This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.mft File: qiK__S1aBw4uyKP8RueRGvlv6q0.mft (raw, json) Hash identifier: EFobmyMasNYlFx24b3MFg1ORptugD10pjWtppEz0/cI= Subject key identifier: C3:2D:B2:32:D5:54:6A:1E:DC:BA:26:0D:96:8B:81:E9:84:B0:2B:A9 Authority key identifier: AA:22:BF:FD:2D:5A:07:0E:2E:C8:A3:FC:46:E7:91:1A:F9:6F:EA:AD Certificate issuer: /CN=aa22bffd2d5a070e2ec8a3fc46e7911af96feaad Certificate serial: 019AF23F82E8DECFB9A9478085774F9D5E0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qiK__S1aBw4uyKP8RueRGvlv6q0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 06:00:39 +0000 Manifest this update: Sat 06 Dec 2025 06:00:39 +0000 Manifest next update: Sun 07 Dec 2025 06:00:39 +0000 Files and hashes: 1: eo9SLFo6ECy5DSd_dzNUwxtWG90.roa (hash: rwEptqLCRKuvmeB6qGhTimOttQv2kDracTxXGRGGlyc=) 2: qiK__S1aBw4uyKP8RueRGvlv6q0.crl (hash: HLqO7wTwsFIrGdAMk6Yzc9SJ82knOYU4DaoW9e6CYlA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.crl rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.mft rsync://rpki.ripe.net/repository/DEFAULT/qiK__S1aBw4uyKP8RueRGvlv6q0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:82:e8:de:cf:b9:a9:47:80:85:77:4f:9d:5e:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa22bffd2d5a070e2ec8a3fc46e7911af96feaad Validity Not Before: Dec 6 06:00:39 2025 GMT Not After : Dec 7 06:00:39 2025 GMT Subject: CN=c32db232d5546a1edcba260d968b81e984b02ba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:9b:2c:ec:ab:a4:93:9a:56:1c:9e:81:5b:38: 09:6d:21:9b:eb:77:c5:35:9f:c1:af:f8:a6:5f:0a: 76:fb:27:bf:37:66:85:30:a7:33:d5:63:71:5a:f5: 42:60:a3:82:1d:f7:e6:90:f6:f8:37:13:b4:e5:91: 85:37:72:6c:46:9b:d7:b4:16:2f:3a:97:f5:2d:c9: 61:fe:a5:c9:dc:82:a0:35:ab:b9:2a:42:13:fa:0b: f2:bc:5e:30:37:31:5a:53:4e:39:7d:cb:b1:84:0b: c5:31:7a:b8:e1:ca:fe:36:71:a4:c6:50:25:ae:f4: d0:de:db:75:41:39:4c:f9:21:ed:e9:e8:98:0a:0c: 4a:46:60:ec:1f:4a:58:fb:0c:b5:27:86:8b:02:d9: 13:9a:48:96:2b:11:25:66:0b:fb:27:80:23:31:cf: 12:72:51:02:26:1c:97:ea:19:fc:68:92:36:a6:92: ce:6b:3a:27:13:d1:e3:02:33:de:7f:42:c3:de:41: f6:d7:6e:4c:a7:27:66:d7:f1:44:d2:7c:3c:c8:8b: f1:8c:c6:f9:68:2e:b6:4d:7d:57:d6:87:1e:92:03: b3:3a:c9:38:b0:63:6c:22:14:3a:d7:f3:e4:00:f8: db:15:4a:c7:4a:9f:e0:90:7d:11:95:bc:18:2d:b0: 85:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:2D:B2:32:D5:54:6A:1E:DC:BA:26:0D:96:8B:81:E9:84:B0:2B:A9 X509v3 Authority Key Identifier: keyid:AA:22:BF:FD:2D:5A:07:0E:2E:C8:A3:FC:46:E7:91:1A:F9:6F:EA:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qiK__S1aBw4uyKP8RueRGvlv6q0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:9c:0a:e3:a8:09:b3:4f:34:3e:e8:06:bc:24:63:87:45:bd: 1a:4f:de:25:cc:c0:33:4b:0e:de:a2:42:39:c3:39:61:38:34: 8e:9e:fa:5f:7c:28:cc:a8:cd:e9:3a:62:8f:e5:7a:d7:ac:85: 31:d8:5d:b3:dd:ea:d5:15:e6:30:03:b8:e1:98:94:d3:90:1a: 47:bf:57:97:94:7f:64:7d:c5:62:e6:af:99:6e:0d:7a:53:bc: 88:24:9c:5e:95:fe:f1:90:63:d5:94:7f:4b:d7:27:cb:ae:8a: 2d:63:be:5e:a0:bc:68:0e:a6:34:16:81:cf:6b:2b:ad:02:5a: d0:a3:b2:ec:61:f3:27:90:1c:e5:a2:ad:dd:59:e7:68:04:1e: eb:9d:b3:e5:09:02:64:cc:3f:d4:53:ef:38:e2:4f:ba:75:2e: f6:b2:da:f4:f9:89:18:7b:4e:30:2f:72:21:47:d1:5c:eb:a7: 3e:3d:26:4a:7c:ae:4d:06:d1:45:ff:31:8f:62:c1:f1:75:94: 37:4f:f4:d6:ea:78:35:8e:f8:1b:8b:80:a7:e0:01:b1:fa:f6: 4f:01:0c:9f:bf:98:c0:0d:b8:2a:1e:21:95:d4:94:8a:90:f9: ee:2d:8a:f7:46:1c:cf:01:8e:e4:e9:ef:4d:9c:d5:e7:00:f7: d0:83:7e:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP4Lo3s+5qUeAhXdPnV4KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMjJiZmZkMmQ1YTA3MGUyZWM4YTNmYzQ2ZTc5MTFhZjk2 ZmVhYWQwHhcNMjUxMjA2MDYwMDM5WhcNMjUxMjA3MDYwMDM5WjAzMTEwLwYDVQQD EyhjMzJkYjIzMmQ1NTQ2YTFlZGNiYTI2MGQ5NjhiODFlOTg0YjAyYmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA75ss7Kukk5pWHJ6BWzgJbSGb63fF NZ/Br/imXwp2+ye/N2aFMKcz1WNxWvVCYKOCHffmkPb4NxO05ZGFN3JsRpvXtBYv Opf1Lclh/qXJ3IKgNau5KkIT+gvyvF4wNzFaU045fcuxhAvFMXq44cr+NnGkxlAl rvTQ3tt1QTlM+SHt6eiYCgxKRmDsH0pY+wy1J4aLAtkTmkiWKxElZgv7J4AjMc8S clECJhyX6hn8aJI2ppLOazonE9HjAjPef0LD3kH2125Mpydm1/FE0nw8yIvxjMb5 aC62TX1X1ocekgOzOsk4sGNsIhQ61/PkAPjbFUrHSp/gkH0RlbwYLbCFbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMMtsjLVVGoe3LomDZaLgemEsCupMB8GA1UdIwQY MBaAFKoiv/0tWgcOLsij/EbnkRr5b+qtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWlLX19TMWFCdzR1eUtQOFJ1ZVJHdmx2NnEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC84NzhkMGMtMjIwMC00YzI3LTk0YzAt NWM2ZTE5ZDA3MGU1LzEvcWlLX19TMWFCdzR1eUtQOFJ1ZVJHdmx2NnEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC84NzhkMGMtMjIwMC00YzI3LTk0YzAtNWM2ZTE5ZDA3MGU1 LzEvcWlLX19TMWFCdzR1eUtQOFJ1ZVJHdmx2NnEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjpwK46gJ s080PugGvCRjh0W9Gk/eJczAM0sO3qJCOcM5YTg0jp76X3wozKjN6Tpij+V616yF Mdhds93q1RXmMAO44ZiU05AaR79Xl5R/ZH3FYuavmW4NelO8iCScXpX+8ZBj1ZR/ S9cny66KLWO+XqC8aA6mNBaBz2srrQJa0KOy7GHzJ5Ac5aKt3VnnaAQe652z5QkC ZMw/1FPvOOJPunUu9rLa9PmJGHtOMC9yIUfRXOunPj0mSnyuTQbRRf8xj2LB8XWU N0/01up4NY74G4uAp+ABsfr2TwEMn7+YwA24Kh4hldSUipD57i2K90YczwGO5Onv TZzV5wD30IN+ZA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:22 2025 by rpki-client