This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.mft File: qPuDH1vWwMILjgm-URwhvn3F3ro.mft (raw, json) Hash identifier: fr8WewQ2YbL2Tb9I+5RtTAwoxm0eHFh5HuylFjrTv48= Subject key identifier: B9:9F:D2:73:8F:1E:45:FA:4D:34:71:10:B2:E4:04:5C:BE:ED:0E:0F Authority key identifier: A8:FB:83:1F:5B:D6:C0:C2:0B:8E:09:BE:51:1C:21:BE:7D:C5:DE:BA Certificate issuer: /CN=a8fb831f5bd6c0c20b8e09be511c21be7dc5deba Certificate serial: 019AF2090D48977D59CC1E643498D4813D89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPuDH1vWwMILjgm-URwhvn3F3ro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.mft Manifest number: 0746 Signing time: Sat 06 Dec 2025 05:01:10 +0000 Manifest this update: Sat 06 Dec 2025 05:01:10 +0000 Manifest next update: Sun 07 Dec 2025 05:01:10 +0000 Files and hashes: 1: eVNnviqiIdPY1BUvp61D_AbFKTc.roa (hash: zPSI/g0bx6X/hvEByyb1M6C4zHIhQAKfdMZa4T5kVWA=) 2: qPuDH1vWwMILjgm-URwhvn3F3ro.crl (hash: QGTi5oQFYQYOdwTv9lzhkEfYkAdVcBJ0XiTImNqzjck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.mft rsync://rpki.ripe.net/repository/DEFAULT/qPuDH1vWwMILjgm-URwhvn3F3ro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:0d:48:97:7d:59:cc:1e:64:34:98:d4:81:3d:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8fb831f5bd6c0c20b8e09be511c21be7dc5deba Validity Not Before: Dec 6 05:01:10 2025 GMT Not After : Dec 7 05:01:10 2025 GMT Subject: CN=b99fd2738f1e45fa4d347110b2e4045cbeed0e0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:65:e6:69:3f:4a:2f:6d:a5:b5:41:56:8d:c7: 92:0d:b0:7c:5a:8e:4a:6d:ee:b6:75:ac:6c:bb:75: 31:43:ea:93:93:56:95:68:eb:07:4b:44:ec:bc:b9: 81:4a:ed:12:2a:d4:9f:c6:14:82:a3:a8:35:43:c6: 9a:c6:0a:8d:2b:cc:48:e1:f3:60:79:e2:6e:2a:8c: 2a:37:57:40:a6:a9:c3:18:11:1d:10:33:4b:97:2e: 12:76:f4:da:b0:a2:b0:ea:a3:ef:d3:d7:95:fe:ea: 8b:94:03:54:f5:fe:95:77:d3:82:36:ee:ac:4c:37: 34:ac:f2:e4:e8:34:02:5a:77:e1:07:87:1f:75:01: 73:31:a9:ef:9d:7d:0b:8f:ad:32:26:fb:9b:d4:7b: 25:1a:74:06:8e:45:0a:5a:24:65:97:79:56:59:0f: b2:a9:5d:45:20:cd:03:e4:d2:0e:f6:39:7d:b3:50: 6e:e6:04:10:4e:8c:5c:d9:28:ea:ab:a1:50:7c:48: 91:07:cc:cb:41:e8:f1:63:41:3e:e9:ff:7f:00:73: b0:68:e1:f1:ce:8f:c8:a6:11:15:ce:b7:9a:60:2f: bf:9f:a9:1e:75:bf:e8:5f:a4:af:b0:cc:a1:b8:ec: a0:4e:a3:41:3f:49:0b:d1:24:c2:fa:83:93:f3:99: a5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:9F:D2:73:8F:1E:45:FA:4D:34:71:10:B2:E4:04:5C:BE:ED:0E:0F X509v3 Authority Key Identifier: keyid:A8:FB:83:1F:5B:D6:C0:C2:0B:8E:09:BE:51:1C:21:BE:7D:C5:DE:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPuDH1vWwMILjgm-URwhvn3F3ro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:4d:2c:63:dc:25:0f:39:c8:75:5c:e8:43:04:93:ef:6f:4a: 65:26:03:ed:37:6a:e9:58:d9:f4:e9:50:84:98:de:83:35:eb: 8f:66:fa:9b:e9:85:3d:b8:24:16:ff:21:0e:81:c8:73:f8:1b: 42:5f:20:ca:68:33:a7:61:f1:3c:55:94:7f:b2:69:a3:bd:73: f1:1e:20:f4:34:dd:55:fb:30:41:87:7e:22:a0:8a:eb:32:21: 31:f0:87:d3:da:9e:2d:74:58:dd:0a:89:4d:97:e4:b0:12:25: 40:c0:2d:12:e1:77:be:07:f7:39:4e:97:64:75:23:bd:fe:23: 73:d8:23:3c:89:87:90:69:39:95:46:7f:8d:c4:9f:f6:44:f6: 70:83:70:76:1e:2f:a2:b5:cf:6c:2c:71:6e:e0:99:9f:90:a2: 63:6b:c1:bf:ac:4e:11:ad:ed:bf:47:ca:f0:7c:4a:77:57:f0: 28:ad:73:3f:a4:47:75:60:e1:80:3a:10:fe:3b:df:64:70:65: 10:f8:07:81:a9:ae:54:a2:ea:a0:28:db:b4:0a:cb:38:d4:d1: 1d:7d:89:1d:1e:c2:0b:c1:a6:b6:9d:aa:e5:e8:6e:6d:4b:13: 39:51:ed:57:ce:f9:66:76:5b:a8:25:29:59:ac:ca:46:4a:01: a2:24:24:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQ1Il31ZzB5kNJjUgT2JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4ZmI4MzFmNWJkNmMwYzIwYjhlMDliZTUxMWMyMWJlN2Rj NWRlYmEwHhcNMjUxMjA2MDUwMTEwWhcNMjUxMjA3MDUwMTEwWjAzMTEwLwYDVQQD EyhiOTlmZDI3MzhmMWU0NWZhNGQzNDcxMTBiMmU0MDQ1Y2JlZWQwZTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GXmaT9KL22ltUFWjceSDbB8Wo5K be62daxsu3UxQ+qTk1aVaOsHS0TsvLmBSu0SKtSfxhSCo6g1Q8aaxgqNK8xI4fNg eeJuKowqN1dApqnDGBEdEDNLly4SdvTasKKw6qPv09eV/uqLlANU9f6Vd9OCNu6s TDc0rPLk6DQCWnfhB4cfdQFzManvnX0Lj60yJvub1HslGnQGjkUKWiRll3lWWQ+y qV1FIM0D5NIO9jl9s1Bu5gQQToxc2Sjqq6FQfEiRB8zLQejxY0E+6f9/AHOwaOHx zo/IphEVzreaYC+/n6kedb/oX6SvsMyhuOygTqNBP0kL0STC+oOT85mlbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLmf0nOPHkX6TTRxELLkBFy+7Q4PMB8GA1UdIwQY MBaAFKj7gx9b1sDCC44JvlEcIb59xd66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVB1REgxdld3TUlMamdtLVVSd2h2bjNGM3JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8wMWNiNzAtNTE4Yi00NDFiLWIzZGEt NjQ2ZDdlZWUwYTBmLzEvcVB1REgxdld3TUlMamdtLVVSd2h2bjNGM3JvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi8wMWNiNzAtNTE4Yi00NDFiLWIzZGEtNjQ2ZDdlZWUwYTBm LzEvcVB1REgxdld3TUlMamdtLVVSd2h2bjNGM3JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiU0sY9wl DznIdVzoQwST729KZSYD7Tdq6VjZ9OlQhJjegzXrj2b6m+mFPbgkFv8hDoHIc/gb Ql8gymgzp2HxPFWUf7Jpo71z8R4g9DTdVfswQYd+IqCK6zIhMfCH09qeLXRY3QqJ TZfksBIlQMAtEuF3vgf3OU6XZHUjvf4jc9gjPImHkGk5lUZ/jcSf9kT2cINwdh4v orXPbCxxbuCZn5CiY2vBv6xOEa3tv0fK8HxKd1fwKK1zP6RHdWDhgDoQ/jvfZHBl EPgHgamuVKLqoCjbtArLONTRHX2JHR7CC8Gmtp2q5ehubUsTOVHtV875ZnZbqCUp WazKRkoBoiQkeQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:49 2025 by rpki-client