This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.mft File: qag61DyItM5E6CDhFd6cU34qVKY.mft (raw, json) Hash identifier: ZvDIR9KdvnN00S0jCHZ4yQFYkMWCPx2VfElEwrYAM2c= Subject key identifier: 20:A6:CB:29:6A:79:BC:E7:64:B0:B0:4F:51:4D:59:3B:FC:47:FC:3A Authority key identifier: A9:A8:3A:D4:3C:88:B4:CE:44:E8:20:E1:15:DE:9C:53:7E:2A:54:A6 Certificate issuer: /CN=a9a83ad43c88b4ce44e820e115de9c537e2a54a6 Certificate serial: 019AF31CC09A96AA9B9852222880CF5A7E89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qag61DyItM5E6CDhFd6cU34qVKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.mft Manifest number: 0A02 Signing time: Sat 06 Dec 2025 10:02:19 +0000 Manifest this update: Sat 06 Dec 2025 10:02:19 +0000 Manifest next update: Sun 07 Dec 2025 10:02:19 +0000 Files and hashes: 1: 3JUWGQsOPBFoC4I-OGs1qaLU-CQ.roa (hash: HAn/ErTzS/Zebt/yY2233fhmAXGMbizcG23F8CM++/Q=) 2: qag61DyItM5E6CDhFd6cU34qVKY.crl (hash: d6RSfXRRmfvvlExUP1DFn23esx14NJhVIL6P8z+b+ks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.crl rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.mft rsync://rpki.ripe.net/repository/DEFAULT/qag61DyItM5E6CDhFd6cU34qVKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:c0:9a:96:aa:9b:98:52:22:28:80:cf:5a:7e:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9a83ad43c88b4ce44e820e115de9c537e2a54a6 Validity Not Before: Dec 6 10:02:19 2025 GMT Not After : Dec 7 10:02:19 2025 GMT Subject: CN=20a6cb296a79bce764b0b04f514d593bfc47fc3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:87:55:88:a8:01:19:ae:0b:23:eb:a5:c0:7c: 16:fe:0f:54:57:1f:a4:2d:b6:bb:4d:49:0f:31:50: 1a:ee:c0:3b:6a:a0:62:5c:c6:c1:8f:8c:e3:7c:4e: b9:1c:dd:51:97:de:3c:51:39:51:4a:55:d8:96:37: d3:17:d3:73:0c:5c:46:8d:d9:24:75:fb:5e:b5:c2: a7:57:74:9d:17:c8:ec:ec:54:1f:99:b5:1e:c5:d4: c7:c3:63:a2:84:19:65:19:f1:0c:cc:dd:52:7e:f9: 60:09:a8:cd:f2:98:87:93:50:c9:e1:b6:72:05:3a: 4e:9d:44:60:47:e4:c5:1f:73:f1:78:52:f4:7a:61: a1:29:23:21:06:72:dd:41:e9:c1:b5:cd:0a:72:91: c7:7b:39:c4:94:b7:e0:af:66:14:2f:f3:ce:55:03: fc:3f:10:80:cc:01:72:52:4d:b9:6b:17:74:31:10: 82:7b:3a:45:b0:89:92:1d:15:ec:de:ed:29:6f:2d: fb:bd:49:83:35:65:cf:20:7a:36:85:25:8a:c1:9e: 90:49:47:5c:d8:1d:4a:9f:29:f1:91:ac:69:7e:f5: 17:df:5c:54:fd:29:48:0e:3d:21:80:ce:26:99:36: be:9b:22:9d:0c:38:28:f8:ec:2d:32:ef:ba:ba:d0: 55:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A6:CB:29:6A:79:BC:E7:64:B0:B0:4F:51:4D:59:3B:FC:47:FC:3A X509v3 Authority Key Identifier: keyid:A9:A8:3A:D4:3C:88:B4:CE:44:E8:20:E1:15:DE:9C:53:7E:2A:54:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qag61DyItM5E6CDhFd6cU34qVKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:17:47:8e:33:6d:d8:ce:bd:3d:8b:ec:30:b6:dc:bc:16:32: d6:86:2d:41:49:01:24:1a:a3:74:ed:9a:d1:2e:d1:fb:5b:3a: 6c:3e:5d:98:0d:d9:f3:af:ef:50:08:ed:7a:f2:1c:46:b0:1b: 59:ed:25:ac:ab:30:95:02:28:fa:0b:8b:57:04:4e:c0:8c:26: 28:7a:01:6b:db:31:98:b6:cc:67:bd:4c:f7:8c:8c:f9:2d:64: a3:dc:56:ca:cc:8d:a0:44:59:b8:9f:5d:7b:c5:ea:68:0f:db: c7:dc:63:72:5a:33:3f:02:59:7a:89:e6:d6:8f:ea:26:68:0c: 88:1f:62:1f:45:9c:e6:27:0e:a4:5b:6f:7f:dc:c3:86:ec:ea: a5:b2:e2:0e:b7:a2:aa:78:07:83:f7:5a:4a:43:14:94:a2:aa: 3d:80:24:e1:42:13:de:56:09:7d:fa:0e:a1:d5:02:63:d3:34: 4d:72:84:a5:08:b5:8b:ad:b7:59:f1:3a:4e:b2:ae:7f:79:78: f9:ff:21:97:e8:93:70:fd:08:5c:9e:24:58:c2:7b:20:bc:09: 2d:1d:ff:c6:dd:86:c6:f2:a5:8a:91:b7:f2:37:ed:d6:c7:03: 3c:85:54:0f:9c:67:e0:76:82:f4:4d:c8:dd:e3:e0:8c:47:7a: b7:c5:aa:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHMCalqqbmFIiKIDPWn6JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5YTgzYWQ0M2M4OGI0Y2U0NGU4MjBlMTE1ZGU5YzUzN2Uy YTU0YTYwHhcNMjUxMjA2MTAwMjE5WhcNMjUxMjA3MTAwMjE5WjAzMTEwLwYDVQQD EygyMGE2Y2IyOTZhNzliY2U3NjRiMGIwNGY1MTRkNTkzYmZjNDdmYzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuodViKgBGa4LI+ulwHwW/g9UVx+k Lba7TUkPMVAa7sA7aqBiXMbBj4zjfE65HN1Rl948UTlRSlXYljfTF9NzDFxGjdkk dftetcKnV3SdF8js7FQfmbUexdTHw2OihBllGfEMzN1SfvlgCajN8piHk1DJ4bZy BTpOnURgR+TFH3PxeFL0emGhKSMhBnLdQenBtc0KcpHHeznElLfgr2YUL/POVQP8 PxCAzAFyUk25axd0MRCCezpFsImSHRXs3u0pby37vUmDNWXPIHo2hSWKwZ6QSUdc 2B1KnynxkaxpfvUX31xU/SlIDj0hgM4mmTa+myKdDDgo+OwtMu+6utBVQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCCmyylqebznZLCwT1FNWTv8R/w6MB8GA1UdIwQY MBaAFKmoOtQ8iLTOROgg4RXenFN+KlSmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWFnNjFEeUl0TTVFNkNEaEZkNmNVMzRxVktZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9lYWY0M2EtMWYxMS00OGM4LTljODAt MThiZTVmNDY0ZWQ2LzEvcWFnNjFEeUl0TTVFNkNEaEZkNmNVMzRxVktZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My9lYWY0M2EtMWYxMS00OGM4LTljODAtMThiZTVmNDY0ZWQ2 LzEvcWFnNjFEeUl0TTVFNkNEaEZkNmNVMzRxVktZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXhdHjjNt 2M69PYvsMLbcvBYy1oYtQUkBJBqjdO2a0S7R+1s6bD5dmA3Z86/vUAjtevIcRrAb We0lrKswlQIo+guLVwROwIwmKHoBa9sxmLbMZ71M94yM+S1ko9xWysyNoERZuJ9d e8XqaA/bx9xjclozPwJZeonm1o/qJmgMiB9iH0Wc5icOpFtvf9zDhuzqpbLiDrei qngHg/daSkMUlKKqPYAk4UIT3lYJffoOodUCY9M0TXKEpQi1i623WfE6TrKuf3l4 +f8hl+iTcP0IXJ4kWMJ7ILwJLR3/xt2GxvKlipG38jft1scDPIVUD5xn4HaC9E3I 3ePgjEd6t8WqYQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:59:27 2025 by rpki-client