This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft File: Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft (raw, json) Hash identifier: Bxujds1Sc68oJDcUQ2NFwSX2l+BsLb1s703PjahhMfk= Subject key identifier: 92:29:FE:28:14:03:0E:F7:0E:09:91:47:52:53:A9:AD:A4:E3:84:2D Authority key identifier: 43:2E:FE:16:EC:6C:00:FD:45:B5:D9:18:D9:B1:72:AC:D0:A5:8D:96 Certificate issuer: /CN=432efe16ec6c00fd45b5d918d9b172acd0a58d96 Certificate serial: 019AF2091AA44D90183686C8994C692AD93A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft Manifest number: 11E6 Signing time: Sat 06 Dec 2025 05:01:14 +0000 Manifest this update: Sat 06 Dec 2025 05:01:14 +0000 Manifest next update: Sun 07 Dec 2025 05:01:14 +0000 Files and hashes: 1: Qy7-FuxsAP1FtdkY2bFyrNCljZY.crl (hash: aoFKbDdRmVeuMhdhHDqEIV/c0vU6OAgijBcvK33uJLU=) 2: TrfKChON90CRCXVKGdWD_lFGLCU.roa (hash: GFMm+kc1nJBxOyEj3z/q6lfVZK3yETv8yRHloXoAgN8=) 3: TyDlQY0--7dqqa7hSxcdPHHA3k8.roa (hash: FDPgCRRVSr9ns/UDWv1/DVuyWSkU4YS2bgao5MAg8Wk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft rsync://rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:1a:a4:4d:90:18:36:86:c8:99:4c:69:2a:d9:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=432efe16ec6c00fd45b5d918d9b172acd0a58d96 Validity Not Before: Dec 6 05:01:14 2025 GMT Not After : Dec 7 05:01:14 2025 GMT Subject: CN=9229fe2814030ef70e0991475253a9ada4e3842d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b8:37:fe:e3:69:c9:82:ab:89:b9:7b:22:85: bd:4f:db:62:51:2a:b0:10:56:cf:a1:0f:bd:e7:c3: fa:76:78:28:af:d9:ab:a7:9d:16:02:08:88:0c:2a: 16:a1:a1:eb:8a:96:37:52:19:67:30:39:61:79:98: e6:5c:5d:a8:96:29:82:8f:b1:5e:46:37:b5:ee:d2: ec:54:f6:2b:71:0c:62:9c:e5:10:b3:d8:07:0d:d2: 72:1e:0e:80:ac:7f:fa:f6:07:10:23:ff:33:20:1a: a7:4b:d7:a2:20:d5:98:ac:bc:66:c3:dd:5d:00:19: 38:2a:fa:5e:ef:83:0c:46:25:41:75:01:2a:16:8a: be:0f:7d:50:31:53:f5:26:09:55:64:25:73:86:2f: ed:b7:38:13:e5:6f:8a:64:d4:bc:fa:8b:2b:1a:ee: 53:2e:56:76:44:0d:dd:90:24:57:cc:cc:5b:2b:82: d7:d4:b5:fe:88:97:14:89:f3:95:4f:5c:c3:e0:b4: 29:98:f4:be:49:6d:ba:a0:c9:31:fd:3d:1a:d1:e7: 14:2b:ca:7b:60:ab:d4:7a:d7:13:c4:e6:ac:5b:6d: 82:84:46:f9:72:83:a5:f1:97:84:66:24:0c:39:8c: 66:f3:1c:a0:e0:70:aa:9a:cc:a9:54:a4:de:af:69: 75:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:29:FE:28:14:03:0E:F7:0E:09:91:47:52:53:A9:AD:A4:E3:84:2D X509v3 Authority Key Identifier: keyid:43:2E:FE:16:EC:6C:00:FD:45:B5:D9:18:D9:B1:72:AC:D0:A5:8D:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:8f:12:70:53:cc:8e:5e:65:3a:b4:d7:b6:68:be:45:3f:ed: 63:00:37:5b:17:d6:64:4f:c1:09:29:c4:51:36:c4:28:13:5e: b2:87:c9:f7:ab:a2:5e:13:3a:76:a9:ce:a0:fe:94:ac:32:14: 3e:af:7d:da:86:24:a1:95:c2:7b:56:07:c1:41:8f:bc:09:a6: 7b:e3:af:9b:53:89:e3:ba:06:60:1d:1f:64:a8:ab:92:44:85: 2c:ea:0c:91:5f:0c:6e:cd:8b:ec:1c:09:04:3e:ee:84:aa:a8: 49:62:68:cd:5b:10:ec:4e:32:5e:6f:71:43:94:18:61:32:9a: bf:38:85:3b:30:88:16:64:98:50:02:c2:5b:2a:27:7a:62:cc: 01:d3:33:51:b6:5b:af:54:db:1f:57:c4:74:3a:d5:81:ae:f2: b8:16:b3:6b:d2:a3:da:e7:f7:b8:f0:12:d9:0e:01:9f:29:49: 0e:24:e1:8e:c1:9a:17:42:f1:f4:21:07:88:56:a2:ce:0e:7e: a2:35:df:28:b7:89:ac:18:0d:6d:cb:2a:d7:de:05:30:cf:48: d9:46:34:08:2f:6f:70:5e:19:4b:f3:59:37:fa:84:38:13:48: 75:cd:d6:64:1d:19:e7:f0:7e:64:75:b8:d8:51:2a:44:11:c6: 04:9c:c5:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCRqkTZAYNobImUxpKtk6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMmVmZTE2ZWM2YzAwZmQ0NWI1ZDkxOGQ5YjE3MmFjZDBh NThkOTYwHhcNMjUxMjA2MDUwMTE0WhcNMjUxMjA3MDUwMTE0WjAzMTEwLwYDVQQD Eyg5MjI5ZmUyODE0MDMwZWY3MGUwOTkxNDc1MjUzYTlhZGE0ZTM4NDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7g3/uNpyYKribl7IoW9T9tiUSqw EFbPoQ+958P6dngor9mrp50WAgiIDCoWoaHripY3UhlnMDlheZjmXF2olimCj7Fe Rje17tLsVPYrcQxinOUQs9gHDdJyHg6ArH/69gcQI/8zIBqnS9eiINWYrLxmw91d ABk4Kvpe74MMRiVBdQEqFoq+D31QMVP1JglVZCVzhi/ttzgT5W+KZNS8+osrGu5T LlZ2RA3dkCRXzMxbK4LX1LX+iJcUifOVT1zD4LQpmPS+SW26oMkx/T0a0ecUK8p7 YKvUetcTxOasW22ChEb5coOl8ZeEZiQMOYxm8xyg4HCqmsypVKTer2l1fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJIp/igUAw73DgmRR1JTqa2k44QtMB8GA1UdIwQY MBaAFEMu/hbsbAD9RbXZGNmxcqzQpY2WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXk3LUZ1eHNBUDFGdGRrWTJiRnlyTkNsalpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8yNWI0N2UtNDA3OS00ZjIxLTkxMWIt ZjM4OWE1MjY5ZmIyLzEvUXk3LUZ1eHNBUDFGdGRrWTJiRnlyTkNsalpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy8yNWI0N2UtNDA3OS00ZjIxLTkxMWItZjM4OWE1MjY5ZmIy LzEvUXk3LUZ1eHNBUDFGdGRrWTJiRnlyTkNsalpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg48ScFPM jl5lOrTXtmi+RT/tYwA3WxfWZE/BCSnEUTbEKBNesofJ96uiXhM6dqnOoP6UrDIU Pq992oYkoZXCe1YHwUGPvAmme+Ovm1OJ47oGYB0fZKirkkSFLOoMkV8Mbs2L7BwJ BD7uhKqoSWJozVsQ7E4yXm9xQ5QYYTKavziFOzCIFmSYUALCWyonemLMAdMzUbZb r1TbH1fEdDrVga7yuBaza9Kj2uf3uPAS2Q4BnylJDiThjsGaF0Lx9CEHiFaizg5+ ojXfKLeJrBgNbcsq194FMM9I2UY0CC9vcF4ZS/NZN/qEOBNIdc3WZB0Z5/B+ZHW4 2FEqRBHGBJzFEg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:57:28 2025 by rpki-client