This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft File: qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft (raw, json) Hash identifier: HKRTsXM5TEBd6cM1R07BlSpTXlkSiU1oJKeiszQ8nDk= Subject key identifier: CF:05:67:0B:CB:76:79:25:CA:A7:EB:9D:DB:AB:FF:C9:85:29:5C:6C Authority key identifier: A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89 Certificate issuer: /CN=a952d0d266557385836aab7ae3fdced4ca74ad89 Certificate serial: 019B4136EAB6CE63D3F8A73DDC38DC63BF62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft Manifest number: 0B30 Signing time: Sun 21 Dec 2025 14:01:16 +0000 Manifest this update: Sun 21 Dec 2025 14:01:16 +0000 Manifest next update: Mon 22 Dec 2025 14:01:16 +0000 Files and hashes: 1: 0QN5Ofx6WwMbvcTiOoejeiVWFBY.roa (hash: k+6IIDKqJuYMt9/EhXM2bPBbRQ5u5Kv99iIIWzz5/2A=) 2: 1-SuDyMrxWXM7X2VtIVu9aGgRI9Y.roa (hash: 18EMBTikkSXkhqeBREgORyh2My5yAHMuFmHNML82Td4=) 3: WajP5tLioaX2Ro2cswqvvjdGPQM.roa (hash: sEIrgpW5WhiY7JBDfxS8K7V3ujO4klv15fpTFTGiTlE=) 4: qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl (hash: aHS3BrZ8VHBmHWie8MDWAUigKuGpmymBlUoOSPduzP8=) 5: w6nRqqLinLORL7W_fsNehh2pePE.roa (hash: hnUVitPfz7Hljib/HgZzf6AtllwvuxtgqDf0jZ0Pk10=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:ea:b6:ce:63:d3:f8:a7:3d:dc:38:dc:63:bf:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a952d0d266557385836aab7ae3fdced4ca74ad89 Validity Not Before: Dec 21 14:01:16 2025 GMT Not After : Dec 22 14:01:16 2025 GMT Subject: CN=cf05670bcb767925caa7eb9ddbabffc985295c6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7b:af:1a:27:bd:42:22:8f:fc:db:96:6b:e7: 88:ff:0e:79:44:1f:6b:e9:93:20:e2:d9:d7:6d:2a: 96:8b:74:dd:c4:fa:b7:0f:5e:86:47:a5:6a:48:4c: fa:22:eb:82:d6:8f:35:11:e3:57:1d:21:62:6a:a9: d3:7b:a7:b7:6b:5c:46:22:c0:bd:fc:e4:68:1a:df: 0a:a2:df:ea:14:ec:7c:3d:18:9c:08:ee:21:d6:5c: c7:e3:a1:ef:31:08:c1:f9:2c:0c:f1:bd:31:cd:a9: c2:b5:f8:ba:6d:f9:21:93:b4:e3:7a:2d:de:0b:6e: dc:df:81:66:ec:6c:0e:dc:91:11:8f:36:73:4e:f1: 64:cc:10:74:2e:39:29:76:d5:03:2f:be:09:0b:f5: c2:a4:57:65:56:66:58:00:58:3d:59:cd:15:dc:20: 60:2a:85:81:aa:8b:af:1d:11:8b:66:ec:ba:c6:5e: 25:32:57:7c:41:77:4d:ca:c0:2d:33:9e:8f:94:c0: db:54:06:a4:b8:f1:de:3a:7e:39:83:a9:b7:93:03: 17:e8:85:97:1b:ee:e4:9e:70:43:fd:6f:a7:19:23: 52:33:59:32:1c:97:3f:a9:e9:08:b4:3d:74:55:67: 95:35:d2:b4:c9:f5:24:9f:9c:8e:ac:b5:49:7e:74: 8b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:05:67:0B:CB:76:79:25:CA:A7:EB:9D:DB:AB:FF:C9:85:29:5C:6C X509v3 Authority Key Identifier: keyid:A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:ca:5f:cf:ec:bb:e7:5a:16:f6:54:3d:6e:3b:e3:58:32:06: 2c:09:64:3e:cf:14:1f:72:51:c8:38:28:e1:02:4b:1f:1b:b3: 4f:7c:51:61:1f:e1:0d:57:ef:21:91:ee:c1:ca:3c:1c:63:aa: 88:12:7a:24:69:eb:dd:85:f0:73:a9:97:dc:77:2b:ab:c3:a2: 8b:4e:5d:41:9e:2d:4e:6b:39:f3:98:42:56:9f:a9:ac:79:2d: f0:54:f2:1f:dd:33:3f:96:a5:01:30:db:97:af:7d:9c:9e:c5: 0c:57:0b:23:8d:73:b9:90:de:79:db:39:50:58:c5:35:6d:9a: 52:2f:97:6f:8c:8a:23:56:87:7e:74:48:a7:89:12:25:94:22: 54:ca:be:31:52:c9:6c:01:fa:c6:35:e7:ab:a5:be:ad:e3:79: 94:a2:28:c7:cc:13:76:0f:08:66:d1:12:b3:9a:0a:fc:a8:b0: c7:3a:b8:a9:a3:bd:e2:8c:09:b0:91:b0:d9:c1:99:57:01:ba: 4b:0b:53:b6:d5:90:f6:3d:94:54:6a:b2:c6:c1:33:97:bd:0b: 27:82:4e:30:10:f2:c5:24:b8:e5:b7:7f:b8:34:8a:f8:b4:de: 8f:9b:a5:f4:9c:6f:de:a5:2b:79:7c:b1:7c:d6:31:1e:bd:f4: ff:cd:3b:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNuq2zmPT+Kc93DjcY79iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5NTJkMGQyNjY1NTczODU4MzZhYWI3YWUzZmRjZWQ0Y2E3 NGFkODkwHhcNMjUxMjIxMTQwMTE2WhcNMjUxMjIyMTQwMTE2WjAzMTEwLwYDVQQD EyhjZjA1NjcwYmNiNzY3OTI1Y2FhN2ViOWRkYmFiZmZjOTg1Mjk1YzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnuvGie9QiKP/NuWa+eI/w55RB9r 6ZMg4tnXbSqWi3TdxPq3D16GR6VqSEz6IuuC1o81EeNXHSFiaqnTe6e3a1xGIsC9 /ORoGt8Kot/qFOx8PRicCO4h1lzH46HvMQjB+SwM8b0xzanCtfi6bfkhk7Tjei3e C27c34Fm7GwO3JERjzZzTvFkzBB0LjkpdtUDL74JC/XCpFdlVmZYAFg9Wc0V3CBg KoWBqouvHRGLZuy6xl4lMld8QXdNysAtM56PlMDbVAakuPHeOn45g6m3kwMX6IWX G+7knnBD/W+nGSNSM1kyHJc/qekItD10VWeVNdK0yfUkn5yOrLVJfnSLmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM8FZwvLdnklyqfrndur/8mFKVxsMB8GA1UdIwQY MBaAFKlS0NJmVXOFg2qreuP9ztTKdK2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVZMUTBtWlZjNFdEYXF0NjRfM08xTXAwcllrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8yNzBhOTEtY2JmZC00NTAzLWI5NjAt NGMyMWE1MDVmMzQ2LzEvcVZMUTBtWlZjNFdEYXF0NjRfM08xTXAwcllrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8yNzBhOTEtY2JmZC00NTAzLWI5NjAtNGMyMWE1MDVmMzQ2 LzEvcVZMUTBtWlZjNFdEYXF0NjRfM08xTXAwcllrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0cpfz+y7 51oW9lQ9bjvjWDIGLAlkPs8UH3JRyDgo4QJLHxuzT3xRYR/hDVfvIZHuwco8HGOq iBJ6JGnr3YXwc6mX3Hcrq8Oii05dQZ4tTms585hCVp+prHkt8FTyH90zP5alATDb l699nJ7FDFcLI41zuZDeeds5UFjFNW2aUi+Xb4yKI1aHfnRIp4kSJZQiVMq+MVLJ bAH6xjXnq6W+reN5lKIox8wTdg8IZtESs5oK/Kiwxzq4qaO94owJsJGw2cGZVwG6 SwtTttWQ9j2UVGqyxsEzl70LJ4JOMBDyxSS45bd/uDSK+LTej5ul9Jxv3qUreXyx fNYxHr30/807Sg== -----END CERTIFICATE-----Generated at Sun Dec 21 23:23:25 2025 by rpki-client