This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.mft File: qERYOVOgK8amaZ3pJ89FcAfwVSg.mft (raw, json) Hash identifier: Ccg4FAlKU4DwdrUfzqbT/F+U2mvkfI77UScCCc0BxFg= Subject key identifier: A9:2B:89:3A:F3:C2:19:04:FE:01:87:4F:AA:93:3B:DF:57:72:C6:6E Authority key identifier: A8:44:58:39:53:A0:2B:C6:A6:69:9D:E9:27:CF:45:70:07:F0:55:28 Certificate issuer: /CN=a844583953a02bc6a6699de927cf457007f05528 Certificate serial: 019B3344A7AAC7E76C01B1B033CF6840BB61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qERYOVOgK8amaZ3pJ89FcAfwVSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.mft Manifest number: 1A Signing time: Thu 18 Dec 2025 21:01:35 +0000 Manifest this update: Thu 18 Dec 2025 21:01:35 +0000 Manifest next update: Fri 19 Dec 2025 21:01:35 +0000 Files and hashes: 1: 6haaqsZJASL0vfr2TIyTHd7LSqw.roa (hash: dsj6vnuBCN4426KVza8EzOGbZVK+ekxYCC7Vg/Bv8dM=) 2: qERYOVOgK8amaZ3pJ89FcAfwVSg.crl (hash: 61HfxQNYIQSrsDs6KSRZwEiqYu/Mfa4GQ4zieBAOL2Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.crl rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.mft rsync://rpki.ripe.net/repository/DEFAULT/qERYOVOgK8amaZ3pJ89FcAfwVSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:a7:aa:c7:e7:6c:01:b1:b0:33:cf:68:40:bb:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a844583953a02bc6a6699de927cf457007f05528 Validity Not Before: Dec 18 21:01:35 2025 GMT Not After : Dec 19 21:01:35 2025 GMT Subject: CN=a92b893af3c21904fe01874faa933bdf5772c66e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:51:64:87:fd:e2:63:30:f0:9a:14:08:03:ce: 7f:cf:01:08:4e:5f:28:f4:40:f3:a7:5b:e2:fd:5b: dc:df:ad:88:96:56:07:0e:e3:96:53:7e:4a:44:dc: a5:3b:50:5e:69:92:22:2b:db:6f:bb:cc:5b:cb:19: 70:20:11:04:a6:a2:03:4f:cb:e6:dd:1c:bd:2e:5b: bb:89:3e:8e:4c:ba:fb:78:a6:a3:7b:bf:ba:e3:37: fb:37:b6:a7:15:f8:d3:43:62:7d:29:ff:42:11:01: 0f:7e:b4:61:dd:a9:98:45:8c:c3:bb:2f:e6:a3:63: 2a:b3:7b:f5:db:7f:45:e2:81:06:6c:5a:ce:67:6c: 53:02:40:29:d6:4b:fe:4a:55:f6:29:c9:e2:f2:f7: a9:50:36:cb:a5:1c:f3:df:aa:04:10:f1:e0:63:d3: f9:74:fe:f0:b6:2e:bb:a4:70:c9:df:e3:94:a8:20: 3a:88:39:62:8b:ff:43:65:a9:a7:a6:94:d3:b3:66: 47:02:1f:cc:62:dd:ce:66:26:d8:b1:7c:77:92:d8: 97:87:8d:7d:bd:06:e1:05:56:34:ae:c5:5a:9c:c9: 1c:19:e0:ed:12:88:a3:db:ad:be:22:f0:9e:9c:4a: af:a3:5b:93:6d:49:90:5f:d3:35:92:03:a9:96:85: af:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:2B:89:3A:F3:C2:19:04:FE:01:87:4F:AA:93:3B:DF:57:72:C6:6E X509v3 Authority Key Identifier: keyid:A8:44:58:39:53:A0:2B:C6:A6:69:9D:E9:27:CF:45:70:07:F0:55:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qERYOVOgK8amaZ3pJ89FcAfwVSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:cc:1c:a8:ca:e3:6b:5a:1d:c6:a9:6e:44:90:f6:dd:5d:21: 66:78:20:93:c9:7e:2b:c0:cb:88:5f:55:a7:e9:a4:2d:c3:77: 2d:5a:15:c8:c0:a3:e4:de:7a:b3:06:02:99:7b:f5:92:d9:ad: f2:d7:a5:28:a0:03:60:34:d4:02:31:34:3b:e5:94:7b:b7:c9: 80:02:c2:ce:e5:20:cb:3f:3e:5a:2e:0b:32:f7:7f:a9:f0:a7: 23:a2:bc:11:fc:ad:d8:b9:97:f1:18:4b:e7:45:00:af:1c:e6: 31:e5:d7:e2:84:96:05:db:65:6f:98:52:a9:dc:38:26:db:1a: 29:44:ed:43:2e:86:f5:d0:17:84:07:f4:3c:c0:94:56:c7:68: 0e:5a:58:a1:67:01:c4:fd:08:c1:d3:12:0e:51:a9:20:eb:ec: 05:f8:6a:0f:4e:32:2b:9c:96:e6:b9:87:21:82:a6:32:44:a8: 8f:ca:8e:b3:6c:52:a9:b1:25:45:10:d2:78:a4:53:b4:95:be: 06:c7:1e:2b:3f:16:52:0d:4f:75:7f:23:53:ad:e8:68:61:42: 56:5a:96:ff:8d:88:b3:33:af:ee:93:74:43:85:6c:05:c0:4e: a2:37:1e:0b:77:a8:f3:23:bb:79:ba:25:2f:31:a7:8c:a4:71: d8:8e:8c:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRKeqx+dsAbGwM89oQLthMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NDQ1ODM5NTNhMDJiYzZhNjY5OWRlOTI3Y2Y0NTcwMDdm MDU1MjgwHhcNMjUxMjE4MjEwMTM1WhcNMjUxMjE5MjEwMTM1WjAzMTEwLwYDVQQD EyhhOTJiODkzYWYzYzIxOTA0ZmUwMTg3NGZhYTkzM2JkZjU3NzJjNjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1Fkh/3iYzDwmhQIA85/zwEITl8o 9EDzp1vi/Vvc362IllYHDuOWU35KRNylO1BeaZIiK9tvu8xbyxlwIBEEpqIDT8vm 3Ry9Llu7iT6OTLr7eKaje7+64zf7N7anFfjTQ2J9Kf9CEQEPfrRh3amYRYzDuy/m o2Mqs3v1239F4oEGbFrOZ2xTAkAp1kv+SlX2Kcni8vepUDbLpRzz36oEEPHgY9P5 dP7wti67pHDJ3+OUqCA6iDlii/9DZamnppTTs2ZHAh/MYt3OZibYsXx3ktiXh419 vQbhBVY0rsVanMkcGeDtEoij262+IvCenEqvo1uTbUmQX9M1kgOploWv1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKkriTrzwhkE/gGHT6qTO99XcsZuMB8GA1UdIwQY MBaAFKhEWDlToCvGpmmd6SfPRXAH8FUoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUVSWU9WT2dLOGFtYVozcEo4OUZjQWZ3VlNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8zMDMxY2MtYTcwNS00MmM4LTgwMDMt MTEzODEwYTlmY2FlLzEvcUVSWU9WT2dLOGFtYVozcEo4OUZjQWZ3VlNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC8zMDMxY2MtYTcwNS00MmM4LTgwMDMtMTEzODEwYTlmY2Fl LzEvcUVSWU9WT2dLOGFtYVozcEo4OUZjQWZ3VlNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM8wcqMrj a1odxqluRJD23V0hZnggk8l+K8DLiF9Vp+mkLcN3LVoVyMCj5N56swYCmXv1ktmt 8telKKADYDTUAjE0O+WUe7fJgALCzuUgyz8+Wi4LMvd/qfCnI6K8Efyt2LmX8RhL 50UArxzmMeXX4oSWBdtlb5hSqdw4JtsaKUTtQy6G9dAXhAf0PMCUVsdoDlpYoWcB xP0IwdMSDlGpIOvsBfhqD04yK5yW5rmHIYKmMkSoj8qOs2xSqbElRRDSeKRTtJW+ BsceKz8WUg1PdX8jU63oaGFCVlqW/42IszOv7pN0Q4VsBcBOojceC3eo8yO7ebol LzGnjKRx2I6Mxw== -----END CERTIFICATE-----Generated at Fri Dec 19 03:03:46 2025 by rpki-client