This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft File: qGW64ld4vu2IgMCN8tPzf8N6vB4.mft (raw, json) Hash identifier: 5ezXWHxyT4WdtLX91H027NLjNq3ttW9sg8G4gZ7RFsI= Subject key identifier: 82:26:99:50:38:04:DD:9A:71:14:2F:8D:D6:69:F4:BD:48:D8:75:E6 Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E Certificate issuer: /CN=a865bae25778beed8880c08df2d3f37fc37abc1e Certificate serial: 019B3FB5B3475731FDA0B50EF9174B50CFFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft Manifest number: 0B5A Signing time: Sun 21 Dec 2025 07:00:31 +0000 Manifest this update: Sun 21 Dec 2025 07:00:31 +0000 Manifest next update: Mon 22 Dec 2025 07:00:31 +0000 Files and hashes: 1: 1-Q-SU6M1eWokdvHWYPfiDLf862M.roa (hash: C1hLhsta908XltJUmng5iUBY0gsffPf1N3xCcfgoTn0=) 2: FIO2B6DSj-VNnqIBc_nz9Mg-l_0.roa (hash: hFmNbHGOZOtCeE5eu6qV8WF/VHQWY1SuoXphpTsuE/Y=) 3: _0V8txyjPPqzjlvfK-eiSEPQud8.roa (hash: OuyYUMKPpEltyvzJnMLVyp9dQDUE6+Aj/UBjntoQqiQ=) 4: aQbAdMmw6LGkWrHFISw9gjXbPXE.roa (hash: 3oom+N+bFKVsXUfpHyiTTHfYtfR8rQPSAw7BXiuCfxQ=) 5: om3N9ug1vxTA-JOJ0P_08L7ZWxo.roa (hash: FdL6R9gigrjiaEd9SVuTmcrerTtUR7V2cH9/PXq0cyA=) 6: qGW64ld4vu2IgMCN8tPzf8N6vB4.crl (hash: 7Xoj9fNGA9MguJYDJ5HYJXO/HaxlhGf4cm0+gkbEm/k=) 7: sRlrf2L_j98uPIoNnChhrs6bing.roa (hash: 1ZhMP4XH7DUgYDZTVYKViXDgJjDrkhtBjx0bS6tr/u4=) 8: tJZkynRy8uV8yQcd4yzCAEqpLIg.roa (hash: TGGA7U/xut49UXeQTIJIPzu7f3fAAJZZSi0PNoulkio=) 9: uPkkzg5i_N9C_QfzlZF7zCoVCpE.roa (hash: MtHvS+JR+Oum24yd4r12c1cN1Y/6sK4FbwymNPm07k4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 07:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b5:b3:47:57:31:fd:a0:b5:0e:f9:17:4b:50:cf:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e Validity Not Before: Dec 21 07:00:31 2025 GMT Not After : Dec 22 07:00:31 2025 GMT Subject: CN=822699503804dd9a71142f8dd669f4bd48d875e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1b:27:78:87:d3:fb:5b:3e:55:da:40:10:6e: e8:2e:cb:63:08:ba:c5:02:31:f1:d9:a0:ef:56:48: b3:ff:cb:4a:c8:2b:80:f4:bd:b6:d1:a8:dc:1e:26: 8d:cf:52:2c:d7:f1:f7:4c:22:d1:5f:5a:ec:23:5d: 3e:4a:40:c5:61:cc:24:92:98:ee:94:be:36:74:0d: 4a:40:83:c5:2a:a9:30:9b:0e:df:f2:83:12:0e:e2: 99:3b:1c:ec:a1:61:09:d7:b2:c4:08:03:16:af:24: 0c:77:46:d8:1b:bd:82:52:68:ec:4c:c1:9d:fb:92: 42:91:01:30:f3:71:ad:2e:c0:0d:32:ec:1c:d2:72: a4:cd:22:41:db:07:6e:92:dd:f1:cc:65:7f:0f:ec: c0:c9:be:4d:80:c3:34:56:38:c7:3b:bc:d0:48:c1: 48:9b:2f:21:8d:54:cd:2a:55:d3:c5:4c:56:ec:98: 2b:41:96:8b:56:1c:94:ab:49:0b:5b:17:87:89:c6: 6e:05:8e:26:9e:17:13:eb:18:a4:aa:c7:16:50:2a: d6:c8:dc:88:7a:69:30:c0:72:95:b5:52:f3:c3:6e: f1:ba:43:a4:59:91:bb:44:5b:e2:6c:ba:5c:82:40: ce:84:77:3c:e7:b3:b3:1f:3c:94:f7:fc:c0:52:b2: b9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:26:99:50:38:04:DD:9A:71:14:2F:8D:D6:69:F4:BD:48:D8:75:E6 X509v3 Authority Key Identifier: keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:e1:2a:14:3a:2c:39:53:a5:1f:b7:69:70:10:71:2e:c1:58: 4f:ed:19:9f:8c:9e:a9:b0:43:0e:e9:84:c3:85:92:b4:51:5b: a6:b8:78:ed:2f:54:a2:8b:de:6a:60:fc:91:03:2a:df:5c:47: ca:1d:78:f1:75:e7:fe:77:a0:1a:82:32:4d:33:ab:34:69:96: 0d:e2:cd:78:0d:c0:0f:b5:cc:6e:7f:02:ce:a9:d6:5c:9a:ee: 0f:2e:86:bb:6e:db:5b:39:a1:c4:0f:73:3e:03:5d:f9:13:b3: 64:1b:ac:ee:eb:ee:c2:ea:af:60:ac:b6:3d:0b:70:b5:05:ff: c2:d2:27:df:8c:2a:02:25:29:b6:50:af:02:c2:c9:d5:5d:1f: 15:c4:83:6e:bd:18:f1:b2:71:c9:22:5f:7b:4a:be:64:bf:a0: a4:ab:fd:34:81:da:53:55:89:ac:7d:be:a6:5a:69:d9:fb:e1: 9a:b8:6b:00:bc:d8:c3:c4:be:4c:9a:c7:3c:7d:fc:5b:f8:13: a3:f9:de:fb:76:15:d1:d3:0f:37:a7:e3:95:91:89:72:ac:e8: d9:c0:df:c4:4d:46:7d:8d:62:10:e3:16:63:18:f8:d9:56:8b: 13:00:19:3e:28:7d:2b:7e:7c:85:2b:b8:4d:53:e1:19:cf:d6: a1:e6:7b:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tbNHVzH9oLUO+RdLUM/7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NjViYWUyNTc3OGJlZWQ4ODgwYzA4ZGYyZDNmMzdmYzM3 YWJjMWUwHhcNMjUxMjIxMDcwMDMxWhcNMjUxMjIyMDcwMDMxWjAzMTEwLwYDVQQD Eyg4MjI2OTk1MDM4MDRkZDlhNzExNDJmOGRkNjY5ZjRiZDQ4ZDg3NWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxsneIfT+1s+VdpAEG7oLstjCLrF AjHx2aDvVkiz/8tKyCuA9L220ajcHiaNz1Is1/H3TCLRX1rsI10+SkDFYcwkkpju lL42dA1KQIPFKqkwmw7f8oMSDuKZOxzsoWEJ17LECAMWryQMd0bYG72CUmjsTMGd +5JCkQEw83GtLsANMuwc0nKkzSJB2wdukt3xzGV/D+zAyb5NgMM0VjjHO7zQSMFI my8hjVTNKlXTxUxW7JgrQZaLVhyUq0kLWxeHicZuBY4mnhcT6xikqscWUCrWyNyI emkwwHKVtVLzw27xukOkWZG7RFvibLpcgkDOhHc857OzHzyU9/zAUrK5ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIImmVA4BN2acRQvjdZp9L1I2HXmMB8GA1UdIwQY MBaAFKhluuJXeL7tiIDAjfLT83/DerweMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUdXNjRsZDR2dTJJZ01DTjh0UHpmOE42dkI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi82NDQ0ZDEtNWYwMC00ZTUwLTgwMTkt MWI2Zjc1MGNmOWEyLzEvcUdXNjRsZDR2dTJJZ01DTjh0UHpmOE42dkI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi82NDQ0ZDEtNWYwMC00ZTUwLTgwMTktMWI2Zjc1MGNmOWEy LzEvcUdXNjRsZDR2dTJJZ01DTjh0UHpmOE42dkI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw+EqFDos OVOlH7dpcBBxLsFYT+0Zn4yeqbBDDumEw4WStFFbprh47S9UooveamD8kQMq31xH yh148XXn/negGoIyTTOrNGmWDeLNeA3AD7XMbn8CzqnWXJruDy6Gu27bWzmhxA9z PgNd+ROzZBus7uvuwuqvYKy2PQtwtQX/wtIn34wqAiUptlCvAsLJ1V0fFcSDbr0Y 8bJxySJfe0q+ZL+gpKv9NIHaU1WJrH2+plpp2fvhmrhrALzYw8S+TJrHPH38W/gT o/ne+3YV0dMPN6fjlZGJcqzo2cDfxE1GfY1iEOMWYxj42VaLEwAZPih9K358hSu4 TVPhGc/WoeZ7xA== -----END CERTIFICATE-----Generated at Sun Dec 21 15:54:23 2025 by rpki-client