This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft File: qipYxpehRJl2sNEdbxJgJeFAicY.mft (raw, json) Hash identifier: DqeIqYSM5hR3LaAI77lsjXpnvNz2MVgJ0qM2a3FCxpg= Subject key identifier: 50:DE:E7:28:18:4E:0B:E0:AA:4C:09:5E:86:C0:1E:8B:FE:07:4C:C3 Authority key identifier: AA:2A:58:C6:97:A1:44:99:76:B0:D1:1D:6F:12:60:25:E1:40:89:C6 Certificate issuer: /CN=aa2a58c697a1449976b0d11d6f126025e14089c6 Certificate serial: 019B53ABB5F1FCD9DFBE4EF7005C65F69391 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qipYxpehRJl2sNEdbxJgJeFAicY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft Manifest number: 1793 Signing time: Thu 25 Dec 2025 04:02:00 +0000 Manifest this update: Thu 25 Dec 2025 04:02:00 +0000 Manifest next update: Fri 26 Dec 2025 04:02:00 +0000 Files and hashes: 1: VAOvYC0rpjyTuLuRBfTKmUOuh7I.roa (hash: 0vjmq1kF1TMQbQcMXUeFVD45hSzNPAtogdVXVCWqxwQ=) 2: iBm_nleUbu7zG2yhTM8e6MdS9CM.roa (hash: 6E9IJHdRNDgzTSIdwSFE5QhmL7tpMyjTB0okAPytvXs=) 3: qipYxpehRJl2sNEdbxJgJeFAicY.crl (hash: Tb6LnjPoyXAKNgxJIebAknydhom9IJz5jCtghhET4rI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.crl rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft rsync://rpki.ripe.net/repository/DEFAULT/qipYxpehRJl2sNEdbxJgJeFAicY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 04:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ab:b5:f1:fc:d9:df:be:4e:f7:00:5c:65:f6:93:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa2a58c697a1449976b0d11d6f126025e14089c6 Validity Not Before: Dec 25 04:02:00 2025 GMT Not After : Dec 26 04:02:00 2025 GMT Subject: CN=50dee728184e0be0aa4c095e86c01e8bfe074cc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:80:45:d6:33:d0:7c:ca:7c:70:c2:b2:a6:08: 23:42:f5:f5:91:a2:1d:25:0a:d5:68:19:6a:04:db: 19:97:5e:bd:31:1c:c6:82:7c:ce:49:cc:dd:75:89: e8:f2:df:77:90:af:ce:04:71:09:58:6a:68:82:6f: 03:d8:c7:a3:f4:bd:a6:f3:92:1a:b9:db:fd:e9:4b: 54:67:db:65:55:1e:2e:68:d5:8c:57:2b:28:58:16: 5e:9b:ed:04:25:ae:0d:66:8c:db:3c:4f:fc:e7:0f: 23:08:c7:61:f3:6e:80:18:30:81:b6:b7:dd:d1:12: 5f:28:28:30:63:3d:e0:09:06:fd:c5:ee:ea:8f:a3: 2f:c2:96:88:d9:f1:e2:15:bd:b5:3b:6f:5b:b7:53: ca:a8:b0:ef:a0:05:1d:82:12:c4:79:c0:d3:2f:51: db:a5:bf:02:db:ac:ef:0c:0f:8b:d4:cf:74:d2:a0: ab:eb:8c:e2:02:e2:a0:8a:fe:78:ce:48:5c:28:7b: a6:c7:d9:e9:be:0f:8f:cd:9f:36:84:61:e9:f4:07: 50:af:38:9a:96:bb:16:f9:c3:aa:24:b0:10:c3:5d: 33:d3:c9:56:85:17:4f:40:2e:40:fd:59:74:99:62: 28:46:b0:b5:96:10:58:fe:98:94:c0:87:3e:02:13: e8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:DE:E7:28:18:4E:0B:E0:AA:4C:09:5E:86:C0:1E:8B:FE:07:4C:C3 X509v3 Authority Key Identifier: keyid:AA:2A:58:C6:97:A1:44:99:76:B0:D1:1D:6F:12:60:25:E1:40:89:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qipYxpehRJl2sNEdbxJgJeFAicY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:c6:49:e3:90:71:b1:bd:5a:36:83:59:3d:c5:49:e5:2c:5e: 2e:25:30:ab:05:1a:18:1e:e3:1f:48:25:1b:c7:77:53:ab:28: 9b:4c:94:1c:18:a9:c1:2a:26:f9:c5:49:0c:0d:6c:6b:72:d1: 17:f6:bf:a8:11:60:a5:b4:3b:c2:a8:95:bd:ef:b0:7d:e0:5c: 95:ed:09:64:68:7b:0e:23:3c:59:c6:d0:96:20:6d:64:d2:b5: 7f:60:69:ca:3c:50:b9:4b:9d:c4:14:99:51:6c:c1:8a:d9:ae: cf:56:68:d5:4c:e3:c1:55:d0:82:5e:d3:2a:2c:6d:f4:69:bc: 64:57:d8:23:74:b5:73:f6:9e:e6:40:86:88:79:1f:e8:d2:8d: b7:74:e5:52:c6:2e:39:d9:bd:5e:3d:f5:81:81:99:15:30:1d: 8f:6a:36:3a:6e:f1:c4:f1:a1:cf:91:b1:e1:37:05:26:ff:d1: 41:a5:4b:df:55:ae:16:d3:0f:19:57:32:75:0e:7d:13:2a:de: bd:a4:83:20:34:55:74:d0:27:4f:c7:90:f6:c1:a5:d2:f1:71: 67:79:6a:97:d9:89:66:97:ca:6e:89:be:e0:8f:c6:63:c2:dc: b8:b2:ac:b2:9c:6f:64:b5:f9:10:11:32:6c:4c:93:16:55:9a: 64:dd:cd:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTq7Xx/Nnfvk73AFxl9pORMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMmE1OGM2OTdhMTQ0OTk3NmIwZDExZDZmMTI2MDI1ZTE0 MDg5YzYwHhcNMjUxMjI1MDQwMjAwWhcNMjUxMjI2MDQwMjAwWjAzMTEwLwYDVQQD Eyg1MGRlZTcyODE4NGUwYmUwYWE0YzA5NWU4NmMwMWU4YmZlMDc0Y2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IBF1jPQfMp8cMKypggjQvX1kaId JQrVaBlqBNsZl169MRzGgnzOSczddYno8t93kK/OBHEJWGpogm8D2Mej9L2m85Ia udv96UtUZ9tlVR4uaNWMVysoWBZem+0EJa4NZozbPE/85w8jCMdh826AGDCBtrfd 0RJfKCgwYz3gCQb9xe7qj6MvwpaI2fHiFb21O29bt1PKqLDvoAUdghLEecDTL1Hb pb8C26zvDA+L1M900qCr64ziAuKgiv54zkhcKHumx9npvg+PzZ82hGHp9AdQrzia lrsW+cOqJLAQw10z08lWhRdPQC5A/Vl0mWIoRrC1lhBY/piUwIc+AhPo/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFDe5ygYTgvgqkwJXobAHov+B0zDMB8GA1UdIwQY MBaAFKoqWMaXoUSZdrDRHW8SYCXhQInGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWlwWXhwZWhSSmwyc05FZGJ4SmdKZUZBaWNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8zMTQyYTUtZDkyZC00ZDA2LTgyMjgt YmU2MjJjMzEzMmRmLzEvcWlwWXhwZWhSSmwyc05FZGJ4SmdKZUZBaWNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8zMTQyYTUtZDkyZC00ZDA2LTgyMjgtYmU2MjJjMzEzMmRm LzEvcWlwWXhwZWhSSmwyc05FZGJ4SmdKZUZBaWNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc8ZJ45Bx sb1aNoNZPcVJ5SxeLiUwqwUaGB7jH0glG8d3U6som0yUHBipwSom+cVJDA1sa3LR F/a/qBFgpbQ7wqiVve+wfeBcle0JZGh7DiM8WcbQliBtZNK1f2BpyjxQuUudxBSZ UWzBitmuz1Zo1UzjwVXQgl7TKixt9Gm8ZFfYI3S1c/ae5kCGiHkf6NKNt3TlUsYu Odm9Xj31gYGZFTAdj2o2Om7xxPGhz5Gx4TcFJv/RQaVL31WuFtMPGVcydQ59Eyre vaSDIDRVdNAnT8eQ9sGl0vFxZ3lql9mJZpfKbom+4I/GY8LcuLKsspxvZLX5EBEy bEyTFlWaZN3Nhw== -----END CERTIFICATE-----Generated at Thu Dec 25 14:16:54 2025 by rpki-client