This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.mft File: qjHuUSwaViq56UEKgx9y_UMYiS4.mft (raw, json) Hash identifier: 0o6Wkc3rEaOexTt8tqJGBGh88PDSOP1UyOi7gIPyvW8= Subject key identifier: E5:96:F7:4A:71:B5:27:8A:D7:A6:73:19:1C:47:7D:0A:55:4B:13:67 Authority key identifier: AA:31:EE:51:2C:1A:56:2A:B9:E9:41:0A:83:1F:72:FD:43:18:89:2E Certificate issuer: /CN=aa31ee512c1a562ab9e9410a831f72fd4318892e Certificate serial: 019AF464D05A98BF82D160E64B5037EE3A33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjHuUSwaViq56UEKgx9y_UMYiS4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.mft Manifest number: 0A3C Signing time: Sat 06 Dec 2025 16:00:38 +0000 Manifest this update: Sat 06 Dec 2025 16:00:38 +0000 Manifest next update: Sun 07 Dec 2025 16:00:38 +0000 Files and hashes: 1: TrtR0Owq5Xkx-biJC8Ej_IhK1Ag.roa (hash: a1F6oMMLvEFRIYoQInrH9FMRLmJcoCgIJF0JoxM2u7Q=) 2: qjHuUSwaViq56UEKgx9y_UMYiS4.crl (hash: kOP1a6Xrbm5fxbCY+igZlLYbupo+7LZUKvuiWi3aBOI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.mft rsync://rpki.ripe.net/repository/DEFAULT/qjHuUSwaViq56UEKgx9y_UMYiS4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:d0:5a:98:bf:82:d1:60:e6:4b:50:37:ee:3a:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31ee512c1a562ab9e9410a831f72fd4318892e Validity Not Before: Dec 6 16:00:38 2025 GMT Not After : Dec 7 16:00:38 2025 GMT Subject: CN=e596f74a71b5278ad7a673191c477d0a554b1367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b8:10:80:4d:ef:5e:a5:fc:13:c9:a2:54:e9: 94:fe:88:54:a6:fb:cf:ff:81:f4:39:b7:b6:e1:52: 90:7d:49:e2:34:3a:e8:a4:62:38:01:0b:ed:85:c3: e3:ba:5f:29:21:8d:c4:55:17:47:c2:e1:a0:c5:d4: b6:2f:73:50:27:92:c9:24:fd:0d:d7:f0:b2:df:32: 54:27:b2:44:28:47:02:d2:dd:21:b9:d2:f6:50:41: e8:b1:02:fe:85:89:9d:21:43:05:fc:af:a3:25:9d: 32:85:e6:f2:76:24:df:74:36:a0:f4:21:dd:81:df: 29:d4:a6:98:b1:65:ac:08:19:39:29:92:2b:b3:bb: 06:69:40:59:10:32:ab:0c:55:a4:fd:6a:7a:1c:2d: 8c:ea:00:42:29:60:a4:ee:bc:5e:ed:39:29:19:40: 0f:4b:6b:56:6a:56:58:4c:c0:81:e7:cc:bc:e9:1a: 4c:e4:4d:9a:45:c9:74:ff:9a:38:3a:d3:88:34:9e: 1d:36:07:e0:18:13:08:95:e8:49:76:c8:2c:cd:f9: 55:bb:3a:1a:26:83:96:47:7f:f4:a3:db:9d:9e:ff: 4b:92:31:b7:37:66:11:ff:44:fc:ff:e3:ac:60:1c: ee:47:b4:b3:ee:3a:f2:d5:f0:ad:49:35:97:9a:b7: 3e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:96:F7:4A:71:B5:27:8A:D7:A6:73:19:1C:47:7D:0A:55:4B:13:67 X509v3 Authority Key Identifier: keyid:AA:31:EE:51:2C:1A:56:2A:B9:E9:41:0A:83:1F:72:FD:43:18:89:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjHuUSwaViq56UEKgx9y_UMYiS4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:45:3e:bb:7e:07:ab:a6:36:f1:63:83:07:db:c7:80:bc:fa: 0e:e1:bb:d9:ee:bf:e9:a8:08:4c:a4:f1:d4:5d:4a:57:62:da: 5d:3c:0c:41:38:5c:77:37:d3:72:0d:97:c1:a4:16:ee:24:02: 76:22:b8:5f:6a:c3:69:46:34:c6:94:0e:ab:2d:9e:22:e6:28: 2c:0c:36:ca:eb:24:05:b0:18:db:a3:83:9e:ae:89:a4:22:d6: a9:22:4d:f1:a2:ff:5b:23:c0:5f:0b:e3:49:45:40:9b:6a:32: 0e:dc:16:18:4f:ec:72:d7:02:ac:26:ce:eb:39:c3:f3:1f:a5: 43:47:b9:99:7f:7b:be:76:b6:73:40:b0:da:d0:99:fe:37:25: 86:c8:68:76:4a:eb:a8:2a:b5:bf:0a:f2:11:1c:f7:45:79:3f: 58:fb:75:66:93:a5:ed:3a:5c:42:fc:91:b3:b2:2e:e1:87:3f: 30:50:f3:a7:8b:23:a9:75:e8:63:58:b3:40:84:5a:6a:96:19: f0:92:21:2d:8a:0d:84:76:18:49:a5:5d:a9:bd:44:40:b5:bd: ea:e2:41:d5:3f:83:27:35:4d:9f:29:a0:3b:94:7b:60:58:02: d2:c5:98:23:6f:1d:7c:a7:38:f7:b6:d5:97:45:24:f0:cf:40: 65:b8:28:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZNBamL+C0WDmS1A37jozMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMzFlZTUxMmMxYTU2MmFiOWU5NDEwYTgzMWY3MmZkNDMx ODg5MmUwHhcNMjUxMjA2MTYwMDM4WhcNMjUxMjA3MTYwMDM4WjAzMTEwLwYDVQQD EyhlNTk2Zjc0YTcxYjUyNzhhZDdhNjczMTkxYzQ3N2QwYTU1NGIxMzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibgQgE3vXqX8E8miVOmU/ohUpvvP /4H0Obe24VKQfUniNDropGI4AQvthcPjul8pIY3EVRdHwuGgxdS2L3NQJ5LJJP0N 1/Cy3zJUJ7JEKEcC0t0hudL2UEHosQL+hYmdIUMF/K+jJZ0yhebydiTfdDag9CHd gd8p1KaYsWWsCBk5KZIrs7sGaUBZEDKrDFWk/Wp6HC2M6gBCKWCk7rxe7TkpGUAP S2tWalZYTMCB58y86RpM5E2aRcl0/5o4OtOINJ4dNgfgGBMIlehJdsgszflVuzoa JoOWR3/0o9udnv9LkjG3N2YR/0T8/+OsYBzuR7Sz7jry1fCtSTWXmrc+4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOWW90pxtSeK16ZzGRxHfQpVSxNnMB8GA1UdIwQY MBaAFKox7lEsGlYquelBCoMfcv1DGIkuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWpIdVVTd2FWaXE1NlVFS2d4OXlfVU1ZaVM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9lN2VmNTQtYmRiMC00NTBhLTg2NDYt ZWUwODE0NmUzNzEzLzEvcWpIdVVTd2FWaXE1NlVFS2d4OXlfVU1ZaVM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9lN2VmNTQtYmRiMC00NTBhLTg2NDYtZWUwODE0NmUzNzEz LzEvcWpIdVVTd2FWaXE1NlVFS2d4OXlfVU1ZaVM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABkU+u34H q6Y28WODB9vHgLz6DuG72e6/6agITKTx1F1KV2LaXTwMQThcdzfTcg2XwaQW7iQC diK4X2rDaUY0xpQOqy2eIuYoLAw2yuskBbAY26ODnq6JpCLWqSJN8aL/WyPAXwvj SUVAm2oyDtwWGE/sctcCrCbO6znD8x+lQ0e5mX97vna2c0Cw2tCZ/jclhshodkrr qCq1vwryERz3RXk/WPt1ZpOl7TpcQvyRs7Iu4Yc/MFDzp4sjqXXoY1izQIRaapYZ 8JIhLYoNhHYYSaVdqb1EQLW96uJB1T+DJzVNnymgO5R7YFgC0sWYI28dfKc497bV l0Uk8M9AZbgooA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:50:42 2025 by rpki-client