This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.mft File: qdeM56IchB2HNUJHdut_9YetBNE.mft (raw, json) Hash identifier: n7JwJGkolLZ5D5N/mwvAls1mPyqhLRYymZfU3r1q+M4= Subject key identifier: AF:6C:CD:88:A9:92:3C:E8:D4:A3:A6:DA:DA:91:70:E2:0C:EF:84:D3 Authority key identifier: A9:D7:8C:E7:A2:1C:84:1D:87:35:42:47:76:EB:7F:F5:87:AD:04:D1 Certificate issuer: /CN=a9d78ce7a21c841d8735424776eb7ff587ad04d1 Certificate serial: 019AF2773B6E6511310DBE88EAB918417F4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdeM56IchB2HNUJHdut_9YetBNE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.mft Manifest number: 163B Signing time: Sat 06 Dec 2025 07:01:31 +0000 Manifest this update: Sat 06 Dec 2025 07:01:31 +0000 Manifest next update: Sun 07 Dec 2025 07:01:31 +0000 Files and hashes: 1: mzdjW8d1g2RTbpkDyieCRb4Rhp4.roa (hash: +eSn1whG8BEnu+P7IU1V/ISLWfTeC4hd2INZhTzIgYI=) 2: qdeM56IchB2HNUJHdut_9YetBNE.crl (hash: WAcVS8MXYnPLfprXjl6BioAgpqj5TFOt3hFIEgKsPTk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.mft rsync://rpki.ripe.net/repository/DEFAULT/qdeM56IchB2HNUJHdut_9YetBNE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:3b:6e:65:11:31:0d:be:88:ea:b9:18:41:7f:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9d78ce7a21c841d8735424776eb7ff587ad04d1 Validity Not Before: Dec 6 07:01:31 2025 GMT Not After : Dec 7 07:01:31 2025 GMT Subject: CN=af6ccd88a9923ce8d4a3a6dada9170e20cef84d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:46:98:45:8d:02:a4:e1:a4:57:3a:08:05:74: b0:7d:ef:eb:4e:e9:88:1c:a7:fe:5d:14:97:0a:a8: 7e:13:e7:c0:ba:4a:96:a4:1c:3f:06:e9:4d:0e:91: 5b:60:11:e0:96:29:88:16:21:0b:41:7a:c8:e6:89: c8:94:93:f7:80:03:57:04:6f:e1:93:b7:3b:32:96: a1:c1:41:ab:7b:65:b0:46:ca:0b:52:f0:9a:66:85: da:70:67:9c:a6:b5:b2:a8:86:c1:7f:5e:6c:d2:f7: 66:62:e6:9b:0d:2c:90:4d:9b:ab:d9:cf:51:30:1d: f5:97:cf:26:b0:76:b6:e3:96:0f:2d:90:17:e9:a1: f6:69:8d:df:b8:25:8c:e5:f5:f3:7d:32:70:e4:e0: 84:42:d4:69:77:6b:32:a4:a6:b2:1a:0b:ab:a0:ca: 8d:5e:08:bf:38:0b:be:3d:23:d6:0b:9b:56:35:4a: 93:04:2b:18:84:c6:5e:e2:33:2d:4c:12:ff:d2:64: ef:8c:16:cd:15:30:bd:e5:1d:0d:6e:3a:f5:e6:e1: dd:7f:a4:0a:7d:9d:5f:10:ea:11:43:1e:ef:a2:39: b5:87:fd:90:85:2c:4c:79:ea:2e:43:cc:6d:50:51: 56:52:50:86:e4:80:51:f3:42:a9:10:2f:29:98:78: 7e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:6C:CD:88:A9:92:3C:E8:D4:A3:A6:DA:DA:91:70:E2:0C:EF:84:D3 X509v3 Authority Key Identifier: keyid:A9:D7:8C:E7:A2:1C:84:1D:87:35:42:47:76:EB:7F:F5:87:AD:04:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdeM56IchB2HNUJHdut_9YetBNE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:28:72:dc:c9:34:fb:eb:a3:ad:f6:bd:55:1b:bb:bb:41:75: 67:f0:1d:d8:67:31:d9:99:fa:00:ab:ba:55:8b:7a:aa:7e:9f: 7d:7d:f3:5f:5e:6b:30:96:29:0c:c8:04:25:63:c7:b1:27:8c: c8:36:19:09:e3:0f:60:1c:93:7f:a2:dd:97:a0:38:52:53:ea: 83:ee:34:cd:af:9a:eb:f7:cd:db:11:a8:fe:09:c4:2f:a1:5e: 2d:6f:7e:17:b3:ee:63:16:f0:c2:2d:0c:8e:06:a4:5a:2d:75: 8b:d3:d1:a3:f5:c9:c6:c6:6b:fe:bc:f4:79:cf:b3:0a:23:04: d9:36:d5:16:e2:63:77:62:13:5b:9e:21:6e:43:4d:06:bb:1b: 4f:d7:72:14:f6:24:7f:b4:d1:17:13:f8:d5:1b:06:c9:7f:85: 13:4b:fc:82:32:8c:18:d8:91:de:ff:32:51:4a:26:ab:a5:7b: cf:b5:a5:c2:7b:13:4d:5d:5d:29:70:a9:d6:56:d2:02:aa:0e: cd:2c:6c:3e:86:d4:74:c1:f0:e5:b4:d6:b5:99:24:ec:8d:0c: 8f:f5:32:32:64:4b:4c:02:25:96:1e:6c:da:30:42:40:de:1e: 87:80:b3:df:77:50:a0:c5:20:22:a5:cf:78:e5:35:5d:40:b9: 95:8f:85:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydztuZRExDb6I6rkYQX9OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ZDc4Y2U3YTIxYzg0MWQ4NzM1NDI0Nzc2ZWI3ZmY1ODdh ZDA0ZDEwHhcNMjUxMjA2MDcwMTMxWhcNMjUxMjA3MDcwMTMxWjAzMTEwLwYDVQQD EyhhZjZjY2Q4OGE5OTIzY2U4ZDRhM2E2ZGFkYTkxNzBlMjBjZWY4NGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkaYRY0CpOGkVzoIBXSwfe/rTumI HKf+XRSXCqh+E+fAukqWpBw/BulNDpFbYBHglimIFiELQXrI5onIlJP3gANXBG/h k7c7MpahwUGre2WwRsoLUvCaZoXacGecprWyqIbBf15s0vdmYuabDSyQTZur2c9R MB31l88msHa245YPLZAX6aH2aY3fuCWM5fXzfTJw5OCEQtRpd2sypKayGguroMqN Xgi/OAu+PSPWC5tWNUqTBCsYhMZe4jMtTBL/0mTvjBbNFTC95R0Nbjr15uHdf6QK fZ1fEOoRQx7vojm1h/2QhSxMeeouQ8xtUFFWUlCG5IBR80KpEC8pmHh+OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK9szYipkjzo1KOm2tqRcOIM74TTMB8GA1UdIwQY MBaAFKnXjOeiHIQdhzVCR3brf/WHrQTRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWRlTTU2SWNoQjJITlVKSGR1dF85WWV0Qk5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi83NmM4YjQtMzg3ZS00YzA0LThmMzUt YzA0ZWUwNWE3OTUzLzEvcWRlTTU2SWNoQjJITlVKSGR1dF85WWV0Qk5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi83NmM4YjQtMzg3ZS00YzA0LThmMzUtYzA0ZWUwNWE3OTUz LzEvcWRlTTU2SWNoQjJITlVKSGR1dF85WWV0Qk5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtyhy3Mk0 ++ujrfa9VRu7u0F1Z/Ad2Gcx2Zn6AKu6VYt6qn6ffX3zX15rMJYpDMgEJWPHsSeM yDYZCeMPYByTf6Ldl6A4UlPqg+40za+a6/fN2xGo/gnEL6FeLW9+F7PuYxbwwi0M jgakWi11i9PRo/XJxsZr/rz0ec+zCiME2TbVFuJjd2ITW54hbkNNBrsbT9dyFPYk f7TRFxP41RsGyX+FE0v8gjKMGNiR3v8yUUomq6V7z7WlwnsTTV1dKXCp1lbSAqoO zSxsPobUdMHw5bTWtZkk7I0Mj/UyMmRLTAIllh5s2jBCQN4eh4Cz33dQoMUgIqXP eOU1XUC5lY+FSQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:24:17 2025 by rpki-client