This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft File: qjX0oGEfcqiSww2CEtIfhswTqWc.mft (raw, json) Hash identifier: MdyAoYC1RTOyZ5qP77qElxy9ILPCcB0hYVGD9CurvzQ= Subject key identifier: 60:79:8F:D5:1D:9A:00:86:C9:12:A2:EB:4A:7B:8D:2C:35:B0:EA:17 Authority key identifier: AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67 Certificate issuer: /CN=aa35f4a0611f72a892c30d8212d21f86cc13a967 Certificate serial: 019AF19B39D6E4C9CEAA2D623123979BFE5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft Manifest number: 07FA Signing time: Sat 06 Dec 2025 03:01:13 +0000 Manifest this update: Sat 06 Dec 2025 03:01:13 +0000 Manifest next update: Sun 07 Dec 2025 03:01:13 +0000 Files and hashes: 1: qjX0oGEfcqiSww2CEtIfhswTqWc.crl (hash: E+LhxWopqfVG+1P0LjpN1AxcSX9zb6c8Px6pL11yRQA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:39:d6:e4:c9:ce:aa:2d:62:31:23:97:9b:fe:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa35f4a0611f72a892c30d8212d21f86cc13a967 Validity Not Before: Dec 6 03:01:13 2025 GMT Not After : Dec 7 03:01:13 2025 GMT Subject: CN=60798fd51d9a0086c912a2eb4a7b8d2c35b0ea17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bb:02:a7:74:ec:a5:5b:e3:02:67:27:21:48: c8:71:a7:9d:1c:08:16:c6:3d:10:10:fd:17:74:06: 6c:a7:a1:35:c1:49:40:b7:d9:4f:84:ec:71:a8:1f: 98:db:17:f8:3d:73:92:db:c7:fd:f6:4c:20:28:69: c8:08:fa:20:9f:07:ca:07:c4:1b:0a:aa:28:6e:18: 97:22:c9:73:6f:69:10:d7:57:4d:24:df:20:5a:0a: 00:1b:44:ee:dd:c7:eb:e5:f3:9e:89:c4:3d:29:53: 6b:df:4b:f4:12:96:68:60:73:e0:6c:23:f7:21:c4: aa:b4:07:09:0d:77:bb:e1:87:33:64:66:cc:04:c0: f4:d9:70:fc:e7:7e:64:54:45:74:d4:72:9b:42:a6: d1:61:5c:fa:80:85:63:27:bd:24:ba:ca:51:95:7d: 67:52:07:13:1e:35:72:7a:c1:f2:c7:c5:42:0a:85: af:e2:ea:de:3a:6a:1f:86:5f:84:06:82:e6:06:ff: 0a:fa:8f:c6:55:9c:59:c9:31:03:cf:02:3a:75:6f: 87:d3:61:f0:bf:d5:0a:b3:a9:26:5b:55:61:7b:d2: 6a:81:ac:4e:dc:1a:92:fc:aa:52:3b:17:2b:2a:32: 0a:63:1c:66:19:7f:25:3c:08:0b:3b:66:c4:8f:21: 9e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:79:8F:D5:1D:9A:00:86:C9:12:A2:EB:4A:7B:8D:2C:35:B0:EA:17 X509v3 Authority Key Identifier: keyid:AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:ea:77:16:6b:b9:d4:18:67:5b:79:85:40:48:5b:e7:86:05: 9f:33:fc:e2:79:1c:47:c1:9e:71:d7:46:4d:55:6f:16:a0:4d: ae:4d:0c:01:c2:9f:37:a9:5e:08:5b:28:49:1a:24:e3:7c:b6: 83:d2:27:0f:49:80:25:70:db:a2:21:7d:c2:cc:d8:e6:ce:ad: 8a:6a:84:9a:5c:13:cf:ee:8d:b7:52:ab:15:81:66:fb:15:eb: 94:6a:54:1a:af:a7:98:97:e6:f4:b8:c6:3a:e7:0f:ac:9d:68: d4:ca:4f:71:bf:aa:19:33:84:8f:30:38:4c:93:9c:0f:0d:60: 0e:3a:be:9b:14:09:64:c8:96:76:d6:e5:ff:af:03:a6:dc:22: c2:43:b4:43:9e:ae:e1:40:31:3a:9c:c9:67:d8:dc:49:b7:c3: 78:94:0b:93:d1:ca:4e:d0:01:85:b3:32:45:2a:9c:62:cf:7b: 5e:c7:08:3e:e9:c0:1f:c8:62:c4:3d:58:f3:7a:5e:68:4f:60: 7d:65:cf:0e:ae:05:c9:a5:d0:d5:bc:bc:16:e8:96:d6:29:73: f8:1e:62:25:db:ad:fd:0d:54:29:58:4d:23:45:c5:25:84:f0: 35:8b:06:78:d6:8e:78:3a:4f:fa:6a:8b:22:2e:67:13:c3:cc: 0c:c1:4b:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmznW5MnOqi1iMSOXm/5aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMzVmNGEwNjExZjcyYTg5MmMzMGQ4MjEyZDIxZjg2Y2Mx M2E5NjcwHhcNMjUxMjA2MDMwMTEzWhcNMjUxMjA3MDMwMTEzWjAzMTEwLwYDVQQD Eyg2MDc5OGZkNTFkOWEwMDg2YzkxMmEyZWI0YTdiOGQyYzM1YjBlYTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrsCp3TspVvjAmcnIUjIcaedHAgW xj0QEP0XdAZsp6E1wUlAt9lPhOxxqB+Y2xf4PXOS28f99kwgKGnICPognwfKB8Qb CqoobhiXIslzb2kQ11dNJN8gWgoAG0Tu3cfr5fOeicQ9KVNr30v0EpZoYHPgbCP3 IcSqtAcJDXe74YczZGbMBMD02XD8535kVEV01HKbQqbRYVz6gIVjJ70kuspRlX1n UgcTHjVyesHyx8VCCoWv4ureOmofhl+EBoLmBv8K+o/GVZxZyTEDzwI6dW+H02Hw v9UKs6kmW1Vhe9JqgaxO3BqS/KpSOxcrKjIKYxxmGX8lPAgLO2bEjyGewQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGB5j9UdmgCGyRKi60p7jSw1sOoXMB8GA1UdIwQY MBaAFKo19KBhH3KoksMNghLSH4bME6lnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWpYMG9HRWZjcWlTd3cyQ0V0SWZoc3dUcVdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9hYTFmOTQtODgyNS00YmRkLWI0ZDgt NmJiZmU1OGExY2EwLzEvcWpYMG9HRWZjcWlTd3cyQ0V0SWZoc3dUcVdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9hYTFmOTQtODgyNS00YmRkLWI0ZDgtNmJiZmU1OGExY2Ew LzEvcWpYMG9HRWZjcWlTd3cyQ0V0SWZoc3dUcVdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM+p3Fmu5 1BhnW3mFQEhb54YFnzP84nkcR8GecddGTVVvFqBNrk0MAcKfN6leCFsoSRok43y2 g9InD0mAJXDboiF9wszY5s6timqEmlwTz+6Nt1KrFYFm+xXrlGpUGq+nmJfm9LjG OucPrJ1o1MpPcb+qGTOEjzA4TJOcDw1gDjq+mxQJZMiWdtbl/68DptwiwkO0Q56u 4UAxOpzJZ9jcSbfDeJQLk9HKTtABhbMyRSqcYs97XscIPunAH8hixD1Y83peaE9g fWXPDq4FyaXQ1by8FuiW1ilz+B5iJdut/Q1UKVhNI0XFJYTwNYsGeNaOeDpP+mqL Ii5nE8PMDMFLrA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:10:09 2025 by rpki-client