This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft File: qvpFpixehQq5yHJqWam_qZLTcbI.mft (raw, json) Hash identifier: VdGjmWTJWLaw/A8I74GFSfBhn2fl7lyYqQRkF5pkteU= Subject key identifier: 13:75:0E:52:E9:A6:02:7B:9F:07:7E:87:45:0E:FF:66:38:44:38:79 Authority key identifier: AA:FA:45:A6:2C:5E:85:0A:B9:C8:72:6A:59:A9:BF:A9:92:D3:71:B2 Certificate issuer: /CN=aafa45a62c5e850ab9c8726a59a9bfa992d371b2 Certificate serial: 019B6F224CB01E580E226E7446A3CF810465 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvpFpixehQq5yHJqWam_qZLTcbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft Manifest number: 17A5 Signing time: Tue 30 Dec 2025 12:01:17 +0000 Manifest this update: Tue 30 Dec 2025 12:01:17 +0000 Manifest next update: Wed 31 Dec 2025 12:01:17 +0000 Files and hashes: 1: FUCX9OW5znsVvJDFK2DPDP4kaXw.roa (hash: 7Yn8lQlQu+p9EOSUqkrA7N+uYFCRbQJhJNvyuVgdZVs=) 2: qvpFpixehQq5yHJqWam_qZLTcbI.crl (hash: wRDwtF21Bbdt9ecy0JnXmTQQPuOnDWx1SmDKYC4MjUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.crl rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft rsync://rpki.ripe.net/repository/DEFAULT/qvpFpixehQq5yHJqWam_qZLTcbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 12:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:22:4c:b0:1e:58:0e:22:6e:74:46:a3:cf:81:04:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aafa45a62c5e850ab9c8726a59a9bfa992d371b2 Validity Not Before: Dec 30 12:01:17 2025 GMT Not After : Dec 31 12:01:17 2025 GMT Subject: CN=13750e52e9a6027b9f077e87450eff6638443879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:eb:84:07:e8:0c:be:52:99:63:e8:e3:f7:77: 33:0e:8d:83:42:69:86:51:7e:00:a0:47:6e:d2:fb: 99:46:31:5d:84:d5:6d:48:8d:85:7a:e5:e5:58:af: 04:5c:87:39:bb:e2:1c:36:c8:c5:b6:ee:79:7e:63: 67:c4:01:41:88:9a:1b:2d:b0:25:97:8f:3c:f9:8c: ae:d5:37:12:3e:8c:97:62:9c:d1:a9:31:25:40:e0: fe:75:e4:48:d5:e4:c3:07:50:12:a6:88:c3:22:01: 09:0c:dc:10:c1:4c:99:5b:e0:46:93:30:78:63:a0: e9:9a:80:b5:4f:ab:1c:9f:be:03:f9:ce:f5:a2:91: d8:dc:ff:4e:d0:cf:57:fc:cc:1b:fa:67:df:84:ec: e4:a1:8b:69:25:78:62:4a:de:4c:95:32:89:a2:14: 1e:0f:a3:f4:ab:19:dd:57:e2:d6:18:66:6c:c1:fc: 6c:5a:b5:8b:23:f7:15:37:6c:bd:c4:5d:3a:b8:52: 3a:9c:e2:66:63:67:6d:5b:0b:8c:2c:37:28:6d:5f: f6:6e:f4:d1:ae:35:f0:04:65:5d:f6:c9:f6:0a:a3: c9:fc:18:30:6f:cb:79:c8:19:d3:21:0a:2a:a0:27: 18:23:33:f4:e1:b4:b5:74:ef:0a:e8:6c:5a:ee:2d: 76:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:75:0E:52:E9:A6:02:7B:9F:07:7E:87:45:0E:FF:66:38:44:38:79 X509v3 Authority Key Identifier: keyid:AA:FA:45:A6:2C:5E:85:0A:B9:C8:72:6A:59:A9:BF:A9:92:D3:71:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvpFpixehQq5yHJqWam_qZLTcbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:c3:64:8c:cb:4b:3f:db:9d:9b:d6:ec:c0:bf:eb:b7:fe:4e: 02:f7:7a:a3:1f:d6:ea:42:df:8c:37:72:e9:84:ca:ad:04:d2: d4:97:06:bd:82:7b:db:92:5e:33:9f:48:03:ce:15:37:98:86: 5f:13:ee:f6:11:41:bf:b0:1c:1b:24:88:01:59:36:6b:f6:fe: bb:54:68:9d:c6:ae:58:36:47:50:24:6e:4a:5c:75:7d:f4:47: 57:4a:53:83:a2:60:13:5c:30:ab:14:96:39:52:55:1a:a2:cd: dc:fb:50:33:dc:4d:16:48:ea:bb:93:d1:4c:c5:8c:14:3f:ae: 01:a9:5e:78:60:6a:bc:3f:8d:34:69:7a:8d:49:a0:20:f8:24: 11:8a:ff:68:b5:de:12:e1:f3:e5:4a:30:d8:f9:3c:5e:be:43: 9b:3d:7e:d0:b0:a6:43:f1:30:b3:8d:a5:b7:55:79:c4:01:f9: 22:34:d7:76:b9:d8:b1:c6:90:c6:a2:a7:6e:e4:8e:7b:21:73: c5:47:76:76:3a:c9:e5:05:dc:45:00:93:4e:0d:be:fb:d4:32: e1:bd:d2:bb:d4:c3:2a:fe:38:1b:5a:b2:05:ac:c7:f0:40:81: ef:19:a1:ff:22:51:1b:1c:2a:8b:1e:5b:04:43:2d:97:d5:9b: 1f:a8:2e:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtvIkywHlgOIm50RqPPgQRlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhZmE0NWE2MmM1ZTg1MGFiOWM4NzI2YTU5YTliZmE5OTJk MzcxYjIwHhcNMjUxMjMwMTIwMTE3WhcNMjUxMjMxMTIwMTE3WjAzMTEwLwYDVQQD EygxMzc1MGU1MmU5YTYwMjdiOWYwNzdlODc0NTBlZmY2NjM4NDQzODc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeuEB+gMvlKZY+jj93czDo2DQmmG UX4AoEdu0vuZRjFdhNVtSI2FeuXlWK8EXIc5u+IcNsjFtu55fmNnxAFBiJobLbAl l488+Yyu1TcSPoyXYpzRqTElQOD+deRI1eTDB1ASpojDIgEJDNwQwUyZW+BGkzB4 Y6DpmoC1T6scn74D+c71opHY3P9O0M9X/Mwb+mffhOzkoYtpJXhiSt5MlTKJohQe D6P0qxndV+LWGGZswfxsWrWLI/cVN2y9xF06uFI6nOJmY2dtWwuMLDcobV/2bvTR rjXwBGVd9sn2CqPJ/Bgwb8t5yBnTIQoqoCcYIzP04bS1dO8K6Gxa7i12lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBN1DlLppgJ7nwd+h0UO/2Y4RDh5MB8GA1UdIwQY MBaAFKr6RaYsXoUKuchyalmpv6mS03GyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXZwRnBpeGVoUXE1eUhKcVdhbV9xWkxUY2JJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy85N2E5YWEtNjk3MC00OWM4LThkMGEt MmIzZGRiY2I3MjM4LzEvcXZwRnBpeGVoUXE1eUhKcVdhbV9xWkxUY2JJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy85N2E5YWEtNjk3MC00OWM4LThkMGEtMmIzZGRiY2I3MjM4 LzEvcXZwRnBpeGVoUXE1eUhKcVdhbV9xWkxUY2JJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfsNkjMtL P9udm9bswL/rt/5OAvd6ox/W6kLfjDdy6YTKrQTS1JcGvYJ725JeM59IA84VN5iG XxPu9hFBv7AcGySIAVk2a/b+u1RoncauWDZHUCRuSlx1ffRHV0pTg6JgE1wwqxSW OVJVGqLN3PtQM9xNFkjqu5PRTMWMFD+uAaleeGBqvD+NNGl6jUmgIPgkEYr/aLXe EuHz5Uow2Pk8Xr5Dmz1+0LCmQ/Ews42lt1V5xAH5IjTXdrnYscaQxqKnbuSOeyFz xUd2djrJ5QXcRQCTTg2++9Qy4b3Su9TDKv44G1qyBazH8ECB7xmh/yJRGxwqix5b BEMtl9WbH6guMw== -----END CERTIFICATE-----Generated at Tue Dec 30 16:32:49 2025 by rpki-client