This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7bf679-e44c-49c3-88b8-2b6dceb6b39c/1/qQ1FfGbR9ZQtw-eCnU_NpK093ss.mft File: qQ1FfGbR9ZQtw-eCnU_NpK093ss.mft (raw, json) Hash identifier: LRTv59gINTmagw/9As3z+3ATAMHXr2oZE5eSW6ywoM0= Subject key identifier: 22:8B:54:86:56:D4:43:D0:35:AD:A9:A6:0A:C5:4B:C3:23:71:5E:0E Authority key identifier: A9:0D:45:7C:66:D1:F5:94:2D:C3:E7:82:9D:4F:CD:A4:AD:3D:DE:CB Certificate issuer: /CN=a90d457c66d1f5942dc3e7829d4fcda4ad3ddecb Certificate serial: 019AF1644306B872EE8337D8D5E9C42B8C93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ1FfGbR9ZQtw-eCnU_NpK093ss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7bf679-e44c-49c3-88b8-2b6dceb6b39c/1/qQ1FfGbR9ZQtw-eCnU_NpK093ss.mft Manifest number: B2 Signing time: Sat 06 Dec 2025 02:01:11 +0000 Manifest this update: Sat 06 Dec 2025 02:01:11 +0000 Manifest next update: Sun 07 Dec 2025 02:01:11 +0000 Files and hashes: 1: Hb9lR6z96oz2vyhltcQxunWJBv8.roa (hash: O7fLuXJ7Rg2hYWenuMiQM2a0cwNOs4RkQpqjX6H+1F8=) 2: qQ1FfGbR9ZQtw-eCnU_NpK093ss.crl (hash: jDBly1ThfOzhbuXfPCcv7fNIOtwZ9TY69B7SSPCqGVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7bf679-e44c-49c3-88b8-2b6dceb6b39c/1/qQ1FfGbR9ZQtw-eCnU_NpK093ss.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/7bf679-e44c-49c3-88b8-2b6dceb6b39c/1/qQ1FfGbR9ZQtw-eCnU_NpK093ss.mft rsync://rpki.ripe.net/repository/DEFAULT/qQ1FfGbR9ZQtw-eCnU_NpK093ss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:43:06:b8:72:ee:83:37:d8:d5:e9:c4:2b:8c:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a90d457c66d1f5942dc3e7829d4fcda4ad3ddecb Validity Not Before: Dec 6 02:01:11 2025 GMT Not After : Dec 7 02:01:11 2025 GMT Subject: CN=228b548656d443d035ada9a60ac54bc323715e0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3c:ea:49:a6:e3:12:97:cc:4c:b1:8e:fc:da: 20:c7:a1:62:24:31:47:56:39:4f:37:db:32:43:d6: 97:1d:5b:a3:b0:c3:18:39:7a:e9:bd:fa:aa:80:e0: 87:38:cb:ae:24:a4:c2:41:97:1c:64:96:52:80:b3: f8:dd:9a:b6:fc:a5:12:63:26:e6:9f:ea:6f:97:23: 99:4e:d7:f0:e3:fc:3f:66:ba:70:42:f4:37:ae:cc: e7:41:d4:32:74:a7:d6:a2:69:de:47:24:e8:fa:d6: 99:0c:f2:14:a6:b5:9a:c9:70:81:66:9b:95:dc:b2: f7:40:ba:03:12:4e:42:71:d8:ce:86:9f:8d:cf:8d: fc:0c:25:58:ef:dc:41:29:ba:c6:ca:7c:fa:54:0f: 56:4d:e9:1d:60:64:2a:61:23:86:7c:57:e2:42:87: ba:47:d7:56:3f:ae:11:8d:50:84:db:c0:16:51:53: c3:87:5a:bb:6e:40:26:27:16:7c:13:84:10:08:10: 89:fe:0a:98:c9:88:05:46:cb:2e:b8:cb:7c:f9:a1: 00:78:f3:1d:b3:5e:82:9b:ec:fa:54:47:82:ff:02: ed:10:34:cf:e7:9c:c8:14:32:24:5f:92:c7:b2:34: a9:8a:b3:0f:a3:56:3f:1d:68:ba:c2:11:86:04:10: b8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:8B:54:86:56:D4:43:D0:35:AD:A9:A6:0A:C5:4B:C3:23:71:5E:0E X509v3 Authority Key Identifier: keyid:A9:0D:45:7C:66:D1:F5:94:2D:C3:E7:82:9D:4F:CD:A4:AD:3D:DE:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ1FfGbR9ZQtw-eCnU_NpK093ss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7bf679-e44c-49c3-88b8-2b6dceb6b39c/1/qQ1FfGbR9ZQtw-eCnU_NpK093ss.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7bf679-e44c-49c3-88b8-2b6dceb6b39c/1/qQ1FfGbR9ZQtw-eCnU_NpK093ss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:e4:55:52:00:96:b5:34:1c:d1:2d:11:62:4c:ab:d6:4c:bb: 33:54:74:98:58:d3:46:21:3b:03:de:af:59:c4:f1:98:4b:f5: f4:47:55:42:a5:5c:84:66:c9:38:8c:88:b0:43:1e:a0:90:5a: 6b:10:90:ad:dc:ab:6a:1e:a0:32:76:99:c0:55:f3:fe:f8:ce: c2:59:85:9c:19:8a:ef:49:3c:02:3a:36:f4:55:dc:1c:16:94: 06:8b:f0:b7:65:d8:b3:c5:c4:64:f9:03:4c:9a:15:06:85:f7: f7:6f:cc:e8:d9:cd:b5:9c:70:9c:d6:1f:cc:03:a2:12:34:29: 48:03:0f:b9:1d:18:12:c6:95:5f:3d:3c:49:f5:97:de:51:21: 23:6e:2c:9a:50:07:9b:f8:a3:cc:58:22:2b:79:8b:2e:70:3d: 14:e2:9a:33:3e:71:79:b2:e1:3f:37:bd:fd:29:e3:7c:d5:b8: 3e:fa:9d:d9:15:d7:c2:8b:78:97:68:6d:56:7c:8e:3e:56:04: 3f:40:3d:f8:4c:00:8d:05:ed:1d:d7:27:8d:67:c5:69:6b:79: 03:fb:60:12:15:8f:09:c3:5b:df:eb:e6:ac:e5:e5:b8:81:c2: 19:d7:3a:ed:32:18:e3:b1:a6:df:ed:08:a4:84:bd:1c:ce:c3: 8e:d3:82:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZEMGuHLugzfY1enEK4yTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MGQ0NTdjNjZkMWY1OTQyZGMzZTc4MjlkNGZjZGE0YWQz ZGRlY2IwHhcNMjUxMjA2MDIwMTExWhcNMjUxMjA3MDIwMTExWjAzMTEwLwYDVQQD EygyMjhiNTQ4NjU2ZDQ0M2QwMzVhZGE5YTYwYWM1NGJjMzIzNzE1ZTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzzqSabjEpfMTLGO/Nogx6FiJDFH VjlPN9syQ9aXHVujsMMYOXrpvfqqgOCHOMuuJKTCQZccZJZSgLP43Zq2/KUSYybm n+pvlyOZTtfw4/w/ZrpwQvQ3rsznQdQydKfWomneRyTo+taZDPIUprWayXCBZpuV 3LL3QLoDEk5CcdjOhp+Nz438DCVY79xBKbrGynz6VA9WTekdYGQqYSOGfFfiQoe6 R9dWP64RjVCE28AWUVPDh1q7bkAmJxZ8E4QQCBCJ/gqYyYgFRssuuMt8+aEAePMd s16Cm+z6VEeC/wLtEDTP55zIFDIkX5LHsjSpirMPo1Y/HWi6whGGBBC4lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCKLVIZW1EPQNa2ppgrFS8MjcV4OMB8GA1UdIwQY MBaAFKkNRXxm0fWULcPngp1PzaStPd7LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVExRmZHYlI5WlF0dy1lQ25VX05wSzA5M3NzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS83YmY2NzktZTQ0Yy00OWMzLTg4Yjgt MmI2ZGNlYjZiMzljLzEvcVExRmZHYlI5WlF0dy1lQ25VX05wSzA5M3NzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS83YmY2NzktZTQ0Yy00OWMzLTg4YjgtMmI2ZGNlYjZiMzlj LzEvcVExRmZHYlI5WlF0dy1lQ25VX05wSzA5M3NzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi+RVUgCW tTQc0S0RYkyr1ky7M1R0mFjTRiE7A96vWcTxmEv19EdVQqVchGbJOIyIsEMeoJBa axCQrdyrah6gMnaZwFXz/vjOwlmFnBmK70k8Ajo29FXcHBaUBovwt2XYs8XEZPkD TJoVBoX392/M6NnNtZxwnNYfzAOiEjQpSAMPuR0YEsaVXz08SfWX3lEhI24smlAH m/ijzFgiK3mLLnA9FOKaMz5xebLhPze9/SnjfNW4Pvqd2RXXwot4l2htVnyOPlYE P0A9+EwAjQXtHdcnjWfFaWt5A/tgEhWPCcNb3+vmrOXluIHCGdc67TIY47Gm3+0I pIS9HM7DjtOCMQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:58:53 2025 by rpki-client