:c6:57:9f:36:48:6e:61:d0: ff:23:47:18:9c:93:e5:aa:a9:a8:7b:d6:0f:27:cc: d8:ca:53:d8:90:07:f2:08:0e:84:ed:8d:38:af:a7: 17:6b:9b:be:eb:58:5c:8e:9a:be:71:39:14:2d:35: 98:db:8c:af:49:a4:14:91:3d:2a:9b:fc:8d:76:62: 56:08:df:ee:e6:5e:3e:ac:e9:8c:3e:70:ea:25:90: ce:84:cd:60:c3:5d:db:f5:f0:4d:0f:6a:74:23:aa: f2:f7:4e:e0:fe:fb:7a:3d:42:6a:d1:8e:8f:f4:68: cc:25:05:ec:29:3b:53:3f:80:a3:9c:37:ff:a4:68: 6a:f1:c4:6d:14:e9:77:6d:07:c6:0c:72:52:0a:44: a6:8e:89:59:0c:a6:cd:38:8c:23:f7:12:1a:d4:06: 97:29:c2:a1:19:1a:d7:26:2e:8a:04:61:23:e1:68: 22:43:2b:d8:8a:04:02:d0:45:4f:a3:ec:55:59:9d: 24:35:b5:6a:8c:85:a6:51:16:76:32:5e:f5:9f:e5: 98:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:2B:D3:AE:0E:09:E2:BE:1E:21:EB:A6:21:55:E7:02:81:2F:A3:24 X509v3 Authority Key Identifier: keyid:A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:7f:c7:a9:74:e9:0a:d9:8c:68:8b:82:3d:74:9b:d4:10:33: fe:80:fb:27:1b:52:5b:a4:1a:0b:76:21:ac:2d:09:45:0e:25: be:8a:a1:fd:ea:50:10:48:ed:76:fc:db:c4:30:0e:eb:c5:56: a0:dd:63:ed:9f:66:5b:6a:09:73:ea:c2:4f:1c:a8:73:49:38: 39:50:c3:9a:0b:63:c7:90:0c:8c:ff:11:ab:8b:2a:e4:90:54: a6:2f:80:0c:62:55:03:68:d0:8f:1c:2f:d5:40:b7:a0:6c:72: 6b:f5:78:15:31:a5:79:aa:43:8b:63:d8:ce:ff:a6:68:e2:5a: 34:67:83:da:2c:58:df:a7:d1:59:5b:0b:5c:15:04:82:2a:58: 5a:79:4d:6e:e8:47:eb:00:0f:5a:13:2d:0a:56:f5:3b:5c:43: 0a:e5:7c:f1:db:8c:e2:9c:53:89:fe:b0:c6:70:7f:d7:5d:00: 70:32:dc:2c:af:86:47:2c:75:87:5f:2c:08:15:f2:bb:c2:4e: 70:d0:23:2c:ee:df:54:20:af:ba:06:25:58:7d:77:de:75:d6: 2a:b3:06:66:36:ae:72:09:ad:87:74:ab:01:df:3c:9f:c3:cd: de:b4:63:f1:3a:67:af:27:8f:a9:78:03:16:f5:4c:da:7e:e3: 36:49:c1:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrY1B099UcyPYlBUW3i56MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5NDgwY2YxOGZkNzg1OWRmOWFkOTk3OTQwMDEzYTk5Yjhk ZWUzNzQwHhcNMjUxMjA2MDgwMDUxWhcNMjUxMjA3MDgwMDUxWjAzMTEwLwYDVQQD EyhkMDJiZDNhZTBlMDllMmJlMWUyMWViYTYyMTU1ZTcwMjgxMmZhMzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69XHqyAV95efcpSplCcCtx/gFTzT jaKGXASIp857DhbVFC+Ul6hliXsHCfTJ4/iJX8J/xlefNkhuYdD/I0cYnJPlqqmo e9YPJ8zYylPYkAfyCA6E7Y04r6cXa5u+61hcjpq+cTkULTWY24yvSaQUkT0qm/yN dmJWCN/u5l4+rOmMPnDqJZDOhM1gw13b9fBND2p0I6ry907g/vt6PUJq0Y6P9GjM JQXsKTtTP4CjnDf/pGhq8cRtFOl3bQfGDHJSCkSmjolZDKbNOIwj9xIa1AaXKcKh GRrXJi6KBGEj4WgiQyvYigQC0EVPo+xVWZ0kNbVqjIWmURZ2Ml71n+WYZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNAr064OCeK+HiHrpiFV5wKBL6MkMB8GA1UdIwQY MBaAFKlIDPGP14Wd+a2ZeUABOpm43uN0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVVnTThZX1hoWjM1clpsNVFBRTZtYmplNDNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9hMzkxMzgtZjRmMS00MjU5LWE0Yjkt YWNkODdjNTQ2MDQ4LzEvcVVnTThZX1hoWjM1clpsNVFBRTZtYmplNDNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9hMzkxMzgtZjRmMS00MjU5LWE0YjktYWNkODdjNTQ2MDQ4 LzEvcVVnTThZX1hoWjM1clpsNVFBRTZtYmplNDNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARn/HqXTp CtmMaIuCPXSb1BAz/oD7JxtSW6QaC3YhrC0JRQ4lvoqh/epQEEjtdvzbxDAO68VW oN1j7Z9mW2oJc+rCTxyoc0k4OVDDmgtjx5AMjP8Rq4sq5JBUpi+ADGJVA2jQjxwv 1UC3oGxya/V4FTGleapDi2PYzv+maOJaNGeD2ixY36fRWVsLXBUEgipYWnlNbuhH 6wAPWhMtClb1O1xDCuV88duM4pxTif6wxnB/110AcDLcLK+GRyx1h18sCBXyu8JO cNAjLO7fVCCvugYlWH133nXWKrMGZjaucgmth3SrAd88n8PN3rRj8TpnryePqXgD FvVM2n7jNknB2g== -----END CERTIFICATE-----Generated at Sat Dec 6 13:34:54 2025 by rpki-client