This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.mft File: qV9jiGJSm22v1EDhcqIvASCwmuo.mft (raw, json) Hash identifier: u0f16QvDA97sT6DCvTNq5c2Of9frW+B1gJG8ZTsMlww= Subject key identifier: 78:EF:06:F0:5D:9B:5C:BE:06:E6:2B:81:9C:E2:1D:EC:C8:C0:A1:D1 Authority key identifier: A9:5F:63:88:62:52:9B:6D:AF:D4:40:E1:72:A2:2F:01:20:B0:9A:EA Certificate issuer: /CN=a95f638862529b6dafd440e172a22f0120b09aea Certificate serial: 019AF23FDFB64A3BA9B9B0F67C1EDCB1785B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qV9jiGJSm22v1EDhcqIvASCwmuo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 06:01:03 +0000 Manifest this update: Sat 06 Dec 2025 06:01:03 +0000 Manifest next update: Sun 07 Dec 2025 06:01:03 +0000 Files and hashes: 1: 5LFA7pu9BAuW9Zs8wziojRaCNSk.roa (hash: UzC92ONklOjy0NiAl9iqdlk8UfZjfzE3sfwqDQwnG80=) 2: qV9jiGJSm22v1EDhcqIvASCwmuo.crl (hash: sKKM70pOv/khDdVWCYzyH+nX7nPxQHyQzIXAc2Thr/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.crl rsync://rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.mft rsync://rpki.ripe.net/repository/DEFAULT/qV9jiGJSm22v1EDhcqIvASCwmuo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:df:b6:4a:3b:a9:b9:b0:f6:7c:1e:dc:b1:78:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a95f638862529b6dafd440e172a22f0120b09aea Validity Not Before: Dec 6 06:01:03 2025 GMT Not After : Dec 7 06:01:03 2025 GMT Subject: CN=78ef06f05d9b5cbe06e62b819ce21decc8c0a1d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:32:24:a1:1b:8a:e6:6e:5f:57:39:d4:90:c6: e5:86:89:3d:83:69:fd:1a:6e:4f:e4:11:bc:75:a0: cb:58:32:ca:79:c1:7b:98:c1:08:e7:d0:75:78:72: f0:ed:e9:4c:2d:b9:be:de:8c:b3:f1:50:47:46:43: 29:4b:7f:24:be:fd:f5:df:63:3a:ae:98:4a:54:2d: e7:bb:5f:0f:00:b4:d5:53:4f:b5:39:51:7f:f1:11: 61:71:c9:45:ab:b0:45:10:61:26:12:0e:64:10:68: cc:d9:77:7b:85:d8:e3:77:12:e6:f8:8a:49:8b:b4: f4:44:af:ac:55:b3:1a:d9:14:8a:ac:1f:40:ee:69: df:37:07:53:94:d0:29:5f:4d:22:31:4f:c4:34:48: 0f:50:07:61:d1:70:02:ff:7d:20:e3:5b:e1:5e:bf: f2:1e:08:88:b2:78:3c:e1:f7:6a:4e:da:c4:62:f9: 59:db:ce:b7:2b:5f:0f:c9:3e:31:7f:93:91:98:0b: fa:e2:42:bf:73:44:7d:81:2f:d3:9a:69:06:5c:77: 0c:a9:40:a9:78:14:82:5e:1e:ee:d7:b1:f6:a3:d3: 5a:ee:c8:8c:27:2f:9f:b8:33:37:89:e5:f1:22:30: a9:66:6d:62:5a:d9:8d:f7:cf:00:86:62:97:b2:20: 12:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:EF:06:F0:5D:9B:5C:BE:06:E6:2B:81:9C:E2:1D:EC:C8:C0:A1:D1 X509v3 Authority Key Identifier: keyid:A9:5F:63:88:62:52:9B:6D:AF:D4:40:E1:72:A2:2F:01:20:B0:9A:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qV9jiGJSm22v1EDhcqIvASCwmuo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:19:07:15:12:9d:19:8b:95:d1:87:99:54:f2:f0:29:91:f1: 2f:29:b3:15:27:33:33:a8:1e:91:57:b7:e1:51:bd:64:f9:47: 13:d8:f4:2e:c5:44:71:e7:f0:a1:24:20:d5:cb:d4:02:e8:26: c5:25:f1:94:72:c9:75:4c:dd:4f:d1:f6:1a:4a:ab:0c:37:ca: 0c:1d:82:1a:e7:9a:0d:66:4d:11:71:26:41:71:b8:75:ec:62: 87:8c:5d:3a:a8:e4:0c:83:d8:e8:7b:e3:d4:fe:da:95:e7:10: b6:1c:f1:66:56:e2:be:80:a4:f0:60:a8:d6:c9:43:49:55:25: d3:e9:98:30:8b:5e:28:24:2f:1d:86:73:73:96:d7:08:e2:c4: fe:7f:51:9b:0b:c4:6d:86:d6:e0:de:04:f1:95:70:18:44:23: f7:07:8d:bc:ea:af:ef:ac:dd:4d:32:fd:84:38:e2:74:fc:d5: ea:1f:74:78:80:75:e7:ea:69:63:d2:f8:2c:f3:62:28:f1:24: 5a:c7:01:d3:ea:a1:62:3f:5a:ec:2b:97:a6:9e:2b:fa:1b:cd: 5a:31:5d:a3:8e:07:39:b6:27:e1:48:7d:20:14:50:46:2a:ff: 7d:c4:4d:fb:ec:39:c7:33:56:56:b9:d0:ae:fc:e7:b4:4a:f2: a1:ee:cd:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9+2SjupubD2fB7csXhbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5NWY2Mzg4NjI1MjliNmRhZmQ0NDBlMTcyYTIyZjAxMjBi MDlhZWEwHhcNMjUxMjA2MDYwMTAzWhcNMjUxMjA3MDYwMTAzWjAzMTEwLwYDVQQD Eyg3OGVmMDZmMDVkOWI1Y2JlMDZlNjJiODE5Y2UyMWRlY2M4YzBhMWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTIkoRuK5m5fVznUkMblhok9g2n9 Gm5P5BG8daDLWDLKecF7mMEI59B1eHLw7elMLbm+3oyz8VBHRkMpS38kvv3132M6 rphKVC3nu18PALTVU0+1OVF/8RFhcclFq7BFEGEmEg5kEGjM2Xd7hdjjdxLm+IpJ i7T0RK+sVbMa2RSKrB9A7mnfNwdTlNApX00iMU/ENEgPUAdh0XAC/30g41vhXr/y HgiIsng84fdqTtrEYvlZ2863K18PyT4xf5ORmAv64kK/c0R9gS/TmmkGXHcMqUCp eBSCXh7u17H2o9Na7siMJy+fuDM3ieXxIjCpZm1iWtmN988AhmKXsiAS+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHjvBvBdm1y+BuYrgZziHezIwKHRMB8GA1UdIwQY MBaAFKlfY4hiUpttr9RA4XKiLwEgsJrqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVY5amlHSlNtMjJ2MUVEaGNxSXZBU0N3bXVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9hZjQ5M2YtNDFmZS00MDZkLWIzZmYt ZWJiNTNjMjUzMDdiLzEvcVY5amlHSlNtMjJ2MUVEaGNxSXZBU0N3bXVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9hZjQ5M2YtNDFmZS00MDZkLWIzZmYtZWJiNTNjMjUzMDdi LzEvcVY5amlHSlNtMjJ2MUVEaGNxSXZBU0N3bXVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJBkHFRKd GYuV0YeZVPLwKZHxLymzFSczM6gekVe34VG9ZPlHE9j0LsVEcefwoSQg1cvUAugm xSXxlHLJdUzdT9H2GkqrDDfKDB2CGueaDWZNEXEmQXG4dexih4xdOqjkDIPY6Hvj 1P7alecQthzxZlbivoCk8GCo1slDSVUl0+mYMIteKCQvHYZzc5bXCOLE/n9RmwvE bYbW4N4E8ZVwGEQj9weNvOqv76zdTTL9hDjidPzV6h90eIB15+ppY9L4LPNiKPEk WscB0+qhYj9a7CuXpp4r+hvNWjFdo44HObYn4Uh9IBRQRir/fcRN++w5xzNWVrnQ rvzntEryoe7NLA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:09:43 2025 by rpki-client