This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft File: qnNO9a4hwOiX-hhkRxhOya1K4p0.mft (raw, json) Hash identifier: aokBMO3Sz4k7WuIrf/xJXNPNhh1NzIt1QpIdvTPWR0I= Subject key identifier: A8:66:24:18:BC:36:66:03:37:6C:1A:CB:45:0C:3C:EC:9D:9F:8E:BB Authority key identifier: AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D Certificate issuer: /CN=aa734ef5ae21c0e897fa186447184ec9ad4ae29d Certificate serial: 019AF509EC27126D3CCA15B2D0D5D7A35E4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft Manifest number: 0915 Signing time: Sat 06 Dec 2025 19:00:59 +0000 Manifest this update: Sat 06 Dec 2025 19:00:59 +0000 Manifest next update: Sun 07 Dec 2025 19:00:59 +0000 Files and hashes: 1: Ot7K37c41MVu-6Ir2VOkUuixgHw.roa (hash: 7Ylv6CILYrMD9u/uD4SkYHlbdsDQ05xlERBBPqPUVnQ=) 2: ga4DK68qwsMkTd-ni1B6iXRQTdQ.roa (hash: H3sXkj62Xj83aypXZVaDV2Gzb10/TmB5L1/CDA3jxj0=) 3: qnNO9a4hwOiX-hhkRxhOya1K4p0.crl (hash: 1Itrz/6/x8mrZKvQ3G4BUQbTMZrpUyzCty4+91N5Ua8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:ec:27:12:6d:3c:ca:15:b2:d0:d5:d7:a3:5e:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa734ef5ae21c0e897fa186447184ec9ad4ae29d Validity Not Before: Dec 6 19:00:59 2025 GMT Not After : Dec 7 19:00:59 2025 GMT Subject: CN=a8662418bc366603376c1acb450c3cec9d9f8ebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b7:6b:d8:ff:36:60:05:b7:1d:05:68:ef:32: da:69:b0:d5:02:20:77:1f:ff:6c:ad:19:6f:51:bb: 64:ea:a1:07:3e:36:6b:1a:52:d6:86:3a:e3:e0:c5: 75:e0:88:c5:31:19:23:41:09:f1:db:2d:67:f2:5a: 5f:e0:39:ee:95:e0:a3:a8:ec:5b:7e:d8:35:95:a8: 5e:6d:21:ee:55:41:da:e9:5d:d9:13:e3:3b:5c:af: 4b:ca:4c:2b:09:c3:60:bd:38:70:46:03:64:1c:47: 9a:c1:a9:28:f8:3b:be:b8:b4:c0:13:a3:80:68:e7: ca:04:c9:f2:e6:a2:22:ea:f1:81:56:e4:b9:f2:16: d9:89:13:ae:36:b2:4d:e9:4d:d3:1a:b6:d0:55:10: 8c:e9:a8:7f:a6:7d:cd:a6:41:3c:2e:d4:2b:a6:a1: 86:06:e4:4f:26:d0:06:7f:08:71:2d:7d:45:26:b4: a2:89:72:b6:75:d5:16:fc:aa:e4:16:e6:2b:e9:17: ef:2d:08:4c:3b:60:c0:3e:11:1e:ca:05:98:87:7b: d8:37:84:b8:17:75:82:2f:9b:76:da:c1:95:35:21: f7:5d:a0:1d:05:2d:7e:d1:d5:b9:dc:f4:04:f1:75: 1f:fe:d4:53:37:27:f6:d3:c1:b4:90:76:d4:7b:88: c6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:66:24:18:BC:36:66:03:37:6C:1A:CB:45:0C:3C:EC:9D:9F:8E:BB X509v3 Authority Key Identifier: keyid:AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:81:d3:14:1d:dd:c0:3b:fc:64:29:42:97:55:24:7a:ad:90: 9e:25:8e:0c:9c:b9:06:e0:6d:2c:2c:5f:8a:16:a6:fe:55:01: 08:ea:21:7f:5b:6b:9c:ba:b5:fd:42:cc:9c:fb:19:ee:c4:96: 94:d1:e7:19:7f:4f:3c:f6:69:cc:f7:2f:b4:1f:30:00:c5:6a: 50:08:34:78:3a:b2:16:1c:10:eb:20:77:e2:7d:b3:cb:d4:97: 95:84:78:8c:ac:0d:25:73:7e:a4:38:55:b8:83:c9:ab:62:c4: a1:b9:49:f4:fa:a2:43:31:14:67:2d:b2:09:6e:28:07:c1:00: eb:3f:a2:d9:1b:04:51:c3:c4:6a:9c:ef:ce:7f:1d:2c:76:6b: 8b:b1:1a:3e:47:35:ed:68:e7:26:18:6b:fc:09:f8:6e:4c:12: da:17:ed:01:3a:9c:b8:48:6c:5f:20:57:c5:12:01:cf:4a:5f: 11:90:bb:f1:4c:39:8f:40:0d:ae:bb:f3:20:20:12:72:82:25: aa:1d:a0:c9:68:15:50:19:25:0b:6f:73:36:27:15:ca:0e:f2: b3:d2:99:36:7f:9a:e5:39:62:a9:50:bc:ec:9d:f8:6d:89:dd: 4b:6f:02:0a:f7:7a:a2:cb:23:0c:02:af:56:ca:a9:39:81:6e: fc:0d:99:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CewnEm08yhWy0NXXo15KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNzM0ZWY1YWUyMWMwZTg5N2ZhMTg2NDQ3MTg0ZWM5YWQ0 YWUyOWQwHhcNMjUxMjA2MTkwMDU5WhcNMjUxMjA3MTkwMDU5WjAzMTEwLwYDVQQD EyhhODY2MjQxOGJjMzY2NjAzMzc2YzFhY2I0NTBjM2NlYzlkOWY4ZWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27dr2P82YAW3HQVo7zLaabDVAiB3 H/9srRlvUbtk6qEHPjZrGlLWhjrj4MV14IjFMRkjQQnx2y1n8lpf4DnuleCjqOxb ftg1lahebSHuVUHa6V3ZE+M7XK9LykwrCcNgvThwRgNkHEeawako+Du+uLTAE6OA aOfKBMny5qIi6vGBVuS58hbZiROuNrJN6U3TGrbQVRCM6ah/pn3NpkE8LtQrpqGG BuRPJtAGfwhxLX1FJrSiiXK2ddUW/KrkFuYr6RfvLQhMO2DAPhEeygWYh3vYN4S4 F3WCL5t22sGVNSH3XaAdBS1+0dW53PQE8XUf/tRTNyf208G0kHbUe4jGKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKhmJBi8NmYDN2way0UMPOydn467MB8GA1UdIwQY MBaAFKpzTvWuIcDol/oYZEcYTsmtSuKdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW5OTzlhNGh3T2lYLWhoa1J4aE95YTFLNHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS83NDgxMTEtMGUxMC00NzkyLTliMWIt ZGE3ODBjZmI5OWE0LzEvcW5OTzlhNGh3T2lYLWhoa1J4aE95YTFLNHAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS83NDgxMTEtMGUxMC00NzkyLTliMWItZGE3ODBjZmI5OWE0 LzEvcW5OTzlhNGh3T2lYLWhoa1J4aE95YTFLNHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQoHTFB3d wDv8ZClCl1Ukeq2QniWODJy5BuBtLCxfiham/lUBCOohf1trnLq1/ULMnPsZ7sSW lNHnGX9PPPZpzPcvtB8wAMVqUAg0eDqyFhwQ6yB34n2zy9SXlYR4jKwNJXN+pDhV uIPJq2LEoblJ9PqiQzEUZy2yCW4oB8EA6z+i2RsEUcPEapzvzn8dLHZri7EaPkc1 7WjnJhhr/An4bkwS2hftATqcuEhsXyBXxRIBz0pfEZC78Uw5j0ANrrvzICAScoIl qh2gyWgVUBklC29zNicVyg7ys9KZNn+a5TliqVC87J34bYndS28CCvd6ossjDAKv VsqpOYFu/A2Ziw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:57:47 2025 by rpki-client