This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft File: qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft (raw, json) Hash identifier: kemqltPLcmIR7e1zE18oftCXXCqRfZu//XeFR2Yw6C4= Subject key identifier: D6:B5:33:7A:7A:4F:6E:5D:DA:77:A2:47:AC:72:9E:78:5E:04:C2:C5 Authority key identifier: A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6 Certificate issuer: /CN=a982f3d0e66429b685b1850a9dff25c7aa37a0c6 Certificate serial: 019AF4650658B365A2E98EA2B81CB8CFB4B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft Manifest number: 1703 Signing time: Sat 06 Dec 2025 16:00:52 +0000 Manifest this update: Sat 06 Dec 2025 16:00:52 +0000 Manifest next update: Sun 07 Dec 2025 16:00:52 +0000 Files and hashes: 1: F-LIYuBdyXdsWgfHqfWysJKiWXU.roa (hash: VqoafOC7jzXc0AkcNCpssMEPfK7J5Kse2STPQ5Iw9TU=) 2: RHzpUiuiNY0XEXcS875xUQAmg2o.roa (hash: 6vPYA2Rs4cYHy6RhBB/Rp48XNVrguqaU80TWpEOz0XU=) 3: qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl (hash: iuWtWUQXGV57P4AS9ERS9DlnwlH/+o8ZbhI9HgAG/e8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:06:58:b3:65:a2:e9:8e:a2:b8:1c:b8:cf:b4:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a982f3d0e66429b685b1850a9dff25c7aa37a0c6 Validity Not Before: Dec 6 16:00:52 2025 GMT Not After : Dec 7 16:00:52 2025 GMT Subject: CN=d6b5337a7a4f6e5dda77a247ac729e785e04c2c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:11:2f:ff:40:2c:d3:18:2b:d2:00:51:d9:8c: 94:e5:a2:45:2f:0e:69:72:4f:42:a9:5e:a9:42:46: 89:1c:ef:b2:18:96:3a:66:a1:12:9d:15:a4:4e:3b: 1b:02:1f:6b:b9:7c:f4:72:7f:08:c9:d1:b8:62:06: 72:1f:8d:0d:93:47:3f:93:e9:a5:f5:39:7c:06:39: 84:fe:28:36:cb:a2:36:c9:9c:17:b3:d9:3d:63:3d: fe:f9:a6:94:c3:02:41:e5:ac:74:a2:50:0a:08:ac: 1f:6f:be:02:0a:19:c5:8d:0d:00:4e:f0:e6:80:8e: 6e:8f:17:8d:8a:ca:0c:76:dd:82:d8:d2:1a:59:a3: cb:a3:a8:a1:62:37:24:2e:ef:44:eb:31:b2:40:bf: 75:ed:05:3e:ad:27:9d:3f:ca:fa:03:8a:36:be:e2: e6:5b:92:c9:10:8e:54:c9:df:52:55:00:03:57:3e: 3f:c8:da:05:a5:2f:ba:b2:25:5e:d2:7e:db:ad:7e: 2a:99:e3:96:4f:35:f0:ac:13:a1:88:18:8c:b8:cf: 1a:4c:d8:04:ad:21:55:17:7f:8a:2d:db:1d:9c:4a: 4d:c5:53:37:3c:82:1c:73:68:ee:b6:7b:39:81:44: a0:ce:6b:fa:df:08:94:1a:50:91:b7:bc:ec:a2:7e: 2e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B5:33:7A:7A:4F:6E:5D:DA:77:A2:47:AC:72:9E:78:5E:04:C2:C5 X509v3 Authority Key Identifier: keyid:A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:d2:a7:48:cb:50:84:0f:5b:ce:ef:14:20:18:c5:1c:82:f4: 07:8e:8b:1b:29:ec:a5:73:44:a4:02:24:a9:13:7c:15:f7:86: d0:e3:ca:ea:9e:43:83:ad:82:02:68:83:dd:73:02:36:b6:ed: 26:45:86:94:0d:78:59:91:07:a0:63:4a:64:e2:b1:ff:1e:b8: 0c:78:5f:87:dd:34:fa:84:b1:64:d6:3e:7b:2c:d4:3c:3d:ea: ae:a0:fe:4f:c5:cd:82:ac:9f:84:46:e8:1f:b0:0c:ea:6a:14: 6e:ed:e4:e1:d2:a4:ed:76:af:37:b1:3b:7d:13:cf:e3:12:a3: 10:63:7d:3d:be:1a:43:b8:a4:18:51:bd:26:af:14:e0:dc:a1: 27:7a:c4:81:4a:1a:df:cf:3a:04:3c:3b:e1:cd:a9:f8:66:57: ad:91:4e:98:35:e6:fd:85:49:85:ee:37:0b:10:9e:9d:9d:e0: da:7f:a8:d7:f6:da:b5:3e:df:ad:65:ba:76:bb:08:80:1a:e2: 48:e7:8a:22:30:ac:54:db:3b:16:6d:c2:e1:89:a5:4f:31:23: 4f:b7:b3:07:ba:a1:fd:60:73:c7:47:13:d9:ef:91:1d:0e:b2: 80:2d:91:63:6b:64:30:91:ad:13:88:98:0f:69:ec:eb:3d:e1: b9:04:9e:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZQZYs2Wi6Y6iuBy4z7SzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ODJmM2QwZTY2NDI5YjY4NWIxODUwYTlkZmYyNWM3YWEz N2EwYzYwHhcNMjUxMjA2MTYwMDUyWhcNMjUxMjA3MTYwMDUyWjAzMTEwLwYDVQQD EyhkNmI1MzM3YTdhNGY2ZTVkZGE3N2EyNDdhYzcyOWU3ODVlMDRjMmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuREv/0As0xgr0gBR2YyU5aJFLw5p ck9CqV6pQkaJHO+yGJY6ZqESnRWkTjsbAh9ruXz0cn8IydG4YgZyH40Nk0c/k+ml 9Tl8BjmE/ig2y6I2yZwXs9k9Yz3++aaUwwJB5ax0olAKCKwfb74CChnFjQ0ATvDm gI5ujxeNisoMdt2C2NIaWaPLo6ihYjckLu9E6zGyQL917QU+rSedP8r6A4o2vuLm W5LJEI5Uyd9SVQADVz4/yNoFpS+6siVe0n7brX4qmeOWTzXwrBOhiBiMuM8aTNgE rSFVF3+KLdsdnEpNxVM3PIIcc2jutns5gUSgzmv63wiUGlCRt7zson4uwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNa1M3p6T25d2neiR6xynnheBMLFMB8GA1UdIwQY MBaAFKmC89DmZCm2hbGFCp3/JceqN6DGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVlMejBPWmtLYmFGc1lVS25mOGx4Nm8zb01ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9iNDViYTQtYWIzNi00OWFiLTk4ZTQt OGI0NzkzZjkwZjE1LzEvcVlMejBPWmtLYmFGc1lVS25mOGx4Nm8zb01ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9iNDViYTQtYWIzNi00OWFiLTk4ZTQtOGI0NzkzZjkwZjE1 LzEvcVlMejBPWmtLYmFGc1lVS25mOGx4Nm8zb01ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABdKnSMtQ hA9bzu8UIBjFHIL0B46LGynspXNEpAIkqRN8FfeG0OPK6p5Dg62CAmiD3XMCNrbt JkWGlA14WZEHoGNKZOKx/x64DHhfh900+oSxZNY+eyzUPD3qrqD+T8XNgqyfhEbo H7AM6moUbu3k4dKk7XavN7E7fRPP4xKjEGN9Pb4aQ7ikGFG9Jq8U4NyhJ3rEgUoa 3886BDw74c2p+GZXrZFOmDXm/YVJhe43CxCenZ3g2n+o1/batT7frWW6drsIgBri SOeKIjCsVNs7Fm3C4YmlTzEjT7ezB7qh/WBzx0cT2e+RHQ6ygC2RY2tkMJGtE4iY D2ns6z3huQSeYA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:53:06 2025 by rpki-client