This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft File: mqwNo1EAZoBg0w8XPWEC4YLRueo.mft (raw, json) Hash identifier: QjmmbnBAiL76V79EOkd0ZBkvI3aEfBIl9/pHW+zrNQw= Subject key identifier: AB:9D:D8:F0:2E:D8:69:69:77:DC:E7:EF:F9:56:C2:CF:C3:EE:24:6D Authority key identifier: 9A:AC:0D:A3:51:00:66:80:60:D3:0F:17:3D:61:02:E1:82:D1:B9:EA Certificate issuer: /CN=9aac0da35100668060d30f173d6102e182d1b9ea Certificate serial: 019AF1643D1235DD2E0D10E9BA298AE59764 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft Manifest number: 115A Signing time: Sat 06 Dec 2025 02:01:09 +0000 Manifest this update: Sat 06 Dec 2025 02:01:09 +0000 Manifest next update: Sun 07 Dec 2025 02:01:09 +0000 Files and hashes: 1: mqwNo1EAZoBg0w8XPWEC4YLRueo.crl (hash: /O9t++62MuwgJ0b7tDv0yUFWUp+nK+pO6EQnR8cBDgE=) 2: x0_V_asfztSp2_6YK6MZt_fACYU.roa (hash: gFs60QtpFwMnh9KBA4cwsowTM45NdniGhBygLWcOD1Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:3d:12:35:dd:2e:0d:10:e9:ba:29:8a:e5:97:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9aac0da35100668060d30f173d6102e182d1b9ea Validity Not Before: Dec 6 02:01:09 2025 GMT Not After : Dec 7 02:01:09 2025 GMT Subject: CN=ab9dd8f02ed8696977dce7eff956c2cfc3ee246d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:95:bd:b8:11:61:6d:e6:3e:99:69:99:7d:60: 91:d3:06:8f:0d:30:42:8b:3c:91:58:e9:8c:54:09: 30:cc:0c:1f:0f:55:f6:20:7b:08:79:90:7a:d2:30: 55:b1:48:2f:8c:95:da:9f:26:19:76:f0:da:0f:15: ce:f8:30:2a:be:2b:d3:75:ee:46:4c:eb:c8:eb:ff: 83:c1:7f:78:13:4b:8e:e9:fb:53:3b:51:2e:50:0c: cc:e8:15:60:be:4f:46:65:0d:ca:09:e6:77:2b:99: d4:53:cb:03:00:1d:6f:30:50:d8:51:19:b8:33:c7: 8b:69:e9:d4:f0:0b:27:80:fb:bd:d5:d8:ea:51:bf: 1e:38:83:24:9b:0d:91:26:34:c1:12:ea:b0:ff:bc: 0c:1a:ca:53:78:7e:f5:1c:d9:2e:1a:a6:05:3b:b6: 79:bc:90:43:3d:92:32:18:61:05:54:09:da:81:85: 5d:d4:a3:e7:8e:14:4f:36:4b:4c:b6:51:bc:40:13: 45:78:21:0e:aa:8a:35:bd:b3:6b:b3:0d:33:c3:cc: bd:01:76:3e:50:2b:a5:9b:c8:bc:19:5e:b8:fd:07: 58:b2:96:52:f8:cb:bf:82:70:92:08:e5:3c:0f:9f: c3:08:df:19:d0:1d:b4:2c:d9:a5:72:c0:ee:86:a0: 9a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:9D:D8:F0:2E:D8:69:69:77:DC:E7:EF:F9:56:C2:CF:C3:EE:24:6D X509v3 Authority Key Identifier: keyid:9A:AC:0D:A3:51:00:66:80:60:D3:0F:17:3D:61:02:E1:82:D1:B9:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:d3:d0:9e:80:e6:e7:ce:82:8e:f1:15:91:d5:e7:1d:86:18: e5:0c:58:1f:4e:9a:4b:e5:76:b3:27:46:fc:3b:60:33:c0:d1: 80:2c:ef:2c:35:0b:56:e4:f1:58:ef:de:13:69:b1:13:47:31: e4:e2:05:40:bb:5b:0e:8f:96:3c:e5:f2:79:a0:62:09:53:7a: 8a:c3:a3:c2:2c:28:e6:1f:0b:31:0e:65:84:fc:35:8b:6a:c8: 5b:90:4d:e8:55:56:0d:4f:10:a5:be:d0:32:26:11:62:a3:1d: ee:f4:33:a9:ed:01:58:7d:2b:3d:6f:85:8d:25:c1:02:d9:3e: 07:86:94:65:3d:38:5f:e3:cc:43:dc:ed:4f:1d:69:3f:0a:a7: f0:07:d3:15:c5:2c:dd:da:d3:63:68:33:4d:ea:ac:f3:d4:c5: 3c:40:d3:39:6a:87:a9:6d:a7:89:75:bb:13:4c:ab:7b:f0:27: a8:91:3c:dc:2e:e5:e3:0f:d7:60:b4:ba:94:90:5f:36:bb:dd: 68:da:56:63:b4:9b:c7:73:34:a8:71:d9:56:d4:66:74:08:25: da:ba:be:94:3d:51:1c:b5:54:01:52:ea:d4:db:18:81:ad:de: f1:02:a3:16:e4:2a:19:34:43:7d:0d:da:70:4d:a9:3c:9e:ba: 4c:46:05:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZD0SNd0uDRDpuimK5ZdkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhYWMwZGEzNTEwMDY2ODA2MGQzMGYxNzNkNjEwMmUxODJk MWI5ZWEwHhcNMjUxMjA2MDIwMTA5WhcNMjUxMjA3MDIwMTA5WjAzMTEwLwYDVQQD EyhhYjlkZDhmMDJlZDg2OTY5NzdkY2U3ZWZmOTU2YzJjZmMzZWUyNDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9JW9uBFhbeY+mWmZfWCR0waPDTBC izyRWOmMVAkwzAwfD1X2IHsIeZB60jBVsUgvjJXanyYZdvDaDxXO+DAqvivTde5G TOvI6/+DwX94E0uO6ftTO1EuUAzM6BVgvk9GZQ3KCeZ3K5nUU8sDAB1vMFDYURm4 M8eLaenU8AsngPu91djqUb8eOIMkmw2RJjTBEuqw/7wMGspTeH71HNkuGqYFO7Z5 vJBDPZIyGGEFVAnagYVd1KPnjhRPNktMtlG8QBNFeCEOqoo1vbNrsw0zw8y9AXY+ UCulm8i8GV64/QdYspZS+Mu/gnCSCOU8D5/DCN8Z0B20LNmlcsDuhqCaNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKud2PAu2Glpd9zn7/lWws/D7iRtMB8GA1UdIwQY MBaAFJqsDaNRAGaAYNMPFz1hAuGC0bnqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXF3Tm8xRUFab0JnMHc4WFBXRUM0WUxSdWVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8zMjgyOGItMDI3MS00NjJjLWE3YWUt NTFiMTA3ZGM5ZjM5LzEvbXF3Tm8xRUFab0JnMHc4WFBXRUM0WUxSdWVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS8zMjgyOGItMDI3MS00NjJjLWE3YWUtNTFiMTA3ZGM5ZjM5 LzEvbXF3Tm8xRUFab0JnMHc4WFBXRUM0WUxSdWVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC9PQnoDm 586CjvEVkdXnHYYY5QxYH06aS+V2sydG/DtgM8DRgCzvLDULVuTxWO/eE2mxE0cx 5OIFQLtbDo+WPOXyeaBiCVN6isOjwiwo5h8LMQ5lhPw1i2rIW5BN6FVWDU8Qpb7Q MiYRYqMd7vQzqe0BWH0rPW+FjSXBAtk+B4aUZT04X+PMQ9ztTx1pPwqn8AfTFcUs 3drTY2gzTeqs89TFPEDTOWqHqW2niXW7E0yre/AnqJE83C7l4w/XYLS6lJBfNrvd aNpWY7Sbx3M0qHHZVtRmdAgl2rq+lD1RHLVUAVLq1NsYga3e8QKjFuQqGTRDfQ3a cE2pPJ66TEYFqQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:15 2025 by rpki-client