This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft File: qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft (raw, json) Hash identifier: YKaLIH2vqSFkTvBxxJKSk17rwACn7Hp2Z0CTYCv1y1I= Subject key identifier: ED:E9:CC:0F:CA:2A:6C:F3:31:7A:23:B8:9F:35:54:B5:F0:37:0C:66 Authority key identifier: A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74 Certificate issuer: /CN=a93616365693fb6502cb4d687bb66747b1a2fd74 Certificate serial: 019AF276AE06674DF9A8AC6E77B129BA7AD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft Manifest number: 123F Signing time: Sat 06 Dec 2025 07:00:55 +0000 Manifest this update: Sat 06 Dec 2025 07:00:55 +0000 Manifest next update: Sun 07 Dec 2025 07:00:55 +0000 Files and hashes: 1: dvh6dEQn3L0Lue4PHisFZ5z30t4.roa (hash: YZ3UChYkMOxFSMlqaHDcH6csBlA5vkgT+POe5BlyoUo=) 2: qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl (hash: FO91Kw+yRmO7nkoCYili9KtsRsAfJ+kDGYWPT0TrfI0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:ae:06:67:4d:f9:a8:ac:6e:77:b1:29:ba:7a:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a93616365693fb6502cb4d687bb66747b1a2fd74 Validity Not Before: Dec 6 07:00:55 2025 GMT Not After : Dec 7 07:00:55 2025 GMT Subject: CN=ede9cc0fca2a6cf3317a23b89f3554b5f0370c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:85:cb:58:d4:76:bd:46:e6:ac:04:7f:bc:ac: 41:04:9d:06:4c:d5:cb:ae:1a:f9:74:6c:75:4d:f2: a4:59:a1:02:5a:06:02:d0:55:bf:b5:bf:ec:bb:89: 51:e8:c3:87:8c:85:78:52:52:47:43:ca:47:34:d0: e9:6e:4f:98:a4:49:40:83:22:4f:7d:65:ce:43:a2: 9e:5d:b6:83:af:08:6a:93:ff:fe:4b:4d:cb:8d:64: 6c:ab:90:e9:27:14:9a:13:6c:73:4d:13:ec:4a:be: 97:a6:20:3d:ef:f5:d1:0c:a5:ab:70:98:a1:b3:6f: a4:6e:17:c9:3b:d5:5c:4d:57:cd:36:7f:14:d0:5e: 49:8d:90:d3:2d:c2:73:4f:88:f0:65:a5:51:e8:d1: 1a:f0:19:7b:ad:b3:bf:46:bb:f9:d5:25:f6:7a:4a: b9:b9:3f:d2:a2:48:83:1b:e9:b5:8c:3a:76:76:99: b9:37:07:5e:f9:f5:b5:67:c1:db:05:77:47:6b:9b: b9:8b:c0:52:20:bd:7f:79:36:9c:f2:98:32:e1:45: 17:e3:98:ee:00:c0:ec:a9:24:88:80:78:a3:5b:bf: 8a:f4:3f:89:c9:f1:1b:28:76:6a:f9:9b:ed:1e:05: 20:79:15:7f:ab:fd:82:f3:d2:3d:29:29:b4:db:99: cc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:E9:CC:0F:CA:2A:6C:F3:31:7A:23:B8:9F:35:54:B5:F0:37:0C:66 X509v3 Authority Key Identifier: keyid:A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:ad:6c:05:08:3e:ff:32:a3:eb:ac:97:02:8b:07:d9:70:5b: bd:c7:fb:07:c0:53:a8:f9:99:44:29:c5:57:58:b5:81:58:15: 2c:0f:3c:03:1e:b3:6f:5d:dc:9e:93:a4:40:8a:5c:01:25:0b: fa:b9:1a:fc:77:04:8c:13:d0:ef:a2:98:50:01:76:93:85:2c: d5:ff:a7:8d:5b:59:46:e1:70:51:92:e5:c6:27:0d:ea:7d:e4: 34:8f:cc:75:5c:cb:f7:2b:69:56:d5:58:1f:c0:b6:a3:09:8a: 35:de:74:08:c1:26:a1:dc:76:11:79:36:66:06:91:1b:e0:22: 5e:6d:54:84:b4:c4:11:a5:df:c0:ce:fa:a3:1a:33:2b:1a:38: d7:19:52:92:fd:a7:3b:30:22:c5:47:18:15:10:67:d2:e6:10: 5d:2a:19:95:c5:9b:ea:32:51:29:a2:9c:6e:e5:d9:3d:eb:1d: 20:09:d7:ac:44:44:42:a2:c9:d4:51:85:f8:13:57:6f:8c:c8: f7:7a:88:1e:bd:95:3c:d4:f0:51:c1:87:5e:27:33:5d:99:1c: be:9b:8e:fb:57:6b:b9:3e:89:6d:41:b3:7a:3f:db:65:c5:4a: e5:63:4b:1e:53:e7:27:eb:ed:2c:e6:af:a1:ee:22:ef:a2:d6: 87:01:6e:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydq4GZ035qKxud7EpunrYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MzYxNjM2NTY5M2ZiNjUwMmNiNGQ2ODdiYjY2NzQ3YjFh MmZkNzQwHhcNMjUxMjA2MDcwMDU1WhcNMjUxMjA3MDcwMDU1WjAzMTEwLwYDVQQD EyhlZGU5Y2MwZmNhMmE2Y2YzMzE3YTIzYjg5ZjM1NTRiNWYwMzcwYzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYXLWNR2vUbmrAR/vKxBBJ0GTNXL rhr5dGx1TfKkWaECWgYC0FW/tb/su4lR6MOHjIV4UlJHQ8pHNNDpbk+YpElAgyJP fWXOQ6KeXbaDrwhqk//+S03LjWRsq5DpJxSaE2xzTRPsSr6XpiA97/XRDKWrcJih s2+kbhfJO9VcTVfNNn8U0F5JjZDTLcJzT4jwZaVR6NEa8Bl7rbO/Rrv51SX2ekq5 uT/SokiDG+m1jDp2dpm5Nwde+fW1Z8HbBXdHa5u5i8BSIL1/eTac8pgy4UUX45ju AMDsqSSIgHijW7+K9D+JyfEbKHZq+ZvtHgUgeRV/q/2C89I9KSm025nMvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO3pzA/KKmzzMXojuJ81VLXwNwxmMB8GA1UdIwQY MBaAFKk2FjZWk/tlAstNaHu2Z0exov10MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVRZV05sYVQtMlVDeTAxb2U3Wm5SN0dpX1hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZWIxODctNzQ4Ni00MDRjLWExZGMt MDkxMjk4NzJlMTQzLzEvcVRZV05sYVQtMlVDeTAxb2U3Wm5SN0dpX1hRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jZWIxODctNzQ4Ni00MDRjLWExZGMtMDkxMjk4NzJlMTQz LzEvcVRZV05sYVQtMlVDeTAxb2U3Wm5SN0dpX1hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn61sBQg+ /zKj66yXAosH2XBbvcf7B8BTqPmZRCnFV1i1gVgVLA88Ax6zb13cnpOkQIpcASUL +rka/HcEjBPQ76KYUAF2k4Us1f+njVtZRuFwUZLlxicN6n3kNI/MdVzL9ytpVtVY H8C2owmKNd50CMEmodx2EXk2ZgaRG+AiXm1UhLTEEaXfwM76oxozKxo41xlSkv2n OzAixUcYFRBn0uYQXSoZlcWb6jJRKaKcbuXZPesdIAnXrEREQqLJ1FGF+BNXb4zI 93qIHr2VPNTwUcGHXiczXZkcvpuO+1druT6JbUGzej/bZcVK5WNLHlPnJ+vtLOav oe4i76LWhwFuLg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:02:36 2025 by rpki-client