This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft File: qnp9oeIjsYMKC5G11hyDrSYMERs.mft (raw, json) Hash identifier: BJz8Y2IBlwYPzdaabC+TZH2xoViQvn1MAdpBm3EoxSM= Subject key identifier: B8:B6:05:BC:D0:01:19:BF:F0:FB:66:B1:5A:29:8E:4F:50:10:4A:8D Authority key identifier: AA:7A:7D:A1:E2:23:B1:83:0A:0B:91:B5:D6:1C:83:AD:26:0C:11:1B Certificate issuer: /CN=aa7a7da1e223b1830a0b91b5d61c83ad260c111b Certificate serial: 019B51BD892A99D5355A9911A3007655C60C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft Manifest number: 135C Signing time: Wed 24 Dec 2025 19:02:14 +0000 Manifest this update: Wed 24 Dec 2025 19:02:14 +0000 Manifest next update: Thu 25 Dec 2025 19:02:14 +0000 Files and hashes: 1: B2uv5t_GiMUr8rM-r5uKbUdnEoQ.roa (hash: YpVmIqGmMDZopEuL6KgYwvjCxwixGKfs5u+qFRIV/jw=) 2: qnp9oeIjsYMKC5G11hyDrSYMERs.crl (hash: 8o6xJJ8qYvpFfv+IvtchaHs1SsXagIKoVA5FyOfQx/c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bd:89:2a:99:d5:35:5a:99:11:a3:00:76:55:c6:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa7a7da1e223b1830a0b91b5d61c83ad260c111b Validity Not Before: Dec 24 19:02:14 2025 GMT Not After : Dec 25 19:02:14 2025 GMT Subject: CN=b8b605bcd00119bff0fb66b15a298e4f50104a8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:83:45:8d:3b:72:db:10:7c:4c:ee:d9:1d:b9: 29:c5:58:30:7f:59:9f:21:eb:cc:8f:e9:37:d2:fb: 87:8a:19:85:35:d9:2a:e5:b5:07:70:a8:2d:9e:af: c2:b2:b4:3f:75:b4:d7:a2:4f:38:94:26:f3:7e:b2: 55:29:d8:25:80:a4:17:31:78:32:fb:ab:86:f6:d5: d0:28:d6:ba:3a:3c:3d:61:a3:78:97:c2:e7:a3:6f: d6:96:b7:0e:ff:e6:69:d7:c9:cb:40:b5:f3:28:7e: fb:fe:9b:1e:ed:71:1f:bf:43:9c:d6:4d:fc:22:2e: 3b:6f:e0:b2:6f:ac:44:42:6d:03:98:bc:09:7f:17: ef:27:9c:0a:ad:01:2c:79:a7:dc:bc:a4:a8:e7:38: ad:c5:0c:8b:16:18:f9:56:9e:15:04:a1:af:f2:df: 3b:3e:97:69:c9:98:fd:2d:14:a1:54:03:36:1b:c4: 33:5b:f7:9b:81:eb:99:ef:28:f0:49:b0:35:44:bb: 51:45:90:65:08:03:7a:3d:4f:c9:ed:08:d0:8e:02: a7:91:26:6d:ef:25:e5:3f:28:56:94:47:48:8f:17: 8a:f9:a2:c8:82:05:aa:49:e1:d8:5f:3e:8e:51:b3: 72:c3:1c:25:ad:83:d6:87:02:ae:41:69:f8:de:df: d7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B6:05:BC:D0:01:19:BF:F0:FB:66:B1:5A:29:8E:4F:50:10:4A:8D X509v3 Authority Key Identifier: keyid:AA:7A:7D:A1:E2:23:B1:83:0A:0B:91:B5:D6:1C:83:AD:26:0C:11:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:5b:15:5c:92:7e:fd:95:40:36:a8:83:34:a0:9c:4b:e1:4d: fe:a0:b2:10:07:84:cf:7c:97:73:3b:96:43:b9:ea:87:5b:4d: 16:ad:ff:25:07:74:ff:51:8e:7c:37:1b:27:90:f1:28:8f:81: c5:4c:88:11:69:5c:3e:ac:37:7b:b5:5b:67:cb:a7:73:9c:3a: 47:a7:53:9e:99:4a:04:d6:53:cc:58:d8:02:ee:3d:a1:88:e3: e3:93:3c:f6:f5:5c:2c:e6:0f:04:15:52:e3:54:61:17:df:0b: da:ca:fa:ec:49:7c:5c:2c:5f:e6:cc:19:27:96:a8:3a:0f:33: 2d:88:d4:4e:f0:5c:c5:de:68:56:8e:07:09:c1:c5:75:0c:81: 6b:91:34:8e:e9:a7:16:20:8b:5f:e0:5e:40:70:0d:54:a4:57: 20:9b:fc:4d:4d:2c:f8:ec:49:ba:36:ad:33:13:a8:c6:40:19: ae:8d:f5:8b:b8:bf:10:5f:88:33:bd:59:bd:b1:df:2d:04:ee: e0:8a:6d:c6:b4:f7:bc:7f:31:da:4d:18:1b:5a:b2:21:07:13: 8c:e4:d2:0e:4d:2d:94:e9:f3:7f:bc:35:c6:1d:2f:a9:97:85: 82:19:10:7a:d9:55:d0:ec:51:1b:27:63:ca:c6:c9:48:b7:d8: d5:08:c7:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvYkqmdU1WpkRowB2VcYMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhN2E3ZGExZTIyM2IxODMwYTBiOTFiNWQ2MWM4M2FkMjYw YzExMWIwHhcNMjUxMjI0MTkwMjE0WhcNMjUxMjI1MTkwMjE0WjAzMTEwLwYDVQQD EyhiOGI2MDViY2QwMDExOWJmZjBmYjY2YjE1YTI5OGU0ZjUwMTA0YThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnINFjTty2xB8TO7ZHbkpxVgwf1mf IevMj+k30vuHihmFNdkq5bUHcKgtnq/CsrQ/dbTXok84lCbzfrJVKdglgKQXMXgy +6uG9tXQKNa6Ojw9YaN4l8Lno2/WlrcO/+Zp18nLQLXzKH77/pse7XEfv0Oc1k38 Ii47b+Cyb6xEQm0DmLwJfxfvJ5wKrQEseafcvKSo5zitxQyLFhj5Vp4VBKGv8t87 PpdpyZj9LRShVAM2G8QzW/ebgeuZ7yjwSbA1RLtRRZBlCAN6PU/J7QjQjgKnkSZt 7yXlPyhWlEdIjxeK+aLIggWqSeHYXz6OUbNywxwlrYPWhwKuQWn43t/XNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLi2BbzQARm/8PtmsVopjk9QEEqNMB8GA1UdIwQY MBaAFKp6faHiI7GDCguRtdYcg60mDBEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW5wOW9lSWpzWU1LQzVHMTFoeURyU1lNRVJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lNTdmYjEtMmQ1YS00NjYxLTgwMWQt MGViOGYzN2EwMTc5LzEvcW5wOW9lSWpzWU1LQzVHMTFoeURyU1lNRVJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9lNTdmYjEtMmQ1YS00NjYxLTgwMWQtMGViOGYzN2EwMTc5 LzEvcW5wOW9lSWpzWU1LQzVHMTFoeURyU1lNRVJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMFsVXJJ+ /ZVANqiDNKCcS+FN/qCyEAeEz3yXczuWQ7nqh1tNFq3/JQd0/1GOfDcbJ5DxKI+B xUyIEWlcPqw3e7VbZ8unc5w6R6dTnplKBNZTzFjYAu49oYjj45M89vVcLOYPBBVS 41RhF98L2sr67El8XCxf5swZJ5aoOg8zLYjUTvBcxd5oVo4HCcHFdQyBa5E0jumn FiCLX+BeQHANVKRXIJv8TU0s+OxJujatMxOoxkAZro31i7i/EF+IM71ZvbHfLQTu 4IptxrT3vH8x2k0YG1qyIQcTjOTSDk0tlOnzf7w1xh0vqZeFghkQetlV0OxRGydj ysbJSLfY1QjHeA== -----END CERTIFICATE-----Generated at Thu Dec 25 00:56:52 2025 by rpki-client