This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft File: qTnMFiHuMBCumOEnvSVKeDP9KCc.mft (raw, json) Hash identifier: JsDott7T4BBpDtZmmS/KskP5VQzXiZ99Gvlp3gIamJU= Subject key identifier: 33:66:A4:E0:19:7D:0C:25:3C:FD:91:A7:1F:95:16:E0:4E:0E:0E:D2 Authority key identifier: A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27 Certificate issuer: /CN=a939cc1621ee3010ae98e127bd254a7833fd2827 Certificate serial: 019AF577D8F4DAD648C974C42B8E64B5D67A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft Manifest number: 1080 Signing time: Sat 06 Dec 2025 21:01:03 +0000 Manifest this update: Sat 06 Dec 2025 21:01:03 +0000 Manifest next update: Sun 07 Dec 2025 21:01:03 +0000 Files and hashes: 1: I8M09wEb8pPy5aE1tmLVBA1QjII.roa (hash: H2KzL98idyYXiGDF46vhI9MdVSfKRRTkQwlTKnfvbNE=) 2: kE5clAT_On1-sKoap2EGHHtO9ks.roa (hash: 2Gqvz4gyypjZzZQdA4iyMYqLbiLT02xiEIZm2TleSrU=) 3: m8QWxGjBijSQKviqiwGPDVQObsM.roa (hash: 0nynt3B6pt+z65wp6r175QdY0trgb8BxBMo+4Klvl7g=) 4: qTnMFiHuMBCumOEnvSVKeDP9KCc.crl (hash: n6tCy0bQXI0cQBza/ZG9m7JqqL+qynTo31UunlH4Wxk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:d8:f4:da:d6:48:c9:74:c4:2b:8e:64:b5:d6:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a939cc1621ee3010ae98e127bd254a7833fd2827 Validity Not Before: Dec 6 21:01:03 2025 GMT Not After : Dec 7 21:01:03 2025 GMT Subject: CN=3366a4e0197d0c253cfd91a71f9516e04e0e0ed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2a:1a:e4:78:e1:98:35:9e:e0:de:c8:e0:11: bc:72:53:7d:cc:4f:9a:77:27:3e:d1:8f:89:1f:4c: c5:cb:0f:3d:30:0e:b6:f2:1d:f6:6b:f1:4c:ea:d8: 49:45:00:4d:68:00:a7:83:88:cb:f3:8f:21:32:fd: 48:10:f7:32:c9:1d:d1:92:e1:03:1f:8e:f7:be:4a: 81:c7:d9:f8:c0:e7:0a:5a:e0:d0:d0:78:a6:f3:07: 6f:3d:38:f3:76:bb:b5:b4:c9:59:6f:16:c0:b0:ed: 90:fc:ad:1a:ca:2a:00:a5:fc:38:b9:b4:f9:0d:83: 5e:9c:b5:d8:d1:bc:fd:45:60:4d:f8:94:21:f8:e3: 58:a6:0c:d9:f6:53:44:e2:f0:1b:e5:d4:eb:69:1e: 0c:39:24:3f:34:60:17:c8:b3:a6:df:1f:c7:c0:0d: 41:cc:95:7f:3a:c2:21:85:bd:14:64:7a:2f:9f:7e: d3:9c:3f:6f:5e:a5:fa:d6:27:c6:2d:bd:7d:30:b9: 08:e0:b6:d6:20:36:0d:fb:fb:ea:82:83:50:bf:6f: b2:9c:35:c7:ad:db:4c:e8:67:17:da:db:0d:8c:d5: 4e:29:3c:50:67:ae:aa:db:2c:ef:f6:f6:d5:84:f0: 75:5e:00:36:e7:12:d3:4a:92:c7:39:c3:75:9a:75: d4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:66:A4:E0:19:7D:0C:25:3C:FD:91:A7:1F:95:16:E0:4E:0E:0E:D2 X509v3 Authority Key Identifier: keyid:A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:69:92:f1:75:f3:17:d9:b2:b7:cc:70:c6:ab:b1:08:fe:a1: c2:a7:1c:c4:ec:21:28:fc:ef:9b:6c:52:c4:e9:4a:8f:11:1e: 80:65:e7:ea:5b:22:2c:ec:88:13:ee:22:17:00:d8:5a:ca:ec: a8:75:0b:45:c2:f2:37:37:53:7d:5a:44:8b:93:2d:e0:35:0c: 61:85:63:44:ea:2f:af:0c:64:45:d4:dd:08:11:63:5b:4c:37: 26:92:eb:3c:15:ac:64:99:97:ff:30:e4:d1:c3:79:a6:24:50: f4:45:d0:b1:20:86:7b:ec:22:47:f1:d4:c2:1a:e7:b6:b0:89: a4:7d:16:5e:b8:84:b6:26:24:30:e5:da:d1:35:81:11:f8:f8: 07:dc:ec:7f:fa:de:65:8e:6c:af:a4:24:2b:68:f9:e9:c7:66: 87:91:f8:d1:7b:cc:f2:de:5b:84:1a:7c:85:8b:b8:dd:bb:2a: bd:ad:65:d9:92:d8:8e:e7:ac:64:93:0b:43:7d:8a:7e:80:23: 69:2a:63:16:9e:ef:b7:18:62:2e:59:23:37:0f:05:e4:12:8b: 8a:ce:5c:01:d1:d8:fa:d0:5d:c1:e5:2f:09:a2:00:89:85:bf: 13:68:91:f5:ae:27:6f:b8:c4:23:c4:9a:94:1b:d9:b6:2f:54: 4a:4b:37:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d9j02tZIyXTEK45ktdZ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MzljYzE2MjFlZTMwMTBhZTk4ZTEyN2JkMjU0YTc4MzNm ZDI4MjcwHhcNMjUxMjA2MjEwMTAzWhcNMjUxMjA3MjEwMTAzWjAzMTEwLwYDVQQD EygzMzY2YTRlMDE5N2QwYzI1M2NmZDkxYTcxZjk1MTZlMDRlMGUwZWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsioa5HjhmDWe4N7I4BG8clN9zE+a dyc+0Y+JH0zFyw89MA628h32a/FM6thJRQBNaACng4jL848hMv1IEPcyyR3RkuED H473vkqBx9n4wOcKWuDQ0Him8wdvPTjzdru1tMlZbxbAsO2Q/K0ayioApfw4ubT5 DYNenLXY0bz9RWBN+JQh+ONYpgzZ9lNE4vAb5dTraR4MOSQ/NGAXyLOm3x/HwA1B zJV/OsIhhb0UZHovn37TnD9vXqX61ifGLb19MLkI4LbWIDYN+/vqgoNQv2+ynDXH rdtM6GcX2tsNjNVOKTxQZ66q2yzv9vbVhPB1XgA25xLTSpLHOcN1mnXUOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDNmpOAZfQwlPP2Rpx+VFuBODg7SMB8GA1UdIwQY MBaAFKk5zBYh7jAQrpjhJ70lSngz/SgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVRuTUZpSHVNQkN1bU9FbnZTVktlRFA5S0NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9kNWJmNzItMzExNS00YzcxLWExYmYt YjA2MTk0ZDEzYzZiLzEvcVRuTUZpSHVNQkN1bU9FbnZTVktlRFA5S0NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9kNWJmNzItMzExNS00YzcxLWExYmYtYjA2MTk0ZDEzYzZi LzEvcVRuTUZpSHVNQkN1bU9FbnZTVktlRFA5S0NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0mmS8XXz F9myt8xwxquxCP6hwqccxOwhKPzvm2xSxOlKjxEegGXn6lsiLOyIE+4iFwDYWsrs qHULRcLyNzdTfVpEi5Mt4DUMYYVjROovrwxkRdTdCBFjW0w3JpLrPBWsZJmX/zDk 0cN5piRQ9EXQsSCGe+wiR/HUwhrntrCJpH0WXriEtiYkMOXa0TWBEfj4B9zsf/re ZY5sr6QkK2j56cdmh5H40XvM8t5bhBp8hYu43bsqva1l2ZLYjuesZJMLQ32KfoAj aSpjFp7vtxhiLlkjNw8F5BKLis5cAdHY+tBdweUvCaIAiYW/E2iR9a4nb7jEI8Sa lBvZti9USks3DQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:54:22 2025 by rpki-client