This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft File: qZtHOUN7VflE0iKdFrbm-lmRloc.mft (raw, json) Hash identifier: v/euSYrp+m+9gA9VGVQCp+a3Ue3S3plKFwI7JR1EpuI= Subject key identifier: 74:7F:66:40:9B:61:DA:0E:24:DC:2D:81:CC:6A:A4:AC:CB:A3:A0:17 Authority key identifier: A9:9B:47:39:43:7B:55:F9:44:D2:22:9D:16:B6:E6:FA:59:91:96:87 Certificate issuer: /CN=a99b4739437b55f944d2229d16b6e6fa59919687 Certificate serial: 019AF3F704FFE6A3DE311169524C9E3DE360 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 14:00:43 +0000 Manifest this update: Sat 06 Dec 2025 14:00:43 +0000 Manifest next update: Sun 07 Dec 2025 14:00:43 +0000 Files and hashes: 1: qMxnjU0y2BirW8Msof1Jf0nPV6Y.roa (hash: mETKuHxxI80kK1mEz5SE5kB8etbeHSydtbh41gdDMVo=) 2: qZtHOUN7VflE0iKdFrbm-lmRloc.crl (hash: Vqwk1/gki+jKR54Fx46jwnywIIkHgWY6ZBqG0md2iSA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:04:ff:e6:a3:de:31:11:69:52:4c:9e:3d:e3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a99b4739437b55f944d2229d16b6e6fa59919687 Validity Not Before: Dec 6 14:00:43 2025 GMT Not After : Dec 7 14:00:43 2025 GMT Subject: CN=747f66409b61da0e24dc2d81cc6aa4accba3a017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:48:6f:67:0f:fb:62:51:4c:97:76:ba:34:72: 6c:54:53:d0:65:f7:e1:c1:78:c4:c2:16:07:2b:93: 33:82:7c:3b:3d:c7:73:c1:d2:f3:18:8f:13:74:72: 4d:26:e9:38:7b:df:a5:83:d6:5b:35:86:6b:a2:2a: ab:7e:db:97:5b:a7:dd:4b:ae:c5:f8:3a:d9:45:4d: ad:15:b3:dc:e5:d8:9b:af:d2:fa:b7:07:e5:ba:90: b5:65:83:71:2a:55:11:f3:42:0c:3b:96:63:c5:96: 9f:fc:0a:50:c2:0a:80:6e:8f:86:9f:48:15:06:cc: 38:ff:bf:8b:b3:7d:aa:cb:18:73:80:39:cf:8d:4a: 29:82:be:2b:27:2e:0b:61:81:7a:99:8d:99:ab:fc: e9:0d:f7:d0:73:90:be:0e:00:69:b1:62:ee:b5:b0: 75:8b:4c:1f:71:55:22:ba:04:60:c9:04:2a:3e:54: 84:a8:93:cc:c6:7f:44:8b:7e:f5:79:17:12:3f:ff: e9:05:81:f2:ce:72:82:c6:1b:06:84:64:c5:6b:b3: cf:b3:7b:25:11:79:54:55:b9:e2:b5:3b:15:ae:b9: a9:b5:a9:a7:a1:fd:d1:95:04:5b:35:ab:e1:b7:cc: 20:10:bb:92:e5:d0:6a:63:66:ff:61:87:e8:0f:90: 2a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:7F:66:40:9B:61:DA:0E:24:DC:2D:81:CC:6A:A4:AC:CB:A3:A0:17 X509v3 Authority Key Identifier: keyid:A9:9B:47:39:43:7B:55:F9:44:D2:22:9D:16:B6:E6:FA:59:91:96:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:13:87:30:7a:5a:96:ce:93:bc:25:aa:55:49:94:9f:02:c2: 91:c3:71:69:85:17:96:d9:3d:5c:4e:93:14:e8:e1:d5:7a:47: bf:aa:48:fc:6f:89:f5:a1:1f:8b:c5:d7:46:5d:53:6d:f2:da: 76:9e:12:e1:e8:19:59:97:b6:cb:24:e2:56:03:ae:2b:9e:0a: a3:ce:87:40:f7:ab:d6:0d:bf:68:41:e9:91:d6:32:05:9b:3f: df:20:ab:cb:f5:c8:a9:83:0d:31:72:dc:aa:22:ab:75:3d:4b: 8d:0b:48:5b:f3:da:89:13:84:60:4d:0e:0c:6b:cd:35:33:d0: a9:25:76:1f:4f:28:07:78:c4:5f:0b:83:b3:93:8c:72:06:b9: 19:69:ef:63:90:32:a0:41:55:42:be:c4:1c:09:e8:5b:58:2b: 86:35:89:c9:1a:02:a5:e1:d4:e6:01:66:c1:ad:84:76:8c:0e: 47:b4:95:f2:6b:74:bb:22:18:67:ab:d4:5f:70:16:6d:d9:7c: 46:6f:f6:f4:3b:72:77:98:52:c5:42:3b:64:9a:92:f1:77:97: b8:cf:78:d4:5e:1a:58:eb:57:e9:ea:a3:d9:33:06:c5:1a:98: 2f:0a:75:73:3d:24:f2:37:66:1f:c1:12:a4:57:d0:e2:d9:5f: 7a:3b:d6:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9wT/5qPeMRFpUkyePeNgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5OWI0NzM5NDM3YjU1Zjk0NGQyMjI5ZDE2YjZlNmZhNTk5 MTk2ODcwHhcNMjUxMjA2MTQwMDQzWhcNMjUxMjA3MTQwMDQzWjAzMTEwLwYDVQQD Eyg3NDdmNjY0MDliNjFkYTBlMjRkYzJkODFjYzZhYTRhY2NiYTNhMDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUhvZw/7YlFMl3a6NHJsVFPQZffh wXjEwhYHK5Mzgnw7PcdzwdLzGI8TdHJNJuk4e9+lg9ZbNYZroiqrftuXW6fdS67F +DrZRU2tFbPc5dibr9L6twflupC1ZYNxKlUR80IMO5ZjxZaf/ApQwgqAbo+Gn0gV Bsw4/7+Ls32qyxhzgDnPjUopgr4rJy4LYYF6mY2Zq/zpDffQc5C+DgBpsWLutbB1 i0wfcVUiugRgyQQqPlSEqJPMxn9Ei371eRcSP//pBYHyznKCxhsGhGTFa7PPs3sl EXlUVbnitTsVrrmptamnof3RlQRbNavht8wgELuS5dBqY2b/YYfoD5AqOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHR/ZkCbYdoOJNwtgcxqpKzLo6AXMB8GA1UdIwQY MBaAFKmbRzlDe1X5RNIinRa25vpZkZaHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVp0SE9VTjdWZmxFMGlLZEZyYm0tbG1SbG9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9hNDExNGUtZGIxNC00NGI0LTliMjUt ZTQ3NTY0Y2QwYmFlLzEvcVp0SE9VTjdWZmxFMGlLZEZyYm0tbG1SbG9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9hNDExNGUtZGIxNC00NGI0LTliMjUtZTQ3NTY0Y2QwYmFl LzEvcVp0SE9VTjdWZmxFMGlLZEZyYm0tbG1SbG9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPhOHMHpa ls6TvCWqVUmUnwLCkcNxaYUXltk9XE6TFOjh1XpHv6pI/G+J9aEfi8XXRl1TbfLa dp4S4egZWZe2yyTiVgOuK54Ko86HQPer1g2/aEHpkdYyBZs/3yCry/XIqYMNMXLc qiKrdT1LjQtIW/PaiROEYE0ODGvNNTPQqSV2H08oB3jEXwuDs5OMcga5GWnvY5Ay oEFVQr7EHAnoW1grhjWJyRoCpeHU5gFmwa2EdowOR7SV8mt0uyIYZ6vUX3AWbdl8 Rm/29Dtyd5hSxUI7ZJqS8XeXuM941F4aWOtX6eqj2TMGxRqYLwp1cz0k8jdmH8ES pFfQ4tlfejvWcg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:43:57 2025 by rpki-client