This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft File: qmeVicHEiJfQmy1P7XpmBEqHbqM.mft (raw, json) Hash identifier: pg1czjaXbPZj5uUaR7v492ugGOr3DfRxECs+OLv0osc= Subject key identifier: 28:10:D8:57:79:31:E1:84:29:DA:A4:7F:56:D0:D5:07:1E:EF:85:B3 Authority key identifier: AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3 Certificate issuer: /CN=aa679589c1c48897d09b2d4fed7a66044a876ea3 Certificate serial: 019AF50B413084677CBD918089199B3E63A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft Manifest number: 1725 Signing time: Sat 06 Dec 2025 19:02:26 +0000 Manifest this update: Sat 06 Dec 2025 19:02:26 +0000 Manifest next update: Sun 07 Dec 2025 19:02:26 +0000 Files and hashes: 1: 6ePgS-H7Yzuq3toYao1SpcCwfpw.roa (hash: 6wwpW2bNKeFKmlaR35jx40rgyoKDaJsTG+ac1jtGsgs=) 2: h7iUVsathfWiZn6MUEREGc5Lrns.roa (hash: 6VmzPFIIIU0V6MlQJOV1H1bykzKrpknx8IQ1i3Vq0eM=) 3: qmeVicHEiJfQmy1P7XpmBEqHbqM.crl (hash: e1NuCXwU8zZAgiN/VKPGJnc0wCdUUUn3FPBhTXD9Hjk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:41:30:84:67:7c:bd:91:80:89:19:9b:3e:63:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa679589c1c48897d09b2d4fed7a66044a876ea3 Validity Not Before: Dec 6 19:02:26 2025 GMT Not After : Dec 7 19:02:26 2025 GMT Subject: CN=2810d8577931e18429daa47f56d0d5071eef85b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:64:e1:5f:3f:72:9f:96:ce:f8:61:71:fc:36: 1a:cc:9d:bb:f2:62:51:01:2c:40:53:b9:71:ac:c3: d6:9e:05:a3:47:8a:09:55:ec:89:7b:18:ea:39:39: 9c:49:47:12:86:93:7b:59:03:0e:2a:d2:e4:e1:63: 7c:89:b4:c4:80:af:af:00:68:b2:7a:44:a9:b3:f7: f5:89:c4:af:02:60:30:64:9b:52:17:5c:f3:fc:00: 4d:1a:ee:5a:53:d7:a7:ab:d3:8d:e0:db:60:f3:08: 02:9d:c4:95:fc:3a:3e:dc:ba:b3:c7:b5:9c:98:a3: 36:83:a9:59:b7:2c:fb:2f:9a:42:7c:cd:f9:0b:e1: 20:06:cb:aa:cb:dd:9e:0e:43:2e:b6:ff:f8:29:2f: ae:37:c7:bf:eb:bc:a8:9d:24:ac:7e:92:a2:37:c6: 20:c4:e5:cb:6d:1b:60:49:e7:3e:cd:4d:30:49:62: a1:ac:5f:86:59:12:3e:08:3e:cf:0e:a5:3c:ad:f3: 58:bf:29:1c:09:88:48:aa:71:4a:8a:88:7d:fc:8b: 7c:a3:dc:76:98:24:2d:46:ae:61:8b:99:a9:51:11: ce:2a:b2:fd:0c:bf:56:0f:87:36:5e:ab:7e:2d:e9: 4c:cf:8f:b2:a4:39:2b:7e:df:6e:6f:04:c0:d2:58: 30:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:10:D8:57:79:31:E1:84:29:DA:A4:7F:56:D0:D5:07:1E:EF:85:B3 X509v3 Authority Key Identifier: keyid:AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:e9:85:17:c3:ec:2e:20:aa:4a:ed:28:51:32:b4:b8:13:41: d5:d9:5f:8a:b6:b9:40:62:7e:0e:c5:55:8e:5d:01:35:35:46: b7:3c:cd:4b:05:1a:f9:ce:6d:0a:4f:48:b9:b6:2a:7e:74:b7: b5:8e:70:70:2f:f5:61:a8:0b:cc:e7:d3:ac:cb:01:25:7b:63: 80:cd:67:c4:0b:aa:de:34:fa:e3:dc:09:f9:5e:a3:97:ef:06: 4e:c4:62:f1:dd:dc:c5:5b:aa:ae:6c:9e:d9:f2:1a:e6:b9:d9: fa:63:56:1e:ba:ea:3c:0d:27:0c:ba:8d:6a:76:b5:1f:19:4e: ab:c2:03:c3:39:77:cd:83:50:75:4e:80:2a:6a:3a:cf:e0:ae: fa:91:07:93:88:71:b8:2c:69:e7:e8:d1:40:da:ca:6e:60:1c: 1f:8e:69:a5:ae:8a:6b:b5:05:dd:aa:06:ed:e3:b3:ba:da:76: 00:a1:78:d2:7f:42:f5:18:d2:04:6d:cd:3c:29:14:2b:29:8b: 1d:86:b8:a5:94:86:79:29:42:eb:96:13:66:6d:79:34:7d:1e: 9c:3b:e6:ce:32:17:43:a3:8a:23:96:ef:62:10:2f:d1:9a:1e: 6e:78:f8:ac:aa:db:e8:0d:40:91:c6:d8:cb:b9:86:0b:ef:f8: cb:ac:bd:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C0EwhGd8vZGAiRmbPmOoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNjc5NTg5YzFjNDg4OTdkMDliMmQ0ZmVkN2E2NjA0NGE4 NzZlYTMwHhcNMjUxMjA2MTkwMjI2WhcNMjUxMjA3MTkwMjI2WjAzMTEwLwYDVQQD EygyODEwZDg1Nzc5MzFlMTg0MjlkYWE0N2Y1NmQwZDUwNzFlZWY4NWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGThXz9yn5bO+GFx/DYazJ278mJR ASxAU7lxrMPWngWjR4oJVeyJexjqOTmcSUcShpN7WQMOKtLk4WN8ibTEgK+vAGiy ekSps/f1icSvAmAwZJtSF1zz/ABNGu5aU9enq9ON4Ntg8wgCncSV/Do+3Lqzx7Wc mKM2g6lZtyz7L5pCfM35C+EgBsuqy92eDkMutv/4KS+uN8e/67yonSSsfpKiN8Yg xOXLbRtgSec+zU0wSWKhrF+GWRI+CD7PDqU8rfNYvykcCYhIqnFKioh9/It8o9x2 mCQtRq5hi5mpURHOKrL9DL9WD4c2Xqt+LelMz4+ypDkrft9ubwTA0lgwIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCgQ2Fd5MeGEKdqkf1bQ1Qce74WzMB8GA1UdIwQY MBaAFKpnlYnBxIiX0JstT+16ZgRKh26jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW1lVmljSEVpSmZRbXkxUDdYcG1CRXFIYnFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8wMDhmOTEtYWVlMy00NDA4LTgzOTMt MTRiNzZiNzZmMmJiLzEvcW1lVmljSEVpSmZRbXkxUDdYcG1CRXFIYnFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8wMDhmOTEtYWVlMy00NDA4LTgzOTMtMTRiNzZiNzZmMmJi LzEvcW1lVmljSEVpSmZRbXkxUDdYcG1CRXFIYnFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAumFF8Ps LiCqSu0oUTK0uBNB1dlfira5QGJ+DsVVjl0BNTVGtzzNSwUa+c5tCk9IubYqfnS3 tY5wcC/1YagLzOfTrMsBJXtjgM1nxAuq3jT649wJ+V6jl+8GTsRi8d3cxVuqrmye 2fIa5rnZ+mNWHrrqPA0nDLqNana1HxlOq8IDwzl3zYNQdU6AKmo6z+Cu+pEHk4hx uCxp5+jRQNrKbmAcH45ppa6Ka7UF3aoG7eOzutp2AKF40n9C9RjSBG3NPCkUKymL HYa4pZSGeSlC65YTZm15NH0enDvmzjIXQ6OKI5bvYhAv0Zoebnj4rKrb6A1AkcbY y7mGC+/4y6y96Q== -----END CERTIFICATE-----Generated at Sun Dec 7 03:48:42 2025 by rpki-client