This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/qnD7s9sihDfWBXmaxPRZjSLhPhs.mft File: qnD7s9sihDfWBXmaxPRZjSLhPhs.mft (raw, json) Hash identifier: j1l9hpv4/Jc+h7TO+TeSygdFjMfijtlZ30RnyfdwW2g= Subject key identifier: A3:4C:70:4A:21:74:F0:AF:A7:5F:4F:BD:37:AD:82:16:72:3E:99:ED Authority key identifier: AA:70:FB:B3:DB:22:84:37:D6:05:79:9A:C4:F4:59:8D:22:E1:3E:1B Certificate issuer: /CN=aa70fbb3db228437d605799ac4f4598d22e13e1b Certificate serial: 019B3A90524066841B8A1608578B32A9A84B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnD7s9sihDfWBXmaxPRZjSLhPhs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/qnD7s9sihDfWBXmaxPRZjSLhPhs.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 07:01:35 +0000 Manifest this update: Sat 20 Dec 2025 07:01:35 +0000 Manifest next update: Sun 21 Dec 2025 07:01:35 +0000 Files and hashes: 1: JDPCHXAUbfBXZ-JAE6cFE-tGXMI.roa (hash: bOxTgT+7J9XF4HocPumdm4M3ak6meIWnJq5cg5Hpmfs=) 2: qnD7s9sihDfWBXmaxPRZjSLhPhs.crl (hash: PSmNnXcGcQBwA7ehbkRtZ1PTLSFozJaGHVKSPGHKiww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/qnD7s9sihDfWBXmaxPRZjSLhPhs.crl rsync://rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/qnD7s9sihDfWBXmaxPRZjSLhPhs.mft rsync://rpki.ripe.net/repository/DEFAULT/qnD7s9sihDfWBXmaxPRZjSLhPhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:52:40:66:84:1b:8a:16:08:57:8b:32:a9:a8:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa70fbb3db228437d605799ac4f4598d22e13e1b Validity Not Before: Dec 20 07:01:35 2025 GMT Not After : Dec 21 07:01:35 2025 GMT Subject: CN=a34c704a2174f0afa75f4fbd37ad8216723e99ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:90:0f:45:ef:d5:38:2b:9d:fb:4d:d6:95:69: ae:29:61:60:e8:24:00:bf:08:0b:16:bd:0c:68:97: 3c:5e:1a:74:2c:c3:6e:66:b9:94:36:73:8e:ce:c1: aa:77:67:3f:0d:80:1d:c1:a7:81:f6:23:c1:15:14: 88:d9:04:b9:d6:c6:42:65:7c:cd:8f:58:52:37:1a: 4e:65:ec:de:e0:c3:9d:41:0d:3e:e8:8d:d1:4b:1b: 26:c8:1a:a4:30:09:9d:81:88:ac:91:5a:1c:99:fa: 6c:7b:d3:5e:df:a2:ab:7a:00:62:3d:85:2e:f7:07: db:0a:ed:e2:37:bd:38:b0:d7:0f:ab:33:6c:57:de: 12:2a:8c:8d:4e:cf:d4:4b:c0:85:98:a4:3f:c9:ae: 35:09:80:e9:cf:31:7e:89:e3:0b:26:6e:77:a3:19: e6:e1:a6:1f:7c:0f:11:b5:16:f0:94:1d:3c:b6:4c: ec:bf:ea:80:06:87:bb:56:6d:03:09:f0:3c:ea:87: 6c:1c:3c:6f:ff:a4:0a:be:cb:59:c6:49:0d:7d:a1: 48:b1:89:1f:18:fa:d0:1e:7c:4b:d3:85:de:a0:8b: 99:4d:b1:05:96:18:c2:d5:6e:7b:c2:c2:43:ea:af: 84:9c:a5:99:a2:c6:19:37:62:5f:ad:85:9a:4b:fd: c8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:4C:70:4A:21:74:F0:AF:A7:5F:4F:BD:37:AD:82:16:72:3E:99:ED X509v3 Authority Key Identifier: keyid:AA:70:FB:B3:DB:22:84:37:D6:05:79:9A:C4:F4:59:8D:22:E1:3E:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnD7s9sihDfWBXmaxPRZjSLhPhs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/qnD7s9sihDfWBXmaxPRZjSLhPhs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/qnD7s9sihDfWBXmaxPRZjSLhPhs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:91:cf:49:a2:71:9c:89:07:aa:3b:ef:e9:8c:2b:83:a6:4b: 8f:86:8f:29:d3:43:62:74:a1:6d:2d:e0:76:c1:84:b1:28:29: 48:cb:d6:e1:24:aa:ca:2d:b0:5e:94:71:c7:70:d9:42:20:59: fc:e4:4c:67:95:73:b6:14:76:37:5c:ed:e8:c7:e1:fe:d4:49: 68:60:bf:d0:ce:48:fb:b4:35:2c:01:13:27:59:7a:33:47:39: 61:ac:ad:3d:6c:19:fb:27:5b:2a:fb:08:b3:a1:12:ef:0c:15: e9:05:59:d5:6c:39:89:0d:3c:a0:87:0f:3b:fe:4d:f9:98:08: db:4a:f4:e7:de:a6:f1:eb:8a:8b:9e:dd:9e:1a:01:2e:15:31: 49:01:52:82:8a:42:2a:19:a1:a7:40:37:29:10:a4:4f:ce:ea: bc:1f:a3:50:dd:96:75:6d:32:3e:9c:74:0e:e9:f1:e0:e3:2f: 67:67:c7:f8:4e:7d:2c:64:2a:db:af:34:09:d2:e7:04:41:f1: 5a:a9:74:dd:dd:71:31:71:71:e2:c6:07:4d:b5:c0:a5:99:c6: 90:e5:f4:ed:20:54:0c:47:cc:ef:b0:9c:63:d0:86:06:54:69: 2c:da:70:98:6d:6d:22:f9:fb:06:e6:1a:28:ae:3a:d8:6b:80: 31:1f:38:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kFJAZoQbihYIV4syqahLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNzBmYmIzZGIyMjg0MzdkNjA1Nzk5YWM0ZjQ1OThkMjJl MTNlMWIwHhcNMjUxMjIwMDcwMTM1WhcNMjUxMjIxMDcwMTM1WjAzMTEwLwYDVQQD EyhhMzRjNzA0YTIxNzRmMGFmYTc1ZjRmYmQzN2FkODIxNjcyM2U5OWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZAPRe/VOCud+03WlWmuKWFg6CQA vwgLFr0MaJc8Xhp0LMNuZrmUNnOOzsGqd2c/DYAdwaeB9iPBFRSI2QS51sZCZXzN j1hSNxpOZeze4MOdQQ0+6I3RSxsmyBqkMAmdgYiskVocmfpse9Ne36KregBiPYUu 9wfbCu3iN704sNcPqzNsV94SKoyNTs/US8CFmKQ/ya41CYDpzzF+ieMLJm53oxnm 4aYffA8RtRbwlB08tkzsv+qABoe7Vm0DCfA86odsHDxv/6QKvstZxkkNfaFIsYkf GPrQHnxL04XeoIuZTbEFlhjC1W57wsJD6q+EnKWZosYZN2JfrYWaS/3IewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKNMcEohdPCvp19PvTetghZyPpntMB8GA1UdIwQY MBaAFKpw+7PbIoQ31gV5msT0WY0i4T4bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW5EN3M5c2loRGZXQlhtYXhQUlpqU0xoUGhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kOGUxODQtZTc5Yi00N2ZlLTk2ZGMt NWJhNDIzNWNlNjE5LzEvcW5EN3M5c2loRGZXQlhtYXhQUlpqU0xoUGhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9kOGUxODQtZTc5Yi00N2ZlLTk2ZGMtNWJhNDIzNWNlNjE5 LzEvcW5EN3M5c2loRGZXQlhtYXhQUlpqU0xoUGhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc5HPSaJx nIkHqjvv6Ywrg6ZLj4aPKdNDYnShbS3gdsGEsSgpSMvW4SSqyi2wXpRxx3DZQiBZ /ORMZ5VzthR2N1zt6Mfh/tRJaGC/0M5I+7Q1LAETJ1l6M0c5YaytPWwZ+ydbKvsI s6ES7wwV6QVZ1Ww5iQ08oIcPO/5N+ZgI20r0596m8euKi57dnhoBLhUxSQFSgopC Khmhp0A3KRCkT87qvB+jUN2WdW0yPpx0Dunx4OMvZ2fH+E59LGQq2680CdLnBEHx Wql03d1xMXFx4sYHTbXApZnGkOX07SBUDEfM77CcY9CGBlRpLNpwmG1tIvn7BuYa KK462GuAMR84tw== -----END CERTIFICATE-----Generated at Sat Dec 20 12:36:12 2025 by rpki-client