This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft File: qmVRVhfXd7VhHdDgs9ACU-oymgc.mft (raw, json) Hash identifier: yTI4aG8FKSJmEYB8QH4RPWr3Q+UHvlz0VnTQ1TbLobs= Subject key identifier: 04:D1:8C:20:8E:CF:96:CF:1A:B7:06:6D:05:69:BA:D8:DF:51:FB:4A Authority key identifier: AA:65:51:56:17:D7:77:B5:61:1D:D0:E0:B3:D0:02:53:EA:32:9A:07 Certificate issuer: /CN=aa65515617d777b5611dd0e0b3d00253ea329a07 Certificate serial: 019B266499929A71364D4EA5C4169AB21333 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft Manifest number: 29 Signing time: Tue 16 Dec 2025 09:01:25 +0000 Manifest this update: Tue 16 Dec 2025 09:01:25 +0000 Manifest next update: Wed 17 Dec 2025 09:01:25 +0000 Files and hashes: 1: QvCAlgcB6qTZ6VUT3sEtdRIXVgk.asa (hash: MpngckAo1Ic57GpUS5DO26fn/z1GJxu9acZlYb5bzGc=) 2: qmVRVhfXd7VhHdDgs9ACU-oymgc.crl (hash: YWDyIE1AX9yGJ4iRbQaz4vWdMBlwJe3E5DXjd5ZrBrQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.crl rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:64:99:92:9a:71:36:4d:4e:a5:c4:16:9a:b2:13:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa65515617d777b5611dd0e0b3d00253ea329a07 Validity Not Before: Dec 16 09:01:25 2025 GMT Not After : Dec 17 09:01:25 2025 GMT Subject: CN=04d18c208ecf96cf1ab7066d0569bad8df51fb4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fc:da:36:66:93:3d:31:8f:5e:7d:fd:f5:43: ed:52:bf:f7:7b:1c:3c:32:84:4b:56:3b:06:b0:7c: 27:95:4e:d3:24:94:f6:fe:f5:e5:6e:eb:36:90:0e: 4f:d6:a0:55:6d:2f:ae:fc:97:42:59:f5:d6:62:1a: 2d:65:f5:ee:92:72:04:c7:c3:7b:9d:40:e6:77:66: 58:43:4c:02:08:98:e3:1f:17:bc:3e:95:c1:e5:93: fb:bf:2c:b9:c6:09:a2:d8:ba:df:eb:50:c1:d1:5b: 12:38:16:8c:a8:3d:45:bb:d9:23:b1:ad:f7:10:42: eb:a6:b9:54:9e:a2:02:d4:05:0c:5d:5c:1d:e4:ce: b9:91:0f:ad:29:74:35:a5:be:1a:33:11:9c:b7:92: 8e:6b:ab:c3:6e:ee:78:86:72:5f:6f:e7:3c:e8:4b: 09:99:40:fb:a7:0c:ab:79:a7:41:69:78:3c:80:46: a4:b5:6a:b3:03:ce:2e:af:bc:a3:cc:79:6d:f3:c4: fe:2b:d5:2f:22:58:8c:fe:0b:a3:e6:fa:5d:ba:1f: b1:62:4f:c0:d3:04:30:7a:2f:02:68:61:1b:12:c9: bd:a6:4f:02:09:70:aa:a0:32:a2:09:3a:91:ed:04: 88:f6:ba:2b:b1:2b:99:d8:2c:d7:b4:ea:ca:b0:13: f6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D1:8C:20:8E:CF:96:CF:1A:B7:06:6D:05:69:BA:D8:DF:51:FB:4A X509v3 Authority Key Identifier: keyid:AA:65:51:56:17:D7:77:B5:61:1D:D0:E0:B3:D0:02:53:EA:32:9A:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:f1:d5:f1:e2:b2:23:dc:3a:f5:4b:0b:89:07:93:bb:5d:c2: 87:20:0a:88:0b:bf:54:dc:97:c2:0b:f2:9e:7e:0d:95:d1:7b: 38:c1:ed:fa:8b:8f:19:c8:d1:98:a0:1a:da:1b:01:45:b3:ce: ce:9c:f3:cc:34:54:35:a3:03:cf:b1:be:f0:77:75:32:fb:58: c4:31:45:38:00:05:39:4d:6d:0c:a3:17:60:b3:74:53:f8:8b: 52:57:aa:c2:4f:9f:91:63:70:01:2c:f3:b2:8c:f9:32:0f:8a: 45:8f:88:54:a9:38:92:fb:d8:16:a2:93:2f:ce:97:43:ac:94: 1f:80:f4:0a:2f:af:12:df:42:86:cd:12:38:dd:33:24:c7:37: 55:a8:07:5f:93:d1:69:73:84:db:f3:71:29:7c:64:48:34:75: c3:4e:fd:f8:0c:28:69:1b:1f:cb:77:b2:d1:f9:02:72:00:44: ec:6a:75:bd:70:5b:fc:c1:21:db:19:4c:66:9a:da:92:8c:23: 99:7a:c6:51:ba:e0:f2:9d:fa:e7:a0:8f:a7:2a:68:c0:2b:e6: 4b:c8:ce:4b:c9:bf:e9:14:94:9e:26:e6:49:67:89:ea:ed:5e: 2e:15:38:53:e6:2a:f4:8d:5d:74:46:dc:6a:36:05:66:16:ee: e2:5f:75:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmZJmSmnE2TU6lxBaashMzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNjU1MTU2MTdkNzc3YjU2MTFkZDBlMGIzZDAwMjUzZWEz MjlhMDcwHhcNMjUxMjE2MDkwMTI1WhcNMjUxMjE3MDkwMTI1WjAzMTEwLwYDVQQD EygwNGQxOGMyMDhlY2Y5NmNmMWFiNzA2NmQwNTY5YmFkOGRmNTFmYjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/zaNmaTPTGPXn399UPtUr/3exw8 MoRLVjsGsHwnlU7TJJT2/vXlbus2kA5P1qBVbS+u/JdCWfXWYhotZfXuknIEx8N7 nUDmd2ZYQ0wCCJjjHxe8PpXB5ZP7vyy5xgmi2Lrf61DB0VsSOBaMqD1Fu9kjsa33 EELrprlUnqIC1AUMXVwd5M65kQ+tKXQ1pb4aMxGct5KOa6vDbu54hnJfb+c86EsJ mUD7pwyreadBaXg8gEaktWqzA84ur7yjzHlt88T+K9UvIliM/guj5vpduh+xYk/A 0wQwei8CaGEbEsm9pk8CCXCqoDKiCTqR7QSI9rorsSuZ2CzXtOrKsBP2pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFATRjCCOz5bPGrcGbQVputjfUftKMB8GA1UdIwQY MBaAFKplUVYX13e1YR3Q4LPQAlPqMpoHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW1WUlZoZlhkN1ZoSGREZ3M5QUNVLW95bWdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jZDliODktNzU2OC00N2IxLThlNTEt ZTU5MmM3ZDM1ZmYyLzEvcW1WUlZoZlhkN1ZoSGREZ3M5QUNVLW95bWdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9jZDliODktNzU2OC00N2IxLThlNTEtZTU5MmM3ZDM1ZmYy LzEvcW1WUlZoZlhkN1ZoSGREZ3M5QUNVLW95bWdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVfHV8eKy I9w69UsLiQeTu13ChyAKiAu/VNyXwgvynn4NldF7OMHt+ouPGcjRmKAa2hsBRbPO zpzzzDRUNaMDz7G+8Hd1MvtYxDFFOAAFOU1tDKMXYLN0U/iLUleqwk+fkWNwASzz soz5Mg+KRY+IVKk4kvvYFqKTL86XQ6yUH4D0Ci+vEt9Chs0SON0zJMc3VagHX5PR aXOE2/NxKXxkSDR1w079+AwoaRsfy3ey0fkCcgBE7Gp1vXBb/MEh2xlMZprakowj mXrGUbrg8p3656CPpypowCvmS8jOS8m/6RSUnibmSWeJ6u1eLhU4U+Yq9I1ddEbc ajYFZhbu4l91aw== -----END CERTIFICATE-----Generated at Tue Dec 16 12:52:54 2025 by rpki-client