This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft File: qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft (raw, json) Hash identifier: 9Lfr9x8tJX/hVnbLltaRRR8xwqkCdYKYJ1n8WlXBLK8= Subject key identifier: 7C:83:F8:CD:BE:42:D4:6F:EB:98:9E:E7:C8:E5:5E:9F:6C:06:91:9B Authority key identifier: A8:45:70:85:4F:E8:86:B9:4A:E6:25:36:3C:62:5D:DA:60:BB:3E:FC Certificate issuer: /CN=a84570854fe886b94ae625363c625dda60bb3efc Certificate serial: 019AF27701DB2F7077BC0172114F359B8499 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 07:01:16 +0000 Manifest this update: Sat 06 Dec 2025 07:01:16 +0000 Manifest next update: Sun 07 Dec 2025 07:01:16 +0000 Files and hashes: 1: jdn52CanAogysSSsHvxl8oKYqEU.roa (hash: nA6uVwF0uVARnhrLjCGdNBrWcovmnCAcVghKvtj+qwk=) 2: qEVwhU_ohrlK5iU2PGJd2mC7Pvw.crl (hash: R/2oefw/MPkwy8behwlh+La4/KO2BHHfZCchSZxiaxE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft rsync://rpki.ripe.net/repository/DEFAULT/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:01:db:2f:70:77:bc:01:72:11:4f:35:9b:84:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a84570854fe886b94ae625363c625dda60bb3efc Validity Not Before: Dec 6 07:01:16 2025 GMT Not After : Dec 7 07:01:16 2025 GMT Subject: CN=7c83f8cdbe42d46feb989ee7c8e55e9f6c06919b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:34:cb:8b:8b:b2:f5:bb:2a:0a:19:e0:9b:10: 45:fd:9b:4e:ab:ca:b0:56:4f:ef:97:4b:31:32:2a: de:70:f6:a2:6b:20:26:e9:d0:13:96:df:bb:d2:23: be:16:9f:0f:04:fb:1c:5e:c7:d4:e3:ee:b8:66:7d: 3f:22:14:c1:16:ce:b4:2b:8e:f6:43:00:f9:5e:d5: a9:95:f7:5d:05:f3:07:01:2b:3b:83:71:c8:37:25: ad:8b:38:4f:41:92:a3:51:ed:ed:0e:a8:17:bb:74: dc:8d:36:d0:c3:7c:61:78:05:73:8b:70:df:a4:18: dc:9b:1a:f2:42:35:0f:6f:e1:df:dc:74:8f:fe:13: 71:60:dc:63:10:49:cf:56:af:f7:b3:79:ca:6c:4d: 96:6d:bb:ff:e7:b5:b5:71:ae:c0:56:4d:95:a3:7f: de:7a:dc:6b:f4:14:a6:76:d0:22:86:40:89:2e:04: 63:85:f5:05:eb:f9:bf:08:70:3c:59:37:e5:fa:78: 94:37:c5:dc:a0:93:8d:16:84:c6:13:f3:fa:ea:30: cb:6e:7c:6a:ec:c1:cf:09:f1:f8:1e:b4:c8:3b:70: c1:3e:1f:c0:31:a7:29:f1:9b:27:0f:4f:e2:17:82: fb:4d:66:08:d0:f6:c2:b7:97:6f:ea:52:a1:e6:90: 6d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:83:F8:CD:BE:42:D4:6F:EB:98:9E:E7:C8:E5:5E:9F:6C:06:91:9B X509v3 Authority Key Identifier: keyid:A8:45:70:85:4F:E8:86:B9:4A:E6:25:36:3C:62:5D:DA:60:BB:3E:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:f1:bc:45:b5:42:eb:95:20:e3:f5:b7:90:8c:80:95:7f:88: 78:71:31:c9:09:5a:a6:aa:d9:37:b9:d0:56:7a:48:3f:fb:7b: e7:d8:4a:1d:ac:bf:8b:3b:9d:97:ea:71:80:fd:d0:c2:12:a0: 3c:34:da:05:d7:f6:d0:24:c5:36:56:21:00:f8:a8:c5:30:70: 65:f7:82:f3:e1:f8:44:97:20:19:52:42:4f:05:df:b4:e4:44: 97:ec:ee:06:36:c9:6e:d2:b7:dd:01:5a:93:f5:39:68:9f:86: c0:85:6b:49:9f:c0:5b:1b:d7:2e:a0:26:3e:6d:02:37:1f:cc: 91:a5:09:5b:fd:8b:f3:e9:e1:d9:f4:61:b8:0e:bb:dc:70:39: 6a:3b:e7:05:f9:2e:7f:e4:87:5d:62:3f:ea:91:65:96:44:be: 86:26:2f:e0:13:dd:b9:76:02:8c:29:78:6c:3d:0b:ca:42:19: 83:87:bd:dc:1f:74:32:1e:37:e9:45:cc:1d:b1:c0:c8:33:11: f0:80:68:98:ba:42:66:3f:36:ce:5f:ad:ce:15:4b:b0:e4:1b: 05:c4:c0:0f:fd:f6:35:cc:3d:df:fc:32:cf:93:1c:dc:07:44: 1c:c5:d8:2f:ad:b1:b0:37:6e:f8:f1:8d:05:87:24:19:68:e3: b2:e2:fa:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydwHbL3B3vAFyEU81m4SZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NDU3MDg1NGZlODg2Yjk0YWU2MjUzNjNjNjI1ZGRhNjBi YjNlZmMwHhcNMjUxMjA2MDcwMTE2WhcNMjUxMjA3MDcwMTE2WjAzMTEwLwYDVQQD Eyg3YzgzZjhjZGJlNDJkNDZmZWI5ODllZTdjOGU1NWU5ZjZjMDY5MTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzTLi4uy9bsqChngmxBF/ZtOq8qw Vk/vl0sxMirecPaiayAm6dATlt+70iO+Fp8PBPscXsfU4+64Zn0/IhTBFs60K472 QwD5XtWplfddBfMHASs7g3HINyWtizhPQZKjUe3tDqgXu3TcjTbQw3xheAVzi3Df pBjcmxryQjUPb+Hf3HSP/hNxYNxjEEnPVq/3s3nKbE2Wbbv/57W1ca7AVk2Vo3/e etxr9BSmdtAihkCJLgRjhfUF6/m/CHA8WTfl+niUN8XcoJONFoTGE/P66jDLbnxq 7MHPCfH4HrTIO3DBPh/AMacp8ZsnD0/iF4L7TWYI0PbCt5dv6lKh5pBtYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHyD+M2+QtRv65ie58jlXp9sBpGbMB8GA1UdIwQY MBaAFKhFcIVP6Ia5SuYlNjxiXdpguz78MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUVWd2hVX29ocmxLNWlVMlBHSmQybUM3UHZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9mYWMyYTItNWY2OS00MDQzLThkNjUt NWJjODc5NWMyY2JhLzEvcUVWd2hVX29ocmxLNWlVMlBHSmQybUM3UHZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9mYWMyYTItNWY2OS00MDQzLThkNjUtNWJjODc5NWMyY2Jh LzEvcUVWd2hVX29ocmxLNWlVMlBHSmQybUM3UHZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXfG8RbVC 65Ug4/W3kIyAlX+IeHExyQlapqrZN7nQVnpIP/t759hKHay/izudl+pxgP3QwhKg PDTaBdf20CTFNlYhAPioxTBwZfeC8+H4RJcgGVJCTwXftOREl+zuBjbJbtK33QFa k/U5aJ+GwIVrSZ/AWxvXLqAmPm0CNx/MkaUJW/2L8+nh2fRhuA673HA5ajvnBfku f+SHXWI/6pFllkS+hiYv4BPduXYCjCl4bD0LykIZg4e93B90Mh436UXMHbHAyDMR 8IBomLpCZj82zl+tzhVLsOQbBcTAD/32Ncw93/wyz5Mc3AdEHMXYL62xsDdu+PGN BYckGWjjsuL6ew== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:38 2025 by rpki-client