This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft File: rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft (raw, json) Hash identifier: yoCY2Od+SjoWwt/rlJClHl5ox/TtBWpeMmJCMVY1aHw= Subject key identifier: 82:CF:5C:75:6B:74:CC:E6:6A:44:2B:C3:42:FC:06:24:01:F0:ED:EC Authority key identifier: AE:A8:4D:7E:64:BA:3E:85:B5:70:36:C7:31:8F:93:CC:3D:94:D1:87 Certificate issuer: /CN=aea84d7e64ba3e85b57036c7318f93cc3d94d187 Certificate serial: 019AF57796F4D9535B395F86CB955BAB54A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft Manifest number: 115E Signing time: Sat 06 Dec 2025 21:00:46 +0000 Manifest this update: Sat 06 Dec 2025 21:00:46 +0000 Manifest next update: Sun 07 Dec 2025 21:00:46 +0000 Files and hashes: 1: 1Z36oEX0lkx8ndMTGV0SwL3pu6s.roa (hash: oLjRdDjCa874D2Ohi+4lYwxZSVZ663VZAUA47G0Sbic=) 2: rqhNfmS6PoW1cDbHMY-TzD2U0Yc.crl (hash: +N3dSef4bNsnU3Z0dkgeZpdzMcfHvhcXvT7F6JGJeOE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.crl rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft rsync://rpki.ripe.net/repository/DEFAULT/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:96:f4:d9:53:5b:39:5f:86:cb:95:5b:ab:54:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aea84d7e64ba3e85b57036c7318f93cc3d94d187 Validity Not Before: Dec 6 21:00:46 2025 GMT Not After : Dec 7 21:00:46 2025 GMT Subject: CN=82cf5c756b74cce66a442bc342fc062401f0edec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a5:12:30:0b:fc:87:aa:a2:7f:f9:82:e7:77: 69:a0:2c:e5:28:bb:b8:05:23:93:8e:17:08:d9:da: 00:bc:12:1e:90:62:b1:8f:92:b6:19:60:8b:09:33: fc:42:a2:11:8d:98:5a:d2:37:fd:4b:40:f7:92:45: 10:0a:bf:30:61:1a:1a:71:44:bb:44:4e:a5:e1:a1: c6:1b:4a:bf:c8:14:fe:29:13:96:e8:de:04:f9:91: 5f:68:64:42:96:07:78:c3:0c:0d:8c:2f:a5:6f:75: 90:5f:ef:a7:72:6b:47:c4:03:80:ba:01:7f:68:33: 94:13:22:77:78:bb:40:72:26:8a:10:84:97:97:27: 01:32:2e:bf:be:17:5b:6d:05:9b:dd:24:49:e2:49: 0a:4f:a2:15:9d:d8:4a:c0:2e:91:65:a6:03:21:a7: b9:fe:f7:4e:51:90:b0:0f:e3:1c:00:49:4a:af:dc: ed:5f:35:64:70:ec:1e:bf:32:0c:3c:d9:28:14:a0: 2e:0c:57:5c:18:e0:63:2b:6f:41:dc:93:a9:3f:e2: c5:df:89:04:54:1e:b6:9b:db:eb:2f:9f:26:49:78: 71:84:d6:6b:83:6a:c5:e2:10:7d:51:72:85:23:c2: 10:ae:d1:8e:e4:aa:13:74:c4:e8:37:a7:7a:c2:e1: d6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:CF:5C:75:6B:74:CC:E6:6A:44:2B:C3:42:FC:06:24:01:F0:ED:EC X509v3 Authority Key Identifier: keyid:AE:A8:4D:7E:64:BA:3E:85:B5:70:36:C7:31:8F:93:CC:3D:94:D1:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:e6:bf:b5:12:ee:e5:ed:45:61:5f:91:d0:45:52:fe:ce:14: b9:ce:61:0d:e1:83:eb:4e:83:5e:95:36:09:8c:1f:bd:83:4d: a9:6e:f7:9d:4e:99:98:97:1b:24:de:40:2b:8d:f0:8c:25:6a: 6a:59:f9:b7:3e:ab:9c:aa:b5:10:b7:54:dc:1e:ff:d6:6a:c0: 41:a1:73:13:e6:3d:a4:37:2c:52:77:75:32:ef:aa:8c:6b:37: 81:1b:6d:92:70:24:4f:bb:0d:c0:e6:00:ab:3a:ca:b8:2d:58: cd:d5:7f:d5:4f:af:69:07:c1:34:4d:04:65:71:ce:d6:bc:6c: 8a:54:7d:2b:7c:b7:5e:a6:24:5f:a1:b7:92:4e:00:d0:f6:8e: 95:26:90:c8:8b:46:23:56:ce:be:e1:4c:e4:70:1b:e6:c2:d4: 98:0f:f7:34:b2:aa:41:f8:07:cb:a5:e9:7a:47:a1:1f:81:cf: 94:4b:19:1e:09:45:19:48:a8:28:34:44:6c:99:5f:42:ab:26: aa:28:3d:92:50:f2:c0:4a:d6:5e:f8:b0:0e:78:3d:ee:7b:34: 31:62:25:3a:a5:08:9b:30:97:28:52:a5:53:68:6c:bc:39:65: 76:51:20:03:6d:75:1c:cd:ee:59:9d:a6:c8:5a:5f:37:2f:2f: 3c:61:3e:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d5b02VNbOV+Gy5Vbq1SlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYTg0ZDdlNjRiYTNlODViNTcwMzZjNzMxOGY5M2NjM2Q5 NGQxODcwHhcNMjUxMjA2MjEwMDQ2WhcNMjUxMjA3MjEwMDQ2WjAzMTEwLwYDVQQD Eyg4MmNmNWM3NTZiNzRjY2U2NmE0NDJiYzM0MmZjMDYyNDAxZjBlZGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaUSMAv8h6qif/mC53dpoCzlKLu4 BSOTjhcI2doAvBIekGKxj5K2GWCLCTP8QqIRjZha0jf9S0D3kkUQCr8wYRoacUS7 RE6l4aHGG0q/yBT+KROW6N4E+ZFfaGRClgd4wwwNjC+lb3WQX++ncmtHxAOAugF/ aDOUEyJ3eLtAciaKEISXlycBMi6/vhdbbQWb3SRJ4kkKT6IVndhKwC6RZaYDIae5 /vdOUZCwD+McAElKr9ztXzVkcOwevzIMPNkoFKAuDFdcGOBjK29B3JOpP+LF34kE VB62m9vrL58mSXhxhNZrg2rF4hB9UXKFI8IQrtGO5KoTdMToN6d6wuHWrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFILPXHVrdMzmakQrw0L8BiQB8O3sMB8GA1UdIwQY MBaAFK6oTX5kuj6FtXA2xzGPk8w9lNGHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnFoTmZtUzZQb1cxY0RiSE1ZLVR6RDJVMFljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xNTdmMWUtN2NmOC00ZDk4LWE5MjQt OTdjMzMyZjcyMzlkLzEvcnFoTmZtUzZQb1cxY0RiSE1ZLVR6RDJVMFljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8xNTdmMWUtN2NmOC00ZDk4LWE5MjQtOTdjMzMyZjcyMzlk LzEvcnFoTmZtUzZQb1cxY0RiSE1ZLVR6RDJVMFljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAua/tRLu 5e1FYV+R0EVS/s4Uuc5hDeGD606DXpU2CYwfvYNNqW73nU6ZmJcbJN5AK43wjCVq aln5tz6rnKq1ELdU3B7/1mrAQaFzE+Y9pDcsUnd1Mu+qjGs3gRttknAkT7sNwOYA qzrKuC1YzdV/1U+vaQfBNE0EZXHO1rxsilR9K3y3XqYkX6G3kk4A0PaOlSaQyItG I1bOvuFM5HAb5sLUmA/3NLKqQfgHy6XpekehH4HPlEsZHglFGUioKDREbJlfQqsm qig9klDywErWXviwDng97ns0MWIlOqUImzCXKFKlU2hsvDlldlEgA211HM3uWZ2m yFpfNy8vPGE+Jw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:33:26 2025 by rpki-client