This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft File: qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft (raw, json) Hash identifier: dWFJFSgXHYbsGOzWax8NHD1romPXHcWpicHRzdulyJ0= Subject key identifier: C6:04:D8:01:A3:24:42:3E:88:D9:CA:9F:FF:CB:95:6A:5A:0D:4C:AA Authority key identifier: A8:22:07:FD:50:C4:5E:96:F2:82:5E:C7:72:CF:6B:8D:EA:3D:FC:B0 Certificate issuer: /CN=a82207fd50c45e96f2825ec772cf6b8dea3dfcb0 Certificate serial: 019AF1D1E70214D44625F5EE2D6F96AEF38E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCIH_VDEXpbygl7Hcs9rjeo9_LA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft Manifest number: 069D Signing time: Sat 06 Dec 2025 04:00:56 +0000 Manifest this update: Sat 06 Dec 2025 04:00:56 +0000 Manifest next update: Sun 07 Dec 2025 04:00:56 +0000 Files and hashes: 1: gHCDIdhOuUpwW3kY6kopG285_k0.roa (hash: 5xiT0kgNZs49N5lk+a3OABaCYPVOiGuQ90iKWrfQblE=) 2: qCIH_VDEXpbygl7Hcs9rjeo9_LA.crl (hash: PecoKfMh7G0p+zeN2lMWH+qiWz5DtAmhlNiosRoTkFk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft rsync://rpki.ripe.net/repository/DEFAULT/qCIH_VDEXpbygl7Hcs9rjeo9_LA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:e7:02:14:d4:46:25:f5:ee:2d:6f:96:ae:f3:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a82207fd50c45e96f2825ec772cf6b8dea3dfcb0 Validity Not Before: Dec 6 04:00:56 2025 GMT Not After : Dec 7 04:00:56 2025 GMT Subject: CN=c604d801a324423e88d9ca9fffcb956a5a0d4caa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:61:65:79:41:0d:c8:b8:95:67:7e:d8:15:6d: 5b:15:f2:e8:71:8a:aa:e3:c7:84:e7:76:37:49:bc: 1b:07:4d:48:e4:b2:f7:87:48:25:fb:de:2c:17:9a: 2e:61:dc:fd:53:92:bb:17:49:46:2e:87:68:00:e4: 66:80:33:1c:9f:04:52:56:62:e6:fc:43:ee:e8:66: e2:8c:8c:0d:d0:89:84:37:e4:22:7b:29:ce:f7:18: 82:cd:f8:2b:95:c7:96:9a:b3:5e:83:58:a2:29:c6: bf:1c:18:a4:f4:e9:76:c6:f1:c9:61:67:ef:d6:1f: d6:ff:b5:27:b6:80:5d:8a:46:da:5a:20:ba:42:a8: 75:eb:62:f5:05:92:1b:44:02:93:d7:ec:9b:d5:ee: e7:2d:f8:55:28:5c:01:30:fd:ff:be:c8:8c:6f:5d: bb:23:b4:18:4d:31:f9:66:2b:c1:77:a6:49:46:8e: 4f:a9:30:76:bd:79:c9:3c:a6:e6:95:cb:42:52:2c: 2c:46:9f:e1:85:47:ac:ef:13:95:b6:ba:33:24:37: 91:c6:6c:5f:8d:ad:16:e2:4b:ce:79:bb:b7:10:2b: 38:ad:04:c5:36:39:33:39:eb:fe:9d:5d:77:70:92: 8f:18:0b:ed:8c:6c:17:27:aa:5a:81:b5:39:7e:51: 00:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:04:D8:01:A3:24:42:3E:88:D9:CA:9F:FF:CB:95:6A:5A:0D:4C:AA X509v3 Authority Key Identifier: keyid:A8:22:07:FD:50:C4:5E:96:F2:82:5E:C7:72:CF:6B:8D:EA:3D:FC:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCIH_VDEXpbygl7Hcs9rjeo9_LA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:4b:a4:c5:2b:a0:d6:83:49:f9:3c:eb:66:b5:6c:3b:06:79: c6:d4:e9:27:83:08:c8:c4:2c:fc:d3:92:8b:33:35:13:62:55: 10:22:4b:d3:d0:79:b9:72:32:9a:3a:58:30:c7:55:e2:cb:0f: 1a:3b:4f:cc:72:af:f5:f5:2a:bb:34:be:c6:c1:3b:92:00:16: 75:3d:8d:79:57:61:03:a7:d4:4c:d9:bb:d5:ab:3f:3b:ae:f5: e2:e6:8b:c2:f3:79:ac:23:ce:68:af:54:e5:3e:4d:2b:a6:19: 91:fe:b4:17:30:9e:df:27:05:f3:bc:6a:cf:da:a7:68:08:00: 9a:0e:4c:cd:33:d9:b3:76:f2:dd:d6:8e:38:1b:28:84:8b:33: 2c:56:0a:ab:14:cf:ea:14:c9:17:f2:81:9f:a9:d9:11:64:3f: db:da:6a:4e:04:4a:6f:f7:80:03:4f:d2:9a:f6:f3:6e:6f:a9: ba:86:4f:ed:42:9e:e0:42:32:4c:32:7e:c3:e6:54:a4:79:2f: e1:58:c6:42:4e:da:b2:27:9c:0c:38:1e:34:d8:9e:7c:94:e1: ae:63:e3:db:c2:eb:97:d9:4c:3e:a4:0b:b3:28:d4:e0:00:cd: a7:fe:8d:69:ee:eb:01:2d:cf:20:c2:85:85:2c:f0:b9:65:cb: 99:00:74:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ecCFNRGJfXuLW+WrvOOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MjIwN2ZkNTBjNDVlOTZmMjgyNWVjNzcyY2Y2YjhkZWEz ZGZjYjAwHhcNMjUxMjA2MDQwMDU2WhcNMjUxMjA3MDQwMDU2WjAzMTEwLwYDVQQD EyhjNjA0ZDgwMWEzMjQ0MjNlODhkOWNhOWZmZmNiOTU2YTVhMGQ0Y2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGFleUENyLiVZ37YFW1bFfLocYqq 48eE53Y3SbwbB01I5LL3h0gl+94sF5ouYdz9U5K7F0lGLodoAORmgDMcnwRSVmLm /EPu6GbijIwN0ImEN+QieynO9xiCzfgrlceWmrNeg1iiKca/HBik9Ol2xvHJYWfv 1h/W/7UntoBdikbaWiC6Qqh162L1BZIbRAKT1+yb1e7nLfhVKFwBMP3/vsiMb127 I7QYTTH5ZivBd6ZJRo5PqTB2vXnJPKbmlctCUiwsRp/hhUes7xOVtrozJDeRxmxf ja0W4kvOebu3ECs4rQTFNjkzOev+nV13cJKPGAvtjGwXJ6pagbU5flEA/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMYE2AGjJEI+iNnKn//LlWpaDUyqMB8GA1UdIwQY MBaAFKgiB/1QxF6W8oJex3LPa43qPfywMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUNJSF9WREVYcGJ5Z2w3SGNzOXJqZW85X0xBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYThlNDMtNmRmMC00N2VmLWFkYzUt MzBiZGQyZmUwNWIxLzEvcUNJSF9WREVYcGJ5Z2w3SGNzOXJqZW85X0xBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hYThlNDMtNmRmMC00N2VmLWFkYzUtMzBiZGQyZmUwNWIx LzEvcUNJSF9WREVYcGJ5Z2w3SGNzOXJqZW85X0xBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ0ukxSug 1oNJ+TzrZrVsOwZ5xtTpJ4MIyMQs/NOSizM1E2JVECJL09B5uXIymjpYMMdV4ssP GjtPzHKv9fUquzS+xsE7kgAWdT2NeVdhA6fUTNm71as/O6714uaLwvN5rCPOaK9U 5T5NK6YZkf60FzCe3ycF87xqz9qnaAgAmg5MzTPZs3by3daOOBsohIszLFYKqxTP 6hTJF/KBn6nZEWQ/29pqTgRKb/eAA0/Smvbzbm+puoZP7UKe4EIyTDJ+w+ZUpHkv 4VjGQk7asiecDDgeNNiefJThrmPj28Lrl9lMPqQLsyjU4ADNp/6Nae7rAS3PIMKF hSzwuWXLmQB0cA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:38 2025 by rpki-client