This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.mft File: _QB9d6vr_l2GsInvuT4C3NMASsY.mft (raw, json) Hash identifier: YaujhKJ7ufoN/XP/+E0GpWRAliDoudwjmcLiQKw/GX0= Subject key identifier: 11:01:85:25:40:1E:15:5B:A6:AA:F6:5E:A2:C4:56:C3:37:24:E0:0D Authority key identifier: FD:00:7D:77:AB:EB:FE:5D:86:B0:89:EF:B9:3E:02:DC:D3:00:4A:C6 Certificate issuer: /CN=fd007d77abebfe5d86b089efb93e02dcd3004ac6 Certificate serial: 019AF2ADAB9F9F0E23389D1DC1D90BA604F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QB9d6vr_l2GsInvuT4C3NMASsY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.mft Manifest number: 0217 Signing time: Sat 06 Dec 2025 08:00:59 +0000 Manifest this update: Sat 06 Dec 2025 08:00:59 +0000 Manifest next update: Sun 07 Dec 2025 08:00:59 +0000 Files and hashes: 1: _QB9d6vr_l2GsInvuT4C3NMASsY.crl (hash: h9vsegWBOcmmBWhuFrpinAg/rASK51amk5YWNQTTxKo=) 2: bWo1p2kvLDaN2hfsArhL9srtb9s.roa (hash: UWHNEgib/6NKUlAE0qvnRy4yH/056aCyLvDBcALH7NY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.mft rsync://rpki.ripe.net/repository/DEFAULT/_QB9d6vr_l2GsInvuT4C3NMASsY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:ab:9f:9f:0e:23:38:9d:1d:c1:d9:0b:a6:04:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd007d77abebfe5d86b089efb93e02dcd3004ac6 Validity Not Before: Dec 6 08:00:59 2025 GMT Not After : Dec 7 08:00:59 2025 GMT Subject: CN=11018525401e155ba6aaf65ea2c456c33724e00d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:06:0c:4d:c8:9a:5e:be:72:38:33:62:00:fd: 1f:b7:56:59:b6:c7:a9:e1:4b:df:67:5c:30:c9:be: 2a:00:b2:60:04:15:9d:53:43:bc:fd:d6:7d:eb:bf: 10:eb:7e:07:68:cf:d2:50:fb:16:78:d2:c9:fb:5d: d7:b9:80:d5:3a:7a:05:1a:da:75:bb:89:3c:82:2f: fc:43:3d:3e:09:e8:cd:5f:c1:6a:ce:8b:cc:b0:43: 07:a9:94:81:ff:07:82:e2:27:d8:05:22:f2:50:8a: c2:ef:89:14:4a:ee:f9:0e:73:38:74:c1:b3:9d:d7: 16:f5:e1:a4:65:30:ff:cd:6d:bc:eb:a9:a7:06:ef: 0b:89:59:54:9a:98:85:ca:be:b0:f9:67:5f:e9:b9: 11:c5:7f:23:f2:71:db:e2:e4:74:92:7b:6e:dd:f6: ab:25:ca:ca:7e:42:48:58:93:d5:d4:a5:72:c6:d3: c4:89:8a:38:56:d1:e8:ad:7a:7b:58:c2:22:d1:0a: 76:d8:38:99:6b:10:6a:6e:d4:fb:d6:5a:58:29:03: fe:0b:22:ed:1b:ed:95:3e:30:e1:0b:ac:1d:9d:fc: 3b:03:9c:c1:e7:5d:c1:33:97:a5:ff:82:c2:16:e5: 6d:2c:ef:24:09:5a:18:df:a3:86:66:e1:27:ab:6c: 30:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:01:85:25:40:1E:15:5B:A6:AA:F6:5E:A2:C4:56:C3:37:24:E0:0D X509v3 Authority Key Identifier: keyid:FD:00:7D:77:AB:EB:FE:5D:86:B0:89:EF:B9:3E:02:DC:D3:00:4A:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QB9d6vr_l2GsInvuT4C3NMASsY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:28:29:13:0f:f6:e3:1f:95:ed:47:b7:95:1c:44:ab:94:de: 36:f3:fd:c7:53:2b:93:80:9c:92:02:96:dc:ba:e7:f1:01:83: 20:29:c5:17:37:a7:ec:18:58:1c:11:66:94:f1:9a:f6:c2:02: bd:8d:2e:d4:b6:ef:cf:0a:c4:9c:2e:ce:da:52:21:28:ca:eb: 14:00:81:e1:1e:15:74:62:cb:57:fb:cd:23:2b:a6:ea:4e:c3: ee:ad:65:4c:ec:ca:9b:c1:72:1b:79:1d:cb:32:4f:f9:e2:f7: d2:fe:0e:42:80:5c:70:f9:bc:8b:2d:c0:7a:2d:7a:35:7d:0c: 24:fd:d2:c5:37:07:e6:de:82:6e:d9:99:7e:1b:6f:1b:7d:f5: 98:8d:bb:0e:51:a4:bf:18:ea:54:07:81:07:f4:e8:63:e5:4b: 89:8e:d7:2d:b9:0e:c2:f2:05:ec:e3:a1:3f:8f:02:dd:26:b6: af:20:b3:33:36:63:5a:ca:67:c7:82:43:2d:9a:c9:96:48:98: 3b:cf:2e:dd:36:b4:8a:7a:87:cb:47:a4:11:4f:f6:27:90:0d: 3a:bc:74:43:7b:62:bc:a5:d5:61:70:fd:50:94:5f:e9:f1:73: d4:0d:0f:cd:66:6c:86:c7:e6:3a:40:f2:de:33:1a:34:83:a8: 6d:40:0b:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryraufnw4jOJ0dwdkLpgT0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMDA3ZDc3YWJlYmZlNWQ4NmIwODllZmI5M2UwMmRjZDMw MDRhYzYwHhcNMjUxMjA2MDgwMDU5WhcNMjUxMjA3MDgwMDU5WjAzMTEwLwYDVQQD EygxMTAxODUyNTQwMWUxNTViYTZhYWY2NWVhMmM0NTZjMzM3MjRlMDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgYMTciaXr5yODNiAP0ft1ZZtsep 4UvfZ1wwyb4qALJgBBWdU0O8/dZ9678Q634HaM/SUPsWeNLJ+13XuYDVOnoFGtp1 u4k8gi/8Qz0+CejNX8FqzovMsEMHqZSB/weC4ifYBSLyUIrC74kUSu75DnM4dMGz ndcW9eGkZTD/zW2866mnBu8LiVlUmpiFyr6w+Wdf6bkRxX8j8nHb4uR0kntu3far JcrKfkJIWJPV1KVyxtPEiYo4VtHorXp7WMIi0Qp22DiZaxBqbtT71lpYKQP+CyLt G+2VPjDhC6wdnfw7A5zB513BM5el/4LCFuVtLO8kCVoY36OGZuEnq2wwNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBEBhSVAHhVbpqr2XqLEVsM3JOANMB8GA1UdIwQY MBaAFP0AfXer6/5dhrCJ77k+AtzTAErGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1FCOWQ2dnJfbDJHc0ludnVUNEMzTk1BU3NZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8zNWQ3ZjYtYThjMi00Mzc0LTlhY2Yt MWU2ZmQ0YjZjMDRhLzEvX1FCOWQ2dnJfbDJHc0ludnVUNEMzTk1BU3NZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8zNWQ3ZjYtYThjMi00Mzc0LTlhY2YtMWU2ZmQ0YjZjMDRh LzEvX1FCOWQ2dnJfbDJHc0ludnVUNEMzTk1BU3NZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIigpEw/2 4x+V7Ue3lRxEq5TeNvP9x1Mrk4CckgKW3Lrn8QGDICnFFzen7BhYHBFmlPGa9sIC vY0u1LbvzwrEnC7O2lIhKMrrFACB4R4VdGLLV/vNIyum6k7D7q1lTOzKm8FyG3kd yzJP+eL30v4OQoBccPm8iy3Aei16NX0MJP3SxTcH5t6CbtmZfhtvG331mI27DlGk vxjqVAeBB/ToY+VLiY7XLbkOwvIF7OOhP48C3Sa2ryCzMzZjWspnx4JDLZrJlkiY O88u3Ta0inqHy0ekEU/2J5ANOrx0Q3tivKXVYXD9UJRf6fFz1A0PzWZshsfmOkDy 3jMaNIOobUALNg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:56:35 2025 by rpki-client