This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft File: q0ZoYAiowQHoTqh4MYrljrcc7II.mft (raw, json) Hash identifier: 6A3EzQIZq8J4XPGfS6GmRdLoVu1BImahj6VvfelV7pc= Subject key identifier: F2:88:0B:EB:29:A1:85:86:5C:95:21:71:5F:DB:EC:B6:85:20:1E:46 Authority key identifier: AB:46:68:60:08:A8:C1:01:E8:4E:A8:78:31:8A:E5:8E:B7:1C:EC:82 Certificate issuer: /CN=ab46686008a8c101e84ea878318ae58eb71cec82 Certificate serial: 019AF208D50BBE504296088AB0E0F6F9436D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft Manifest number: 0E42 Signing time: Sat 06 Dec 2025 05:00:56 +0000 Manifest this update: Sat 06 Dec 2025 05:00:56 +0000 Manifest next update: Sun 07 Dec 2025 05:00:56 +0000 Files and hashes: 1: EMySEwRrF4bq2LUNRJSbJLGHINA.roa (hash: DrdEgmoEeO2eKUnBVDonWL4YHyVw8zsXK3sYKFvyya8=) 2: q0ZoYAiowQHoTqh4MYrljrcc7II.crl (hash: nadViCAEQRKLSv+lNPigMIwiggPMjIrv7m1jKk18rQo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:d5:0b:be:50:42:96:08:8a:b0:e0:f6:f9:43:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab46686008a8c101e84ea878318ae58eb71cec82 Validity Not Before: Dec 6 05:00:56 2025 GMT Not After : Dec 7 05:00:56 2025 GMT Subject: CN=f2880beb29a185865c9521715fdbecb685201e46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:06:c9:d4:e4:26:94:2c:e9:52:6f:ed:de:1d: 13:61:dd:2a:6b:6a:eb:7e:a5:4e:17:9c:48:18:bd: 19:82:1c:21:1b:9d:ef:37:d8:6e:83:a3:db:a9:64: dc:f3:56:e1:fb:97:54:65:78:fb:9d:ba:13:36:f9: a3:ca:1f:bd:4b:63:d0:48:a3:41:21:71:51:b0:dc: ff:c0:63:dd:8d:eb:c7:e5:f8:b1:03:88:d3:9f:3c: 5f:f2:28:c6:2e:6a:8c:a0:fd:fa:98:00:6c:f3:69: 8a:73:b0:f6:02:0c:48:02:6e:f3:a5:2c:98:6b:2d: 63:bb:7d:33:d1:91:66:42:a8:59:59:36:fd:81:7b: f1:68:76:99:c3:23:c0:80:db:39:43:b1:27:8a:4b: 31:62:17:2c:4c:f8:89:b6:c5:78:2e:e0:c7:36:3d: d2:11:c3:87:9e:1b:1d:a2:2b:84:04:8d:01:42:22: b8:bd:74:95:c9:5c:ba:30:1a:22:45:42:fd:5f:2a: b5:ff:3e:76:cb:48:c4:2c:29:ef:6c:1d:6f:da:4c: 68:f6:f8:ee:be:82:42:03:9c:ce:96:9f:9f:5e:86: d9:ac:66:24:91:7e:a3:63:db:d0:23:83:f6:da:ec: 9b:40:f3:8a:d5:54:6d:5b:c3:c4:9c:2d:f4:1a:60: eb:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:88:0B:EB:29:A1:85:86:5C:95:21:71:5F:DB:EC:B6:85:20:1E:46 X509v3 Authority Key Identifier: keyid:AB:46:68:60:08:A8:C1:01:E8:4E:A8:78:31:8A:E5:8E:B7:1C:EC:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:b3:46:d1:76:ea:7b:c6:83:ad:8e:c9:f7:e7:aa:94:12:02: f9:f9:ab:39:51:ae:30:5a:aa:74:f2:58:4d:1d:b3:90:d1:bb: 20:52:e4:14:ed:a4:45:17:bf:42:4d:b8:1b:ca:51:7c:9f:94: c3:7b:be:7b:7d:c0:eb:91:84:b3:62:11:2d:7e:ec:a9:14:05: 95:be:a1:d8:74:84:a0:7b:1d:db:60:5c:36:e9:e9:46:e8:01: 7f:91:af:e1:1f:09:8e:5f:6b:2a:97:89:c8:d3:f9:5a:af:60: 97:ef:25:90:a4:6f:70:dc:66:d4:c6:dd:00:ef:c4:e2:b1:a4: 4c:9e:09:6c:76:2b:58:aa:f7:0d:cd:fd:59:19:7d:e4:f1:f5: b1:43:5b:3d:de:66:b4:a6:bb:a7:1e:8e:e4:d1:0f:1c:ab:01: 98:43:e7:a0:29:69:2d:6a:48:3c:79:b8:b7:eb:ab:04:87:93: d1:e7:fe:b4:26:80:f1:e0:b1:ef:21:bf:57:e6:2f:85:7c:85: b3:95:1b:85:07:85:ee:43:37:a9:a6:1a:23:a0:27:17:a6:fe: 70:a9:e2:5e:a0:1b:ad:73:bd:96:ab:a7:29:63:18:53:62:f3: 3e:61:fd:3d:07:a1:86:b3:35:54:41:55:5b:53:d8:98:50:6c: 14:42:0b:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNULvlBClgiKsOD2+UNtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNDY2ODYwMDhhOGMxMDFlODRlYTg3ODMxOGFlNThlYjcx Y2VjODIwHhcNMjUxMjA2MDUwMDU2WhcNMjUxMjA3MDUwMDU2WjAzMTEwLwYDVQQD EyhmMjg4MGJlYjI5YTE4NTg2NWM5NTIxNzE1ZmRiZWNiNjg1MjAxZTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwbJ1OQmlCzpUm/t3h0TYd0qa2rr fqVOF5xIGL0ZghwhG53vN9hug6PbqWTc81bh+5dUZXj7nboTNvmjyh+9S2PQSKNB IXFRsNz/wGPdjevH5fixA4jTnzxf8ijGLmqMoP36mABs82mKc7D2AgxIAm7zpSyY ay1ju30z0ZFmQqhZWTb9gXvxaHaZwyPAgNs5Q7EniksxYhcsTPiJtsV4LuDHNj3S EcOHnhsdoiuEBI0BQiK4vXSVyVy6MBoiRUL9Xyq1/z52y0jELCnvbB1v2kxo9vju voJCA5zOlp+fXobZrGYkkX6jY9vQI4P22uybQPOK1VRtW8PEnC30GmDr7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKIC+spoYWGXJUhcV/b7LaFIB5GMB8GA1UdIwQY MBaAFKtGaGAIqMEB6E6oeDGK5Y63HOyCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTBab1lBaW93UUhvVHFoNE1ZcmxqcmNjN0lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi83MjY0ZDYtM2JmZC00ZGU5LThmZmIt ZjMzNjNjYmQ0MjRjLzEvcTBab1lBaW93UUhvVHFoNE1ZcmxqcmNjN0lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi83MjY0ZDYtM2JmZC00ZGU5LThmZmItZjMzNjNjYmQ0MjRj LzEvcTBab1lBaW93UUhvVHFoNE1ZcmxqcmNjN0lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHbNG0Xbq e8aDrY7J9+eqlBIC+fmrOVGuMFqqdPJYTR2zkNG7IFLkFO2kRRe/Qk24G8pRfJ+U w3u+e33A65GEs2IRLX7sqRQFlb6h2HSEoHsd22BcNunpRugBf5Gv4R8Jjl9rKpeJ yNP5Wq9gl+8lkKRvcNxm1MbdAO/E4rGkTJ4JbHYrWKr3Dc39WRl95PH1sUNbPd5m tKa7px6O5NEPHKsBmEPnoClpLWpIPHm4t+urBIeT0ef+tCaA8eCx7yG/V+YvhXyF s5UbhQeF7kM3qaYaI6AnF6b+cKniXqAbrXO9lqunKWMYU2LzPmH9PQehhrM1VEFV W1PYmFBsFEILag== -----END CERTIFICATE-----Generated at Sat Dec 6 09:58:57 2025 by rpki-client