This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft File: qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft (raw, json) Hash identifier: RWA7qwg287fAOX3fdA8RHg8g/W0uzUS1BhgeZmdXYjE= Subject key identifier: CC:B0:A1:83:35:0B:F6:E1:8C:82:A6:3A:4C:26:F7:DD:12:0B:6A:70 Authority key identifier: A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3 Certificate issuer: /CN=a8153b3d5612234fe260fe60bc7ce028062227a3 Certificate serial: 019B2B542C454684A2EADBBDA342A7FF211C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft Manifest number: 1782 Signing time: Wed 17 Dec 2025 08:01:35 +0000 Manifest this update: Wed 17 Dec 2025 08:01:35 +0000 Manifest next update: Thu 18 Dec 2025 08:01:35 +0000 Files and hashes: 1: ohlIUqQ3eDQtmUwSu9Kl2M35sw8.roa (hash: dhBdHXgrEk65slUOAf0TCN0qQFeQcRa2buvDnBjrTtI=) 2: qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl (hash: biXDRLh1nIZxAKjCLN4/02NCdlCNbvzOKUkpFBM0c2A=) 3: u2p9YZ_LXa4YZ8T6-whJAsnzXuE.roa (hash: HvG5oZRfAf2DkODgozvYS7e+xqSp2NYm+qp3YwzyYdI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:54:2c:45:46:84:a2:ea:db:bd:a3:42:a7:ff:21:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8153b3d5612234fe260fe60bc7ce028062227a3 Validity Not Before: Dec 17 08:01:35 2025 GMT Not After : Dec 18 08:01:35 2025 GMT Subject: CN=ccb0a183350bf6e18c82a63a4c26f7dd120b6a70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:22:32:98:a6:39:04:58:44:33:74:73:04:c5: fa:72:a0:04:ba:0f:30:31:2f:2d:bf:c4:73:f8:74: bd:f5:d3:8e:d9:55:0b:27:75:b0:33:2b:b6:5e:9a: f1:24:ce:82:9c:d6:d7:59:a2:2a:12:6b:38:9c:59: e3:48:6e:12:3a:fb:89:28:04:74:3f:15:47:88:64: 81:94:c3:fc:69:f2:9e:70:ba:f1:f7:86:35:15:bf: 9c:2a:79:a2:e7:aa:b1:d0:b9:24:79:a8:af:10:ec: a9:fc:d7:3e:08:77:a7:56:10:1a:e4:3e:a7:e0:bb: a5:c3:94:93:a1:51:7b:e6:58:92:a7:7e:ac:7c:2d: 8a:f2:a5:5d:b3:3d:5c:2b:e8:1f:70:09:0b:1d:b7: 1c:54:b2:7c:86:83:b6:ad:ff:f2:4e:46:30:22:e7: 1c:83:e0:39:b9:aa:43:da:66:4b:49:7f:87:cf:81: c1:13:89:39:b6:a0:32:de:c1:26:b7:12:be:57:4c: e3:2a:76:dc:14:4f:ee:1f:61:d6:11:44:57:9a:f1: bc:9f:ed:a7:ba:47:9f:4c:fc:e2:71:02:d1:24:a6: f7:2f:b9:fa:08:a2:5f:6c:86:8b:5b:83:af:61:8b: 47:8a:fa:73:29:57:6a:1a:69:70:bf:09:ba:48:35: 13:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B0:A1:83:35:0B:F6:E1:8C:82:A6:3A:4C:26:F7:DD:12:0B:6A:70 X509v3 Authority Key Identifier: keyid:A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:07:35:aa:1a:3c:13:f8:e9:70:94:2f:f7:9a:a6:71:b4:7d: ea:70:86:4f:81:e9:ea:6a:88:11:6f:45:6d:ae:6f:ee:47:b7: 5c:8f:03:2a:a9:2b:0a:b1:21:e4:d4:e4:9a:61:81:45:ca:85: b5:28:10:f5:e4:ec:34:37:1d:12:8f:89:72:a9:f1:0c:70:18: 78:c4:ad:b4:e9:49:34:27:63:85:b9:a1:34:52:ca:92:95:31: 1d:d3:a5:cb:4d:3b:c8:16:bd:93:39:f4:d6:1e:d9:64:14:38: 04:61:b8:ec:70:e9:f7:ab:cd:4a:75:c1:51:72:a6:e9:a9:41: 46:01:ce:16:c9:02:b1:ca:ed:f9:ed:2a:ed:04:34:55:b4:b1: cc:09:72:99:0d:74:40:50:cf:cf:ac:dd:7c:cc:c7:84:0b:6c: ba:da:ee:c4:bf:aa:20:9e:5f:c1:c0:98:b6:8a:6d:4c:23:7e: a2:9d:f6:6e:36:ce:40:67:8e:8e:0c:f9:b2:d3:01:a6:9a:5f: 1c:eb:a7:f7:17:d1:bb:0e:c7:5a:f4:36:32:24:70:04:d8:8d: 99:c5:ad:03:f7:fb:32:9e:ad:44:b1:8f:59:30:5b:b1:c3:48: 0d:fe:be:69:36:de:d3:af:34:72:ba:8b:b8:c6:22:e6:a9:d9: 70:50:fb:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrVCxFRoSi6tu9o0Kn/yEcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MTUzYjNkNTYxMjIzNGZlMjYwZmU2MGJjN2NlMDI4MDYy MjI3YTMwHhcNMjUxMjE3MDgwMTM1WhcNMjUxMjE4MDgwMTM1WjAzMTEwLwYDVQQD EyhjY2IwYTE4MzM1MGJmNmUxOGM4MmE2M2E0YzI2ZjdkZDEyMGI2YTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyIymKY5BFhEM3RzBMX6cqAEug8w MS8tv8Rz+HS99dOO2VULJ3WwMyu2XprxJM6CnNbXWaIqEms4nFnjSG4SOvuJKAR0 PxVHiGSBlMP8afKecLrx94Y1Fb+cKnmi56qx0LkkeaivEOyp/Nc+CHenVhAa5D6n 4Lulw5SToVF75liSp36sfC2K8qVdsz1cK+gfcAkLHbccVLJ8hoO2rf/yTkYwIucc g+A5uapD2mZLSX+Hz4HBE4k5tqAy3sEmtxK+V0zjKnbcFE/uH2HWEURXmvG8n+2n ukefTPzicQLRJKb3L7n6CKJfbIaLW4OvYYtHivpzKVdqGmlwvwm6SDUTTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMywoYM1C/bhjIKmOkwm990SC2pwMB8GA1UdIwQY MBaAFKgVOz1WEiNP4mD+YLx84CgGIiejMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUJVN1BWWVNJMF9pWVA1Z3ZIemdLQVlpSjZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9kNGQ4ZGQtNTBkOC00M2M3LTliNTUt OWFhN2NkNjUwNWU1LzEvcUJVN1BWWVNJMF9pWVA1Z3ZIemdLQVlpSjZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9kNGQ4ZGQtNTBkOC00M2M3LTliNTUtOWFhN2NkNjUwNWU1 LzEvcUJVN1BWWVNJMF9pWVA1Z3ZIemdLQVlpSjZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMwc1qho8 E/jpcJQv95qmcbR96nCGT4Hp6mqIEW9Fba5v7ke3XI8DKqkrCrEh5NTkmmGBRcqF tSgQ9eTsNDcdEo+JcqnxDHAYeMSttOlJNCdjhbmhNFLKkpUxHdOly007yBa9kzn0 1h7ZZBQ4BGG47HDp96vNSnXBUXKm6alBRgHOFskCscrt+e0q7QQ0VbSxzAlymQ10 QFDPz6zdfMzHhAtsutruxL+qIJ5fwcCYtoptTCN+op32bjbOQGeOjgz5stMBpppf HOun9xfRuw7HWvQ2MiRwBNiNmcWtA/f7Mp6tRLGPWTBbscNIDf6+aTbe0680crqL uMYi5qnZcFD7UA== -----END CERTIFICATE-----Generated at Wed Dec 17 17:44:55 2025 by rpki-client