This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft File: qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft (raw, json) Hash identifier: Z9b3Ojf4MTatsGrdy9uBO7IN6tE7hKPiNKmw9ntj0X4= Subject key identifier: 68:0C:58:40:9C:E4:00:89:12:37:A5:04:3B:C2:2A:D0:E3:2F:72:F8 Authority key identifier: AA:4A:AC:19:48:CE:E2:3D:DF:4D:71:5F:80:35:22:F9:3B:0C:DD:B4 Certificate issuer: /CN=aa4aac1948cee23ddf4d715f803522f93b0cddb4 Certificate serial: 019AF27731B8500E9805E00E7BB870B59A7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft Manifest number: 090E Signing time: Sat 06 Dec 2025 07:01:28 +0000 Manifest this update: Sat 06 Dec 2025 07:01:28 +0000 Manifest next update: Sun 07 Dec 2025 07:01:28 +0000 Files and hashes: 1: 4F9izwsHHxNkuKU97mIzesCX1fA.roa (hash: 9EEtKc3sBCyfxrwHugYM/2yhW3k3q6DEwjqGSNZdJ9g=) 2: qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl (hash: WuQXrb2aanRVQgZJxGjKcY6AuBp3lJ7DqL7uBfVU72I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:31:b8:50:0e:98:05:e0:0e:7b:b8:70:b5:9a:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa4aac1948cee23ddf4d715f803522f93b0cddb4 Validity Not Before: Dec 6 07:01:28 2025 GMT Not After : Dec 7 07:01:28 2025 GMT Subject: CN=680c58409ce400891237a5043bc22ad0e32f72f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8e:28:e8:5a:5c:11:36:c6:80:3f:57:83:35: 24:8d:ad:96:49:c9:8b:17:da:3b:9c:e6:86:0a:77: 43:4a:fc:22:f6:82:d6:38:90:ff:10:41:f9:6a:0b: 19:6c:d9:3d:29:9e:74:20:cb:73:cb:d0:07:00:a7: 49:a7:13:59:b0:6d:d6:0e:01:c2:98:5a:d3:eb:2b: bf:fd:c9:2e:cd:2b:be:7c:08:ce:11:46:fd:f3:21: 62:1a:3c:37:0d:81:d1:dc:5c:21:e0:68:94:72:82: 16:d3:0c:b5:52:cd:fe:97:2b:5f:80:f2:28:1e:30: 89:95:bb:82:86:7b:9d:a3:b9:85:6f:e3:00:7b:d9: e3:69:d3:17:38:64:0d:9e:67:61:51:3e:a6:8c:4b: 83:25:18:06:66:a1:08:ff:bf:5d:6a:88:fc:30:9b: 42:42:41:42:8e:e1:e9:73:bb:d2:8a:27:59:22:4e: 84:6b:94:57:50:11:c4:db:c5:02:f4:ed:86:bf:69: f0:c6:ce:a7:d9:42:2c:0d:a8:29:69:b1:46:8a:c2: 31:b3:45:fb:4d:ec:ec:22:d1:19:e2:8a:25:49:c8: b7:fc:f4:1f:fc:a7:ec:7e:ea:6b:d2:d0:82:18:a9: b1:59:ea:e3:04:23:a9:70:b9:c9:4f:90:f0:d5:03: 41:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:0C:58:40:9C:E4:00:89:12:37:A5:04:3B:C2:2A:D0:E3:2F:72:F8 X509v3 Authority Key Identifier: keyid:AA:4A:AC:19:48:CE:E2:3D:DF:4D:71:5F:80:35:22:F9:3B:0C:DD:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:15:0b:33:d2:3d:f9:59:b7:61:e4:a4:a1:e9:cf:97:03:0c: fb:e9:7f:54:2f:19:a3:22:81:79:9b:0b:88:7b:8b:e0:03:3c: 74:81:0c:2b:01:4c:44:fd:48:4c:56:01:34:5c:96:ec:8e:1d: 58:ba:d1:4d:a8:41:b8:a3:d3:53:66:74:83:2b:63:45:4a:71: 72:6f:a8:6d:c2:40:6a:33:07:49:f4:37:6f:50:8c:ca:5c:fc: 22:13:74:d2:ac:f8:bf:57:7f:c8:1f:54:64:24:1f:1e:e3:ca: 49:ae:a7:4a:8e:40:39:f5:6c:a1:da:9f:78:b1:e5:35:6b:36: 25:72:d9:63:98:36:eb:10:1b:11:0e:93:ea:e1:39:b5:a4:4a: 3f:ea:10:25:39:52:13:a0:f7:c8:ea:bf:d8:50:64:2e:83:ab: e0:9d:2e:4b:bb:80:2a:e5:36:70:0f:e1:2d:1e:dc:04:21:59: 07:60:ab:4a:90:b4:43:05:d3:16:fd:25:24:71:90:16:ba:4e: 06:d8:0a:4b:f9:e8:52:14:cd:de:91:1f:32:cb:97:2a:ed:f5: a7:80:32:e1:7e:45:15:09:4f:12:9d:b3:26:3b:6b:e2:58:7d: f2:18:65:84:7c:7c:c9:6b:03:c9:6e:cd:2c:85:b0:ea:cf:62: 44:59:68:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydzG4UA6YBeAOe7hwtZp/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNGFhYzE5NDhjZWUyM2RkZjRkNzE1ZjgwMzUyMmY5M2Iw Y2RkYjQwHhcNMjUxMjA2MDcwMTI4WhcNMjUxMjA3MDcwMTI4WjAzMTEwLwYDVQQD Eyg2ODBjNTg0MDljZTQwMDg5MTIzN2E1MDQzYmMyMmFkMGUzMmY3MmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq44o6FpcETbGgD9XgzUkja2WScmL F9o7nOaGCndDSvwi9oLWOJD/EEH5agsZbNk9KZ50IMtzy9AHAKdJpxNZsG3WDgHC mFrT6yu//ckuzSu+fAjOEUb98yFiGjw3DYHR3Fwh4GiUcoIW0wy1Us3+lytfgPIo HjCJlbuChnudo7mFb+MAe9njadMXOGQNnmdhUT6mjEuDJRgGZqEI/79daoj8MJtC QkFCjuHpc7vSiidZIk6Ea5RXUBHE28UC9O2Gv2nwxs6n2UIsDagpabFGisIxs0X7 TezsItEZ4oolSci3/PQf/Kfsfupr0tCCGKmxWerjBCOpcLnJT5Dw1QNBbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGgMWECc5ACJEjelBDvCKtDjL3L4MB8GA1UdIwQY MBaAFKpKrBlIzuI9301xX4A1Ivk7DN20MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWtxc0dVak80ajNmVFhGZmdEVWktVHNNM2JRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wNmIyNDEtNmRlNy00ODVjLTk4YWUt ZjliZDY0Y2E2ZTRjLzEvcWtxc0dVak80ajNmVFhGZmdEVWktVHNNM2JRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8wNmIyNDEtNmRlNy00ODVjLTk4YWUtZjliZDY0Y2E2ZTRj LzEvcWtxc0dVak80ajNmVFhGZmdEVWktVHNNM2JRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATRULM9I9 +Vm3YeSkoenPlwMM++l/VC8ZoyKBeZsLiHuL4AM8dIEMKwFMRP1ITFYBNFyW7I4d WLrRTahBuKPTU2Z0gytjRUpxcm+obcJAajMHSfQ3b1CMylz8IhN00qz4v1d/yB9U ZCQfHuPKSa6nSo5AOfVsodqfeLHlNWs2JXLZY5g26xAbEQ6T6uE5taRKP+oQJTlS E6D3yOq/2FBkLoOr4J0uS7uAKuU2cA/hLR7cBCFZB2CrSpC0QwXTFv0lJHGQFrpO BtgKS/noUhTN3pEfMsuXKu31p4Ay4X5FFQlPEp2zJjtr4lh98hhlhHx8yWsDyW7N LIWw6s9iRFloDQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:58:46 2025 by rpki-client