This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft File: qQYfL0mm16-epna60D3xzi9QJg0.mft (raw, json) Hash identifier: f/dc6hx3ZlBbbxWRu2Q44yOTdHDOSFG7FAajZZHIjDY= Subject key identifier: 80:50:07:1A:0C:A3:A7:4C:95:83:CC:3F:FA:30:07:C5:B8:97:DA:16 Authority key identifier: A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D Certificate issuer: /CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d Certificate serial: 019B3D22CABD2AE6C272AD20DA039B37EE4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft Manifest number: 0B79 Signing time: Sat 20 Dec 2025 19:00:48 +0000 Manifest this update: Sat 20 Dec 2025 19:00:48 +0000 Manifest next update: Sun 21 Dec 2025 19:00:48 +0000 Files and hashes: 1: b2Ad3Pubnmsc5v7wEeiy2i9crjU.roa (hash: YMeUe949TNAn7B7dURgw/Dn08QgY72JO978X9Gd4XkM=) 2: qQYfL0mm16-epna60D3xzi9QJg0.crl (hash: /PBNZrrk/aJr0M7gS3N2FeOePdI/uG/KSozjN5oBipM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:22:ca:bd:2a:e6:c2:72:ad:20:da:03:9b:37:ee:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d Validity Not Before: Dec 20 19:00:48 2025 GMT Not After : Dec 21 19:00:48 2025 GMT Subject: CN=8050071a0ca3a74c9583cc3ffa3007c5b897da16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:25:4e:5d:04:c2:ba:e9:f4:e5:5d:79:87:eb: 10:ac:21:d9:15:a7:41:01:0a:4f:39:e8:f3:5f:6d: 15:dc:a1:9b:5b:be:f9:c6:88:5f:53:44:9c:0f:a4: fa:e1:35:93:9f:c2:1f:93:f2:65:76:ee:a9:33:f9: 9e:e4:27:38:55:0c:35:32:f1:d9:18:ce:a0:47:d6: ba:2c:f4:a2:24:e6:68:b6:99:3b:a6:bf:a2:19:d7: 4b:77:43:29:73:bf:b0:94:d0:b6:7f:26:50:9d:40: 92:57:10:f5:a3:f6:7b:ea:ee:9c:2d:22:2d:a1:b0: d9:64:cb:73:1f:cd:04:3d:60:8e:b9:36:72:b8:89: 5f:78:8c:1d:5c:32:00:d7:68:23:5d:ac:26:09:a5: a1:ac:8c:d2:64:6c:d0:65:bf:91:6f:bf:bc:70:0a: a2:bb:64:3f:52:ae:38:76:b2:a7:96:2d:b8:83:9d: b7:57:6e:aa:0e:89:5f:22:71:c6:12:08:6d:d6:a8: 64:f7:ae:47:6c:64:07:a0:9e:fc:97:78:dc:7a:77: a9:78:bf:b7:d9:21:be:cd:b9:8d:21:ec:90:3c:8a: 22:55:f6:e5:db:b0:3e:5b:77:3a:54:64:fc:69:7a: e7:28:71:c1:90:8a:d9:d0:07:05:6c:e4:e0:46:e4: c1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:50:07:1A:0C:A3:A7:4C:95:83:CC:3F:FA:30:07:C5:B8:97:DA:16 X509v3 Authority Key Identifier: keyid:A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:e9:42:77:f0:db:bf:df:05:3c:7f:3a:26:82:c6:db:50:be: 88:be:a1:96:b6:16:ef:42:1a:27:36:cc:16:8b:fe:28:c3:89: 35:48:42:16:a1:37:32:7f:0f:c5:24:70:34:b0:94:df:c2:1b: 34:47:08:4a:a4:cf:9f:8a:bb:90:62:f4:94:37:92:9e:df:b4: 39:dc:17:2b:27:61:82:b0:6d:db:bd:08:c7:86:70:8b:1d:61: 40:3e:69:04:82:a7:66:36:65:3e:ed:60:a9:e8:96:f5:3b:2c: c4:fa:56:36:59:f7:75:e5:69:8e:24:08:21:f0:2d:1d:f6:cd: aa:e5:5b:8d:c9:ea:05:11:15:ac:38:28:a1:7e:4a:a3:30:48: 14:84:da:76:d6:71:31:69:0e:8c:65:61:c5:03:70:60:dd:ab: 0f:35:5a:54:ab:a5:f1:16:50:c6:3f:32:d2:5b:79:04:13:c8: 8c:90:1c:45:35:92:bc:64:1e:2f:7f:52:fa:75:db:33:a3:50: 82:1e:27:42:6a:ff:75:de:ec:ad:da:d2:78:0e:82:e8:5f:72: 2e:2e:9e:05:8f:7f:46:6a:3e:72:92:04:7f:d6:e7:73:25:ff: bb:94:e4:15:9c:eb:bb:01:29:bd:6f:70:c7:b2:3b:c2:4e:be: cb:3a:52:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Isq9KubCcq0g2gObN+5LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MDYxZjJmNDlhNmQ3YWY5ZWE2NzZiYWQwM2RmMWNlMmY1 MDI2MGQwHhcNMjUxMjIwMTkwMDQ4WhcNMjUxMjIxMTkwMDQ4WjAzMTEwLwYDVQQD Eyg4MDUwMDcxYTBjYTNhNzRjOTU4M2NjM2ZmYTMwMDdjNWI4OTdkYTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5iVOXQTCuun05V15h+sQrCHZFadB AQpPOejzX20V3KGbW775xohfU0ScD6T64TWTn8Ifk/Jldu6pM/me5Cc4VQw1MvHZ GM6gR9a6LPSiJOZotpk7pr+iGddLd0Mpc7+wlNC2fyZQnUCSVxD1o/Z76u6cLSIt obDZZMtzH80EPWCOuTZyuIlfeIwdXDIA12gjXawmCaWhrIzSZGzQZb+Rb7+8cAqi u2Q/Uq44drKnli24g523V26qDolfInHGEght1qhk965HbGQHoJ78l3jcenepeL+3 2SG+zbmNIeyQPIoiVfbl27A+W3c6VGT8aXrnKHHBkIrZ0AcFbOTgRuTBEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIBQBxoMo6dMlYPMP/owB8W4l9oWMB8GA1UdIwQY MBaAFKkGHy9JptevnqZ2utA98c4vUCYNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVFZZkwwbW0xNi1lcG5hNjBEM3h6aTlRSmcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTliZTEtMWZhMi00MjUzLWJmMDEt ZjZjMjY4NjEyZmM3LzEvcVFZZkwwbW0xNi1lcG5hNjBEM3h6aTlRSmcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9iYTliZTEtMWZhMi00MjUzLWJmMDEtZjZjMjY4NjEyZmM3 LzEvcVFZZkwwbW0xNi1lcG5hNjBEM3h6aTlRSmcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS+lCd/Db v98FPH86JoLG21C+iL6hlrYW70IaJzbMFov+KMOJNUhCFqE3Mn8PxSRwNLCU38Ib NEcISqTPn4q7kGL0lDeSnt+0OdwXKydhgrBt270Ix4Zwix1hQD5pBIKnZjZlPu1g qeiW9TssxPpWNln3deVpjiQIIfAtHfbNquVbjcnqBREVrDgooX5KozBIFITadtZx MWkOjGVhxQNwYN2rDzVaVKul8RZQxj8y0lt5BBPIjJAcRTWSvGQeL39S+nXbM6NQ gh4nQmr/dd7srdrSeA6C6F9yLi6eBY9/Rmo+cpIEf9bncyX/u5TkFZzruwEpvW9w x7I7wk6+yzpSzA== -----END CERTIFICATE-----Generated at Sat Dec 20 22:43:27 2025 by rpki-client