This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft File: qERxpm95BxB-RTRxa_pCCNQGlp8.mft (raw, json) Hash identifier: xGlLZY1ParGl8cmBXnhX/GXEB40GaeW2PyasRzJtowM= Subject key identifier: F1:86:02:E4:F9:FE:0D:C1:37:17:D2:96:02:D7:83:BD:CE:52:FB:B2 Authority key identifier: A8:44:71:A6:6F:79:07:10:7E:45:34:71:6B:FA:42:08:D4:06:96:9F Certificate issuer: /CN=a84471a66f7907107e4534716bfa4208d406969f Certificate serial: 019B337B10E9F8C16587917D8E1F8392DBEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 22:01:01 +0000 Manifest this update: Thu 18 Dec 2025 22:01:01 +0000 Manifest next update: Fri 19 Dec 2025 22:01:01 +0000 Files and hashes: 1: JTBFzZ_Xd-qKEEB1M2yH_cqN0L8.roa (hash: UtmE2VrYOG/N+bYO3QuLYMQZyMdAh9FYCP1pfkSwK6Q=) 2: qERxpm95BxB-RTRxa_pCCNQGlp8.crl (hash: gKGHq9eC4h4tUweaI297XCzCSCVnsjBGNgE5L34sKS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.crl rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:10:e9:f8:c1:65:87:91:7d:8e:1f:83:92:db:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a84471a66f7907107e4534716bfa4208d406969f Validity Not Before: Dec 18 22:01:01 2025 GMT Not After : Dec 19 22:01:01 2025 GMT Subject: CN=f18602e4f9fe0dc13717d29602d783bdce52fbb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4f:2f:2a:cf:c9:06:2e:20:03:85:9f:01:98: 63:e8:19:42:c3:9f:56:f2:01:96:66:f0:d6:62:4d: f3:cf:78:0f:11:61:87:bb:fc:d7:12:7e:70:2b:47: 37:85:ca:86:f5:9a:32:58:6e:ed:5f:65:e1:c1:d0: f3:6a:e1:e2:da:7f:98:9e:ed:38:65:e7:76:7c:36: 31:d9:6a:6a:1b:8b:78:3d:8b:f3:97:8a:9d:00:72: 17:28:7e:ce:67:3b:9c:11:6c:8b:a4:ce:36:3a:4e: 3c:fe:02:f6:9b:87:27:b3:14:7e:4e:76:99:7c:e2: cc:96:cc:6d:b1:53:bb:5a:af:9f:4d:58:47:76:e4: c2:ec:7b:84:a8:0e:a6:d8:f4:40:31:13:2d:a0:64: dd:d1:ad:9a:18:64:aa:c3:c7:72:9a:93:24:2d:99: 86:18:8c:72:e2:93:1b:38:36:41:bc:f1:ab:cf:b7: c9:0c:fd:35:dc:21:25:13:62:09:49:53:5f:e7:3b: 6c:ff:10:37:93:60:8a:d9:8e:c4:98:93:b0:9c:46: 22:46:bc:ff:6b:09:dc:6c:f2:e7:0d:1c:6a:e1:60: 5b:77:3f:22:34:1f:fa:69:58:13:f0:9b:51:31:d8: 88:2c:e9:ce:58:46:81:74:78:8f:a4:8f:53:af:5b: e2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:86:02:E4:F9:FE:0D:C1:37:17:D2:96:02:D7:83:BD:CE:52:FB:B2 X509v3 Authority Key Identifier: keyid:A8:44:71:A6:6F:79:07:10:7E:45:34:71:6B:FA:42:08:D4:06:96:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:23:75:32:0d:6f:3a:a1:39:83:b0:35:48:d6:f8:27:3f:d7: 14:fa:93:1d:38:66:e8:29:5b:89:46:39:81:38:1a:3f:90:37: d4:68:08:58:06:0b:07:96:12:1c:67:7d:60:45:81:b1:0a:57: fb:c8:8c:1d:8a:fa:aa:8c:9e:42:54:09:15:d0:41:31:f6:ff: e9:b3:5f:3c:e7:29:ea:58:9b:28:03:8f:7f:4e:62:ff:00:dd: c9:b3:e2:9a:1b:68:aa:90:d3:43:fd:4b:fa:86:14:25:cc:25: 22:d8:58:4e:a6:27:b3:64:bc:c8:c5:36:10:da:e1:4a:21:0b: 5c:6d:cc:f2:ff:38:14:e2:af:40:5b:18:e1:34:30:d2:9e:0b: 18:d1:2f:ea:d6:6b:d6:a7:79:b6:77:19:41:35:08:45:7f:6d: d8:42:42:8f:10:9a:37:0a:31:d2:3d:f9:d2:76:94:44:a0:c0: 8e:02:02:aa:68:07:db:fd:62:96:11:6c:d4:06:47:31:02:ab: ed:06:dd:30:21:b2:a6:94:de:34:a8:0e:7a:e5:44:07:0e:30: 6b:c6:f1:12:44:f6:d7:ef:22:bd:96:19:6e:03:2e:0f:d7:0a: 71:bb:ab:f9:42:d1:e9:48:a6:de:2f:bb:f1:5b:10:b5:5e:d6: 72:b7:cd:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszexDp+MFlh5F9jh+DktvrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NDQ3MWE2NmY3OTA3MTA3ZTQ1MzQ3MTZiZmE0MjA4ZDQw Njk2OWYwHhcNMjUxMjE4MjIwMTAxWhcNMjUxMjE5MjIwMTAxWjAzMTEwLwYDVQQD EyhmMTg2MDJlNGY5ZmUwZGMxMzcxN2QyOTYwMmQ3ODNiZGNlNTJmYmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw08vKs/JBi4gA4WfAZhj6BlCw59W 8gGWZvDWYk3zz3gPEWGHu/zXEn5wK0c3hcqG9ZoyWG7tX2XhwdDzauHi2n+Ynu04 Zed2fDYx2WpqG4t4PYvzl4qdAHIXKH7OZzucEWyLpM42Ok48/gL2m4cnsxR+TnaZ fOLMlsxtsVO7Wq+fTVhHduTC7HuEqA6m2PRAMRMtoGTd0a2aGGSqw8dympMkLZmG GIxy4pMbODZBvPGrz7fJDP013CElE2IJSVNf5zts/xA3k2CK2Y7EmJOwnEYiRrz/ awncbPLnDRxq4WBbdz8iNB/6aVgT8JtRMdiILOnOWEaBdHiPpI9Tr1vinQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPGGAuT5/g3BNxfSlgLXg73OUvuyMB8GA1UdIwQY MBaAFKhEcaZveQcQfkU0cWv6QgjUBpafMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUVSeHBtOTVCeEItUlRSeGFfcENDTlFHbHA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC84NWQwOTctMDE1My00OTAyLWFmN2Et YjhjMzMxYTg0OGFhLzEvcUVSeHBtOTVCeEItUlRSeGFfcENDTlFHbHA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC84NWQwOTctMDE1My00OTAyLWFmN2EtYjhjMzMxYTg0OGFh LzEvcUVSeHBtOTVCeEItUlRSeGFfcENDTlFHbHA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAryN1Mg1v OqE5g7A1SNb4Jz/XFPqTHThm6ClbiUY5gTgaP5A31GgIWAYLB5YSHGd9YEWBsQpX +8iMHYr6qoyeQlQJFdBBMfb/6bNfPOcp6libKAOPf05i/wDdybPimhtoqpDTQ/1L +oYUJcwlIthYTqYns2S8yMU2ENrhSiELXG3M8v84FOKvQFsY4TQw0p4LGNEv6tZr 1qd5tncZQTUIRX9t2EJCjxCaNwox0j350naURKDAjgICqmgH2/1ilhFs1AZHMQKr 7QbdMCGyppTeNKgOeuVEBw4wa8bxEkT21+8ivZYZbgMuD9cKcbur+ULR6Uim3i+7 8VsQtV7WcrfNbw== -----END CERTIFICATE-----Generated at Fri Dec 19 01:24:33 2025 by rpki-client