This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft File: qmeCzXu5IspLxugOeFf0ki9cI8Q.mft (raw, json) Hash identifier: YKSJwRb5yNJ+kNmjQ4G+VLg363xxNCKhLcW1NdL2tLw= Subject key identifier: 07:1A:36:6C:2E:D2:30:53:BF:34:40:2F:0F:32:2D:A0:E3:AF:DC:BE Authority key identifier: AA:67:82:CD:7B:B9:22:CA:4B:C6:E8:0E:78:57:F4:92:2F:5C:23:C4 Certificate issuer: /CN=aa6782cd7bb922ca4bc6e80e7857f4922f5c23c4 Certificate serial: 019AF540DCFC770AE1248F4E05939038BC44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft Manifest number: 0165 Signing time: Sat 06 Dec 2025 20:00:59 +0000 Manifest this update: Sat 06 Dec 2025 20:00:59 +0000 Manifest next update: Sun 07 Dec 2025 20:00:59 +0000 Files and hashes: 1: 8Q0mj8ELLT0l3qpTNfSPe5yevws.roa (hash: 5QH/DPp/MLTxOyf+/vEAFoLpbGaLA0S+MvXcD7V2QGQ=) 2: n8grRcjYI8DzhU_PyxKKYOTlQMo.roa (hash: xgJvnRHC/iqc2iSgxKESHKwatBFYEv01jlV2QZqtIKM=) 3: qmeCzXu5IspLxugOeFf0ki9cI8Q.crl (hash: 0ZBra0AkJvLejWrDlt1NoJdw5u5TSVPdaFmXHdNqvtg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:dc:fc:77:0a:e1:24:8f:4e:05:93:90:38:bc:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa6782cd7bb922ca4bc6e80e7857f4922f5c23c4 Validity Not Before: Dec 6 20:00:59 2025 GMT Not After : Dec 7 20:00:59 2025 GMT Subject: CN=071a366c2ed23053bf34402f0f322da0e3afdcbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:92:b9:fb:32:65:0b:ee:d8:89:09:fe:ee:0c: 15:a2:4b:b2:38:82:ad:40:87:ad:17:1c:e3:3a:ef: 79:01:7c:da:1a:9d:5c:6d:bc:96:71:dc:cd:16:7c: 5b:a0:92:a1:43:c5:ed:d1:a0:0f:99:a0:df:a5:d6: bf:e6:74:f7:f5:ef:fe:ae:d6:72:4f:6a:7e:a3:eb: 48:04:dd:64:68:ed:bb:35:cd:b4:6a:0a:58:db:b9: 91:d3:e2:4a:ae:6f:51:83:1e:39:0a:c3:8b:ef:e4: f0:a3:cf:9d:21:93:b1:c9:10:08:3f:35:99:72:52: d8:2c:0e:cd:76:40:12:61:c2:e6:e1:5b:5f:ea:d6: 5e:f7:85:35:5b:4b:4b:18:06:a1:4a:e7:6a:66:37: 75:65:0a:b9:47:e5:45:1c:97:cc:26:9f:4a:97:d9: 5a:13:0d:f3:c8:60:ed:ea:11:1f:e7:18:5d:ad:88: 2f:ea:d3:45:49:ed:eb:eb:4b:a1:5d:c5:d7:18:ae: a9:d6:af:de:e7:5e:d1:3b:f6:b3:63:df:b2:7c:55: 0b:e1:d7:75:1b:56:d4:07:4d:92:ce:1c:87:e4:ee: 56:9a:5c:23:7b:ab:29:34:bc:49:fd:3a:e1:a2:c1: f2:35:4d:a9:6b:b6:7b:ca:7c:c4:96:92:07:71:03: 82:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:1A:36:6C:2E:D2:30:53:BF:34:40:2F:0F:32:2D:A0:E3:AF:DC:BE X509v3 Authority Key Identifier: keyid:AA:67:82:CD:7B:B9:22:CA:4B:C6:E8:0E:78:57:F4:92:2F:5C:23:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:a1:6c:07:d0:a3:c9:69:48:10:a4:f7:6b:ff:24:8b:9c:3c: 29:c7:0a:d8:de:7b:2d:03:53:a0:93:a4:78:d2:b7:15:7a:21: f7:bd:e6:6d:4b:fe:41:dd:4c:12:76:7a:f0:6e:ea:1e:24:ee: 65:ef:f4:33:1f:53:5e:f2:4b:1a:4c:4c:e5:2f:3a:ce:cb:36: c5:9f:8c:00:3d:bc:bc:8e:1c:1d:ee:d3:bf:d5:10:01:61:ff: f7:92:68:d6:76:21:b3:62:9d:b1:88:3b:6a:39:c5:8c:6f:0c: e4:4a:6f:6e:2a:16:83:f4:08:18:1b:a3:72:71:6d:e6:9d:eb: 0b:ad:59:c6:b7:41:f4:7b:34:33:88:b6:6f:33:44:9b:4e:da: 80:17:ae:ca:31:dc:de:19:b4:b3:a6:b0:d8:19:33:b0:ea:c1: 9b:e2:bf:99:88:d1:04:30:46:1e:8f:cc:31:a2:c7:ec:fa:c9: ae:4f:2a:67:d6:a7:bd:d7:96:b3:2f:d3:b2:06:e3:6e:cc:44: a3:45:1f:e0:54:5b:8f:2b:e6:a8:cd:c0:87:f7:d2:9f:33:bf: 75:e6:1b:c9:c6:92:16:e0:b3:a0:d5:c8:7f:24:a9:c4:fb:55: 8d:1f:43:4a:e2:09:49:b7:36:fc:3a:ee:63:b1:06:41:32:ca: fa:e3:8f:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QNz8dwrhJI9OBZOQOLxEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNjc4MmNkN2JiOTIyY2E0YmM2ZTgwZTc4NTdmNDkyMmY1 YzIzYzQwHhcNMjUxMjA2MjAwMDU5WhcNMjUxMjA3MjAwMDU5WjAzMTEwLwYDVQQD EygwNzFhMzY2YzJlZDIzMDUzYmYzNDQwMmYwZjMyMmRhMGUzYWZkY2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZK5+zJlC+7YiQn+7gwVokuyOIKt QIetFxzjOu95AXzaGp1cbbyWcdzNFnxboJKhQ8Xt0aAPmaDfpda/5nT39e/+rtZy T2p+o+tIBN1kaO27Nc20agpY27mR0+JKrm9Rgx45CsOL7+Two8+dIZOxyRAIPzWZ clLYLA7NdkASYcLm4Vtf6tZe94U1W0tLGAahSudqZjd1ZQq5R+VFHJfMJp9Kl9la Ew3zyGDt6hEf5xhdrYgv6tNFSe3r60uhXcXXGK6p1q/e517RO/azY9+yfFUL4dd1 G1bUB02SzhyH5O5Wmlwje6spNLxJ/TrhosHyNU2pa7Z7ynzElpIHcQOC7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAcaNmwu0jBTvzRALw8yLaDjr9y+MB8GA1UdIwQY MBaAFKpngs17uSLKS8boDnhX9JIvXCPEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW1lQ3pYdTVJc3BMeHVnT2VGZjBraTljSThRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8zOWY0YmYtMzhmYy00MzEyLTg1MTYt YjQzMGU4ZGU3NzQ3LzEvcW1lQ3pYdTVJc3BMeHVnT2VGZjBraTljSThRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8zOWY0YmYtMzhmYy00MzEyLTg1MTYtYjQzMGU4ZGU3NzQ3 LzEvcW1lQ3pYdTVJc3BMeHVnT2VGZjBraTljSThRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUqFsB9Cj yWlIEKT3a/8ki5w8KccK2N57LQNToJOkeNK3FXoh973mbUv+Qd1MEnZ68G7qHiTu Ze/0Mx9TXvJLGkxM5S86zss2xZ+MAD28vI4cHe7Tv9UQAWH/95Jo1nYhs2KdsYg7 ajnFjG8M5EpvbioWg/QIGBujcnFt5p3rC61ZxrdB9Hs0M4i2bzNEm07agBeuyjHc 3hm0s6aw2BkzsOrBm+K/mYjRBDBGHo/MMaLH7PrJrk8qZ9anvdeWsy/TsgbjbsxE o0Uf4FRbjyvmqM3Ah/fSnzO/deYbycaSFuCzoNXIfySpxPtVjR9DSuIJSbc2/Dru Y7EGQTLK+uOP+Q== -----END CERTIFICATE-----Generated at Sun Dec 7 03:09:22 2025 by rpki-client