This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft File: CqLxIFVT-llg8YBcbtk4np4NySw.mft (raw, json) Hash identifier: kPIku6Dfwgnlt4nEJ8sQwlmzK4GeOjQq1FKhfLyb4Js= Subject key identifier: F9:B2:50:49:61:36:E8:7C:85:D3:5C:0A:62:07:AF:24:07:09:60:BF Authority key identifier: 0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C Certificate issuer: /CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c Certificate serial: 019AF61C98D6EBF3BD6E0EB2DBD325F57205 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft Manifest number: 0F83 Signing time: Sun 07 Dec 2025 00:01:00 +0000 Manifest this update: Sun 07 Dec 2025 00:01:00 +0000 Manifest next update: Mon 08 Dec 2025 00:01:00 +0000 Files and hashes: 1: CqLxIFVT-llg8YBcbtk4np4NySw.crl (hash: APDt8/qIojG6A95EePHYkxXxBp6ZVqlNwapLom8K9h8=) 2: MAyKtR82lE73Rh03ItY-WJwlb0g.roa (hash: f22v5OwOnzL/KWHiBBd5+v5oBvo4HOCog7B7G8jEiaw=) 3: RmEKf5AMcv-GlXgJ8CZCaZ-S-bA.roa (hash: eaj18qKp8KNClDH+PpQWLvjTLItUDXXCJ/w32Wi8Qaw=) 4: Zf3An3BZ0tkzgzLF3YZuNzRqcaQ.roa (hash: g/EpgWzY2fh+5ethfX/aF6EmwHM9mLLUcuJd+6tww38=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:98:d6:eb:f3:bd:6e:0e:b2:db:d3:25:f5:72:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c Validity Not Before: Dec 7 00:01:00 2025 GMT Not After : Dec 8 00:01:00 2025 GMT Subject: CN=f9b250496136e87c85d35c0a6207af24070960bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:42:37:e4:45:aa:19:d4:f8:c3:01:53:85:80: 3b:fa:9c:9c:4b:22:20:de:5b:3a:93:d5:1b:d4:9b: c7:4f:9e:56:95:5e:2d:b0:6d:94:0f:a6:73:d3:05: 44:85:ec:de:93:8a:5f:72:2a:8f:03:73:cd:82:fc: 20:37:3c:d2:f5:dc:b1:d8:e8:af:f2:14:8a:20:44: bf:aa:ff:23:7f:83:d4:ea:e8:30:bf:05:ce:1f:95: 71:ef:41:8b:82:81:0a:92:1e:d5:8c:c9:b4:bc:03: 16:1a:f5:b8:85:21:3e:15:3b:0c:59:3d:8f:d5:73: a9:6e:30:59:0f:c1:55:8e:31:13:a7:6a:1a:2f:49: 93:fd:ec:83:9b:40:bf:fb:41:ae:c8:05:82:42:34: 53:9e:0e:59:28:6a:86:eb:f0:a9:ff:8a:58:77:38: 35:fd:cf:00:fa:a0:84:a1:f1:ed:57:75:1a:86:5a: f0:21:67:00:2b:dd:97:51:89:f3:82:19:6f:96:61: 4f:33:06:8f:be:49:09:e4:dd:8e:1b:eb:12:af:1e: 81:83:f9:88:21:e4:47:08:a7:e0:48:18:3a:d1:a7: bf:41:e9:11:35:9a:5a:80:72:59:20:53:7e:6f:78: 21:3a:fd:63:cd:51:13:4e:22:f6:99:42:19:86:48: 13:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:B2:50:49:61:36:E8:7C:85:D3:5C:0A:62:07:AF:24:07:09:60:BF X509v3 Authority Key Identifier: keyid:0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:4d:bd:3c:ae:61:c7:15:e1:85:3d:b7:93:cd:cd:10:98:63: 6d:cb:fa:fa:71:7a:68:de:3b:ce:34:8a:27:7d:1e:68:5c:94: f1:e2:33:f1:72:13:f6:ca:f3:76:90:74:32:21:26:3e:50:33: bf:d0:5e:96:8e:6e:62:03:19:a7:4d:a7:a0:e6:44:3b:b1:81: 8f:27:a3:52:28:ec:9c:c5:a3:66:e0:a0:af:47:24:3e:6a:1e: 58:8f:df:89:95:09:2d:3f:83:7c:9c:7b:47:43:6c:8f:e5:ad: 35:ae:1e:43:3d:cb:4c:2e:ac:50:12:05:1d:aa:66:53:99:07: fa:d5:e0:99:2a:16:b2:95:b2:f2:03:f1:05:51:5e:f7:81:07: fd:db:8b:f2:49:fb:06:c4:54:a7:4f:cf:f2:26:ec:fb:d9:1b: ce:7f:76:93:34:08:03:30:a9:53:2c:64:a0:76:10:ea:28:9c: d1:55:ee:cb:3f:bc:6e:44:14:ea:7b:ee:8b:17:b0:ea:f1:29: 22:c6:9a:92:0c:4c:ee:24:0f:1f:be:33:49:03:a1:32:8a:23: 3c:0c:d0:af:6d:cd:6c:38:20:95:11:01:02:1b:21:d5:c6:4e: 0b:d2:b0:20:78:73:a4:72:1d:ff:00:d2:c4:a1:07:c9:fb:af: 58:78:07:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HJjW6/O9bg6y29Ml9XIFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhYTJmMTIwNTU1M2ZhNTk2MGYxODA1YzZlZDkzODllOWUw ZGM5MmMwHhcNMjUxMjA3MDAwMTAwWhcNMjUxMjA4MDAwMTAwWjAzMTEwLwYDVQQD EyhmOWIyNTA0OTYxMzZlODdjODVkMzVjMGE2MjA3YWYyNDA3MDk2MGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukI35EWqGdT4wwFThYA7+pycSyIg 3ls6k9Ub1JvHT55WlV4tsG2UD6Zz0wVEhezek4pfciqPA3PNgvwgNzzS9dyx2Oiv 8hSKIES/qv8jf4PU6ugwvwXOH5Vx70GLgoEKkh7VjMm0vAMWGvW4hSE+FTsMWT2P 1XOpbjBZD8FVjjETp2oaL0mT/eyDm0C/+0GuyAWCQjRTng5ZKGqG6/Cp/4pYdzg1 /c8A+qCEofHtV3UahlrwIWcAK92XUYnzghlvlmFPMwaPvkkJ5N2OG+sSrx6Bg/mI IeRHCKfgSBg60ae/QekRNZpagHJZIFN+b3ghOv1jzVETTiL2mUIZhkgT6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPmyUElhNuh8hdNcCmIHryQHCWC/MB8GA1UdIwQY MBaAFAqi8SBVU/pZYPGAXG7ZOJ6eDcksMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3FMeElGVlQtbGxnOFlCY2J0azRucDROeVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82NGU0NDItMTM3ZS00MTAxLWJiNmMt YjA2ODMxNTk2NDQ5LzEvQ3FMeElGVlQtbGxnOFlCY2J0azRucDROeVN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS82NGU0NDItMTM3ZS00MTAxLWJiNmMtYjA2ODMxNTk2NDQ5 LzEvQ3FMeElGVlQtbGxnOFlCY2J0azRucDROeVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYE29PK5h xxXhhT23k83NEJhjbcv6+nF6aN47zjSKJ30eaFyU8eIz8XIT9srzdpB0MiEmPlAz v9Belo5uYgMZp02noOZEO7GBjyejUijsnMWjZuCgr0ckPmoeWI/fiZUJLT+DfJx7 R0Nsj+WtNa4eQz3LTC6sUBIFHapmU5kH+tXgmSoWspWy8gPxBVFe94EH/duL8kn7 BsRUp0/P8ibs+9kbzn92kzQIAzCpUyxkoHYQ6iic0VXuyz+8bkQU6nvuixew6vEp IsaakgxM7iQPH74zSQOhMoojPAzQr23NbDgglREBAhsh1cZOC9KwIHhzpHId/wDS xKEHyfuvWHgH3A== -----END CERTIFICATE-----Generated at Sun Dec 7 06:55:05 2025 by rpki-client