This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4a3068-ea9d-4966-be55-7943d9a79bd2/1/Qn35XuEKKtTq8ILfrBWYOLN9NFA.mft File: Qn35XuEKKtTq8ILfrBWYOLN9NFA.mft (raw, json) Hash identifier: zXByEXpJdTHAAFY6XRmJl/zgfAnye1YPZBmqKt5tZ7g= Subject key identifier: 82:03:AB:32:0A:B6:A6:C7:DC:22:F3:96:FE:C9:02:B2:9C:E3:CF:1C Authority key identifier: 42:7D:F9:5E:E1:0A:2A:D4:EA:F0:82:DF:AC:15:98:38:B3:7D:34:50 Certificate issuer: /CN=427df95ee10a2ad4eaf082dfac159838b37d3450 Certificate serial: 019AF31B9F6901FBA8FF83FCC8DB2C066F6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qn35XuEKKtTq8ILfrBWYOLN9NFA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a3068-ea9d-4966-be55-7943d9a79bd2/1/Qn35XuEKKtTq8ILfrBWYOLN9NFA.mft Manifest number: 07B9 Signing time: Sat 06 Dec 2025 10:01:04 +0000 Manifest this update: Sat 06 Dec 2025 10:01:04 +0000 Manifest next update: Sun 07 Dec 2025 10:01:04 +0000 Files and hashes: 1: BR-wwst0Mwoj4cW4aMMLkST0T08.roa (hash: KhuoTa1EwW+NDwJopflLn+SOxpsU8qTU0jm6Bsplu/Y=) 2: Qn35XuEKKtTq8ILfrBWYOLN9NFA.crl (hash: MOaoeG9gn3zv92LwmtjW3UdI3bWF+y/c184V3rpzHFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a3068-ea9d-4966-be55-7943d9a79bd2/1/Qn35XuEKKtTq8ILfrBWYOLN9NFA.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/4a3068-ea9d-4966-be55-7943d9a79bd2/1/Qn35XuEKKtTq8ILfrBWYOLN9NFA.mft rsync://rpki.ripe.net/repository/DEFAULT/Qn35XuEKKtTq8ILfrBWYOLN9NFA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:9f:69:01:fb:a8:ff:83:fc:c8:db:2c:06:6f:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=427df95ee10a2ad4eaf082dfac159838b37d3450 Validity Not Before: Dec 6 10:01:04 2025 GMT Not After : Dec 7 10:01:04 2025 GMT Subject: CN=8203ab320ab6a6c7dc22f396fec902b29ce3cf1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7d:09:63:02:87:4e:4f:1c:6a:aa:cf:cb:2d: b0:4e:14:f4:65:ea:52:08:46:70:fd:da:15:a1:f6: 30:ad:64:dc:65:54:0e:f2:73:f2:90:22:e9:bf:d9: f8:74:e3:79:32:41:dd:48:5a:12:8f:48:dc:39:33: 81:22:b0:3f:6d:f8:01:24:a7:20:20:a3:5d:f5:3f: ec:33:cf:99:59:eb:49:f5:04:4e:71:bb:8f:fe:7a: 78:87:a8:e6:f4:ee:2f:97:2b:b2:8c:5e:f3:54:e3: 25:d7:05:71:64:d0:1f:5a:c5:be:3e:c2:4e:25:99: 91:d8:22:b9:68:7c:ba:8f:30:1f:2b:1d:01:a3:07: fe:62:26:4b:1f:ab:df:dd:bb:35:97:5d:ed:43:b4: d5:e4:ec:d0:5b:3f:8b:71:e1:02:26:f4:1a:8d:78: 45:b8:99:c9:80:13:66:c5:b3:a5:7e:0e:57:4e:03: ed:d8:fe:6f:bd:ee:1b:d0:0a:ab:6b:dd:c0:cb:10: 06:05:98:4c:e1:e4:f4:7a:c3:1c:df:37:68:26:48: d5:3d:1b:78:36:19:2c:31:96:d2:bb:49:e0:e8:bb: 24:f6:94:e2:45:b0:67:da:aa:63:d6:68:c2:a3:44: 8b:b4:17:9c:11:b0:16:c7:48:7f:d3:3d:21:6f:e0: 61:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:03:AB:32:0A:B6:A6:C7:DC:22:F3:96:FE:C9:02:B2:9C:E3:CF:1C X509v3 Authority Key Identifier: keyid:42:7D:F9:5E:E1:0A:2A:D4:EA:F0:82:DF:AC:15:98:38:B3:7D:34:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qn35XuEKKtTq8ILfrBWYOLN9NFA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a3068-ea9d-4966-be55-7943d9a79bd2/1/Qn35XuEKKtTq8ILfrBWYOLN9NFA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a3068-ea9d-4966-be55-7943d9a79bd2/1/Qn35XuEKKtTq8ILfrBWYOLN9NFA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:56:8a:f1:d5:67:48:88:84:2c:9e:06:78:0a:1a:63:78:1b: 55:fe:bf:12:c4:c5:a4:b8:77:f5:ae:30:ba:6c:bf:a7:46:d0: 85:24:27:28:ec:3d:a3:b9:18:42:fd:1a:4c:c0:75:e5:e2:89: c2:de:2a:0f:dd:61:4d:e4:81:dc:f3:5b:56:64:3a:e6:fa:24: 73:62:29:90:89:3f:e1:c3:9c:f9:de:41:d8:7c:15:6a:51:9c: d1:f1:46:03:3b:7e:56:31:50:ed:79:dc:4b:08:84:72:cd:73: 9e:a2:7b:c1:18:79:fe:b1:53:a0:63:07:88:d2:c9:82:01:01: 17:ed:fe:56:b5:34:78:62:59:98:7e:94:55:85:24:19:04:a4: da:89:44:fe:67:15:de:bf:3a:33:8e:db:6c:7f:04:e2:ab:4f: 73:1d:94:0b:19:2c:8d:a5:97:6e:8e:93:f8:2e:80:02:97:77: cd:dd:e0:8e:ab:15:ef:e6:61:28:48:60:ea:96:c8:1a:46:3d: ec:c8:f2:cc:f8:f5:ee:d1:b3:ac:71:e1:4c:b6:2f:ce:53:7c: 2f:ef:a6:0c:ae:4b:94:50:b2:7a:a2:96:2c:e0:cc:b0:04:9b: 90:61:5b:1c:df:26:e4:be:45:f6:ed:14:d9:6c:8a:b6:7a:8f: ca:fa:b6:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG59pAfuo/4P8yNssBm9uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyN2RmOTVlZTEwYTJhZDRlYWYwODJkZmFjMTU5ODM4YjM3 ZDM0NTAwHhcNMjUxMjA2MTAwMTA0WhcNMjUxMjA3MTAwMTA0WjAzMTEwLwYDVQQD Eyg4MjAzYWIzMjBhYjZhNmM3ZGMyMmYzOTZmZWM5MDJiMjljZTNjZjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqX0JYwKHTk8caqrPyy2wThT0ZepS CEZw/doVofYwrWTcZVQO8nPykCLpv9n4dON5MkHdSFoSj0jcOTOBIrA/bfgBJKcg IKNd9T/sM8+ZWetJ9QROcbuP/np4h6jm9O4vlyuyjF7zVOMl1wVxZNAfWsW+PsJO JZmR2CK5aHy6jzAfKx0Bowf+YiZLH6vf3bs1l13tQ7TV5OzQWz+LceECJvQajXhF uJnJgBNmxbOlfg5XTgPt2P5vve4b0Aqra93AyxAGBZhM4eT0esMc3zdoJkjVPRt4 NhksMZbSu0ng6Lsk9pTiRbBn2qpj1mjCo0SLtBecEbAWx0h/0z0hb+Bh9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIIDqzIKtqbH3CLzlv7JArKc488cMB8GA1UdIwQY MBaAFEJ9+V7hCirU6vCC36wVmDizfTRQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUW4zNVh1RUtLdFRxOElMZnJCV1lPTE45TkZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC80YTMwNjgtZWE5ZC00OTY2LWJlNTUt Nzk0M2Q5YTc5YmQyLzEvUW4zNVh1RUtLdFRxOElMZnJCV1lPTE45TkZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC80YTMwNjgtZWE5ZC00OTY2LWJlNTUtNzk0M2Q5YTc5YmQy LzEvUW4zNVh1RUtLdFRxOElMZnJCV1lPTE45TkZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAalaK8dVn SIiELJ4GeAoaY3gbVf6/EsTFpLh39a4wumy/p0bQhSQnKOw9o7kYQv0aTMB15eKJ wt4qD91hTeSB3PNbVmQ65vokc2IpkIk/4cOc+d5B2HwValGc0fFGAzt+VjFQ7Xnc SwiEcs1znqJ7wRh5/rFToGMHiNLJggEBF+3+VrU0eGJZmH6UVYUkGQSk2olE/mcV 3r86M47bbH8E4qtPcx2UCxksjaWXbo6T+C6AApd3zd3gjqsV7+ZhKEhg6pbIGkY9 7MjyzPj17tGzrHHhTLYvzlN8L++mDK5LlFCyeqKWLODMsASbkGFbHN8m5L5F9u0U 2WyKtnqPyvq2jQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:05:24 2025 by rpki-client