This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft File: qEOOrPTQZOh6drtGLTtLLMOFikw.mft (raw, json) Hash identifier: eeE3EItzJ3P7z7+b7i7QP2DHJ/4BIzfuH+9qXqitiJM= Subject key identifier: 15:E1:C5:8F:47:A5:56:0B:84:4B:5F:87:6E:85:0B:82:45:A4:CC:3A Authority key identifier: A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C Certificate issuer: /CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c Certificate serial: 019AF164772DBD564D07F0CF689F6453E406 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft Manifest number: 0EDC Signing time: Sat 06 Dec 2025 02:01:24 +0000 Manifest this update: Sat 06 Dec 2025 02:01:24 +0000 Manifest next update: Sun 07 Dec 2025 02:01:24 +0000 Files and hashes: 1: 1VL4lYJptkpi6ZtVoZgmoJ6ksn0.roa (hash: f1kBG9NlxREDPNdWOkJs8Cv0Ij2AV1IHOO/Hc9KsOpQ=) 2: eWIsK00nv-TBVtwDZCA3scOHg9s.roa (hash: y147gGaB8bkjz0BvOSbEDQ7Eu45dIgspzGe/6ZKyCR0=) 3: qEOOrPTQZOh6drtGLTtLLMOFikw.crl (hash: NaTo55Jvz9Iq1S9QCKXFURbF5SKhnq2hny9yttZ+GBs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:77:2d:bd:56:4d:07:f0:cf:68:9f:64:53:e4:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c Validity Not Before: Dec 6 02:01:24 2025 GMT Not After : Dec 7 02:01:24 2025 GMT Subject: CN=15e1c58f47a5560b844b5f876e850b8245a4cc3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cd:9f:32:ca:cb:ee:e5:84:f7:d4:b8:08:dc: 98:1a:b6:81:f5:9d:2e:86:bb:4e:9e:9e:07:3a:74: a4:2d:ed:53:db:65:27:e4:74:ce:c5:dd:dd:07:c3: aa:9c:c2:6b:24:71:20:ef:ec:51:76:cb:6d:25:47: ab:a1:e9:67:23:d3:1a:6f:5c:3d:c9:8d:7f:9d:60: fe:33:ff:1a:19:15:e0:2e:ba:25:2c:f8:ae:0a:02: 85:16:3c:61:84:b4:52:f0:eb:96:ad:e6:22:08:91: 37:0a:bb:8e:57:7b:5a:fc:56:36:c3:42:7c:4b:52: 8c:0c:3a:a8:93:b4:ed:ec:99:1f:43:a4:3b:84:06: fa:b1:20:94:04:76:64:e8:35:1d:30:dd:ca:b0:7b: f4:e2:a2:c4:9d:f1:07:52:18:68:3a:4e:d1:43:75: 24:3e:50:b2:af:11:ce:20:06:1d:9c:0d:7c:5a:16: 3e:0d:63:ab:f2:20:91:35:7b:94:1c:1e:0b:89:27: ac:39:c1:d0:a9:fa:da:c3:7a:3d:c3:6a:4d:94:39: ca:6e:e4:f6:18:ce:f6:00:28:01:90:f6:07:1b:3a: 92:0d:73:15:08:20:33:f6:10:ee:60:1a:e2:30:02: 7d:e8:e6:cc:09:f7:b0:be:79:18:f2:83:f2:cf:c3: 97:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E1:C5:8F:47:A5:56:0B:84:4B:5F:87:6E:85:0B:82:45:A4:CC:3A X509v3 Authority Key Identifier: keyid:A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:13:35:f1:84:1e:ab:f2:c4:5d:d7:bd:77:b0:57:59:fd:e8: 87:ac:84:a5:bb:3c:3a:ba:6a:cc:1b:8a:72:f1:ab:92:eb:0e: 20:10:ca:a4:d4:f6:b4:71:37:6c:bb:c7:6d:44:53:3d:17:a7: 49:9f:02:48:ff:40:18:47:74:ae:69:7c:d6:eb:84:54:77:fd: 41:1a:ab:ef:cb:e6:53:b8:f6:3b:05:26:66:80:14:f8:49:01: c7:ff:45:9e:18:9f:64:4f:7e:91:2f:23:88:10:83:0b:70:36: 97:58:56:56:3b:dd:f5:55:81:47:27:68:d7:44:c4:2b:ab:c8: c1:2d:99:76:d9:84:0c:bf:31:54:a4:b1:58:25:66:42:51:0c: 9e:1e:e7:2d:e4:ec:e9:fa:c0:9d:33:7d:24:c1:f0:18:09:64: e1:ef:93:68:1b:2e:92:d4:44:c4:53:5d:11:7e:d6:a8:db:21: bf:2c:b8:15:d1:81:96:7a:de:d1:a5:7d:93:cb:40:02:a9:c9: b0:55:f8:b6:fd:9a:d6:dd:bc:c3:0a:b4:3e:47:70:de:65:9b: 5b:e2:1a:07:51:ca:f8:4d:82:90:52:66:38:b3:11:35:63:f4: e4:27:dd:e1:00:3c:ed:ba:a9:1a:16:ad:5d:da:b6:26:ae:f0: c8:84:b0:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZHctvVZNB/DPaJ9kU+QGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NDM4ZWFjZjRkMDY0ZTg3YTc2YmI0NjJkM2I0YjJjYzM4 NThhNGMwHhcNMjUxMjA2MDIwMTI0WhcNMjUxMjA3MDIwMTI0WjAzMTEwLwYDVQQD EygxNWUxYzU4ZjQ3YTU1NjBiODQ0YjVmODc2ZTg1MGI4MjQ1YTRjYzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvM2fMsrL7uWE99S4CNyYGraB9Z0u hrtOnp4HOnSkLe1T22Un5HTOxd3dB8OqnMJrJHEg7+xRdsttJUeroelnI9Mab1w9 yY1/nWD+M/8aGRXgLrolLPiuCgKFFjxhhLRS8OuWreYiCJE3CruOV3ta/FY2w0J8 S1KMDDqok7Tt7JkfQ6Q7hAb6sSCUBHZk6DUdMN3KsHv04qLEnfEHUhhoOk7RQ3Uk PlCyrxHOIAYdnA18WhY+DWOr8iCRNXuUHB4LiSesOcHQqfraw3o9w2pNlDnKbuT2 GM72ACgBkPYHGzqSDXMVCCAz9hDuYBriMAJ96ObMCfewvnkY8oPyz8OXhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBXhxY9HpVYLhEtfh26FC4JFpMw6MB8GA1UdIwQY MBaAFKhDjqz00GToena7Ri07SyzDhYpMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUVPT3JQVFFaT2g2ZHJ0R0xUdExMTU9GaWt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84ZTExMjItOGNiOS00ODcyLTg4MTEt MWMyODAwODMxYzY0LzEvcUVPT3JQVFFaT2g2ZHJ0R0xUdExMTU9GaWt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS84ZTExMjItOGNiOS00ODcyLTg4MTEtMWMyODAwODMxYzY0 LzEvcUVPT3JQVFFaT2g2ZHJ0R0xUdExMTU9GaWt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2hM18YQe q/LEXde9d7BXWf3oh6yEpbs8OrpqzBuKcvGrkusOIBDKpNT2tHE3bLvHbURTPRen SZ8CSP9AGEd0rml81uuEVHf9QRqr78vmU7j2OwUmZoAU+EkBx/9FnhifZE9+kS8j iBCDC3A2l1hWVjvd9VWBRydo10TEK6vIwS2ZdtmEDL8xVKSxWCVmQlEMnh7nLeTs 6frAnTN9JMHwGAlk4e+TaBsuktRExFNdEX7WqNshvyy4FdGBlnre0aV9k8tAAqnJ sFX4tv2a1t28wwq0Pkdw3mWbW+IaB1HK+E2CkFJmOLMRNWP05Cfd4QA87bqpGhat Xdq2Jq7wyISw3Q== -----END CERTIFICATE-----Generated at Sat Dec 6 12:41:01 2025 by rpki-client