This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft File: qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft (raw, json) Hash identifier: ataxUZwqV1cDKugL+6ZBYDxQCWub9o6nmV0XlYrsOfg= Subject key identifier: 7D:08:E1:66:C0:AC:8C:E4:BD:74:74:6C:4A:0F:43:7D:82:38:82:9B Authority key identifier: AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39 Certificate issuer: /CN=aa8551e851e69db165c6c632af45f21715512939 Certificate serial: 019AF4D2961AA954888571392C6DB808E6AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft Manifest number: 1532 Signing time: Sat 06 Dec 2025 18:00:32 +0000 Manifest this update: Sat 06 Dec 2025 18:00:32 +0000 Manifest next update: Sun 07 Dec 2025 18:00:32 +0000 Files and hashes: 1: 1-3qrdz_tzhFoK7Ucjl6tCL0s2OM.roa (hash: kxTjIhZmXXDDNlqbd3Q2+gkjPCT2RJ+wWhOvQVmko/I=) 2: CvzVIxPE_Xl1M87JmAYQt0uyDD8.roa (hash: 2wAD/UrmgnStcRFk04oSlNoJEw3MlH57DosRki5ZylE=) 3: qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl (hash: kiP1JT4YQOQHrtVS93oNze2eU9LFXAH57FESEZPPwpc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:d2:96:1a:a9:54:88:85:71:39:2c:6d:b8:08:e6:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa8551e851e69db165c6c632af45f21715512939 Validity Not Before: Dec 6 18:00:32 2025 GMT Not After : Dec 7 18:00:32 2025 GMT Subject: CN=7d08e166c0ac8ce4bd74746c4a0f437d8238829b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:17:e7:5f:3d:36:ac:3c:48:f2:cd:2b:c3:f5: f3:d3:e4:7e:c0:4c:0a:ca:bf:6e:4e:31:e4:e2:56: 11:e9:ee:c2:36:bc:38:88:35:e2:b7:40:a8:ba:80: f4:21:b1:94:08:8f:7b:8d:29:b4:c0:22:43:e5:36: 06:7f:06:2d:75:f0:f2:db:91:dc:45:49:e8:15:d8: 68:f9:6c:7c:11:ad:f8:5a:ff:3b:15:44:e7:de:32: 35:03:0e:5e:8b:5b:eb:d9:6b:17:43:48:70:c8:f1: e9:40:4e:8c:32:43:3f:a7:94:58:3d:f1:93:09:72: d4:db:f3:65:4d:94:46:64:c7:6e:3c:c5:86:45:d1: 16:fe:62:91:4b:b2:35:2d:b8:86:34:96:18:0c:70: 44:62:59:50:ed:db:a4:13:33:3c:53:b7:3e:3d:d8: bd:8c:9c:27:e0:01:77:83:82:26:da:b7:b9:c2:6c: d7:c0:35:88:c2:4e:fb:c9:96:15:d5:30:d6:4f:94: f2:92:84:00:1e:7d:44:17:c2:e8:0d:f6:bd:bb:96: 10:4d:2f:e8:f8:ae:40:b6:b1:6f:b9:86:ac:d4:f9: 49:d6:a6:9f:24:35:33:29:ee:11:15:e4:86:46:55: 1e:58:39:c0:d5:f9:46:35:08:07:e0:eb:40:e2:0e: ec:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:08:E1:66:C0:AC:8C:E4:BD:74:74:6C:4A:0F:43:7D:82:38:82:9B X509v3 Authority Key Identifier: keyid:AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:76:97:f8:c9:2e:c0:d8:fa:61:21:89:34:e4:2e:04:4b:ef: 8d:72:ad:98:9b:ab:fb:e2:4b:bf:1c:e2:2f:c3:c2:ed:21:03: 20:64:fd:bc:67:9c:91:fa:d7:b9:00:62:fd:7f:e8:3c:3f:10: 9c:27:ba:e7:d1:35:9f:83:76:ea:c4:b3:52:0e:ce:24:b4:8a: bb:ab:57:5f:5e:18:07:cc:4a:78:9a:1a:2b:45:77:e0:90:0c: 57:77:1a:4f:4b:d8:a6:6c:42:b9:38:9a:58:76:58:f4:78:fc: ab:3c:6b:fc:bd:36:a6:6e:dc:ee:73:cf:48:4c:7a:d1:d7:f6: 78:a4:d6:10:f5:63:36:14:46:a5:8c:53:7c:d4:b3:cb:ea:1f: c6:7a:b1:6d:01:a9:cd:a5:e4:e1:a3:da:94:9d:1a:19:4e:fc: 28:82:a5:97:66:39:db:e8:7f:2a:02:12:4b:20:94:be:c5:ac: 9a:11:b4:3a:af:c8:b5:67:65:b6:fe:f3:a7:c3:99:32:85:f2: d3:a5:33:49:4f:c4:86:ef:19:4c:64:38:86:af:ac:ec:fc:c9: 64:c8:71:98:29:2c:3e:99:19:cd:a6:ec:8b:c1:44:bf:6a:22: f8:62:e3:63:44:da:63:ce:1d:83:b3:22:20:de:ca:13:91:09: 95:5f:54:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr00pYaqVSIhXE5LG24COatMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhODU1MWU4NTFlNjlkYjE2NWM2YzYzMmFmNDVmMjE3MTU1 MTI5MzkwHhcNMjUxMjA2MTgwMDMyWhcNMjUxMjA3MTgwMDMyWjAzMTEwLwYDVQQD Eyg3ZDA4ZTE2NmMwYWM4Y2U0YmQ3NDc0NmM0YTBmNDM3ZDgyMzg4MjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BfnXz02rDxI8s0rw/Xz0+R+wEwK yr9uTjHk4lYR6e7CNrw4iDXit0CouoD0IbGUCI97jSm0wCJD5TYGfwYtdfDy25Hc RUnoFdho+Wx8Ea34Wv87FUTn3jI1Aw5ei1vr2WsXQ0hwyPHpQE6MMkM/p5RYPfGT CXLU2/NlTZRGZMduPMWGRdEW/mKRS7I1LbiGNJYYDHBEYllQ7dukEzM8U7c+Pdi9 jJwn4AF3g4Im2re5wmzXwDWIwk77yZYV1TDWT5TykoQAHn1EF8LoDfa9u5YQTS/o +K5AtrFvuYas1PlJ1qafJDUzKe4RFeSGRlUeWDnA1flGNQgH4OtA4g7sMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0I4WbArIzkvXR0bEoPQ32COIKbMB8GA1UdIwQY MBaAFKqFUehR5p2xZcbGMq9F8hcVUSk5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW9WUjZGSG1uYkZseHNZeXIwWHlGeFZSS1RrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9kZTk2MTUtMGJjMC00ZTVlLTgzMTgt ZmIxZDk5MmRlMDAxLzEvcW9WUjZGSG1uYkZseHNZeXIwWHlGeFZSS1RrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9kZTk2MTUtMGJjMC00ZTVlLTgzMTgtZmIxZDk5MmRlMDAx LzEvcW9WUjZGSG1uYkZseHNZeXIwWHlGeFZSS1RrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV3aX+Mku wNj6YSGJNOQuBEvvjXKtmJur++JLvxziL8PC7SEDIGT9vGeckfrXuQBi/X/oPD8Q nCe659E1n4N26sSzUg7OJLSKu6tXX14YB8xKeJoaK0V34JAMV3caT0vYpmxCuTia WHZY9Hj8qzxr/L02pm7c7nPPSEx60df2eKTWEPVjNhRGpYxTfNSzy+ofxnqxbQGp zaXk4aPalJ0aGU78KIKll2Y52+h/KgISSyCUvsWsmhG0Oq/ItWdltv7zp8OZMoXy 06UzSU/Ehu8ZTGQ4hq+s7PzJZMhxmCksPpkZzabsi8FEv2oi+GLjY0TaY84dg7Mi IN7KE5EJlV9UZw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:03:27 2025 by rpki-client