This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft File: qajkTlc8U8cZIxL8xyFQ0t43fW0.mft (raw, json) Hash identifier: rKfHe4x/aZNWn9+iRAUqdv0eu4ceSv2OPdiTFLq8kFk= Subject key identifier: C1:3F:49:23:6B:B2:96:27:E2:53:E1:90:30:9C:5F:52:EF:0C:7C:AA Authority key identifier: A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D Certificate issuer: /CN=a9a8e44e573c53c7192312fcc72150d2de377d6d Certificate serial: 019AF23FAD7C0BDD693B6DED05FF695D9D6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 06:00:50 +0000 Manifest this update: Sat 06 Dec 2025 06:00:50 +0000 Manifest next update: Sun 07 Dec 2025 06:00:50 +0000 Files and hashes: 1: CTedhf-UDhDCo0gKWN1eFB95iME.roa (hash: Vr6y6sdI8B/BSyNE6gcBQftZW1dE4fIdtomKsz3LLNE=) 2: qajkTlc8U8cZIxL8xyFQ0t43fW0.crl (hash: W7HmobMYTWDuJjQEdVTRK5ZpcFtseKEGh8kIPGORp84=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:ad:7c:0b:dd:69:3b:6d:ed:05:ff:69:5d:9d:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9a8e44e573c53c7192312fcc72150d2de377d6d Validity Not Before: Dec 6 06:00:50 2025 GMT Not After : Dec 7 06:00:50 2025 GMT Subject: CN=c13f49236bb29627e253e190309c5f52ef0c7caa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3a:99:f5:ff:cd:18:00:fe:0e:42:10:9f:84: 4f:b8:f9:33:e8:c1:be:d0:07:de:79:37:fa:99:34: 51:c5:04:ad:86:78:69:1a:a5:5c:23:5e:1f:25:77: d9:a1:b3:6c:a3:90:5f:39:85:ab:ee:0a:fe:fa:ba: b3:4a:a5:4e:97:fe:01:7b:2f:b3:1b:1a:3d:f3:ba: 61:70:3d:1f:95:90:90:61:d7:b2:01:04:19:4e:c4: 5e:3f:92:ed:7b:8b:17:3b:12:4f:c9:60:68:20:93: a7:b9:76:aa:75:83:7a:e1:42:44:49:c4:61:4d:82: 90:0e:9b:40:c9:93:1d:8d:2b:43:5b:2b:2c:14:12: 79:28:55:dd:df:2a:04:ef:19:df:ca:9c:52:68:9e: 78:70:32:1d:31:48:2e:58:4e:dd:6f:dd:d2:b0:45: 52:a1:9e:ed:a8:0d:c4:37:ee:92:cf:44:54:10:aa: b6:01:d4:b0:58:4b:17:bb:a0:e3:3c:1c:aa:4e:92: 9d:79:fe:d1:3c:11:24:f0:a9:39:bb:36:09:b8:1e: 03:24:04:2c:60:75:3d:32:15:db:64:50:d5:37:fa: 0d:05:a2:ea:db:80:d0:02:69:e6:60:c4:55:4c:fd: c3:11:a9:a7:0d:42:89:bf:ea:d0:8a:bb:49:c8:75: fb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:3F:49:23:6B:B2:96:27:E2:53:E1:90:30:9C:5F:52:EF:0C:7C:AA X509v3 Authority Key Identifier: keyid:A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:fa:a5:65:64:1b:16:07:ab:7e:8b:c2:68:d1:39:3f:51:64: 2e:b0:8d:63:6e:92:15:5d:e9:13:98:33:2d:6d:50:0a:4a:f4: d3:a9:5c:1d:57:2d:4b:08:b5:2c:f6:62:95:8c:fa:2b:77:96: c8:f6:d1:bd:84:45:99:16:4c:af:2f:fd:ef:4b:7d:88:86:10: 88:4e:f5:94:1b:40:06:c1:f8:79:f5:a9:df:8f:8e:3b:96:2d: 2f:d2:08:97:ea:71:af:73:56:3c:a2:95:60:ae:3f:07:fe:44: c9:c9:31:f1:fe:fc:5f:7a:30:e6:eb:d5:31:26:ae:2c:fc:72: e5:bf:0b:35:72:e7:de:e0:17:17:54:e0:3c:59:f9:a1:e0:9c: c0:97:2c:2d:a1:db:73:1b:17:8d:4f:cc:3b:3f:b5:4c:c4:22: 40:d6:3b:25:30:b5:d6:03:36:17:11:d9:17:63:8d:a0:48:0c: 8b:77:32:a0:a0:2e:cf:74:d8:45:ba:4e:8a:5f:9d:d0:bf:86: c4:cc:08:37:80:64:bd:28:d0:87:ed:35:0f:0f:bb:6e:71:9e: ea:0f:06:04:f0:c8:77:e9:62:5a:91:51:07:f3:2b:5b:cf:9c: 92:f4:ad:3f:83:cf:a8:ab:55:7e:4a:08:f4:85:e0:7d:00:1f: da:a6:1d:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP618C91pO23tBf9pXZ1vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5YThlNDRlNTczYzUzYzcxOTIzMTJmY2M3MjE1MGQyZGUz NzdkNmQwHhcNMjUxMjA2MDYwMDUwWhcNMjUxMjA3MDYwMDUwWjAzMTEwLwYDVQQD EyhjMTNmNDkyMzZiYjI5NjI3ZTI1M2UxOTAzMDljNWY1MmVmMGM3Y2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTqZ9f/NGAD+DkIQn4RPuPkz6MG+ 0AfeeTf6mTRRxQSthnhpGqVcI14fJXfZobNso5BfOYWr7gr++rqzSqVOl/4Bey+z Gxo987phcD0flZCQYdeyAQQZTsReP5Lte4sXOxJPyWBoIJOnuXaqdYN64UJEScRh TYKQDptAyZMdjStDWyssFBJ5KFXd3yoE7xnfypxSaJ54cDIdMUguWE7db93SsEVS oZ7tqA3EN+6Sz0RUEKq2AdSwWEsXu6DjPByqTpKdef7RPBEk8Kk5uzYJuB4DJAQs YHU9MhXbZFDVN/oNBaLq24DQAmnmYMRVTP3DEamnDUKJv+rQirtJyHX7HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFME/SSNrspYn4lPhkDCcX1LvDHyqMB8GA1UdIwQY MBaAFKmo5E5XPFPHGSMS/MchUNLeN31tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWFqa1RsYzhVOGNaSXhMOHh5RlEwdDQzZlcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy80NTJkZDUtZDBlNC00ZDRiLThhZTYt MTk1MTM0NWNlYTMzLzEvcWFqa1RsYzhVOGNaSXhMOHh5RlEwdDQzZlcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy80NTJkZDUtZDBlNC00ZDRiLThhZTYtMTk1MTM0NWNlYTMz LzEvcWFqa1RsYzhVOGNaSXhMOHh5RlEwdDQzZlcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhfqlZWQb FgerfovCaNE5P1FkLrCNY26SFV3pE5gzLW1QCkr006lcHVctSwi1LPZilYz6K3eW yPbRvYRFmRZMry/970t9iIYQiE71lBtABsH4efWp34+OO5YtL9IIl+pxr3NWPKKV YK4/B/5Eyckx8f78X3ow5uvVMSauLPxy5b8LNXLn3uAXF1TgPFn5oeCcwJcsLaHb cxsXjU/MOz+1TMQiQNY7JTC11gM2FxHZF2ONoEgMi3cyoKAuz3TYRbpOil+d0L+G xMwIN4BkvSjQh+01Dw+7bnGe6g8GBPDId+liWpFRB/MrW8+ckvStP4PPqKtVfkoI 9IXgfQAf2qYdsQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:16 2025 by rpki-client