This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft File: qjV0fbQXDtRXVsyaOk52iaDrYsc.mft (raw, json) Hash identifier: lriaQBzMeH3KKcjPbjOa/SdPQGdK3n1rcJsHUNbBPlA= Subject key identifier: 47:87:6A:EC:F6:5C:A1:5F:0C:3C:68:4A:4B:85:06:52:63:4C:C3:61 Authority key identifier: AA:35:74:7D:B4:17:0E:D4:57:56:CC:9A:3A:4E:76:89:A0:EB:62:C7 Certificate issuer: /CN=aa35747db4170ed45756cc9a3a4e7689a0eb62c7 Certificate serial: 019AF577E4FD015760B9C709B48D8E38C87B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft Manifest number: 044A Signing time: Sat 06 Dec 2025 21:01:06 +0000 Manifest this update: Sat 06 Dec 2025 21:01:06 +0000 Manifest next update: Sun 07 Dec 2025 21:01:06 +0000 Files and hashes: 1: c4TxJnX6SULpOIlEbtsYVcPO_1E.roa (hash: mprESb6/2u0lim3u1bjN8fuUSWrOypjztHMO2wyLys0=) 2: qjV0fbQXDtRXVsyaOk52iaDrYsc.crl (hash: Di47cayyhErH03da47km6cS6ER44FaaQYrNTWGoNq80=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft rsync://rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:e4:fd:01:57:60:b9:c7:09:b4:8d:8e:38:c8:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa35747db4170ed45756cc9a3a4e7689a0eb62c7 Validity Not Before: Dec 6 21:01:06 2025 GMT Not After : Dec 7 21:01:06 2025 GMT Subject: CN=47876aecf65ca15f0c3c684a4b850652634cc361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1f:e7:29:4e:fb:ad:75:3c:d7:91:32:e0:aa: f6:3b:c1:73:24:00:e1:c9:7d:2f:6f:f9:19:f7:e8: ff:26:e4:f0:44:2c:4c:ad:84:dd:ab:9e:35:f4:ae: 61:d5:c9:b5:53:49:f0:2b:61:b4:b6:96:04:30:ba: a1:f6:3a:90:27:f9:9b:e2:08:70:84:eb:f5:3e:94: 79:7a:3a:7a:3c:e4:60:2c:2f:30:d5:d3:b8:de:3f: 9d:78:21:f8:0d:0d:98:fd:30:95:4f:28:59:c7:14: c2:cd:e1:29:2b:f9:4e:1b:5f:17:0d:5f:96:a4:97: 12:f1:d4:c2:46:61:50:ea:44:36:64:06:73:66:3a: c9:5f:10:a8:09:81:65:b3:cc:aa:79:d6:df:b6:4b: 33:c9:c2:4d:f9:aa:3f:e1:ad:1a:f6:49:3f:7d:15: 02:c0:3a:94:90:09:87:63:68:57:a0:07:26:e7:89: fe:09:46:78:6d:e7:0c:35:19:ec:44:5d:d8:78:a1: a2:b5:90:57:56:cf:ce:98:8e:c6:c7:49:9a:01:ab: 9f:bb:cd:59:e2:28:c6:2a:73:f9:97:8e:bb:b3:55: 1c:35:70:25:70:0f:64:67:21:5c:a7:1e:f2:72:e6: d2:0f:3a:f5:b6:a4:f0:80:67:da:ba:5e:8d:b3:62: 4a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:87:6A:EC:F6:5C:A1:5F:0C:3C:68:4A:4B:85:06:52:63:4C:C3:61 X509v3 Authority Key Identifier: keyid:AA:35:74:7D:B4:17:0E:D4:57:56:CC:9A:3A:4E:76:89:A0:EB:62:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:cc:10:5d:bb:cb:39:0c:42:80:cf:77:d0:a0:f5:80:37:e5: 90:86:d6:d9:14:83:0d:06:30:f5:29:a3:81:0d:a9:3a:8a:29: a1:e4:95:35:4e:17:bc:d7:89:e1:bd:d7:81:32:22:69:2f:f5: 1d:1a:9a:1d:11:f6:95:b9:12:ac:c2:46:5d:b6:9d:51:ca:4b: 0f:bd:87:21:86:8c:2c:ab:20:f9:c5:e7:e9:7f:fc:d3:00:f3: 5e:2f:c1:f7:0a:6b:7e:3c:43:72:63:f9:3d:cd:ac:05:d9:ae: f8:b8:ef:f4:f8:d1:44:ce:99:84:37:42:1c:2a:49:07:a4:3e: c7:4c:b5:2c:54:1e:b2:37:94:9d:fa:16:c9:dd:30:e1:60:04: bc:a5:48:4c:02:ee:9a:1c:e2:67:61:e0:db:72:8f:ac:0c:1b: 1a:3a:08:bf:8f:b8:ef:ec:35:6d:de:bf:ad:c5:af:ad:a2:c2: e9:30:e2:4d:15:0b:02:c1:84:5e:b2:01:6a:2b:5b:f7:ff:29: 23:f1:f0:75:d4:0d:c6:89:4c:b6:2d:66:72:36:57:88:8d:ab: 4e:67:5d:71:8e:ec:bc:d9:97:31:cc:f6:01:7c:49:48:ee:cf: 93:1a:d8:fc:86:b1:39:11:1a:a8:f2:48:fd:7d:4e:95:e0:42: 73:ae:6a:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d+T9AVdguccJtI2OOMh7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMzU3NDdkYjQxNzBlZDQ1NzU2Y2M5YTNhNGU3Njg5YTBl YjYyYzcwHhcNMjUxMjA2MjEwMTA2WhcNMjUxMjA3MjEwMTA2WjAzMTEwLwYDVQQD Eyg0Nzg3NmFlY2Y2NWNhMTVmMGMzYzY4NGE0Yjg1MDY1MjYzNGNjMzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxB/nKU77rXU815Ey4Kr2O8FzJADh yX0vb/kZ9+j/JuTwRCxMrYTdq5419K5h1cm1U0nwK2G0tpYEMLqh9jqQJ/mb4ghw hOv1PpR5ejp6PORgLC8w1dO43j+deCH4DQ2Y/TCVTyhZxxTCzeEpK/lOG18XDV+W pJcS8dTCRmFQ6kQ2ZAZzZjrJXxCoCYFls8yqedbftkszycJN+ao/4a0a9kk/fRUC wDqUkAmHY2hXoAcm54n+CUZ4becMNRnsRF3YeKGitZBXVs/OmI7Gx0maAaufu81Z 4ijGKnP5l467s1UcNXAlcA9kZyFcpx7ycubSDzr1tqTwgGfaul6Ns2JKTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEeHauz2XKFfDDxoSkuFBlJjTMNhMB8GA1UdIwQY MBaAFKo1dH20Fw7UV1bMmjpOdomg62LHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWpWMGZiUVhEdFJYVnN5YU9rNTJpYURyWXNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi80YTVjMzQtNGRmMy00OWMzLTg3N2It MWE4Y2QwNDZkYTkyLzEvcWpWMGZiUVhEdFJYVnN5YU9rNTJpYURyWXNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi80YTVjMzQtNGRmMy00OWMzLTg3N2ItMWE4Y2QwNDZkYTky LzEvcWpWMGZiUVhEdFJYVnN5YU9rNTJpYURyWXNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaswQXbvL OQxCgM930KD1gDflkIbW2RSDDQYw9SmjgQ2pOoopoeSVNU4XvNeJ4b3XgTIiaS/1 HRqaHRH2lbkSrMJGXbadUcpLD72HIYaMLKsg+cXn6X/80wDzXi/B9wprfjxDcmP5 Pc2sBdmu+Ljv9PjRRM6ZhDdCHCpJB6Q+x0y1LFQesjeUnfoWyd0w4WAEvKVITALu mhziZ2Hg23KPrAwbGjoIv4+47+w1bd6/rcWvraLC6TDiTRULAsGEXrIBaitb9/8p I/HwddQNxolMti1mcjZXiI2rTmddcY7svNmXMcz2AXxJSO7PkxrY/IaxOREaqPJI /X1OleBCc65qsw== -----END CERTIFICATE-----Generated at Sun Dec 7 03:56:59 2025 by rpki-client