This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.mft File: qag61DyItM5E6CDhFd6cU34qVKY.mft (raw, json) Hash identifier: s1EoWOG+ZyeEFZL8Bsm8/lCUqVOJRdtYHqCujzoDt/Q= Subject key identifier: 7C:A7:B1:DB:48:5E:8A:09:CE:37:4E:52:B6:FC:65:F5:12:84:F5:F7 Authority key identifier: A9:A8:3A:D4:3C:88:B4:CE:44:E8:20:E1:15:DE:9C:53:7E:2A:54:A6 Certificate issuer: /CN=a9a83ad43c88b4ce44e820e115de9c537e2a54a6 Certificate serial: 019B25518AF006CFF28727D411957500295A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qag61DyItM5E6CDhFd6cU34qVKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.mft Manifest number: 0A1C Signing time: Tue 16 Dec 2025 04:00:59 +0000 Manifest this update: Tue 16 Dec 2025 04:00:59 +0000 Manifest next update: Wed 17 Dec 2025 04:00:59 +0000 Files and hashes: 1: 3JUWGQsOPBFoC4I-OGs1qaLU-CQ.roa (hash: HAn/ErTzS/Zebt/yY2233fhmAXGMbizcG23F8CM++/Q=) 2: qag61DyItM5E6CDhFd6cU34qVKY.crl (hash: OGLfpFFcO3mWmQQx3qStM4v5Qa6bdz5SakrxFy346xI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.crl rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.mft rsync://rpki.ripe.net/repository/DEFAULT/qag61DyItM5E6CDhFd6cU34qVKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:51:8a:f0:06:cf:f2:87:27:d4:11:95:75:00:29:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9a83ad43c88b4ce44e820e115de9c537e2a54a6 Validity Not Before: Dec 16 04:00:59 2025 GMT Not After : Dec 17 04:00:59 2025 GMT Subject: CN=7ca7b1db485e8a09ce374e52b6fc65f51284f5f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:07:53:07:71:ab:f4:f8:c3:4a:4f:d7:50:6f: f6:c1:ad:84:11:0a:56:91:af:01:4d:19:a7:15:3d: 23:3c:4a:53:22:55:1b:bc:3c:db:3d:d8:b0:f1:12: 90:a3:08:ee:41:06:05:21:d0:d6:1a:08:52:7a:81: 9d:a3:5b:b5:15:c4:2c:49:d7:83:62:01:82:87:56: 27:04:f0:5c:15:ab:71:29:e1:e2:75:02:d1:56:99: 05:14:a2:90:cb:6d:77:fb:90:c3:b4:8c:39:ae:bc: e3:18:8d:9a:c2:91:95:f6:ce:c9:22:b5:e4:17:44: 9f:fc:e8:47:4a:fd:33:82:59:f5:8a:1b:e2:3c:11: 22:ee:0b:73:ca:2f:3b:f7:70:72:36:4b:03:96:f5: ec:7c:21:f4:b5:43:8e:49:ef:69:fd:cc:08:50:fb: 8f:b4:c7:6b:58:46:d4:d2:3b:23:ed:d7:04:c3:9e: e0:87:1d:d4:6f:1f:cd:99:0a:dc:5f:66:8b:1b:85: 51:d2:25:0d:1d:7d:a4:a9:ff:73:25:f2:61:3c:ae: 6d:d9:e8:db:10:56:49:bb:2d:a9:e5:bb:47:da:e7: 54:80:90:56:9b:f3:5d:dc:97:20:8d:98:51:58:99: 2e:fb:ee:a4:ab:d2:34:5c:06:fd:0f:bd:ed:f7:48: b5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A7:B1:DB:48:5E:8A:09:CE:37:4E:52:B6:FC:65:F5:12:84:F5:F7 X509v3 Authority Key Identifier: keyid:A9:A8:3A:D4:3C:88:B4:CE:44:E8:20:E1:15:DE:9C:53:7E:2A:54:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qag61DyItM5E6CDhFd6cU34qVKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:03:c8:86:3f:74:60:5d:93:96:77:95:13:99:c3:c0:82:1d: 62:b3:1e:e8:51:b4:82:d0:03:98:de:06:86:97:db:30:1a:bc: d1:94:b6:88:26:29:e9:35:d2:c9:ef:a2:49:15:4b:9a:8b:a4: 17:24:a8:f0:91:7b:7a:2c:bf:5f:16:6c:02:db:2f:f8:c5:d8: 24:90:94:0d:95:a4:ce:ad:7a:ce:fb:1e:85:94:96:d6:03:fb: 4e:fd:4d:c8:c4:11:0a:8d:d1:89:46:a3:94:c8:4a:8a:06:71: f6:9c:a6:82:7e:57:fa:1c:96:8c:95:84:1f:5e:9f:b0:bb:48: 41:62:bf:a1:a3:ce:92:03:c6:95:79:e0:a7:65:49:10:6a:29: a9:6f:05:46:5b:ad:91:77:89:8c:e1:7f:06:47:9c:35:8d:cd: b1:61:5c:27:48:63:13:fa:b5:d6:00:73:ec:ee:69:9a:7f:55: fb:d8:05:22:b4:6a:c0:42:7f:af:39:cc:7c:c2:19:64:f8:59: 1e:f9:c9:b7:7f:b3:3a:5e:23:44:d9:9b:64:bf:9e:13:74:21: 21:d2:94:8b:6d:1d:8c:25:5b:92:f9:2c:40:b4:fd:29:bc:bd: 3c:d8:01:cf:b2:c7:57:1f:e0:16:34:f2:1b:be:12:5b:09:9f: b2:7b:9d:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUYrwBs/yhyfUEZV1AClaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5YTgzYWQ0M2M4OGI0Y2U0NGU4MjBlMTE1ZGU5YzUzN2Uy YTU0YTYwHhcNMjUxMjE2MDQwMDU5WhcNMjUxMjE3MDQwMDU5WjAzMTEwLwYDVQQD Eyg3Y2E3YjFkYjQ4NWU4YTA5Y2UzNzRlNTJiNmZjNjVmNTEyODRmNWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAdTB3Gr9PjDSk/XUG/2wa2EEQpW ka8BTRmnFT0jPEpTIlUbvDzbPdiw8RKQowjuQQYFIdDWGghSeoGdo1u1FcQsSdeD YgGCh1YnBPBcFatxKeHidQLRVpkFFKKQy213+5DDtIw5rrzjGI2awpGV9s7JIrXk F0Sf/OhHSv0zgln1ihviPBEi7gtzyi8793ByNksDlvXsfCH0tUOOSe9p/cwIUPuP tMdrWEbU0jsj7dcEw57ghx3Ubx/NmQrcX2aLG4VR0iUNHX2kqf9zJfJhPK5t2ejb EFZJuy2p5btH2udUgJBWm/Nd3JcgjZhRWJku++6kq9I0XAb9D73t90i1oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHynsdtIXooJzjdOUrb8ZfUShPX3MB8GA1UdIwQY MBaAFKmoOtQ8iLTOROgg4RXenFN+KlSmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWFnNjFEeUl0TTVFNkNEaEZkNmNVMzRxVktZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9lYWY0M2EtMWYxMS00OGM4LTljODAt MThiZTVmNDY0ZWQ2LzEvcWFnNjFEeUl0TTVFNkNEaEZkNmNVMzRxVktZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My9lYWY0M2EtMWYxMS00OGM4LTljODAtMThiZTVmNDY0ZWQ2 LzEvcWFnNjFEeUl0TTVFNkNEaEZkNmNVMzRxVktZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAgPIhj90 YF2TlneVE5nDwIIdYrMe6FG0gtADmN4GhpfbMBq80ZS2iCYp6TXSye+iSRVLmouk FySo8JF7eiy/XxZsAtsv+MXYJJCUDZWkzq16zvsehZSW1gP7Tv1NyMQRCo3RiUaj lMhKigZx9pymgn5X+hyWjJWEH16fsLtIQWK/oaPOkgPGlXngp2VJEGopqW8FRlut kXeJjOF/BkecNY3NsWFcJ0hjE/q11gBz7O5pmn9V+9gFIrRqwEJ/rznMfMIZZPhZ HvnJt3+zOl4jRNmbZL+eE3QhIdKUi20djCVbkvksQLT9Kby9PNgBz7LHVx/gFjTy G74SWwmfsnudwA== -----END CERTIFICATE-----Generated at Tue Dec 16 07:01:26 2025 by rpki-client