This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
File: qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft (raw, json)
Hash identifier: wiUw6fijB/apx3hjekwnwWRjx8WyMk7ZbF79ScT84jY=
Subject key identifier: 36:D4:90:4D:F3:07:26:DA:55:5D:91:AA:C6:04:5A:44:F7:02:F0:0D
Authority key identifier: AA:FC:3D:2C:92:97:10:30:6E:84:7C:60:7D:38:11:4A:EB:B3:CC:08
Certificate issuer: /CN=aafc3d2c929710306e847c607d38114aebb3cc08
Certificate serial: 019AF12DB22CB5807FF1FC2EE7972B8E8692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
Manifest number: 1761
Signing time: Sat 06 Dec 2025 01:01:34 +0000
Manifest this update: Sat 06 Dec 2025 01:01:34 +0000
Manifest next update: Sun 07 Dec 2025 01:01:34 +0000
Files and hashes: 1: _apVPFDtoRumkOLoXwsvk68svtc.roa (hash: +ctIxD4w3ARboj6lSoUyjZFSq6bE6ZLRIPRMV/RgDGI=)
2: qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl (hash: o1/F4boREtOLW3E4HZvar2Q0wr9Myf0TxYUWfFeSFVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 01:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:2d:b2:2c:b5:80:7f:f1:fc:2e:e7:97:2b:8e:86:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aafc3d2c929710306e847c607d38114aebb3cc08
Validity
Not Before: Dec 6 01:01:34 2025 GMT
Not After : Dec 7 01:01:34 2025 GMT
Subject: CN=36d4904df30726da555d91aac6045a44f702f00d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d0:78:ed:5c:20:70:67:12:8c:ca:38:5f:82:
ca:c0:27:65:88:72:22:9e:72:a9:7d:32:c3:67:35:
4c:30:e4:90:71:3f:a8:a7:99:ed:0c:f3:0b:43:ac:
dc:ab:3a:48:4c:d1:fd:6d:60:0b:cf:c8:f6:67:64:
55:b9:25:27:f9:db:cd:d2:b3:dc:a9:33:b8:7e:27:
fa:42:a5:e9:7e:36:f2:c3:4e:0c:75:7b:f6:c7:df:
59:1e:37:24:2c:a1:cb:08:1c:34:36:31:22:2e:2c:
7d:a8:49:d4:5b:04:b4:92:27:a2:b2:1d:0b:a6:68:
be:82:b9:4c:85:92:88:8b:66:9f:28:0e:28:5e:83:
98:dd:d9:34:09:bc:78:72:48:a1:0e:7d:5c:27:2c:
0d:b9:4b:cc:c9:42:86:b3:e3:6b:49:95:dd:94:ba:
d2:80:99:60:cc:7c:67:19:07:e7:5b:d5:90:a6:4e:
2a:d1:99:f7:64:46:12:01:e7:1d:00:e0:34:bb:d1:
4e:d4:78:66:10:26:41:2d:2f:ef:53:bf:93:75:26:
0a:a9:1c:2f:81:6a:11:22:fb:40:c6:ec:3e:c2:68:
40:12:c7:90:4a:cc:c5:cc:5e:65:10:ba:5c:00:21:
ef:0c:d3:0c:b5:f0:01:5a:da:a9:dc:2f:ab:36:96:
a4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D4:90:4D:F3:07:26:DA:55:5D:91:AA:C6:04:5A:44:F7:02:F0:0D
X509v3 Authority Key Identifier:
keyid:AA:FC:3D:2C:92:97:10:30:6E:84:7C:60:7D:38:11:4A:EB:B3:CC:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a4:cb:17:60:94:8e:e7:15:bd:78:fc:51:25:7f:5d:37:44:
de:24:35:ca:fc:ca:dd:a4:40:05:7d:93:f2:c4:97:00:4c:56:
94:18:b9:ac:30:2c:cf:14:1d:35:87:1f:df:d2:e4:9e:ef:4c:
49:1e:ae:4c:14:4a:3f:bb:2c:91:d0:6f:d8:90:99:7d:17:bb:
02:0a:2e:52:f7:6d:dc:ac:3f:5e:7e:bc:44:66:67:7f:25:fc:
e1:a2:57:8a:ea:e1:fc:0d:c6:a4:69:6d:1a:bd:54:53:7f:4d:
36:d1:be:3d:a0:e2:27:87:97:93:67:b9:45:bc:ac:fd:b7:d9:
39:82:6f:d5:18:62:5c:7d:9b:24:4d:3c:3a:68:94:9d:38:f9:
3a:ec:9f:e0:b9:71:43:10:93:0d:24:a0:a6:0d:69:0a:89:4f:
cc:f7:5c:ec:c8:20:38:97:b9:53:53:59:e5:00:81:bd:b6:17:
4e:00:ca:94:48:64:9a:37:e9:5f:25:62:fa:2b:8e:5d:64:4b:
3c:da:43:7b:75:42:48:ba:a5:d1:37:42:84:02:bd:11:4b:b1:
7b:7f:9f:71:2a:95:8c:3f:c8:02:90:e6:5c:32:d9:95:e0:62:
da:85:ff:60:4c:1c:e4:af:df:d6:44:0a:75:de:a0:cb:5b:cf:
c4:cf:bd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:08:16 2025 by rpki-client