This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft File: qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft (raw, json) Hash identifier: +t52ayYzwSZuYcZ0BEWtDlIZTwgL5sqHTISsikmfDBI= Subject key identifier: F2:36:9F:65:6B:DE:9B:FF:CE:9E:02:F3:A6:9D:3D:56:63:06:BB:0F Authority key identifier: A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4 Certificate issuer: /CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4 Certificate serial: 019AF0BF450327E4ED3E088EB68A9BCC1FF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft Manifest number: 05B7 Signing time: Fri 05 Dec 2025 23:00:58 +0000 Manifest this update: Fri 05 Dec 2025 23:00:58 +0000 Manifest next update: Sat 06 Dec 2025 23:00:58 +0000 Files and hashes: 1: 2U9_DlkXgIcp2fqTIjSzc96XjLo.roa (hash: AqnnBs4DF+DHHSE1BOafxKA5wB2i7dk/ZwYwgXHHS/Y=) 2: qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl (hash: hhx0lzuGSzsc8/WscguZN9TqmRK/GNU0PRbGPc0Gaj0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:45:03:27:e4:ed:3e:08:8e:b6:8a:9b:cc:1f:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4 Validity Not Before: Dec 5 23:00:58 2025 GMT Not After : Dec 6 23:00:58 2025 GMT Subject: CN=f2369f656bde9bffce9e02f3a69d3d566306bb0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3c:b1:d9:2b:23:ec:10:e2:f5:c2:f7:41:11: d1:35:31:db:ab:e2:73:24:d5:24:22:83:c9:4c:ac: cb:d5:27:64:1b:fc:e6:6c:5b:cc:ec:01:27:01:3c: ee:00:77:13:a2:06:42:87:0c:03:b9:20:ad:1e:65: 87:98:82:29:ab:0f:2d:ff:e7:5f:61:f2:6c:8f:40: b7:39:d1:ef:39:29:6a:52:6a:ab:07:14:2a:b6:85: 6a:cd:6a:a5:3a:b8:90:3a:59:21:d4:54:84:0d:b9: 98:a9:b7:6e:d2:44:dd:23:39:30:8f:4e:5b:b5:de: 91:c7:33:a9:73:27:a5:66:81:81:9b:46:ea:e0:9f: 82:19:ea:ef:7c:7b:de:97:49:9c:76:0c:7d:d5:48: b9:d2:5c:52:79:60:0e:7e:5c:95:fd:3c:5c:4d:2d: 23:f7:fe:d6:fa:54:56:03:18:92:3c:3d:8d:c7:1a: 27:1b:45:4a:59:62:9f:ec:45:43:87:71:cd:54:7b: 31:b7:e9:90:54:61:6f:07:18:e9:47:5e:f4:ac:1d: 52:7a:fb:52:79:e4:af:56:8b:ef:43:e6:b0:6f:e7: 5d:e5:b6:1c:d7:a7:6a:e3:c2:24:d6:75:54:d1:fb: 0b:33:fe:4d:b4:25:24:0e:e9:cd:4b:4b:74:45:b0: bf:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:36:9F:65:6B:DE:9B:FF:CE:9E:02:F3:A6:9D:3D:56:63:06:BB:0F X509v3 Authority Key Identifier: keyid:A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:07:16:cf:fe:c6:9f:36:dd:67:c8:00:41:00:2f:a3:99:90: 11:e1:4d:e0:de:9f:ea:87:15:81:10:0f:47:09:8a:7e:87:99: f1:aa:3e:5e:65:82:9e:78:8a:ac:f1:b6:32:a9:60:d6:e2:52: a6:fc:91:f4:04:39:47:85:2f:44:93:bc:60:50:45:d1:48:a9: 41:ee:85:a3:26:73:92:5b:e2:98:fc:e0:28:ca:9c:3f:a3:82: 85:16:af:d3:61:09:f8:24:0b:23:71:49:bc:2b:fb:94:ad:8c: e1:74:85:61:1e:ef:5d:e2:7a:54:7f:4c:70:5c:8d:c9:ec:b5: f8:7c:60:a3:91:7a:77:21:f5:87:bb:d4:97:f6:96:54:5f:d7: 42:42:dc:63:3e:58:df:bc:e0:75:78:48:a0:15:d6:7f:dc:9d: d6:3d:71:c2:34:37:44:a8:84:d9:c8:83:b3:fa:75:48:9f:75: 4d:e0:a7:3b:6c:58:e9:25:01:0b:8c:97:68:c6:bb:58:ed:12: b2:47:22:46:9d:73:37:2f:b3:a2:ba:55:4f:7e:a2:5f:f1:fb: fa:2a:bb:d0:8f:20:13:97:47:28:b4:d2:60:42:00:0a:a1:73: d5:58:98:99:c8:96:8c:4b:5f:d8:bb:2f:d9:41:3c:ff:bd:cc: 16:0f:f6:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv0UDJ+TtPgiOtoqbzB/1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MGUyOGYyZTUwOWZlMzdhYzVjMzQwMWEwYThjMTEwMjli NjIxZTQwHhcNMjUxMjA1MjMwMDU4WhcNMjUxMjA2MjMwMDU4WjAzMTEwLwYDVQQD EyhmMjM2OWY2NTZiZGU5YmZmY2U5ZTAyZjNhNjlkM2Q1NjYzMDZiYjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Tyx2Ssj7BDi9cL3QRHRNTHbq+Jz JNUkIoPJTKzL1SdkG/zmbFvM7AEnATzuAHcTogZChwwDuSCtHmWHmIIpqw8t/+df YfJsj0C3OdHvOSlqUmqrBxQqtoVqzWqlOriQOlkh1FSEDbmYqbdu0kTdIzkwj05b td6RxzOpcyelZoGBm0bq4J+CGervfHvel0mcdgx91Ui50lxSeWAOflyV/TxcTS0j 9/7W+lRWAxiSPD2NxxonG0VKWWKf7EVDh3HNVHsxt+mQVGFvBxjpR170rB1SevtS eeSvVovvQ+awb+dd5bYc16dq48Ik1nVU0fsLM/5NtCUkDunNS0t0RbC/bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPI2n2Vr3pv/zp4C86adPVZjBrsPMB8GA1UdIwQY MBaAFKkOKPLlCf43rFw0AaCowRAptiHkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVE0bzh1VUpfamVzWERRQm9LakJFQ20ySWVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS85OWU1ODUtYTY1Mi00NGYzLWE1MzEt YTAwM2JmZGY0ZTQ1LzEvcVE0bzh1VUpfamVzWERRQm9LakJFQ20ySWVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS85OWU1ODUtYTY1Mi00NGYzLWE1MzEtYTAwM2JmZGY0ZTQ1 LzEvcVE0bzh1VUpfamVzWERRQm9LakJFQ20ySWVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhgcWz/7G nzbdZ8gAQQAvo5mQEeFN4N6f6ocVgRAPRwmKfoeZ8ao+XmWCnniKrPG2Mqlg1uJS pvyR9AQ5R4UvRJO8YFBF0UipQe6FoyZzklvimPzgKMqcP6OChRav02EJ+CQLI3FJ vCv7lK2M4XSFYR7vXeJ6VH9McFyNyey1+Hxgo5F6dyH1h7vUl/aWVF/XQkLcYz5Y 37zgdXhIoBXWf9yd1j1xwjQ3RKiE2ciDs/p1SJ91TeCnO2xY6SUBC4yXaMa7WO0S skciRp1zNy+zorpVT36iX/H7+iq70I8gE5dHKLTSYEIACqFz1ViYmciWjEtf2Lsv 2UE8/73MFg/2Tw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:23:09 2025 by rpki-client