This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft File: qnthN_WvPCLIWhkI1AspQe4sBvQ.mft (raw, json) Hash identifier: JE9+JYMbJRJnkYJZLnx406L/rTs0PxR5CUF5PdM9jgg= Subject key identifier: E9:84:12:62:85:35:36:75:E2:BA:C1:40:43:18:42:A8:21:22:6E:65 Authority key identifier: AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4 Certificate issuer: /CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4 Certificate serial: 019B39B431A863EC2DD1175893BEE6C613C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft Manifest number: 0AD0 Signing time: Sat 20 Dec 2025 03:01:09 +0000 Manifest this update: Sat 20 Dec 2025 03:01:09 +0000 Manifest next update: Sun 21 Dec 2025 03:01:09 +0000 Files and hashes: 1: 2XR2jy2pxsivUCWaEQDKm37Kfv8.roa (hash: JYfdJrJXlt+b2LxrGfVDugUW4/PVdSDu77ltGYhWQfw=) 2: fZx-mDB13JnuV_-VzM2j7qkuqi0.roa (hash: zv9S//eX11qAMytqBqLEiGaYvvDY8kAtaLQl7dqZVZU=) 3: qnthN_WvPCLIWhkI1AspQe4sBvQ.crl (hash: 8k08ExAjAuipLJiPr14Oejbi1GD8axCeRaO3ClPWKcc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:31:a8:63:ec:2d:d1:17:58:93:be:e6:c6:13:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4 Validity Not Before: Dec 20 03:01:09 2025 GMT Not After : Dec 21 03:01:09 2025 GMT Subject: CN=e984126285353675e2bac140431842a821226e65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ac:63:7b:86:7d:49:5b:e2:13:1c:c5:95:a5: e3:ef:a2:82:43:5b:b3:41:52:38:aa:9b:46:51:ad: 4f:6a:13:2e:71:eb:73:0c:3e:0b:7f:c3:91:1a:c3: ad:83:ff:15:1c:5e:06:cb:43:d0:de:c3:e9:86:3b: 72:e6:e2:3f:71:ce:8e:80:3f:36:04:11:d3:a9:cd: 1d:0c:c3:0b:32:99:aa:e6:29:00:02:75:4d:f0:28: 54:01:27:e4:30:c4:0f:cf:f6:5f:2a:a5:51:f0:3d: de:b2:3a:33:a7:04:ee:18:b1:24:1e:98:1b:bb:a1: 20:20:37:81:4d:77:48:ec:d2:e9:08:b5:78:87:22: 69:d0:32:a4:43:2e:59:85:3f:d6:5a:1c:7d:41:74: 0d:8d:34:52:9e:11:56:59:d9:6a:a7:a1:76:cd:e7: b0:f8:25:7c:1d:60:1e:92:df:8c:f7:28:39:9d:64: 30:85:60:54:60:7f:0d:9f:ae:92:c4:c8:61:78:1b: fe:e7:a6:a2:f2:b2:4f:44:be:9b:1b:e2:e3:4c:79: a4:56:87:da:41:63:f5:c1:6b:82:db:8a:89:ab:fd: 41:6b:49:83:9f:40:59:ee:38:b4:63:6d:31:06:7c: 7d:5b:dd:0f:6d:09:16:e0:16:a3:1c:c1:c4:c9:1f: 1e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:84:12:62:85:35:36:75:E2:BA:C1:40:43:18:42:A8:21:22:6E:65 X509v3 Authority Key Identifier: keyid:AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:50:e2:39:15:b1:a7:3f:7f:71:02:0f:20:97:98:c0:5c:30: 1f:38:e5:b6:90:52:10:0e:8a:af:a2:01:7e:bf:45:0d:ba:0c: c4:b2:c2:a4:a8:2b:13:f5:6e:0b:5f:72:0c:4b:9f:b6:d9:56: db:28:1b:d7:d3:14:ba:ea:cc:47:71:81:d3:36:86:a3:8c:53: 14:b1:7b:ae:48:b5:15:fc:d7:dd:9d:b5:15:5e:21:72:32:dd: 74:9b:6a:91:a0:9f:6d:19:1c:93:cb:d3:4f:f3:0e:1f:0f:12: eb:06:f5:c7:f0:c2:fc:0d:6a:5e:85:a1:c1:7c:b7:e0:05:1f: 1a:32:36:22:9f:ed:aa:df:b3:e0:61:2f:4f:34:7f:33:fe:98: 96:28:4d:13:ea:b4:e4:a1:59:51:bf:d3:fe:b1:63:ff:0e:b3: 3f:c2:83:17:58:c1:5d:fa:be:05:3a:f2:2e:ef:25:2e:2f:a2: f4:47:f5:5d:d7:44:24:08:fd:68:59:5b:15:7f:97:f1:16:a9: 7d:aa:fe:df:c3:c4:30:e8:73:5d:e3:09:6b:49:34:c6:65:77: 5a:7a:fb:79:0c:5d:8e:d2:62:1f:f0:00:df:c5:c9:b6:c8:f7: aa:ce:23:c9:a5:38:ca:e1:3f:3c:aa:2a:c4:c8:9d:a7:6a:2e: 5d:c6:9c:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tDGoY+wt0RdYk77mxhPIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhN2I2MTM3ZjVhZjNjMjJjODVhMTkwOGQ0MGIyOTQxZWUy YzA2ZjQwHhcNMjUxMjIwMDMwMTA5WhcNMjUxMjIxMDMwMTA5WjAzMTEwLwYDVQQD EyhlOTg0MTI2Mjg1MzUzNjc1ZTJiYWMxNDA0MzE4NDJhODIxMjI2ZTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6xje4Z9SVviExzFlaXj76KCQ1uz QVI4qptGUa1PahMucetzDD4Lf8ORGsOtg/8VHF4Gy0PQ3sPphjty5uI/cc6OgD82 BBHTqc0dDMMLMpmq5ikAAnVN8ChUASfkMMQPz/ZfKqVR8D3esjozpwTuGLEkHpgb u6EgIDeBTXdI7NLpCLV4hyJp0DKkQy5ZhT/WWhx9QXQNjTRSnhFWWdlqp6F2zeew +CV8HWAekt+M9yg5nWQwhWBUYH8Nn66SxMhheBv+56ai8rJPRL6bG+LjTHmkVofa QWP1wWuC24qJq/1Ba0mDn0BZ7ji0Y20xBnx9W90PbQkW4BajHMHEyR8e2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOmEEmKFNTZ14rrBQEMYQqghIm5lMB8GA1UdIwQY MBaAFKp7YTf1rzwiyFoZCNQLKUHuLAb0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW50aE5fV3ZQQ0xJV2hrSTFBc3BRZTRzQnZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My81ZTA2ZmEtMzdmOS00YTFjLTgxMWEt ZDZhMzA1Y2JmNDZjLzEvcW50aE5fV3ZQQ0xJV2hrSTFBc3BRZTRzQnZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My81ZTA2ZmEtMzdmOS00YTFjLTgxMWEtZDZhMzA1Y2JmNDZj LzEvcW50aE5fV3ZQQ0xJV2hrSTFBc3BRZTRzQnZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfVDiORWx pz9/cQIPIJeYwFwwHzjltpBSEA6Kr6IBfr9FDboMxLLCpKgrE/VuC19yDEufttlW 2ygb19MUuurMR3GB0zaGo4xTFLF7rki1FfzX3Z21FV4hcjLddJtqkaCfbRkck8vT T/MOHw8S6wb1x/DC/A1qXoWhwXy34AUfGjI2Ip/tqt+z4GEvTzR/M/6YlihNE+q0 5KFZUb/T/rFj/w6zP8KDF1jBXfq+BTryLu8lLi+i9Ef1XddEJAj9aFlbFX+X8Rap far+38PEMOhzXeMJa0k0xmV3Wnr7eQxdjtJiH/AA38XJtsj3qs4jyaU4yuE/PKoq xMidp2ouXcacyw== -----END CERTIFICATE-----Generated at Sat Dec 20 06:51:20 2025 by rpki-client