This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft File: q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft (raw, json) Hash identifier: CFLgqWux9rdituz5RTLw5DLL9/wnnHRHh/F6ryD6MKo= Subject key identifier: 12:2D:4F:DC:EE:9D:E7:F5:85:64:BD:0F:48:AD:24:B2:53:0A:CD:F3 Authority key identifier: AB:E4:43:F9:AE:98:AC:AF:DD:D6:16:2D:5C:8E:B0:F9:41:9A:05:F7 Certificate issuer: /CN=abe443f9ae98acafddd6162d5c8eb0f9419a05f7 Certificate serial: 019AF352252BA2161BA4E0D6DEFA82C482E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-RD-a6YrK_d1hYtXI6w-UGaBfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft Manifest number: 140E Signing time: Sat 06 Dec 2025 11:00:38 +0000 Manifest this update: Sat 06 Dec 2025 11:00:38 +0000 Manifest next update: Sun 07 Dec 2025 11:00:38 +0000 Files and hashes: 1: OQ-BUjiM-4ZYICksoUde6ONei7U.roa (hash: nuZwAEc9XGaRcjHMhQRLcOzGazeKsZ0/3EUvFc3DPLU=) 2: q-RD-a6YrK_d1hYtXI6w-UGaBfc.crl (hash: KimIlzgSUdB03kSTInsaE5iTc3bIR6QVtOYkRsHnNqY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft rsync://rpki.ripe.net/repository/DEFAULT/q-RD-a6YrK_d1hYtXI6w-UGaBfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:25:2b:a2:16:1b:a4:e0:d6:de:fa:82:c4:82:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abe443f9ae98acafddd6162d5c8eb0f9419a05f7 Validity Not Before: Dec 6 11:00:38 2025 GMT Not After : Dec 7 11:00:38 2025 GMT Subject: CN=122d4fdcee9de7f58564bd0f48ad24b2530acdf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c8:0a:b9:5b:6c:95:f6:95:34:5a:85:fb:56: bc:3d:2f:2a:f0:d9:5c:93:9b:c7:45:ce:44:4f:e6: 67:73:b0:79:b3:19:ad:66:0d:8a:12:4a:ca:67:09: 8e:68:ce:c5:ce:b5:56:d3:b5:9a:ba:95:b1:68:53: b5:0a:82:14:1c:b5:3c:9e:b5:89:4d:f5:10:79:87: 54:ac:7a:32:15:87:6f:49:df:86:e9:98:ae:0d:d8: 31:6a:7d:39:ac:45:8b:7d:ee:fb:37:f7:9b:d0:2e: 7d:37:89:2b:67:b1:42:2e:9e:2c:b6:94:af:06:8b: a5:44:47:8c:51:6c:bd:7e:5e:b2:04:a9:dd:18:77: b5:75:74:b5:81:cb:9d:4c:62:d5:a2:61:71:01:63: cd:3c:6f:99:e2:cf:0f:e2:91:9c:91:cf:16:ae:2c: 86:ca:79:d8:af:d1:b7:ae:c2:84:a0:b7:42:d2:4b: 85:cc:c7:7d:4a:52:24:f3:ab:1d:2b:9f:7d:df:c3: 4d:bc:d6:44:02:5c:78:08:97:7a:92:32:c5:0b:1d: 25:3b:6a:fd:1d:da:fe:ee:4c:f4:49:18:4a:b9:e6: ed:05:85:d1:8a:2d:64:eb:e4:3d:22:59:56:df:6a: f2:54:a0:c8:cf:a1:7b:c0:ab:f0:e1:15:3e:96:ec: f2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:2D:4F:DC:EE:9D:E7:F5:85:64:BD:0F:48:AD:24:B2:53:0A:CD:F3 X509v3 Authority Key Identifier: keyid:AB:E4:43:F9:AE:98:AC:AF:DD:D6:16:2D:5C:8E:B0:F9:41:9A:05:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-RD-a6YrK_d1hYtXI6w-UGaBfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:fc:e2:3d:eb:ec:df:70:fb:3b:fd:1e:cb:8f:17:c2:c8:dc: 9f:58:50:70:5f:1d:49:8f:2c:9a:b6:d4:66:c2:54:d1:ac:59: e4:1b:57:86:35:bb:3c:9e:f9:37:c9:fa:81:93:49:9c:a6:48: dc:77:06:25:11:21:8a:7b:d4:c6:64:87:e9:8b:83:ee:fa:72: 75:c6:bf:73:62:44:49:6c:25:ae:10:6d:fa:23:3d:99:d6:29: 31:fd:32:36:ee:d6:79:e5:d8:cf:2d:9b:81:47:df:41:ec:30: 58:36:df:f4:d4:8a:05:55:0e:15:1f:9a:2d:7f:8c:9a:07:61: 98:8a:a6:13:97:b7:7d:18:6a:24:0a:99:3b:f1:69:c1:2c:33: 44:09:93:25:e9:9f:53:62:35:38:b8:d1:37:fe:b4:28:97:ef: 65:88:6d:23:2e:df:27:0e:2c:ff:0a:d7:ff:e0:b1:6d:b3:15: fb:6d:22:68:04:2d:02:fc:3c:62:70:c1:07:4e:77:0c:86:d3: dc:c0:63:14:0d:45:1c:f7:80:0c:60:ec:4a:e5:46:0d:87:8e: 56:9e:85:3d:96:8a:23:6e:40:e1:c0:48:3b:17:3e:6c:d0:f5: fd:9e:70:95:3e:7d:e7:ac:76:3f:d1:e3:be:a0:a0:4e:6f:ab: 82:88:1e:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUiUrohYbpODW3vqCxILnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiZTQ0M2Y5YWU5OGFjYWZkZGQ2MTYyZDVjOGViMGY5NDE5 YTA1ZjcwHhcNMjUxMjA2MTEwMDM4WhcNMjUxMjA3MTEwMDM4WjAzMTEwLwYDVQQD EygxMjJkNGZkY2VlOWRlN2Y1ODU2NGJkMGY0OGFkMjRiMjUzMGFjZGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8gKuVtslfaVNFqF+1a8PS8q8Nlc k5vHRc5ET+Znc7B5sxmtZg2KEkrKZwmOaM7FzrVW07WaupWxaFO1CoIUHLU8nrWJ TfUQeYdUrHoyFYdvSd+G6ZiuDdgxan05rEWLfe77N/eb0C59N4krZ7FCLp4stpSv BoulREeMUWy9fl6yBKndGHe1dXS1gcudTGLVomFxAWPNPG+Z4s8P4pGckc8WriyG ynnYr9G3rsKEoLdC0kuFzMd9SlIk86sdK59938NNvNZEAlx4CJd6kjLFCx0lO2r9 Hdr+7kz0SRhKuebtBYXRii1k6+Q9IllW32ryVKDIz6F7wKvw4RU+luzyewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBItT9zunef1hWS9D0itJLJTCs3zMB8GA1UdIwQY MBaAFKvkQ/mumKyv3dYWLVyOsPlBmgX3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcS1SRC1hNllyS19kMWhZdFhJNnctVUdhQmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi85MDBiMjQtZjI4Ni00YmM3LTk2MWUt MDQ0YjY4NmJjOTdmLzEvcS1SRC1hNllyS19kMWhZdFhJNnctVUdhQmZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi85MDBiMjQtZjI4Ni00YmM3LTk2MWUtMDQ0YjY4NmJjOTdm LzEvcS1SRC1hNllyS19kMWhZdFhJNnctVUdhQmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAafziPevs 33D7O/0ey48Xwsjcn1hQcF8dSY8smrbUZsJU0axZ5BtXhjW7PJ75N8n6gZNJnKZI 3HcGJREhinvUxmSH6YuD7vpydca/c2JESWwlrhBt+iM9mdYpMf0yNu7WeeXYzy2b gUffQewwWDbf9NSKBVUOFR+aLX+MmgdhmIqmE5e3fRhqJAqZO/FpwSwzRAmTJemf U2I1OLjRN/60KJfvZYhtIy7fJw4s/wrX/+CxbbMV+20iaAQtAvw8YnDBB053DIbT 3MBjFA1FHPeADGDsSuVGDYeOVp6FPZaKI25A4cBIOxc+bND1/Z5wlT5956x2P9Hj vqCgTm+rgogegg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:31:55 2025 by rpki-client