This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft File: qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft (raw, json) Hash identifier: UhuD1DG9xp+dHUF7ZAxa5FPdZdZeSPO1BixNbK9yh/c= Subject key identifier: 37:FE:71:E0:1B:6B:94:83:F0:31:4D:EF:A6:65:5E:00:83:82:D3:2C Authority key identifier: A9:86:A0:67:7B:91:C4:56:67:E4:5E:12:EE:07:F5:21:99:01:A8:7A Certificate issuer: /CN=a986a0677b91c45667e45e12ee07f5219901a87a Certificate serial: 019B3E6C2E2921DDE090331D819844C4B7FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYagZ3uRxFZn5F4S7gf1IZkBqHo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft Manifest number: 05B7 Signing time: Sun 21 Dec 2025 01:00:35 +0000 Manifest this update: Sun 21 Dec 2025 01:00:35 +0000 Manifest next update: Mon 22 Dec 2025 01:00:35 +0000 Files and hashes: 1: R0bDzTZMsFHuXIVscoarjoJ_wTM.roa (hash: 9HD9aEc03IRoCnCCjg3LQXd12HLkqdNv34Xu2fVDTFY=) 2: qYagZ3uRxFZn5F4S7gf1IZkBqHo.crl (hash: WA63sB7TOqW2EaT14b7Ldvc7k/n173DjI42oOIxl5ec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.crl rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft rsync://rpki.ripe.net/repository/DEFAULT/qYagZ3uRxFZn5F4S7gf1IZkBqHo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:2e:29:21:dd:e0:90:33:1d:81:98:44:c4:b7:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a986a0677b91c45667e45e12ee07f5219901a87a Validity Not Before: Dec 21 01:00:35 2025 GMT Not After : Dec 22 01:00:35 2025 GMT Subject: CN=37fe71e01b6b9483f0314defa6655e008382d32c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7b:dc:0e:a5:90:e1:fd:3d:2f:3f:c1:84:9d: bc:fd:5b:99:97:d4:9e:a8:0e:d4:56:4a:d9:d6:20: 38:58:56:7a:59:41:fc:21:b6:a7:73:e6:bb:32:e1: cb:37:1f:84:93:29:de:b3:79:25:a8:1f:c1:10:21: 51:48:ea:fc:29:85:3f:35:63:ba:0a:b6:c9:de:94: a0:67:42:2a:e7:01:ec:31:ad:40:63:46:1a:3f:8d: f2:bf:39:30:f8:fd:3b:46:f9:a7:6c:8f:5b:3b:41: a6:57:9b:1e:7b:d7:fc:71:e7:95:7e:ce:e6:b1:59: ab:5f:e8:85:8e:43:c5:00:ac:c9:e6:6e:bc:71:1e: bb:30:56:fd:9a:b2:b4:64:52:b3:13:ba:29:ff:6d: bc:93:cd:5b:b5:c8:77:d0:a3:f0:e0:b6:63:f8:85: 7d:16:46:80:b5:dd:47:50:82:7a:d9:b0:d6:d3:4f: b7:b3:eb:48:25:cc:e6:43:18:00:4c:49:90:6c:50: 0e:80:74:4b:5f:75:0e:3d:8e:8a:77:76:55:e0:d3: e0:4e:c3:5a:c5:b8:45:7a:28:12:e6:f1:d9:f6:e6: 2f:11:bc:64:bc:51:09:e5:c6:27:a5:b1:65:c4:bc: d8:ff:47:ea:1c:82:ce:36:10:c8:1f:51:78:38:aa: 3e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:FE:71:E0:1B:6B:94:83:F0:31:4D:EF:A6:65:5E:00:83:82:D3:2C X509v3 Authority Key Identifier: keyid:A9:86:A0:67:7B:91:C4:56:67:E4:5E:12:EE:07:F5:21:99:01:A8:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYagZ3uRxFZn5F4S7gf1IZkBqHo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:9a:cf:19:ea:70:40:f6:8d:39:bb:00:68:ba:4c:a8:42:58: 8a:42:09:00:0d:18:e8:43:31:2d:b3:52:f9:c2:6c:47:fd:da: 0b:94:25:bc:0b:1b:21:1f:50:82:48:fc:ea:30:eb:7d:24:b5: dd:40:5f:7b:53:87:0f:bb:67:90:89:01:c3:66:ed:22:45:d6: 9e:db:af:69:6a:71:c0:dd:ac:d7:f5:9f:0b:e9:37:4f:af:f8: a5:8a:e3:aa:5f:2d:f2:a6:3f:ff:85:9b:00:f1:79:d2:4a:9c: 51:d3:63:48:96:19:25:67:e9:79:aa:91:54:85:f9:a9:06:b0: 8e:25:25:31:e3:ad:df:5f:44:1a:43:6e:83:0e:e0:6b:f3:01: 68:9b:66:af:6f:f9:7d:66:26:05:ad:65:ee:6f:bc:bc:f0:27: 15:4c:dc:8b:0a:ce:21:be:ad:41:e6:0f:9a:28:59:6f:ab:dd: 0f:7c:b0:e6:1d:b2:45:c7:5c:bb:46:d4:39:fb:8a:92:5d:16: fe:4d:2f:a8:57:57:c8:d2:b4:ec:5d:9d:02:47:18:79:99:4f: 13:90:4e:21:df:c7:cd:ea:2d:ad:67:e6:87:f4:51:7f:c9:4a: eb:ed:15:8f:8b:3c:43:57:90:dc:11:39:6d:7a:3f:57:4c:c9: b6:aa:77:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bC4pId3gkDMdgZhExLf7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ODZhMDY3N2I5MWM0NTY2N2U0NWUxMmVlMDdmNTIxOTkw MWE4N2EwHhcNMjUxMjIxMDEwMDM1WhcNMjUxMjIyMDEwMDM1WjAzMTEwLwYDVQQD EygzN2ZlNzFlMDFiNmI5NDgzZjAzMTRkZWZhNjY1NWUwMDgzODJkMzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHvcDqWQ4f09Lz/BhJ28/VuZl9Se qA7UVkrZ1iA4WFZ6WUH8Ibanc+a7MuHLNx+Ekynes3klqB/BECFRSOr8KYU/NWO6 CrbJ3pSgZ0Iq5wHsMa1AY0YaP43yvzkw+P07RvmnbI9bO0GmV5see9f8ceeVfs7m sVmrX+iFjkPFAKzJ5m68cR67MFb9mrK0ZFKzE7op/228k81btch30KPw4LZj+IV9 FkaAtd1HUIJ62bDW00+3s+tIJczmQxgATEmQbFAOgHRLX3UOPY6Kd3ZV4NPgTsNa xbhFeigS5vHZ9uYvEbxkvFEJ5cYnpbFlxLzY/0fqHILONhDIH1F4OKo+YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDf+ceAba5SD8DFN76ZlXgCDgtMsMB8GA1UdIwQY MBaAFKmGoGd7kcRWZ+ReEu4H9SGZAah6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVlhZ1ozdVJ4RlpuNUY0UzdnZjFJWmtCcUhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9mMGI5NTQtOTg4Ni00MDliLTgyMTkt ZDNmZGZhOWE4ZjE0LzEvcVlhZ1ozdVJ4RlpuNUY0UzdnZjFJWmtCcUhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9mMGI5NTQtOTg4Ni00MDliLTgyMTktZDNmZGZhOWE4ZjE0 LzEvcVlhZ1ozdVJ4RlpuNUY0UzdnZjFJWmtCcUhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJprPGepw QPaNObsAaLpMqEJYikIJAA0Y6EMxLbNS+cJsR/3aC5QlvAsbIR9Qgkj86jDrfSS1 3UBfe1OHD7tnkIkBw2btIkXWntuvaWpxwN2s1/WfC+k3T6/4pYrjql8t8qY//4Wb APF50kqcUdNjSJYZJWfpeaqRVIX5qQawjiUlMeOt319EGkNugw7ga/MBaJtmr2/5 fWYmBa1l7m+8vPAnFUzciwrOIb6tQeYPmihZb6vdD3yw5h2yRcdcu0bUOfuKkl0W /k0vqFdXyNK07F2dAkcYeZlPE5BOId/HzeotrWfmh/RRf8lK6+0Vj4s8Q1eQ3BE5 bXo/V0zJtqp3uw== -----END CERTIFICATE-----Generated at Sun Dec 21 08:14:16 2025 by rpki-client