This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft File: qkHJOeqVoh87dCkB3-BfJqV3dYE.mft (raw, json) Hash identifier: eSV/KXJOQ10904VR68dl17nG8r3lbZZGBexwTNHvC/Q= Subject key identifier: E9:13:09:51:1F:3A:F9:74:14:A5:12:03:58:97:78:B0:98:43:C7:2C Authority key identifier: AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81 Certificate issuer: /CN=aa41c939ea95a21f3b742901dfe05f26a5777581 Certificate serial: 019AF1D1BFD678A2DCF9630A6ABAB6729982 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft Manifest number: 0C44 Signing time: Sat 06 Dec 2025 04:00:46 +0000 Manifest this update: Sat 06 Dec 2025 04:00:46 +0000 Manifest next update: Sun 07 Dec 2025 04:00:46 +0000 Files and hashes: 1: qkHJOeqVoh87dCkB3-BfJqV3dYE.crl (hash: WfTsVQ+Y6scgEs+dGRFGU/Ofq0e8J3Bh/kzpOMbQ2xE=) 2: wcccpGaeYTilF5ncbceAk7mBvqQ.roa (hash: gOA2BhosHOf6qCEMFAHb8yTCso/K7yQdwGzJmIy7AF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:bf:d6:78:a2:dc:f9:63:0a:6a:ba:b6:72:99:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa41c939ea95a21f3b742901dfe05f26a5777581 Validity Not Before: Dec 6 04:00:46 2025 GMT Not After : Dec 7 04:00:46 2025 GMT Subject: CN=e91309511f3af97414a51203589778b09843c72c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:63:e0:ff:c0:27:09:43:8a:da:6d:c3:5d:fa: 24:e1:5c:0f:0f:10:fa:66:9c:c5:8d:4f:0c:ea:d8: 38:9f:ba:54:b4:5b:19:b5:98:65:69:87:9b:f2:c2: 73:1d:1a:73:4a:15:c8:5a:74:e4:8e:2d:bb:a3:67: a1:83:29:26:e8:ab:22:22:fe:e8:e7:ba:6f:09:34: 9a:57:15:a0:7e:fa:39:b0:ab:65:e6:64:52:e3:8b: 1e:d3:e1:42:76:52:ab:51:a2:78:db:be:7d:f6:2f: 85:d8:ac:0a:08:c8:b8:44:71:d1:6e:97:96:ab:1a: 53:e1:d0:63:e7:bc:90:71:cb:ce:21:d3:e4:7d:80: af:01:a9:a1:71:46:01:aa:a5:d2:ca:0d:93:41:d1: ba:6f:c8:ac:c3:6b:67:6f:4e:e0:e1:da:c3:a3:fd: e8:78:98:3b:9b:7d:ae:71:9a:bd:23:f6:07:f4:c0: a0:f4:eb:fd:64:c0:16:3d:98:9c:95:7a:dd:ca:fc: 0c:e8:41:ee:74:92:f2:d5:07:4f:0b:79:93:df:07: 45:54:a2:54:d6:f6:ae:53:70:53:66:cc:34:1f:5e: c8:2e:11:83:15:9f:91:00:ac:02:b2:0d:16:18:0c: bf:dc:5e:c0:e4:96:08:d0:00:0e:bb:e0:23:7b:38: b7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:13:09:51:1F:3A:F9:74:14:A5:12:03:58:97:78:B0:98:43:C7:2C X509v3 Authority Key Identifier: keyid:AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:39:5f:6f:e9:00:7c:d2:64:e7:4f:7c:10:aa:11:b4:7c:52: a6:07:d9:fd:75:f3:0c:24:9a:1c:dc:49:2c:12:fb:d7:12:36: 6b:c0:10:58:d6:a1:e1:7f:0d:18:f2:bb:5d:01:f3:b5:bc:f9: b3:c9:41:44:7f:16:28:49:96:d3:91:43:33:c7:05:07:67:e6: 3b:8f:57:06:d6:0c:ab:d8:85:f6:84:d4:d7:05:27:33:3d:4e: 94:28:d5:31:22:31:73:74:6d:83:6c:ad:c3:8d:01:bd:49:e9: 09:c1:d7:ad:97:c5:d6:9d:e1:31:59:7d:db:59:59:7f:c9:20: dd:2c:55:0a:b2:ae:8e:d3:4f:49:67:d6:8f:d5:2a:17:0c:d7: 64:65:38:89:d3:22:ba:e4:5a:3c:80:e6:ba:b9:08:c8:3d:ec: 4a:40:54:1a:a5:4a:e1:dc:5b:9c:e9:17:e3:b6:d4:9b:f8:67: ab:7e:fd:7b:8e:f7:e2:50:6b:74:58:13:e5:cb:00:b9:e9:76: 81:49:ca:ee:43:b2:0c:0a:8f:d7:b0:35:2d:22:10:3a:34:cc: 81:4c:39:0c:57:1a:b6:18:3f:8f:e6:b1:89:66:41:24:61:18: e9:f1:4d:81:3c:85:c6:3d:81:db:f5:e9:a2:01:0d:c3:00:d0: ba:7c:1c:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0b/WeKLc+WMKarq2cpmCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNDFjOTM5ZWE5NWEyMWYzYjc0MjkwMWRmZTA1ZjI2YTU3 Nzc1ODEwHhcNMjUxMjA2MDQwMDQ2WhcNMjUxMjA3MDQwMDQ2WjAzMTEwLwYDVQQD EyhlOTEzMDk1MTFmM2FmOTc0MTRhNTEyMDM1ODk3NzhiMDk4NDNjNzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmPg/8AnCUOK2m3DXfok4VwPDxD6 ZpzFjU8M6tg4n7pUtFsZtZhlaYeb8sJzHRpzShXIWnTkji27o2ehgykm6KsiIv7o 57pvCTSaVxWgfvo5sKtl5mRS44se0+FCdlKrUaJ427599i+F2KwKCMi4RHHRbpeW qxpT4dBj57yQccvOIdPkfYCvAamhcUYBqqXSyg2TQdG6b8isw2tnb07g4drDo/3o eJg7m32ucZq9I/YH9MCg9Ov9ZMAWPZiclXrdyvwM6EHudJLy1QdPC3mT3wdFVKJU 1vauU3BTZsw0H17ILhGDFZ+RAKwCsg0WGAy/3F7A5JYI0AAOu+Ajezi3iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOkTCVEfOvl0FKUSA1iXeLCYQ8csMB8GA1UdIwQY MBaAFKpByTnqlaIfO3QpAd/gXyald3WBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWtISk9lcVZvaDg3ZENrQjMtQmZKcVYzZFlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy85ODFmYjEtOTA0ZC00OTlhLWI5M2Et NjA3Y2EwMjViOTRmLzEvcWtISk9lcVZvaDg3ZENrQjMtQmZKcVYzZFlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy85ODFmYjEtOTA0ZC00OTlhLWI5M2EtNjA3Y2EwMjViOTRm LzEvcWtISk9lcVZvaDg3ZENrQjMtQmZKcVYzZFlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATTlfb+kA fNJk5098EKoRtHxSpgfZ/XXzDCSaHNxJLBL71xI2a8AQWNah4X8NGPK7XQHztbz5 s8lBRH8WKEmW05FDM8cFB2fmO49XBtYMq9iF9oTU1wUnMz1OlCjVMSIxc3Rtg2yt w40BvUnpCcHXrZfF1p3hMVl921lZf8kg3SxVCrKujtNPSWfWj9UqFwzXZGU4idMi uuRaPIDmurkIyD3sSkBUGqVK4dxbnOkX47bUm/hnq379e4734lBrdFgT5csAuel2 gUnK7kOyDAqP17A1LSIQOjTMgUw5DFcathg/j+axiWZBJGEY6fFNgTyFxj2B2/Xp ogENwwDQunwckg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:20 2025 by rpki-client