This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft File: qJhJa40d2CW0hwOPuHyhmbE7k98.mft (raw, json) Hash identifier: u9W2uPdya4tRntkxmTufj5APMxILhlR+J5GYORx5V2o= Subject key identifier: DB:51:CC:FE:FF:FF:90:A6:79:7A:85:43:CC:3A:C6:0E:DC:78:0D:82 Authority key identifier: A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF Certificate issuer: /CN=a898496b8d1dd825b487038fb87ca199b13b93df Certificate serial: 019AF3F7BA53048D867752878745C250A03C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft Manifest number: 1472 Signing time: Sat 06 Dec 2025 14:01:29 +0000 Manifest this update: Sat 06 Dec 2025 14:01:29 +0000 Manifest next update: Sun 07 Dec 2025 14:01:29 +0000 Files and hashes: 1: GWRi8zK93x8vN7fuDHcGs4Qxgx0.roa (hash: hNAeNeysPf3hbEOCV7P9iNZJA7eK1rPR2orO/tOEM8Q=) 2: qJhJa40d2CW0hwOPuHyhmbE7k98.crl (hash: EeJ7AJ5ebdBNO05gC/5EmNGMxxknAeYpZOxvR5LEVlE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:ba:53:04:8d:86:77:52:87:87:45:c2:50:a0:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a898496b8d1dd825b487038fb87ca199b13b93df Validity Not Before: Dec 6 14:01:29 2025 GMT Not After : Dec 7 14:01:29 2025 GMT Subject: CN=db51ccfeffff90a6797a8543cc3ac60edc780d82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0e:e9:53:a9:d4:c1:32:20:3f:55:e4:6a:73: 55:db:dc:11:3b:17:5a:01:5d:89:53:64:a4:44:1d: 82:58:44:95:b3:71:41:b7:eb:a4:7b:00:b5:a9:c7: 33:67:82:e3:3a:4d:de:d8:84:3b:46:40:ac:41:80: 2a:91:78:b1:40:51:4c:e5:3b:ff:65:56:f1:74:8d: df:62:cf:6c:0d:e9:26:3c:79:88:30:4e:a6:2b:31: f9:1d:9e:21:1a:0c:eb:76:99:ef:25:19:15:2c:70: df:35:e5:6f:6d:1d:59:90:af:c3:57:87:57:c3:68: ef:44:52:f7:8b:d3:c4:d2:68:7b:6e:23:56:b1:82: ff:e8:f2:2c:69:55:0a:65:ff:7c:6f:08:38:7a:38: fb:22:5b:71:0c:0c:8b:6c:d8:9f:16:bc:cf:98:c6: 5d:76:ae:ac:a2:03:ed:e2:4e:4d:0c:d0:1b:c7:f5: bf:d3:80:d3:ce:ae:27:8a:48:ef:a8:1a:a7:da:2f: 71:cf:56:e4:ca:ae:a4:a0:57:86:3f:17:fb:fb:dc: a8:e2:19:db:21:d9:f5:5d:b8:d7:21:b4:a5:35:c4: 50:85:ad:87:63:d5:fd:a4:75:0f:3a:a0:d9:c3:14: cb:88:64:de:dc:35:cb:a0:fa:ad:c7:f8:3f:78:e3: 7f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:51:CC:FE:FF:FF:90:A6:79:7A:85:43:CC:3A:C6:0E:DC:78:0D:82 X509v3 Authority Key Identifier: keyid:A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:76:42:09:e1:03:20:54:3f:6c:8e:ea:d9:22:f6:54:4e:26: 7e:fe:c3:2f:e3:99:9d:05:c3:3a:cc:d2:03:92:bd:15:d6:42: ee:05:66:04:38:58:43:97:e9:14:40:1f:1b:90:62:44:f4:5b: 52:30:2c:af:a9:8a:86:af:78:8d:f5:02:97:3a:4f:04:a3:12: 34:25:15:f6:55:1f:73:82:8e:d1:29:d5:bc:b4:ae:ff:48:cd: 31:c8:fb:f0:6c:be:03:e5:71:34:f1:01:8c:04:55:b4:96:a3: 6b:1f:74:62:cb:ea:9e:e5:26:56:1c:5c:ab:cf:fb:76:de:1c: 87:7e:ed:88:32:5d:aa:3f:0f:7d:b9:2e:07:71:47:83:07:0e: 11:6b:aa:34:dc:96:0b:dd:75:80:dd:1f:52:1b:4c:be:e9:64: bd:e2:e1:74:42:17:84:c0:49:f1:e5:c4:8f:6b:53:22:bc:6d: 8a:7f:7c:04:89:a2:7a:1a:ff:fd:af:e7:e7:ab:e9:2c:e0:21: a2:d0:70:70:ce:b2:52:83:7d:8a:43:8a:1a:3f:5e:7b:77:5b: 75:47:bc:b5:c7:2d:d6:ef:90:55:15:94:25:02:56:61:43:69: 41:36:ac:aa:4b:0e:bf:98:7a:22:f0:9f:45:f9:ef:5e:76:ff: 4c:9c:08:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz97pTBI2Gd1KHh0XCUKA8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4OTg0OTZiOGQxZGQ4MjViNDg3MDM4ZmI4N2NhMTk5YjEz YjkzZGYwHhcNMjUxMjA2MTQwMTI5WhcNMjUxMjA3MTQwMTI5WjAzMTEwLwYDVQQD EyhkYjUxY2NmZWZmZmY5MGE2Nzk3YTg1NDNjYzNhYzYwZWRjNzgwZDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQ7pU6nUwTIgP1XkanNV29wROxda AV2JU2SkRB2CWESVs3FBt+ukewC1qcczZ4LjOk3e2IQ7RkCsQYAqkXixQFFM5Tv/ ZVbxdI3fYs9sDekmPHmIME6mKzH5HZ4hGgzrdpnvJRkVLHDfNeVvbR1ZkK/DV4dX w2jvRFL3i9PE0mh7biNWsYL/6PIsaVUKZf98bwg4ejj7IltxDAyLbNifFrzPmMZd dq6sogPt4k5NDNAbx/W/04DTzq4nikjvqBqn2i9xz1bkyq6koFeGPxf7+9yo4hnb Idn1XbjXIbSlNcRQha2HY9X9pHUPOqDZwxTLiGTe3DXLoPqtx/g/eON/MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtRzP7//5CmeXqFQ8w6xg7ceA2CMB8GA1UdIwQY MBaAFKiYSWuNHdgltIcDj7h8oZmxO5PfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUpoSmE0MGQyQ1cwaHdPUHVIeWhtYkU3azk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84NjAzZTEtOWI2Yi00M2E2LWI5NWUt MzY4NzhmNjU3ZTEyLzEvcUpoSmE0MGQyQ1cwaHdPUHVIeWhtYkU3azk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS84NjAzZTEtOWI2Yi00M2E2LWI5NWUtMzY4NzhmNjU3ZTEy LzEvcUpoSmE0MGQyQ1cwaHdPUHVIeWhtYkU3azk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHHZCCeED IFQ/bI7q2SL2VE4mfv7DL+OZnQXDOszSA5K9FdZC7gVmBDhYQ5fpFEAfG5BiRPRb UjAsr6mKhq94jfUClzpPBKMSNCUV9lUfc4KO0SnVvLSu/0jNMcj78Gy+A+VxNPEB jARVtJajax90YsvqnuUmVhxcq8/7dt4ch37tiDJdqj8PfbkuB3FHgwcOEWuqNNyW C911gN0fUhtMvulkveLhdEIXhMBJ8eXEj2tTIrxtin98BImiehr//a/n56vpLOAh otBwcM6yUoN9ikOKGj9ee3dbdUe8tcct1u+QVRWUJQJWYUNpQTasqksOv5h6IvCf RfnvXnb/TJwI7w== -----END CERTIFICATE-----Generated at Sat Dec 6 19:54:39 2025 by rpki-client