This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.mft File: qEIWlUkV487vdNu7z-lHIAnYiQE.mft (raw, json) Hash identifier: 2FagEBg9MlVOiNAlxtuK/R4ek/2i5uOp0FV/V/iXepA= Subject key identifier: B4:CE:F5:2D:58:26:C8:9B:C9:72:B7:7C:6D:01:EB:BE:C0:C1:09:5A Authority key identifier: A8:42:16:95:49:15:E3:CE:EF:74:DB:BB:CF:E9:47:20:09:D8:89:01 Certificate issuer: /CN=a84216954915e3ceef74dbbbcfe9472009d88901 Certificate serial: 019AF3526AC95B906F9C2094C4B60BC33FCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEIWlUkV487vdNu7z-lHIAnYiQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.mft Manifest number: 05A7 Signing time: Sat 06 Dec 2025 11:00:56 +0000 Manifest this update: Sat 06 Dec 2025 11:00:56 +0000 Manifest next update: Sun 07 Dec 2025 11:00:56 +0000 Files and hashes: 1: qEIWlUkV487vdNu7z-lHIAnYiQE.crl (hash: sMXFi4Txn4PcfBN7ImSd5IwzKPHFU7hELAfMuw2rwhA=) 2: uzEIjlJYDDkYjDRzAf2S2_nuADQ.roa (hash: jOMq+THXs6tHKVnh3usZCh/VkjmthWBocgL66TKhVMs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.mft rsync://rpki.ripe.net/repository/DEFAULT/qEIWlUkV487vdNu7z-lHIAnYiQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:6a:c9:5b:90:6f:9c:20:94:c4:b6:0b:c3:3f:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a84216954915e3ceef74dbbbcfe9472009d88901 Validity Not Before: Dec 6 11:00:56 2025 GMT Not After : Dec 7 11:00:56 2025 GMT Subject: CN=b4cef52d5826c89bc972b77c6d01ebbec0c1095a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:37:d6:df:07:28:90:83:ec:ac:48:ca:d6:0d: 8f:39:31:21:83:c2:1a:93:71:72:9b:12:0d:a0:11: 09:1a:19:63:bc:d2:65:14:cc:66:69:6b:85:2b:c2: 07:18:ca:79:f7:77:8c:77:ff:7c:39:46:e2:10:d6: e1:f8:81:19:71:29:f0:56:7b:9f:56:e6:85:89:f0: bb:5f:43:7e:0c:55:53:a6:8a:33:0f:f1:07:83:7d: 85:b4:72:21:17:4e:8a:7b:94:9a:62:47:82:0b:b1: c9:23:17:6b:ec:98:7f:62:11:b7:a4:8c:c5:6c:39: 59:b8:4a:cf:1d:ed:a1:fe:99:19:41:0c:43:9b:37: 2c:da:52:0a:75:74:2f:6e:b5:de:bb:a6:78:b0:cd: f0:d7:e2:19:dd:8e:58:29:4a:d1:c1:a1:41:96:01: 77:a1:29:0e:76:48:f3:7d:15:a2:3a:7d:e5:53:49: 2c:df:89:bf:51:ad:40:64:8c:e0:fe:5b:87:b5:20: 9b:f9:b3:71:2e:df:0d:d4:ca:5c:68:9e:f3:24:8d: 1f:86:8b:c2:4c:d4:bb:f2:8b:18:e7:d0:00:49:82: 84:71:24:28:0c:11:ce:4b:bf:87:d7:95:43:64:53: 9e:4b:c9:71:41:1a:40:6a:fe:29:24:f1:d9:7e:d1: ca:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:CE:F5:2D:58:26:C8:9B:C9:72:B7:7C:6D:01:EB:BE:C0:C1:09:5A X509v3 Authority Key Identifier: keyid:A8:42:16:95:49:15:E3:CE:EF:74:DB:BB:CF:E9:47:20:09:D8:89:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEIWlUkV487vdNu7z-lHIAnYiQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:4f:01:c6:aa:9a:e8:d1:bd:c8:e9:cf:e8:60:e1:f0:1e:c9: a7:d6:c0:b8:b8:0d:69:3a:62:f3:40:35:ae:c1:0f:c1:9d:c7: 14:44:4a:34:35:53:3a:ef:94:f5:1f:50:79:da:62:a0:16:f3: 78:64:c6:4e:58:6d:02:f1:3a:2a:28:96:c8:57:31:dc:4f:31: 95:1b:a1:b2:37:31:6a:d8:80:66:97:5d:cf:84:85:f6:8d:13: 6c:09:d5:9c:c1:62:f4:fc:4c:ee:5a:6b:1c:a8:6e:11:98:0f: 97:60:7f:5a:56:06:f5:96:33:39:8e:f7:ac:3d:0e:9a:7c:25: 10:ae:26:ae:76:87:09:37:b8:ef:c9:7c:0c:e7:b5:5d:be:72: 9c:05:36:a1:dd:2f:f4:91:64:36:21:cc:c3:08:f8:31:2a:d7: 3a:30:1e:78:9f:4c:f8:12:3d:8a:70:19:b4:9a:12:68:55:c4: 02:e8:79:ca:86:90:d6:29:34:59:13:23:c2:7c:84:70:48:a4: 79:9d:d5:a2:4b:b2:c1:a3:d1:eb:66:fd:6e:5c:ab:14:f3:a5: 8e:8d:50:99:8f:ed:5d:ee:50:51:7e:14:7b:af:78:fb:c5:2f: ed:95:a4:f4:01:aa:f2:56:23:4a:3f:b3:b0:c2:62:78:71:df: d2:65:49:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUmrJW5BvnCCUxLYLwz/NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NDIxNjk1NDkxNWUzY2VlZjc0ZGJiYmNmZTk0NzIwMDlk ODg5MDEwHhcNMjUxMjA2MTEwMDU2WhcNMjUxMjA3MTEwMDU2WjAzMTEwLwYDVQQD EyhiNGNlZjUyZDU4MjZjODliYzk3MmI3N2M2ZDAxZWJiZWMwYzEwOTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTfW3wcokIPsrEjK1g2POTEhg8Ia k3FymxINoBEJGhljvNJlFMxmaWuFK8IHGMp593eMd/98OUbiENbh+IEZcSnwVnuf VuaFifC7X0N+DFVTpoozD/EHg32FtHIhF06Ke5SaYkeCC7HJIxdr7Jh/YhG3pIzF bDlZuErPHe2h/pkZQQxDmzcs2lIKdXQvbrXeu6Z4sM3w1+IZ3Y5YKUrRwaFBlgF3 oSkOdkjzfRWiOn3lU0ks34m/Ua1AZIzg/luHtSCb+bNxLt8N1MpcaJ7zJI0fhovC TNS78osY59AASYKEcSQoDBHOS7+H15VDZFOeS8lxQRpAav4pJPHZftHKLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLTO9S1YJsibyXK3fG0B677AwQlaMB8GA1UdIwQY MBaAFKhCFpVJFePO73Tbu8/pRyAJ2IkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUVJV2xVa1Y0ODd2ZE51N3otbEhJQW5ZaVFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9jM2M5MWQtNTMxOS00MWFhLWIxOTct YWI1ZDE2Mzk3N2YyLzEvcUVJV2xVa1Y0ODd2ZE51N3otbEhJQW5ZaVFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9jM2M5MWQtNTMxOS00MWFhLWIxOTctYWI1ZDE2Mzk3N2Yy LzEvcUVJV2xVa1Y0ODd2ZE51N3otbEhJQW5ZaVFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVU8Bxqqa 6NG9yOnP6GDh8B7Jp9bAuLgNaTpi80A1rsEPwZ3HFERKNDVTOu+U9R9QedpioBbz eGTGTlhtAvE6KiiWyFcx3E8xlRuhsjcxatiAZpddz4SF9o0TbAnVnMFi9PxM7lpr HKhuEZgPl2B/WlYG9ZYzOY73rD0OmnwlEK4mrnaHCTe478l8DOe1Xb5ynAU2od0v 9JFkNiHMwwj4MSrXOjAeeJ9M+BI9inAZtJoSaFXEAuh5yoaQ1ik0WRMjwnyEcEik eZ3VokuywaPR62b9blyrFPOljo1QmY/tXe5QUX4Ue694+8Uv7ZWk9AGq8lYjSj+z sMJieHHf0mVJdA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:23:24 2025 by rpki-client