This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft File: qIrVRvGg74z3XJKnSL1chjYuIJs.mft (raw, json) Hash identifier: GrX4HGXwGT5itH2ZhW+TrfR07AqeTfwOqvkilVYVqnk= Subject key identifier: 31:A9:2F:CD:38:55:08:E4:00:CF:A2:B0:63:34:E3:51:71:48:9D:41 Authority key identifier: A8:8A:D5:46:F1:A0:EF:8C:F7:5C:92:A7:48:BD:5C:86:36:2E:20:9B Certificate issuer: /CN=a88ad546f1a0ef8cf75c92a748bd5c86362e209b Certificate serial: 019AF2ADCE28B475800AA72C2E76F69BE5CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft Manifest number: 110E Signing time: Sat 06 Dec 2025 08:01:08 +0000 Manifest this update: Sat 06 Dec 2025 08:01:08 +0000 Manifest next update: Sun 07 Dec 2025 08:01:08 +0000 Files and hashes: 1: Y18PuvKbRb3I33NFZERrmAggZBw.roa (hash: ulNop87p1OPj11wBSOeR/0XOStdPoDj14N+Cgskicec=) 2: qIrVRvGg74z3XJKnSL1chjYuIJs.crl (hash: f/KJYcjjYkbjYWQSrODH0fcJ5iohtPEVaWY+tHK9h4U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.crl rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:ce:28:b4:75:80:0a:a7:2c:2e:76:f6:9b:e5:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a88ad546f1a0ef8cf75c92a748bd5c86362e209b Validity Not Before: Dec 6 08:01:08 2025 GMT Not After : Dec 7 08:01:08 2025 GMT Subject: CN=31a92fcd385508e400cfa2b06334e35171489d41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:27:42:7e:d5:9d:b6:aa:a4:25:fe:63:b3:b8: 9a:b3:fc:3e:38:37:f9:2a:ff:5c:a0:1f:ce:5c:bd: 46:7c:f8:ab:1b:98:18:c9:c4:24:bf:19:7d:f8:a6: c2:fe:84:8b:4a:da:1f:52:c1:8e:9a:6d:ab:ae:84: fc:23:ef:c0:6f:5f:a1:35:8a:3a:1c:46:73:5b:10: ed:97:f3:84:3c:a7:e3:07:df:65:d0:1c:6d:7d:c7: 69:c6:83:d3:21:5f:9a:1e:5e:1c:04:31:be:d4:6e: 81:02:f7:02:3c:f4:32:6b:c2:f6:23:2d:3d:f2:1e: d7:07:80:fd:d1:0a:0b:33:bb:7c:e1:67:f0:ed:2c: 82:77:77:6e:a6:f2:d6:04:b6:1f:97:02:f0:45:53: 6f:59:37:c8:97:97:90:8a:bc:87:e2:54:54:7a:a9: ed:76:0d:a1:71:76:bf:99:f8:37:91:16:84:6a:cc: bf:68:0d:7a:dd:b3:3f:d5:6b:48:23:bd:28:ee:c6: 2c:f1:a2:e9:65:03:12:c3:6d:ec:ce:80:21:b3:1a: fa:8c:ed:3c:d9:ae:6f:56:91:83:67:a0:0b:7e:37: ef:80:16:44:23:f1:f5:af:4a:54:c0:0e:b8:db:b9: f5:9d:8d:fa:1c:14:ba:05:ad:d1:02:0c:2c:77:fd: ad:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A9:2F:CD:38:55:08:E4:00:CF:A2:B0:63:34:E3:51:71:48:9D:41 X509v3 Authority Key Identifier: keyid:A8:8A:D5:46:F1:A0:EF:8C:F7:5C:92:A7:48:BD:5C:86:36:2E:20:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:b0:44:7e:71:93:db:28:2a:b2:a2:5f:9f:f3:5d:5a:53:30: 7a:96:ee:c8:be:21:1b:51:fd:dd:95:fb:ff:6e:5a:45:5a:d6: 34:5a:21:51:0d:27:6a:a8:37:94:93:3f:30:6b:f3:3a:33:d0: 6c:9c:e1:c4:46:c2:e0:93:f2:72:95:be:78:59:11:2c:1a:d7: 6d:b2:d6:93:04:72:29:6a:4b:42:3a:fd:ef:5d:b7:d4:73:c1: 46:1a:b4:61:23:08:b5:e5:d4:f7:2d:74:b3:7f:90:f3:8f:d9: cc:28:26:89:34:ed:35:1c:b9:7d:1d:2c:7e:b8:83:1a:2d:51: 42:ec:15:a4:7a:ee:07:13:f5:1e:95:db:98:d3:d1:83:48:b0: 50:c2:f0:99:cf:bb:ba:91:22:23:d0:3c:9d:1e:4b:48:bc:38: 82:d8:43:50:0d:24:71:f5:09:6f:1a:d8:9c:03:1b:39:89:21: 38:b8:49:00:d6:2d:b2:ad:8f:67:6c:f8:d0:11:a9:4c:bd:b7: 23:fd:fd:69:17:aa:0f:40:8b:5a:fb:55:dd:2b:f4:a6:63:df: 6c:23:35:cb:2b:b3:c5:1b:dd:07:c4:64:04:2f:24:a4:03:2e: 75:5e:bb:79:99:31:d4:7f:00:26:85:09:4d:04:0d:07:7a:c5: 1f:f1:7c:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrc4otHWACqcsLnb2m+XMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4OGFkNTQ2ZjFhMGVmOGNmNzVjOTJhNzQ4YmQ1Yzg2MzYy ZTIwOWIwHhcNMjUxMjA2MDgwMTA4WhcNMjUxMjA3MDgwMTA4WjAzMTEwLwYDVQQD EygzMWE5MmZjZDM4NTUwOGU0MDBjZmEyYjA2MzM0ZTM1MTcxNDg5ZDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSdCftWdtqqkJf5js7ias/w+ODf5 Kv9coB/OXL1GfPirG5gYycQkvxl9+KbC/oSLStofUsGOmm2rroT8I+/Ab1+hNYo6 HEZzWxDtl/OEPKfjB99l0BxtfcdpxoPTIV+aHl4cBDG+1G6BAvcCPPQya8L2Iy09 8h7XB4D90QoLM7t84Wfw7SyCd3dupvLWBLYflwLwRVNvWTfIl5eQiryH4lRUeqnt dg2hcXa/mfg3kRaEasy/aA163bM/1WtII70o7sYs8aLpZQMSw23szoAhsxr6jO08 2a5vVpGDZ6ALfjfvgBZEI/H1r0pUwA6427n1nY36HBS6Ba3RAgwsd/2tuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDGpL804VQjkAM+isGM041FxSJ1BMB8GA1UdIwQY MBaAFKiK1UbxoO+M91ySp0i9XIY2LiCbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUlyVlJ2R2c3NHozWEpLblNMMWNoall1SUpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS81MDBhOGMtNmEyZC00MzRiLTk2ZjEt MThlYjc3OWE2NDk3LzEvcUlyVlJ2R2c3NHozWEpLblNMMWNoall1SUpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS81MDBhOGMtNmEyZC00MzRiLTk2ZjEtMThlYjc3OWE2NDk3 LzEvcUlyVlJ2R2c3NHozWEpLblNMMWNoall1SUpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1LBEfnGT 2ygqsqJfn/NdWlMwepbuyL4hG1H93ZX7/25aRVrWNFohUQ0naqg3lJM/MGvzOjPQ bJzhxEbC4JPycpW+eFkRLBrXbbLWkwRyKWpLQjr971231HPBRhq0YSMIteXU9y10 s3+Q84/ZzCgmiTTtNRy5fR0sfriDGi1RQuwVpHruBxP1HpXbmNPRg0iwUMLwmc+7 upEiI9A8nR5LSLw4gthDUA0kcfUJbxrYnAMbOYkhOLhJANYtsq2PZ2z40BGpTL23 I/39aReqD0CLWvtV3Sv0pmPfbCM1yyuzxRvdB8RkBC8kpAMudV67eZkx1H8AJoUJ TQQNB3rFH/F8HA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:20:20 2025 by rpki-client