This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft File: qBGiyfyN6WebsVhYGxDOrukf95E.mft (raw, json) Hash identifier: lkS7TikwkXeUueBxVj4P6Supe8NOjZYDTX5+vYkuwC8= Subject key identifier: 95:EA:E9:B0:C5:E3:89:6C:22:DE:DA:EC:A4:35:98:4C:3B:64:B7:AC Authority key identifier: A8:11:A2:C9:FC:8D:E9:67:9B:B1:58:58:1B:10:CE:AE:E9:1F:F7:91 Certificate issuer: /CN=a811a2c9fc8de9679bb158581b10ceaee91ff791 Certificate serial: 019B2B1E10976C1830A2078549286B488C36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft Manifest number: 178F Signing time: Wed 17 Dec 2025 07:02:29 +0000 Manifest this update: Wed 17 Dec 2025 07:02:29 +0000 Manifest next update: Thu 18 Dec 2025 07:02:29 +0000 Files and hashes: 1: PPeyKFftPaiVCXNYTK3ZP37-8BI.roa (hash: 1x8aYa43ug+3XZe9x+qmxKaVKmQGYXXQ926Bpo3NKhs=) 2: qBGiyfyN6WebsVhYGxDOrukf95E.crl (hash: 4SQ6Np5krFKyjQSaOst0tZcVbzu3DY8m9IG/eHDZruo=) 3: r7_wV3dzjpVPhKRXt9LOL6uFNoM.roa (hash: eXGrZnOiRM2nkPOyWX+HuDqKFlwEgjMo/lqsZKhSHKs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.crl rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1e:10:97:6c:18:30:a2:07:85:49:28:6b:48:8c:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a811a2c9fc8de9679bb158581b10ceaee91ff791 Validity Not Before: Dec 17 07:02:29 2025 GMT Not After : Dec 18 07:02:29 2025 GMT Subject: CN=95eae9b0c5e3896c22dedaeca435984c3b64b7ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:74:1e:e2:66:55:62:ac:95:01:70:3a:72:9e: fe:d7:56:25:36:a7:9b:dd:fc:66:3b:77:2e:be:12: 06:a7:1c:2d:2f:b5:3b:35:e6:ed:f5:78:63:72:bc: 33:b3:ff:e0:cf:3d:d4:50:d9:0b:36:21:62:32:21: 76:3f:95:ea:9f:cb:03:6b:51:36:6f:4c:e0:9c:ff: 8f:a2:e7:6c:23:64:e7:84:d9:85:b8:06:e8:7e:f4: e8:60:f3:2c:32:29:0c:96:13:17:d5:df:91:64:e2: 35:0a:cd:1f:03:0a:d0:75:d2:07:85:7d:be:cd:4e: 12:b8:c5:52:3f:04:95:76:01:29:24:19:f1:0f:17: ce:be:14:68:a2:89:f6:13:e4:d1:30:ac:54:94:40: 8e:63:e8:6b:e9:a3:6e:c0:10:2b:50:dc:da:50:39: 23:ad:d9:8f:ae:4a:bc:55:57:38:1b:c3:20:7c:38: 05:de:a1:4d:8d:8e:85:fa:f7:7c:c2:3e:20:18:f3: b7:c5:3c:ae:9a:67:fb:0f:6d:17:32:18:5a:39:12: 91:9b:02:5d:da:84:ce:f8:e1:5f:17:61:2b:b4:65: aa:bd:e6:b6:14:67:cf:f3:fc:97:be:92:e6:e1:76: 21:b8:4c:94:dd:8f:4f:45:1f:29:09:4f:44:f0:4d: 72:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:EA:E9:B0:C5:E3:89:6C:22:DE:DA:EC:A4:35:98:4C:3B:64:B7:AC X509v3 Authority Key Identifier: keyid:A8:11:A2:C9:FC:8D:E9:67:9B:B1:58:58:1B:10:CE:AE:E9:1F:F7:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:f3:97:f4:70:2e:18:cd:ee:14:a7:12:db:b4:e6:5d:36:4c: fe:82:75:eb:a8:c8:a6:57:30:d7:03:41:75:1d:46:71:5e:33: 7d:3c:a7:fe:ae:11:6d:15:8c:dc:9d:af:14:99:20:06:9d:0d: 1a:68:a3:77:8d:76:78:7d:9a:11:a9:29:d7:14:8e:b9:fc:83: 6b:3e:15:61:c4:d6:0e:82:92:9c:bb:0a:0c:d3:9a:e7:19:d8: 22:71:2c:da:b3:25:69:68:f8:f8:4f:77:cc:54:72:6c:7d:df: 6d:38:c5:d0:d6:14:a2:f9:d8:b3:f8:c6:c4:ba:cc:f2:b1:65: 36:12:20:79:83:37:dd:a5:83:9d:91:44:b7:38:76:0a:83:1b: 60:71:6d:78:4e:72:50:b8:12:7e:59:1f:ad:c4:82:25:9b:75: eb:da:04:42:18:3c:13:32:9a:45:9c:fa:91:16:b1:55:8a:13: fa:45:14:47:81:d7:17:75:4a:45:e5:f3:f0:58:ee:7f:53:d8: 34:9f:11:77:8b:e6:19:fc:e9:9e:8f:01:1d:19:2c:9a:5c:d5: 60:f5:38:a4:8a:3b:fd:32:32:2b:6f:e2:ed:76:d5:70:b0:36: 8d:62:4b:05:83:63:45:04:a9:dd:d2:13:1f:86:3c:91:c6:8b: 94:3c:2b:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHhCXbBgwogeFSShrSIw2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MTFhMmM5ZmM4ZGU5Njc5YmIxNTg1ODFiMTBjZWFlZTkx ZmY3OTEwHhcNMjUxMjE3MDcwMjI5WhcNMjUxMjE4MDcwMjI5WjAzMTEwLwYDVQQD Eyg5NWVhZTliMGM1ZTM4OTZjMjJkZWRhZWNhNDM1OTg0YzNiNjRiN2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nQe4mZVYqyVAXA6cp7+11YlNqeb 3fxmO3cuvhIGpxwtL7U7Nebt9Xhjcrwzs//gzz3UUNkLNiFiMiF2P5Xqn8sDa1E2 b0zgnP+PoudsI2TnhNmFuAbofvToYPMsMikMlhMX1d+RZOI1Cs0fAwrQddIHhX2+ zU4SuMVSPwSVdgEpJBnxDxfOvhRooon2E+TRMKxUlECOY+hr6aNuwBArUNzaUDkj rdmPrkq8VVc4G8MgfDgF3qFNjY6F+vd8wj4gGPO3xTyummf7D20XMhhaORKRmwJd 2oTO+OFfF2ErtGWqvea2FGfP8/yXvpLm4XYhuEyU3Y9PRR8pCU9E8E1yWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJXq6bDF44lsIt7a7KQ1mEw7ZLesMB8GA1UdIwQY MBaAFKgRosn8jelnm7FYWBsQzq7pH/eRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUJHaXlmeU42V2Vic1ZoWUd4RE9ydWtmOTVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8xZGVjYjMtMTU5My00NWRiLWFmNTYt MGNjNGMwMDAwODU4LzEvcUJHaXlmeU42V2Vic1ZoWUd4RE9ydWtmOTVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS8xZGVjYjMtMTU5My00NWRiLWFmNTYtMGNjNGMwMDAwODU4 LzEvcUJHaXlmeU42V2Vic1ZoWUd4RE9ydWtmOTVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlvOX9HAu GM3uFKcS27TmXTZM/oJ166jIplcw1wNBdR1GcV4zfTyn/q4RbRWM3J2vFJkgBp0N Gmijd412eH2aEakp1xSOufyDaz4VYcTWDoKSnLsKDNOa5xnYInEs2rMlaWj4+E93 zFRybH3fbTjF0NYUovnYs/jGxLrM8rFlNhIgeYM33aWDnZFEtzh2CoMbYHFteE5y ULgSflkfrcSCJZt169oEQhg8EzKaRZz6kRaxVYoT+kUUR4HXF3VKReXz8Fjuf1PY NJ8Rd4vmGfzpno8BHRksmlzVYPU4pIo7/TIyK2/i7XbVcLA2jWJLBYNjRQSp3dIT H4Y8kcaLlDwreA== -----END CERTIFICATE-----Generated at Wed Dec 17 13:45:15 2025 by rpki-client