This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft File: rqAyAc2mqK295P6ARuxl-WrGqWw.mft (raw, json) Hash identifier: f5qdq4Q2rM4MMI6+AWuCgFnNR0aguLqKKKfF1/rtAy4= Subject key identifier: 63:2A:F8:27:A0:0F:03:CC:6C:6C:0A:33:62:07:32:CA:14:63:C8:70 Authority key identifier: AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C Certificate issuer: /CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c Certificate serial: 019AF42DC6FA5F2B9947FF63D45EF94D657E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft Manifest number: 02B9 Signing time: Sat 06 Dec 2025 15:00:31 +0000 Manifest this update: Sat 06 Dec 2025 15:00:31 +0000 Manifest next update: Sun 07 Dec 2025 15:00:31 +0000 Files and hashes: 1: OHSgHk7806-Y3EiMMODqh70dnpA.roa (hash: dwELo2G8zKa9A3mOV9vawf+jeFFyKXxpSg3LwUytDM8=) 2: ZfKmgCC5shqdiJ4oG4WQU2IlAJs.roa (hash: xPdeleCRUgq2S3wQBazj5FbP5YRWDoq9gRuAfQMqJJU=) 3: rqAyAc2mqK295P6ARuxl-WrGqWw.crl (hash: cHivdUkLagYYGUrkcpbu5jniDe5hxJ6CcglPSWND98s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 15:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:c6:fa:5f:2b:99:47:ff:63:d4:5e:f9:4d:65:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c Validity Not Before: Dec 6 15:00:31 2025 GMT Not After : Dec 7 15:00:31 2025 GMT Subject: CN=632af827a00f03cc6c6c0a33620732ca1463c870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:98:78:18:1d:9a:77:1e:7f:74:27:07:a4:57: 83:72:10:3f:24:8e:56:0f:65:64:a3:5a:ae:5a:f7: 7e:3f:1b:41:2c:ac:57:6a:49:58:58:57:3a:1e:09: d3:4f:38:46:4a:f3:08:4e:ec:88:d5:47:e0:23:e7: ef:cc:6b:4c:5e:9c:5d:71:4c:11:75:d5:86:76:fb: fe:c1:51:45:61:18:de:84:61:df:b2:8f:4e:98:7b: 44:e9:8b:bc:76:95:55:7c:af:85:4c:e3:39:73:28: 56:c4:ed:fa:ae:83:2d:36:b2:6a:72:b1:ae:e4:fb: 86:05:7d:8e:50:d9:73:ce:45:a9:68:66:b8:ca:cf: 53:30:42:a4:d2:58:48:e1:67:e9:9c:bf:87:17:54: 93:63:64:1f:77:e0:95:b9:68:00:9c:c8:35:3c:d6: 62:5b:70:64:e8:ce:c9:2e:9f:e4:b7:fe:46:83:bb: 87:9b:a1:d1:fa:42:48:57:13:3b:8c:72:82:59:bd: ee:ae:43:62:91:3b:88:bd:68:d3:03:6b:14:db:7c: 1a:13:48:54:a2:2d:3f:99:16:ed:92:7a:21:c3:35: 36:7c:cc:0c:3e:4d:35:22:ca:07:08:6c:d4:ab:ae: ab:98:4b:72:b1:d8:ee:80:eb:5c:f2:9a:00:da:15: d8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:2A:F8:27:A0:0F:03:CC:6C:6C:0A:33:62:07:32:CA:14:63:C8:70 X509v3 Authority Key Identifier: keyid:AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:44:d6:b8:a6:6a:40:75:68:1a:68:26:06:80:06:51:df:0f: fe:d4:c8:ea:e3:31:fa:ae:ca:12:67:b5:d1:88:e7:b4:53:bb: b4:d1:20:bf:a6:f3:79:6b:75:7a:7e:c3:d0:21:32:60:a4:1f: 6f:2d:d1:f4:fe:b1:bb:2a:95:13:74:d3:7b:36:e6:bf:30:12: b6:61:f5:25:cf:2d:a1:83:b2:24:9c:57:04:c5:9b:bc:29:8a: d2:c3:43:45:90:4f:12:55:67:36:dc:74:6c:7a:fc:97:ee:94: 5c:8f:91:09:65:ae:be:d5:2b:ba:0b:c5:13:15:3a:5d:ce:8a: 0a:29:c0:0b:59:2e:b0:cd:9a:a8:f1:45:dd:ec:be:20:37:28: f6:78:ee:27:07:7e:db:4a:fa:12:12:72:94:dc:4d:e4:78:ab: f8:b9:b5:43:8c:88:33:14:82:e8:49:df:6e:72:46:f7:ca:a1: 37:9f:38:46:80:de:f4:75:f3:d7:13:5c:da:ee:c2:94:53:7c: c1:ea:93:0d:7f:10:e2:13:1d:cb:7e:70:e9:b3:91:1a:05:6f: 9f:89:52:82:9c:c7:b1:e5:87:94:b7:e3:64:59:60:b5:df:09: f7:25:5f:07:09:93:62:32:bb:81:77:49:f4:30:08:2e:e6:56: 9a:84:b9:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lcb6XyuZR/9j1F75TWV+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYTAzMjAxY2RhNmE4YWRiZGU0ZmU4MDQ2ZWM2NWY5NmFj NmE5NmMwHhcNMjUxMjA2MTUwMDMxWhcNMjUxMjA3MTUwMDMxWjAzMTEwLwYDVQQD Eyg2MzJhZjgyN2EwMGYwM2NjNmM2YzBhMzM2MjA3MzJjYTE0NjNjODcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJh4GB2adx5/dCcHpFeDchA/JI5W D2Vko1quWvd+PxtBLKxXaklYWFc6HgnTTzhGSvMITuyI1UfgI+fvzGtMXpxdcUwR ddWGdvv+wVFFYRjehGHfso9OmHtE6Yu8dpVVfK+FTOM5cyhWxO36roMtNrJqcrGu 5PuGBX2OUNlzzkWpaGa4ys9TMEKk0lhI4WfpnL+HF1STY2Qfd+CVuWgAnMg1PNZi W3Bk6M7JLp/kt/5Gg7uHm6HR+kJIVxM7jHKCWb3urkNikTuIvWjTA2sU23waE0hU oi0/mRbtknohwzU2fMwMPk01IsoHCGzUq66rmEtysdjugOtc8poA2hXY6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGMq+CegDwPMbGwKM2IHMsoUY8hwMB8GA1UdIwQY MBaAFK6gMgHNpqitveT+gEbsZflqxqlsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnFBeUFjMm1xSzI5NVA2QVJ1eGwtV3JHcVd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9kZDA5ZGMtMjQ3Mi00NTE3LTllMmQt ZWE0MTJmMjFlMjMwLzEvcnFBeUFjMm1xSzI5NVA2QVJ1eGwtV3JHcVd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9kZDA5ZGMtMjQ3Mi00NTE3LTllMmQtZWE0MTJmMjFlMjMw LzEvcnFBeUFjMm1xSzI5NVA2QVJ1eGwtV3JHcVd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOkTWuKZq QHVoGmgmBoAGUd8P/tTI6uMx+q7KEme10YjntFO7tNEgv6bzeWt1en7D0CEyYKQf by3R9P6xuyqVE3TTezbmvzAStmH1Jc8toYOyJJxXBMWbvCmK0sNDRZBPElVnNtx0 bHr8l+6UXI+RCWWuvtUrugvFExU6Xc6KCinAC1kusM2aqPFF3ey+IDco9njuJwd+ 20r6EhJylNxN5Hir+Lm1Q4yIMxSC6EnfbnJG98qhN584RoDe9HXz1xNc2u7ClFN8 weqTDX8Q4hMdy35w6bORGgVvn4lSgpzHseWHlLfjZFlgtd8J9yVfBwmTYjK7gXdJ 9DAILuZWmoS51A== -----END CERTIFICATE-----Generated at Sun Dec 7 00:34:18 2025 by rpki-client