This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft File: qgvXjKLKpeuP87noI3dNwbdN6-s.mft (raw, json) Hash identifier: LQFeJpW5sBNKOKLmYt+mN9fQYGXgzDRqXb4ma1TG75s= Subject key identifier: 21:5A:08:59:76:C9:FF:41:1D:54:A2:44:60:63:90:4B:95:14:75:DC Authority key identifier: AA:0B:D7:8C:A2:CA:A5:EB:8F:F3:B9:E8:23:77:4D:C1:B7:4D:EB:EB Certificate issuer: /CN=aa0bd78ca2caa5eb8ff3b9e823774dc1b74debeb Certificate serial: 019AF38940BEC122DB722EF5A52281E79516 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft Manifest number: 062B Signing time: Sat 06 Dec 2025 12:00:49 +0000 Manifest this update: Sat 06 Dec 2025 12:00:49 +0000 Manifest next update: Sun 07 Dec 2025 12:00:49 +0000 Files and hashes: 1: 49r3EiPqYIwA3FVnQ3pruyaEeaY.roa (hash: S4fah+Hi++9D/Vhg9/JWPzVOXskqt4CfJ/0z6MaI0ok=) 2: qgvXjKLKpeuP87noI3dNwbdN6-s.crl (hash: JAWD/7jnz2BAx+xvGbSSOqwb/VeqVYu6KE625WP6OUY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:40:be:c1:22:db:72:2e:f5:a5:22:81:e7:95:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa0bd78ca2caa5eb8ff3b9e823774dc1b74debeb Validity Not Before: Dec 6 12:00:49 2025 GMT Not After : Dec 7 12:00:49 2025 GMT Subject: CN=215a085976c9ff411d54a2446063904b951475dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:bf:f6:2b:49:ad:39:1e:bd:05:4f:a0:41:4e: 29:b4:5d:f2:fd:aa:ee:f8:6f:ca:17:48:b3:75:1c: 22:41:3d:e9:5b:ab:d1:bb:22:e0:f4:2f:7c:76:2a: b5:04:f7:32:a8:23:f5:6b:8d:41:59:31:29:57:1a: 39:26:43:98:df:cc:d6:5d:ba:f7:93:5d:27:d3:ba: 0c:3e:39:ff:ba:f1:a7:d0:9f:b0:4e:61:62:fc:95: 5f:67:8b:a5:55:28:4e:20:7b:2f:1f:c5:de:cf:18: e7:78:a9:c1:38:b7:86:4c:b9:1a:ff:a3:11:0d:e5: 74:65:d4:6d:cf:42:e2:1b:78:e8:a7:18:92:7c:c1: bb:b2:66:50:8b:3b:b4:56:8a:2f:e3:6e:41:70:d8: e0:8d:d5:ac:69:0f:ce:d5:e1:65:83:be:a2:21:6f: ed:47:b4:bf:df:f4:4f:af:e0:b1:f8:36:ad:40:83: 9e:3b:8c:e3:27:96:7e:42:35:68:ee:92:83:16:a5: 99:1d:10:6a:d2:97:66:e3:33:87:c7:36:5f:b2:e7: a8:33:ef:90:16:4f:80:d9:1a:0a:f9:3d:07:56:06: 12:61:15:e9:65:f6:f0:78:16:0f:56:0b:84:80:97: 4a:6d:0b:a6:46:bc:0e:2c:60:3b:99:04:2a:e5:d8: c6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:5A:08:59:76:C9:FF:41:1D:54:A2:44:60:63:90:4B:95:14:75:DC X509v3 Authority Key Identifier: keyid:AA:0B:D7:8C:A2:CA:A5:EB:8F:F3:B9:E8:23:77:4D:C1:B7:4D:EB:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:17:f4:f2:25:95:86:ab:9e:75:39:77:89:77:4d:22:7f:bf: 26:cb:69:a8:01:92:e9:5d:0f:e4:26:11:d4:6b:32:42:69:eb: c7:ea:06:21:c5:36:76:ce:e5:3b:8d:7b:6f:d2:db:37:e7:a4: ec:72:99:32:3b:51:3a:4c:f9:00:e7:f6:81:41:e4:f3:c0:1e: ae:24:b7:99:bf:b5:f1:b3:ac:a5:64:5b:58:ac:84:4f:28:a2: 78:9c:04:19:9f:48:fe:c1:0d:0f:9a:b8:fb:37:2f:86:e3:6c: 1e:ba:39:1e:65:0c:ba:82:82:e6:f9:d5:24:7f:74:92:fd:a3: b2:73:65:40:06:74:ee:f3:ed:3d:60:dd:00:92:0d:bb:7b:02: af:27:b8:8d:19:e5:e0:62:7c:81:fe:3f:10:11:0a:3e:01:f1: 5a:1d:07:78:0e:83:c2:33:77:78:cb:c5:ab:17:79:67:e3:48: 4c:3a:b9:5e:c5:da:ee:e1:6e:50:a7:9a:de:11:a0:c8:07:e4: 64:e8:b5:1a:24:ee:a1:4a:e0:3e:49:1f:ec:c8:f6:ac:1a:bd: cd:61:e0:4c:40:79:2c:88:84:61:5f:59:f5:3e:fc:11:a0:99: d7:60:43:76:af:c8:45:c8:62:a5:a2:a6:bd:4d:5b:bd:2b:9d: 65:32:3d:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziUC+wSLbci71pSKB55UWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMGJkNzhjYTJjYWE1ZWI4ZmYzYjllODIzNzc0ZGMxYjc0 ZGViZWIwHhcNMjUxMjA2MTIwMDQ5WhcNMjUxMjA3MTIwMDQ5WjAzMTEwLwYDVQQD EygyMTVhMDg1OTc2YzlmZjQxMWQ1NGEyNDQ2MDYzOTA0Yjk1MTQ3NWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7/2K0mtOR69BU+gQU4ptF3y/aru +G/KF0izdRwiQT3pW6vRuyLg9C98diq1BPcyqCP1a41BWTEpVxo5JkOY38zWXbr3 k10n07oMPjn/uvGn0J+wTmFi/JVfZ4ulVShOIHsvH8XezxjneKnBOLeGTLka/6MR DeV0ZdRtz0LiG3jopxiSfMG7smZQizu0Voov425BcNjgjdWsaQ/O1eFlg76iIW/t R7S/3/RPr+Cx+DatQIOeO4zjJ5Z+QjVo7pKDFqWZHRBq0pdm4zOHxzZfsueoM++Q Fk+A2RoK+T0HVgYSYRXpZfbweBYPVguEgJdKbQumRrwOLGA7mQQq5djGmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCFaCFl2yf9BHVSiRGBjkEuVFHXcMB8GA1UdIwQY MBaAFKoL14yiyqXrj/O56CN3TcG3TevrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWd2WGpLTEtwZXVQODdub0kzZE53YmRONi1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85Nzg4MzctMTAyMy00YjM5LTliMzct YTEwOGRiZTBmZDFmLzEvcWd2WGpLTEtwZXVQODdub0kzZE53YmRONi1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy85Nzg4MzctMTAyMy00YjM5LTliMzctYTEwOGRiZTBmZDFm LzEvcWd2WGpLTEtwZXVQODdub0kzZE53YmRONi1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOBf08iWV hquedTl3iXdNIn+/JstpqAGS6V0P5CYR1GsyQmnrx+oGIcU2ds7lO417b9LbN+ek 7HKZMjtROkz5AOf2gUHk88AeriS3mb+18bOspWRbWKyETyiieJwEGZ9I/sEND5q4 +zcvhuNsHro5HmUMuoKC5vnVJH90kv2jsnNlQAZ07vPtPWDdAJINu3sCrye4jRnl 4GJ8gf4/EBEKPgHxWh0HeA6DwjN3eMvFqxd5Z+NITDq5XsXa7uFuUKea3hGgyAfk ZOi1GiTuoUrgPkkf7Mj2rBq9zWHgTEB5LIiEYV9Z9T78EaCZ12BDdq/IRchipaKm vU1bvSudZTI9bw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:12:04 2025 by rpki-client