This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft File: qQIAoAAN9dhFudsoTQotvuZ2xag.mft (raw, json) Hash identifier: FJl/Yp0eKzsOcje6ThpeIa4yThiE1ZEYo5ldfRqTvlc= Subject key identifier: 43:CB:7A:0A:71:CA:D0:C9:1B:44:86:4E:03:25:3B:51:99:22:75:D1 Authority key identifier: A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8 Certificate issuer: /CN=a90200a0000df5d845b9db284d0a2dbee676c5a8 Certificate serial: 019B3BD9260373E0FD6B2CA506A4D5F1E58E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft Manifest number: 108B Signing time: Sat 20 Dec 2025 13:00:45 +0000 Manifest this update: Sat 20 Dec 2025 13:00:45 +0000 Manifest next update: Sun 21 Dec 2025 13:00:45 +0000 Files and hashes: 1: XVxrMXrjLDQVv9bac22qQ0QMNvQ.roa (hash: Yc8aZeN9qk7mkDqbHTwdGKZnQ52FHThS1w10bQxAp2w=) 2: i3VEozY7zHl6WOCVl59PVxz43a8.roa (hash: jzz5iRsaOnS+mlLDbSWuuSqGL3bfQAaKxsPDmiylUHA=) 3: qQIAoAAN9dhFudsoTQotvuZ2xag.crl (hash: 77/bc/yvoDMGP7+Nd/0DjqLTRV+roKIZpXiUVUH5ONk=) 4: uC9PLmr5O8CehNSZEFEDNzHH7Us.roa (hash: rxEdnwW/DBAsm5BXVYbjYVnepXH4Kn8/IHHbh9uyU6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:26:03:73:e0:fd:6b:2c:a5:06:a4:d5:f1:e5:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a90200a0000df5d845b9db284d0a2dbee676c5a8 Validity Not Before: Dec 20 13:00:45 2025 GMT Not After : Dec 21 13:00:45 2025 GMT Subject: CN=43cb7a0a71cad0c91b44864e03253b51992275d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:22:25:d8:60:f4:29:ea:e7:1e:e8:eb:0a:54: 0b:94:d0:d5:b0:83:59:cc:7e:2a:06:2e:df:f0:16: a8:cb:8d:c6:42:90:7e:8c:24:70:4f:cf:2f:16:a5: 1e:7d:81:91:8c:25:76:41:5b:13:3b:db:53:2b:8b: 7c:9d:80:3e:c2:7a:fd:11:33:26:ba:3a:e3:8e:b7: a7:45:24:d9:0e:5c:a7:7e:8d:99:9a:02:96:5d:cb: 0e:95:51:25:c8:ee:47:30:cb:c6:41:2d:66:82:4e: ab:8f:a5:e7:12:d2:db:f8:50:6a:81:26:8e:35:6b: 20:c3:17:64:42:eb:11:1f:b3:fa:12:8f:36:09:0d: dc:59:a8:57:88:53:36:1a:e3:ce:d3:af:e6:8a:39: f2:30:ac:23:45:b6:6a:9e:1c:15:a6:ce:1d:10:66: d9:79:e0:e4:db:35:47:85:0a:bb:e7:94:cb:a5:82: ab:8a:f5:5f:fd:12:59:47:6f:a2:94:9e:86:ec:65: d8:26:f3:48:4b:a8:b7:90:44:53:fa:38:7d:9f:11: 75:79:8e:ab:75:bd:24:b3:f1:c7:6f:64:42:ff:0d: 79:a6:2a:de:12:2a:69:df:17:b9:1c:96:5f:b3:16: 93:47:2d:65:3f:95:8c:d8:6d:21:27:9a:15:03:11: 25:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:CB:7A:0A:71:CA:D0:C9:1B:44:86:4E:03:25:3B:51:99:22:75:D1 X509v3 Authority Key Identifier: keyid:A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:31:ba:ba:cb:de:f4:6c:f9:1a:97:ce:a5:d4:0d:7d:0b:c8: 9f:a9:8a:f4:f0:39:94:ce:22:25:fa:e8:81:11:25:53:58:28: 52:a8:bc:d0:2c:03:40:b8:21:20:f1:6a:4d:a4:4c:44:58:55: 78:a9:a2:cc:13:0b:84:14:17:55:f3:ce:22:d6:07:c3:0b:8e: f8:4b:e1:0b:f0:76:f2:0b:0d:7e:43:41:9a:02:2f:58:09:8e: 32:22:b9:c0:f5:ec:9d:5b:e4:6e:9c:d6:88:9f:cb:4f:aa:9e: 15:67:d2:63:5f:17:b3:e6:57:35:00:dc:c2:f4:f9:92:9f:bd: 9e:3b:b3:b4:4f:96:cc:3c:64:0a:f9:41:97:37:e9:1d:d5:d6: ae:88:17:9b:49:58:fc:d2:12:85:20:41:cb:c7:17:62:02:6b: fc:e1:92:57:02:21:09:de:e0:01:ca:66:3d:60:96:0d:e9:92: 5b:08:79:aa:be:67:e6:52:ad:a8:97:34:60:6a:c0:97:a8:a2: ca:f5:1b:41:90:61:c2:27:81:48:e1:49:54:02:82:c8:9a:6b: bc:0e:dd:d6:9b:e8:92:6c:5d:f2:bd:a7:6c:31:5b:4e:17:4a: a5:33:26:e0:59:c8:c1:3c:19:0b:8d:a8:b4:8f:7b:e5:0a:9a: 9b:05:47:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72SYDc+D9ayylBqTV8eWOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MDIwMGEwMDAwZGY1ZDg0NWI5ZGIyODRkMGEyZGJlZTY3 NmM1YTgwHhcNMjUxMjIwMTMwMDQ1WhcNMjUxMjIxMTMwMDQ1WjAzMTEwLwYDVQQD Eyg0M2NiN2EwYTcxY2FkMGM5MWI0NDg2NGUwMzI1M2I1MTk5MjI3NWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSIl2GD0KernHujrClQLlNDVsINZ zH4qBi7f8Baoy43GQpB+jCRwT88vFqUefYGRjCV2QVsTO9tTK4t8nYA+wnr9ETMm ujrjjrenRSTZDlynfo2ZmgKWXcsOlVElyO5HMMvGQS1mgk6rj6XnEtLb+FBqgSaO NWsgwxdkQusRH7P6Eo82CQ3cWahXiFM2GuPO06/mijnyMKwjRbZqnhwVps4dEGbZ eeDk2zVHhQq755TLpYKrivVf/RJZR2+ilJ6G7GXYJvNIS6i3kERT+jh9nxF1eY6r db0ks/HHb2RC/w15pireEipp3xe5HJZfsxaTRy1lP5WM2G0hJ5oVAxEl+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEPLegpxytDJG0SGTgMlO1GZInXRMB8GA1UdIwQY MBaAFKkCAKAADfXYRbnbKE0KLb7mdsWoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVFJQW9BQU45ZGhGdWRzb1RRb3R2dVoyeGFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9iMWUzZTEtOGI3ZC00ZTIyLTg3MGMt NThmNTc0NDk1YmI4LzEvcVFJQW9BQU45ZGhGdWRzb1RRb3R2dVoyeGFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9iMWUzZTEtOGI3ZC00ZTIyLTg3MGMtNThmNTc0NDk1YmI4 LzEvcVFJQW9BQU45ZGhGdWRzb1RRb3R2dVoyeGFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeTG6usve 9Gz5GpfOpdQNfQvIn6mK9PA5lM4iJfrogRElU1goUqi80CwDQLghIPFqTaRMRFhV eKmizBMLhBQXVfPOItYHwwuO+EvhC/B28gsNfkNBmgIvWAmOMiK5wPXsnVvkbpzW iJ/LT6qeFWfSY18Xs+ZXNQDcwvT5kp+9njuztE+WzDxkCvlBlzfpHdXWrogXm0lY /NIShSBBy8cXYgJr/OGSVwIhCd7gAcpmPWCWDemSWwh5qr5n5lKtqJc0YGrAl6ii yvUbQZBhwieBSOFJVAKCyJprvA7d1pvokmxd8r2nbDFbThdKpTMm4FnIwTwZC42o tI975QqamwVHGw== -----END CERTIFICATE-----Generated at Sat Dec 20 18:58:19 2025 by rpki-client