This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft File: QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft (raw, json) Hash identifier: 6MxmnWFO3vj9A5Rx3OVKT5OwkrSyKRXNbHW6Z25P/N0= Subject key identifier: 52:A6:A8:CE:E8:81:3B:7E:67:FD:F7:DC:9A:DA:16:BB:AF:09:A3:F1 Authority key identifier: 40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45 Certificate issuer: /CN=4003350bcc7b540fadea951e046081d8da06c145 Certificate serial: 019AF2AD3D2DB7CAB9FF8ADD01E71008578A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft Manifest number: 093C Signing time: Sat 06 Dec 2025 08:00:30 +0000 Manifest this update: Sat 06 Dec 2025 08:00:30 +0000 Manifest next update: Sun 07 Dec 2025 08:00:30 +0000 Files and hashes: 1: QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl (hash: kP0vGG+4BzosVcZ9Vpq4+JtR55pc1sRbC0ysnwaN6yg=) 2: pqlsmAxEb6u37QxzF6qCzpQ4SBk.roa (hash: teI/DPbnnC6ro04KC4yzmzn/SS2I9ht6+3TdoQMOA3A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:3d:2d:b7:ca:b9:ff:8a:dd:01:e7:10:08:57:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4003350bcc7b540fadea951e046081d8da06c145 Validity Not Before: Dec 6 08:00:30 2025 GMT Not After : Dec 7 08:00:30 2025 GMT Subject: CN=52a6a8cee8813b7e67fdf7dc9ada16bbaf09a3f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:61:aa:21:22:51:e4:ab:a3:0e:32:da:32:af: ab:ab:5f:8d:93:da:0d:ea:37:69:f7:30:42:9e:b2: 3d:29:e6:e3:e7:af:31:89:26:59:7d:bf:05:a3:56: a3:5b:9f:e4:87:9b:7e:69:d7:40:8d:36:ff:9a:60: b9:84:d5:c5:55:08:85:63:47:34:bc:04:5a:aa:0d: e5:68:5f:20:40:67:7c:ad:48:e9:e3:53:9f:71:e1: f1:86:88:0a:92:70:fd:b5:97:a3:f4:bf:d2:f7:75: eb:7e:92:6f:17:ed:e4:31:f2:fc:05:7e:3e:35:ff: 80:97:b8:6d:e2:9f:2b:5b:4d:2b:ed:46:2a:9d:d8: fe:3a:d7:e5:0f:f0:50:4b:85:f1:d8:99:78:00:c8: a3:26:e6:8b:3e:35:39:65:3b:57:32:ac:c5:dd:7d: 7a:d1:ff:30:49:6c:78:32:fd:a4:05:75:17:c4:cb: 99:5c:f9:08:bb:fc:4f:36:4e:78:89:62:79:f0:f1: ab:ca:1a:52:3d:12:23:c1:e7:97:ba:81:eb:40:ac: 34:44:14:80:10:de:9e:5b:c8:2f:e5:99:0b:0b:d3: 12:ce:95:5c:4c:76:0d:0d:ff:cf:7d:17:20:c4:c7: e6:c1:79:b4:9c:de:90:e3:e2:27:20:26:36:5d:35: 1f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A6:A8:CE:E8:81:3B:7E:67:FD:F7:DC:9A:DA:16:BB:AF:09:A3:F1 X509v3 Authority Key Identifier: keyid:40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:46:ee:4d:25:21:5d:b7:ce:6a:8a:ae:09:e1:85:97:4d:bb: ea:06:2a:0d:3e:d4:d4:ee:0b:b3:ad:5d:7e:b4:49:12:0b:85: aa:0e:36:e9:2e:c7:ca:ed:75:ea:88:09:9a:93:0e:9c:fb:5e: 4c:37:ac:cb:66:b0:00:d5:5a:6c:1f:9f:ad:70:3b:74:4c:7d: 2e:be:2b:2d:9c:21:a6:70:51:18:22:57:ad:38:fd:3b:15:4f: 02:56:fd:04:23:9b:51:b7:3f:b7:5b:23:ca:3f:a1:b1:d2:49: 92:6d:89:eb:4d:65:eb:8e:58:94:18:e4:40:5a:90:fd:f4:c8: db:63:a0:80:0c:14:27:50:c5:fb:48:bb:d9:e0:37:f4:49:51: 37:3b:45:c2:82:62:33:23:78:ad:79:c3:fe:43:0a:a0:07:d6: 76:34:c6:74:22:87:c5:b8:11:20:a5:2d:f3:f6:7f:12:e2:22: 3a:f6:1f:7f:81:c8:29:0d:29:53:c6:a3:37:9b:3a:55:79:9c: 33:35:70:2a:4a:34:45:0a:be:e7:3e:d1:ee:7a:97:77:4d:08: 74:05:07:75:22:30:a1:da:04:93:9b:0d:3b:c0:20:50:5e:85: b9:9b:17:66:6d:0a:ef:a1:4e:6c:de:79:cd:7a:45:e7:3f:b2: 4b:22:09:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrT0tt8q5/4rdAecQCFeKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMDMzNTBiY2M3YjU0MGZhZGVhOTUxZTA0NjA4MWQ4ZGEw NmMxNDUwHhcNMjUxMjA2MDgwMDMwWhcNMjUxMjA3MDgwMDMwWjAzMTEwLwYDVQQD Eyg1MmE2YThjZWU4ODEzYjdlNjdmZGY3ZGM5YWRhMTZiYmFmMDlhM2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7GGqISJR5KujDjLaMq+rq1+Nk9oN 6jdp9zBCnrI9Kebj568xiSZZfb8Fo1ajW5/kh5t+addAjTb/mmC5hNXFVQiFY0c0 vARaqg3laF8gQGd8rUjp41OfceHxhogKknD9tZej9L/S93XrfpJvF+3kMfL8BX4+ Nf+Al7ht4p8rW00r7UYqndj+OtflD/BQS4Xx2Jl4AMijJuaLPjU5ZTtXMqzF3X16 0f8wSWx4Mv2kBXUXxMuZXPkIu/xPNk54iWJ58PGryhpSPRIjweeXuoHrQKw0RBSA EN6eW8gv5ZkLC9MSzpVcTHYNDf/PfRcgxMfmwXm0nN6Q4+InICY2XTUfMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKmqM7ogTt+Z/333JraFruvCaPxMB8GA1UdIwQY MBaAFEADNQvMe1QPreqVHgRggdjaBsFFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUFNMUM4eDdWQS10NnBVZUJHQ0IyTm9Hd1VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kZDg4NzctZDA4Mi00MWVhLTlmODUt Njk2YjYxNWNiZWMzLzEvUUFNMUM4eDdWQS10NnBVZUJHQ0IyTm9Hd1VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9kZDg4NzctZDA4Mi00MWVhLTlmODUtNjk2YjYxNWNiZWMz LzEvUUFNMUM4eDdWQS10NnBVZUJHQ0IyTm9Hd1VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATUbuTSUh XbfOaoquCeGFl0276gYqDT7U1O4Ls61dfrRJEguFqg426S7Hyu116ogJmpMOnPte TDesy2awANVabB+frXA7dEx9Lr4rLZwhpnBRGCJXrTj9OxVPAlb9BCObUbc/t1sj yj+hsdJJkm2J601l645YlBjkQFqQ/fTI22OggAwUJ1DF+0i72eA39ElRNztFwoJi MyN4rXnD/kMKoAfWdjTGdCKHxbgRIKUt8/Z/EuIiOvYff4HIKQ0pU8ajN5s6VXmc MzVwKko0RQq+5z7R7nqXd00IdAUHdSIwodoEk5sNO8AgUF6FuZsXZm0K76FObN55 zXpF5z+ySyIJiA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:04:36 2025 by rpki-client