This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft File: qVHmOKLLlcaLvFSicoYFsn9XBoE.mft (raw, json) Hash identifier: 4kYdn/aGsWDTUuVQBsnH+mcuic4S4mRS/EpHHnYdVMg= Subject key identifier: 3D:48:22:9C:D1:82:F4:67:81:C5:EA:6B:27:FA:8E:DA:2B:4D:08:C5 Authority key identifier: A9:51:E6:38:A2:CB:95:C6:8B:BC:54:A2:72:86:05:B2:7F:57:06:81 Certificate issuer: /CN=a951e638a2cb95c68bbc54a2728605b27f570681 Certificate serial: 019AF1D246656AE8970E64BB6E3EE90CF540 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft Manifest number: 0E18 Signing time: Sat 06 Dec 2025 04:01:20 +0000 Manifest this update: Sat 06 Dec 2025 04:01:20 +0000 Manifest next update: Sun 07 Dec 2025 04:01:20 +0000 Files and hashes: 1: HI_761EI5uyGqmjrDCQMeEJHGzc.roa (hash: QB8Dmgi2EHb5963iec21h5u6pDxN6G7ySEepAThURJA=) 2: qVHmOKLLlcaLvFSicoYFsn9XBoE.crl (hash: yfbdxoMd4Jz5jp3mxWz4fLguT6F2uy4ohfzC036wZrE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:46:65:6a:e8:97:0e:64:bb:6e:3e:e9:0c:f5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a951e638a2cb95c68bbc54a2728605b27f570681 Validity Not Before: Dec 6 04:01:20 2025 GMT Not After : Dec 7 04:01:20 2025 GMT Subject: CN=3d48229cd182f46781c5ea6b27fa8eda2b4d08c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:50:d9:9c:3b:b0:d0:be:84:41:e1:30:87:8d: e7:0e:6e:d2:96:1a:a9:c3:26:1c:25:41:f8:5c:9c: 38:ad:84:62:a5:64:5a:dc:4b:e6:a8:53:e4:5a:b8: aa:46:ae:4a:e2:8a:e0:5a:3d:c3:db:a4:6e:be:5a: 26:fb:68:64:ae:cf:52:48:fb:dc:9c:0f:1e:43:ec: 9f:15:e6:05:c2:57:01:df:0a:d6:e9:17:17:e4:a6: 39:ae:fa:ed:b8:9b:cc:ce:c8:7c:7d:4c:68:3f:0d: 1d:50:c6:37:25:a7:67:af:2e:42:cc:74:f8:67:cf: 08:58:d9:60:e8:50:0c:a7:b6:03:33:3c:0b:b2:60: 7e:12:6b:46:43:94:59:d8:8a:1e:46:70:bf:ec:dd: e7:46:01:21:8a:78:37:98:8c:31:ea:50:d5:ce:c5: 9a:45:0e:44:df:ff:50:9e:c4:0d:e6:f6:90:df:6e: 9e:ef:e5:e8:45:8a:5e:07:09:6f:da:14:d3:04:74: 94:6f:85:11:59:97:15:14:8c:60:93:e6:4c:de:31: c3:82:ed:2d:15:d6:ee:6f:b3:bc:0a:a3:bc:cc:bb: ed:53:c7:95:ae:bc:59:ad:33:1d:28:20:ab:b5:7e: f6:c0:7d:55:e7:fc:0c:5e:15:8c:37:66:e2:18:05: 92:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:48:22:9C:D1:82:F4:67:81:C5:EA:6B:27:FA:8E:DA:2B:4D:08:C5 X509v3 Authority Key Identifier: keyid:A9:51:E6:38:A2:CB:95:C6:8B:BC:54:A2:72:86:05:B2:7F:57:06:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:e3:4c:59:ec:8b:16:16:7b:ad:34:de:2c:46:0e:1a:83:6b: 15:47:54:ad:35:e5:71:e7:55:df:87:bb:de:19:c3:d9:27:5f: 63:23:63:b9:22:db:b9:3a:1a:96:0d:44:e8:00:b0:2a:ad:59: bb:28:0c:83:5a:7b:87:f1:70:20:91:56:db:33:17:54:14:b5: 35:fc:1c:5c:b1:9d:b2:5a:24:7e:e1:c6:07:90:10:a1:0d:fe: f9:24:91:79:1d:8a:7c:18:f8:38:b0:76:47:50:a6:63:6d:fa: 32:90:ab:5e:6d:2c:27:11:a2:d7:a4:ce:af:3d:3c:53:9e:00: 76:77:f8:09:c8:c0:4f:d5:f3:ed:0c:3f:a3:ee:46:63:3e:c6: a1:82:d8:0a:65:c3:e3:9b:84:72:a9:3e:f4:20:97:7b:65:82: 17:fa:8a:5a:e2:ce:e8:bd:02:43:d1:e6:8a:6d:0e:96:d1:8a: 3d:54:55:47:c0:8f:34:65:15:d8:a8:0e:17:61:42:a6:cf:4a: da:8b:95:4c:3d:8b:64:86:73:80:7a:1f:45:a9:8f:02:5b:e6: b0:c3:33:f6:15:b1:06:ac:37:44:a7:6e:e7:15:30:b6:31:fc: fd:36:a0:13:3f:0c:8f:83:96:64:33:4b:fd:5a:75:12:0b:c8: 8e:90:3a:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0kZlauiXDmS7bj7pDPVAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5NTFlNjM4YTJjYjk1YzY4YmJjNTRhMjcyODYwNWIyN2Y1 NzA2ODEwHhcNMjUxMjA2MDQwMTIwWhcNMjUxMjA3MDQwMTIwWjAzMTEwLwYDVQQD EygzZDQ4MjI5Y2QxODJmNDY3ODFjNWVhNmIyN2ZhOGVkYTJiNGQwOGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVDZnDuw0L6EQeEwh43nDm7Slhqp wyYcJUH4XJw4rYRipWRa3EvmqFPkWriqRq5K4orgWj3D26Ruvlom+2hkrs9SSPvc nA8eQ+yfFeYFwlcB3wrW6RcX5KY5rvrtuJvMzsh8fUxoPw0dUMY3Jadnry5CzHT4 Z88IWNlg6FAMp7YDMzwLsmB+EmtGQ5RZ2IoeRnC/7N3nRgEhing3mIwx6lDVzsWa RQ5E3/9QnsQN5vaQ326e7+XoRYpeBwlv2hTTBHSUb4URWZcVFIxgk+ZM3jHDgu0t Fdbub7O8CqO8zLvtU8eVrrxZrTMdKCCrtX72wH1V5/wMXhWMN2biGAWS9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD1IIpzRgvRngcXqayf6jtorTQjFMB8GA1UdIwQY MBaAFKlR5jiiy5XGi7xUonKGBbJ/VwaBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVZIbU9LTExsY2FMdkZTaWNvWUZzbjlYQm9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mMDZlNzktZWQyYi00M2Q1LWI0YzEt YWJkZjkwNmM1YWRlLzEvcVZIbU9LTExsY2FMdkZTaWNvWUZzbjlYQm9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9mMDZlNzktZWQyYi00M2Q1LWI0YzEtYWJkZjkwNmM1YWRl LzEvcVZIbU9LTExsY2FMdkZTaWNvWUZzbjlYQm9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFuNMWeyL FhZ7rTTeLEYOGoNrFUdUrTXlcedV34e73hnD2SdfYyNjuSLbuToalg1E6ACwKq1Z uygMg1p7h/FwIJFW2zMXVBS1NfwcXLGdslokfuHGB5AQoQ3++SSReR2KfBj4OLB2 R1CmY236MpCrXm0sJxGi16TOrz08U54Adnf4CcjAT9Xz7Qw/o+5GYz7GoYLYCmXD 45uEcqk+9CCXe2WCF/qKWuLO6L0CQ9Hmim0OltGKPVRVR8CPNGUV2KgOF2FCps9K 2ouVTD2LZIZzgHofRamPAlvmsMMz9hWxBqw3RKdu5xUwtjH8/TagEz8Mj4OWZDNL /Vp1EgvIjpA6+w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:37 2025 by rpki-client