This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.mft File: qqlyrDzBD3FspJhQRaXwgktgyh8.mft (raw, json) Hash identifier: boLF9u6fIMINAsuOkpDjzvso9pEM2CRphBBTAgBMtKU= Subject key identifier: 00:DB:33:E7:EA:62:44:54:93:8F:98:DA:FC:B7:B3:90:D8:CF:31:07 Authority key identifier: AA:A9:72:AC:3C:C1:0F:71:6C:A4:98:50:45:A5:F0:82:4B:60:CA:1F Certificate issuer: /CN=aaa972ac3cc10f716ca4985045a5f0824b60ca1f Certificate serial: 019B41A4DDEFFA32FF813A6054A3E15CCC32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqlyrDzBD3FspJhQRaXwgktgyh8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.mft Manifest number: 0296 Signing time: Sun 21 Dec 2025 16:01:22 +0000 Manifest this update: Sun 21 Dec 2025 16:01:22 +0000 Manifest next update: Mon 22 Dec 2025 16:01:22 +0000 Files and hashes: 1: qqlyrDzBD3FspJhQRaXwgktgyh8.crl (hash: rPuzwNPY2bA6RNoVLRzR1/et68LPUVqICzMjuDLdos4=) 2: yIGIxees9MuARoWN6t0oVINh_4A.roa (hash: geAsTIsbC4XBTKHwgmaJ0ZNmwh/Z8F8NnaAnGD8ONe8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.crl rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.mft rsync://rpki.ripe.net/repository/DEFAULT/qqlyrDzBD3FspJhQRaXwgktgyh8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 16:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:dd:ef:fa:32:ff:81:3a:60:54:a3:e1:5c:cc:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaa972ac3cc10f716ca4985045a5f0824b60ca1f Validity Not Before: Dec 21 16:01:22 2025 GMT Not After : Dec 22 16:01:22 2025 GMT Subject: CN=00db33e7ea624454938f98dafcb7b390d8cf3107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1b:0f:fc:c7:49:da:d7:89:9a:56:2e:f8:aa: 50:e4:cc:01:86:fc:20:49:7d:85:ee:cf:c5:f2:10: f4:82:72:8e:84:03:21:1b:37:1e:ae:ea:89:1e:04: 97:12:3d:a8:f3:8e:9b:1a:c6:e6:74:8c:70:c1:b3: a0:08:b9:72:cb:f1:ee:c1:65:af:28:8e:b1:27:92: ea:62:a0:59:2f:a7:c4:71:45:27:38:93:d7:83:c0: fd:e9:1c:22:6e:a6:e2:42:63:31:d0:da:94:0c:2b: ee:ed:c6:2f:6e:ca:81:f1:a9:e8:df:fb:12:1b:dd: 84:86:70:69:a4:ba:d0:5e:7f:c3:51:22:c2:82:d7: ad:7a:d1:35:14:83:df:87:57:4e:60:c6:8d:cc:2c: 15:a0:cb:12:31:07:ef:0c:6d:eb:13:ee:d5:c7:00: a1:13:a6:64:5d:c5:85:83:9e:5b:00:41:74:8d:69: a5:d3:e7:01:a1:d2:c6:4f:9e:e4:7b:23:38:0b:18: be:00:b0:55:40:63:e6:ce:5e:45:50:cf:25:29:b9: 86:a8:92:0a:e5:26:c0:22:87:81:a9:1f:f5:95:44: ed:56:5f:17:86:b8:0d:1d:a7:79:a3:86:a8:ca:f7: c2:59:3c:bf:a2:ac:56:1a:10:07:eb:c7:73:a2:87: d2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:DB:33:E7:EA:62:44:54:93:8F:98:DA:FC:B7:B3:90:D8:CF:31:07 X509v3 Authority Key Identifier: keyid:AA:A9:72:AC:3C:C1:0F:71:6C:A4:98:50:45:A5:F0:82:4B:60:CA:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqlyrDzBD3FspJhQRaXwgktgyh8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:1d:a1:47:ec:97:aa:a9:0d:0f:69:2b:6f:c2:df:c0:39:fc: 0f:29:b7:c1:44:4d:4e:fe:71:68:6d:8e:15:ec:61:eb:1e:69: 6d:67:5b:05:70:84:71:8d:97:a5:cf:2f:95:8c:74:dd:83:23: 89:ed:1c:45:c2:c2:9f:f6:c0:bd:bf:5a:5f:58:95:0f:c6:b3: 1f:3c:f1:b9:49:ae:04:2b:c0:ad:c8:b9:47:23:60:7f:2c:3a: 02:2e:49:e0:72:7b:e8:07:84:a7:ec:79:9e:5c:61:a8:f9:ab: 30:71:bd:dd:95:5e:8c:5e:fb:42:d1:64:af:71:8a:93:61:67: 8c:05:93:c3:65:b9:4e:f1:87:e9:53:9d:12:63:7a:95:2d:0d: e8:44:d0:6d:4f:fe:64:41:12:d1:2e:c4:2c:43:a0:3a:2a:b8: e9:c2:93:8c:3d:69:ed:89:88:16:3f:48:f7:db:c1:9a:4b:32: 2e:88:ac:9c:07:1e:f4:f0:fd:b8:91:d0:7d:c8:78:f5:41:e1: 83:bf:60:f6:38:4d:10:4b:5b:8e:54:1e:aa:3f:23:cd:0a:b4: a6:e0:19:0b:8f:8f:3b:e6:8b:37:8a:c8:69:69:db:39:4f:fc: 0f:65:7d:f2:83:e3:aa:ba:94:15:11:c0:c1:0f:5e:d1:2b:60: 08:8e:d6:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpN3v+jL/gTpgVKPhXMwyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhYTk3MmFjM2NjMTBmNzE2Y2E0OTg1MDQ1YTVmMDgyNGI2 MGNhMWYwHhcNMjUxMjIxMTYwMTIyWhcNMjUxMjIyMTYwMTIyWjAzMTEwLwYDVQQD EygwMGRiMzNlN2VhNjI0NDU0OTM4Zjk4ZGFmY2I3YjM5MGQ4Y2YzMTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRsP/MdJ2teJmlYu+KpQ5MwBhvwg SX2F7s/F8hD0gnKOhAMhGzceruqJHgSXEj2o846bGsbmdIxwwbOgCLlyy/HuwWWv KI6xJ5LqYqBZL6fEcUUnOJPXg8D96RwibqbiQmMx0NqUDCvu7cYvbsqB8ano3/sS G92EhnBppLrQXn/DUSLCgtetetE1FIPfh1dOYMaNzCwVoMsSMQfvDG3rE+7VxwCh E6ZkXcWFg55bAEF0jWml0+cBodLGT57keyM4Cxi+ALBVQGPmzl5FUM8lKbmGqJIK 5SbAIoeBqR/1lUTtVl8XhrgNHad5o4aoyvfCWTy/oqxWGhAH68dzoofS8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFADbM+fqYkRUk4+Y2vy3s5DYzzEHMB8GA1UdIwQY MBaAFKqpcqw8wQ9xbKSYUEWl8IJLYMofMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXFseXJEekJEM0ZzcEpoUVJhWHdna3RneWg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kMDlmYjktZjNmYS00NWI4LWE1Y2Qt NzdiNDg5MjQ5ZmE0LzEvcXFseXJEekJEM0ZzcEpoUVJhWHdna3RneWg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9kMDlmYjktZjNmYS00NWI4LWE1Y2QtNzdiNDg5MjQ5ZmE0 LzEvcXFseXJEekJEM0ZzcEpoUVJhWHdna3RneWg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFB2hR+yX qqkND2krb8LfwDn8Dym3wURNTv5xaG2OFexh6x5pbWdbBXCEcY2Xpc8vlYx03YMj ie0cRcLCn/bAvb9aX1iVD8azHzzxuUmuBCvArci5RyNgfyw6Ai5J4HJ76AeEp+x5 nlxhqPmrMHG93ZVejF77QtFkr3GKk2FnjAWTw2W5TvGH6VOdEmN6lS0N6ETQbU/+ ZEES0S7ELEOgOiq46cKTjD1p7YmIFj9I99vBmksyLoisnAce9PD9uJHQfch49UHh g79g9jhNEEtbjlQeqj8jzQq0puAZC4+PO+aLN4rIaWnbOU/8D2V98oPjqrqUFRHA wQ9e0StgCI7WHw== -----END CERTIFICATE-----Generated at Mon Dec 22 01:45:57 2025 by rpki-client