This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft File: qQ35UgJATbHy5A7D3n7sON1qn-4.mft (raw, json) Hash identifier: ceM936IrcsKjTr3/2VJaviTSsvsmL53F9ilA9lSb8IU= Subject key identifier: B4:65:C6:32:93:21:1F:09:44:56:44:59:1A:DC:F0:06:49:99:C7:0B Authority key identifier: A9:0D:F9:52:02:40:4D:B1:F2:E4:0E:C3:DE:7E:EC:38:DD:6A:9F:EE Certificate issuer: /CN=a90df95202404db1f2e40ec3de7eec38dd6a9fee Certificate serial: 019AF5406DECC7C0AF96F25407DE438761B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ35UgJATbHy5A7D3n7sON1qn-4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft Manifest number: 02F8 Signing time: Sat 06 Dec 2025 20:00:31 +0000 Manifest this update: Sat 06 Dec 2025 20:00:31 +0000 Manifest next update: Sun 07 Dec 2025 20:00:31 +0000 Files and hashes: 1: qQ35UgJATbHy5A7D3n7sON1qn-4.crl (hash: FFgj1xHT2A5njit8tVF8rFfRa5Uq/iyVE6i/dEryZJk=) 2: xDaTSU1r08U3icbYzh9eT36EBN4.roa (hash: AXlgpTaBb24aHDSoXt8sy77THaBujLte6mCP+q3Zt1Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.crl rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft rsync://rpki.ripe.net/repository/DEFAULT/qQ35UgJATbHy5A7D3n7sON1qn-4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:6d:ec:c7:c0:af:96:f2:54:07:de:43:87:61:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a90df95202404db1f2e40ec3de7eec38dd6a9fee Validity Not Before: Dec 6 20:00:31 2025 GMT Not After : Dec 7 20:00:31 2025 GMT Subject: CN=b465c63293211f09445644591adcf0064999c70b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:73:35:6c:ea:13:0e:49:70:fe:0b:4f:29:f3: 4e:b3:86:5b:28:76:77:f7:8a:a5:52:78:5e:77:73: 3a:eb:b4:42:c3:f2:9f:e8:88:e2:08:57:72:53:e1: 08:ef:e7:e5:ee:f4:86:6a:f2:ef:66:e4:3e:a6:13: 26:89:6b:5f:21:a2:6e:cc:83:4b:15:e3:ef:68:35: 6b:2f:67:4d:0c:8f:5b:ca:8a:62:0b:c2:3d:e7:26: 3b:94:a9:b0:95:6f:eb:af:f6:69:34:19:3f:6b:c1: f8:0c:d7:d0:8b:0c:4b:1a:48:98:64:50:8c:4b:25: b1:15:6e:b2:83:ed:04:98:da:26:b2:db:e5:bf:39: 64:69:36:27:42:14:ca:e9:56:e1:03:36:80:37:b4: 8a:07:63:76:8d:89:22:4e:23:27:60:84:a3:e9:8b: b5:7c:d7:01:65:fb:38:ea:bb:8e:6b:32:07:fc:9e: be:18:7a:55:df:7f:8f:d9:4c:d3:4b:c3:b5:d8:58: 12:f8:c1:7d:cc:8d:28:30:0f:5b:48:21:90:98:87: 85:75:c5:65:eb:ca:38:3b:0c:a7:2d:aa:09:97:c6: 7b:8f:b2:3c:13:d7:35:b8:25:90:7c:d8:74:c8:d6: 6c:1c:8b:59:9f:9e:d0:cd:23:02:3f:10:ef:5e:a1: 24:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:65:C6:32:93:21:1F:09:44:56:44:59:1A:DC:F0:06:49:99:C7:0B X509v3 Authority Key Identifier: keyid:A9:0D:F9:52:02:40:4D:B1:F2:E4:0E:C3:DE:7E:EC:38:DD:6A:9F:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ35UgJATbHy5A7D3n7sON1qn-4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:6a:7d:27:06:66:9d:d3:be:d1:43:dc:9d:2c:dd:a0:bf:b0: c0:6a:b8:e0:9d:9d:82:c2:13:58:dd:0b:ce:36:30:7b:02:80: 42:76:65:04:eb:2f:cc:18:be:5f:ce:21:52:d4:e2:b4:b5:58: 49:f3:2e:35:9a:d1:e7:d5:79:11:cb:c8:37:be:be:00:aa:5c: 8e:94:d7:c9:f5:39:1b:35:d6:0f:e5:22:92:c9:44:6d:79:52: af:58:a7:96:b2:5b:87:7b:56:13:b2:b0:de:22:bf:d2:13:50: 36:02:a5:2d:ec:c9:9f:3d:0c:7b:6c:fc:a0:32:db:4d:2a:23: 33:bc:f1:da:58:b4:0e:18:31:e2:d6:35:e9:84:6b:41:cd:6f: da:40:14:ea:42:c2:cf:66:d9:57:5c:36:2b:70:b5:55:22:4d: 3e:fd:b3:2d:94:2b:ed:69:b5:d8:8e:91:29:83:d5:73:8a:cb: de:88:70:36:a4:b4:de:8c:fa:50:1b:e7:d9:6c:e8:8e:54:74: 4f:f7:21:f1:12:16:e7:f5:11:c0:ca:2c:e0:57:27:af:91:1b: ef:72:fc:ab:66:fb:c8:2c:91:80:62:5f:a1:c7:06:40:d5:a0: c7:44:66:f8:b8:d8:24:d6:c7:ed:0a:79:61:05:6b:92:54:3a: fa:da:6d:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QG3sx8CvlvJUB95Dh2G4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MGRmOTUyMDI0MDRkYjFmMmU0MGVjM2RlN2VlYzM4ZGQ2 YTlmZWUwHhcNMjUxMjA2MjAwMDMxWhcNMjUxMjA3MjAwMDMxWjAzMTEwLwYDVQQD EyhiNDY1YzYzMjkzMjExZjA5NDQ1NjQ0NTkxYWRjZjAwNjQ5OTljNzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nM1bOoTDklw/gtPKfNOs4ZbKHZ3 94qlUnhed3M667RCw/Kf6IjiCFdyU+EI7+fl7vSGavLvZuQ+phMmiWtfIaJuzINL FePvaDVrL2dNDI9byopiC8I95yY7lKmwlW/rr/ZpNBk/a8H4DNfQiwxLGkiYZFCM SyWxFW6yg+0EmNomstvlvzlkaTYnQhTK6VbhAzaAN7SKB2N2jYkiTiMnYISj6Yu1 fNcBZfs46ruOazIH/J6+GHpV33+P2UzTS8O12FgS+MF9zI0oMA9bSCGQmIeFdcVl 68o4OwynLaoJl8Z7j7I8E9c1uCWQfNh0yNZsHItZn57QzSMCPxDvXqEkXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLRlxjKTIR8JRFZEWRrc8AZJmccLMB8GA1UdIwQY MBaAFKkN+VICQE2x8uQOw95+7Djdap/uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVEzNVVnSkFUYkh5NUE3RDNuN3NPTjFxbi00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kOGUzMjAtYTU1NS00MDFhLTgwZmYt YmY3MzFmZTk5ZDNhLzEvcVEzNVVnSkFUYkh5NUE3RDNuN3NPTjFxbi00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9kOGUzMjAtYTU1NS00MDFhLTgwZmYtYmY3MzFmZTk5ZDNh LzEvcVEzNVVnSkFUYkh5NUE3RDNuN3NPTjFxbi00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmGp9JwZm ndO+0UPcnSzdoL+wwGq44J2dgsITWN0LzjYwewKAQnZlBOsvzBi+X84hUtTitLVY SfMuNZrR59V5EcvIN76+AKpcjpTXyfU5GzXWD+UikslEbXlSr1inlrJbh3tWE7Kw 3iK/0hNQNgKlLezJnz0Me2z8oDLbTSojM7zx2li0Dhgx4tY16YRrQc1v2kAU6kLC z2bZV1w2K3C1VSJNPv2zLZQr7Wm12I6RKYPVc4rL3ohwNqS03oz6UBvn2WzojlR0 T/ch8RIW5/URwMos4Fcnr5Eb73L8q2b7yCyRgGJfoccGQNWgx0Rm+LjYJNbH7Qp5 YQVrklQ6+tpt9A== -----END CERTIFICATE-----Generated at Sun Dec 7 02:18:28 2025 by rpki-client