This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft File: qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft (raw, json) Hash identifier: lUZN72OdlyMrY1NJcMLFsrvgTrLDh0+G4ykE+11+76U= Subject key identifier: F9:42:06:21:EC:97:AB:E9:C2:F1:9E:4E:7A:9A:11:22:B1:5E:F3:71 Authority key identifier: A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5 Certificate issuer: /CN=a8010ceb20f2e076a3f000271a5c375761bec2f5 Certificate serial: 019B3F7EFED90AE14C746E14075382E1C5E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft Manifest number: 0CCC Signing time: Sun 21 Dec 2025 06:00:45 +0000 Manifest this update: Sun 21 Dec 2025 06:00:45 +0000 Manifest next update: Mon 22 Dec 2025 06:00:45 +0000 Files and hashes: 1: cTUW6h8O7oJIMmgLFdy8XjEMwQM.roa (hash: GWLeGo5Tx1NQYnIt9PV3FBH+YZ+jq0YpS9g5boQS2IE=) 2: hefvQQC5HBlbQ-EPV5xNwJ9mr8s.roa (hash: Ud9jnh2NMlpw3d8NsGfrdGK8oljkEFrFbqnJTHG6eJE=) 3: qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl (hash: 2vG1WiJ+93IOhL82n57MperziS7gkCLG7N6JZavddAE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7e:fe:d9:0a:e1:4c:74:6e:14:07:53:82:e1:c5:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8010ceb20f2e076a3f000271a5c375761bec2f5 Validity Not Before: Dec 21 06:00:45 2025 GMT Not After : Dec 22 06:00:45 2025 GMT Subject: CN=f9420621ec97abe9c2f19e4e7a9a1122b15ef371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a0:c1:69:97:e4:dd:ae:8e:fc:ec:40:03:7a: 0b:8d:3f:7c:f8:18:3c:3b:0b:79:a7:a2:e4:3a:04: eb:3a:c7:47:f9:69:fa:89:78:d1:86:29:c1:e6:66: ad:54:b4:63:f8:63:d0:9e:d5:1d:1a:5e:31:d3:0f: 01:66:81:37:3e:ab:d3:e5:27:87:5b:d7:78:cc:ef: 33:ed:a7:64:8a:7b:1a:b5:c8:86:4b:21:05:43:cc: 06:ce:40:5b:e4:be:4b:bd:bc:ee:15:da:7b:14:0a: a4:27:1e:44:f8:6a:02:83:c0:03:20:7f:37:3d:c3: 04:ff:70:87:fa:c6:30:fe:ce:eb:5a:1b:80:cc:8b: a1:e4:2d:8c:7f:ef:98:8e:1d:20:9d:c6:7a:b6:41: 79:dc:e0:ca:0e:06:82:84:a8:85:2e:f8:f0:6a:10: 51:57:23:42:5d:04:03:f8:99:33:f8:21:f5:e9:fd: 89:64:de:54:96:c4:55:40:5d:06:a2:53:c1:6e:95: 3f:73:a5:d2:90:de:57:d1:1b:69:3f:77:3c:99:e4: f4:9a:5d:5a:65:09:3c:6e:cf:a6:41:16:75:3f:b1: 68:0e:55:6b:fc:18:ec:b5:4f:2e:08:9f:aa:95:30: bf:20:b7:4e:eb:34:8e:39:79:ae:22:3a:87:98:e6: 63:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:42:06:21:EC:97:AB:E9:C2:F1:9E:4E:7A:9A:11:22:B1:5E:F3:71 X509v3 Authority Key Identifier: keyid:A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:60:da:9c:24:68:dc:40:6d:cc:15:7e:5c:a8:8c:d8:82:72: 4a:db:9e:93:7f:e8:a9:cc:82:b3:36:a9:9a:ca:0f:26:c6:f8: 60:b4:30:41:cf:1c:01:01:e4:ab:ad:c9:02:47:f1:92:c0:9b: 26:66:7a:21:4e:90:05:0d:e9:28:f2:16:b4:66:2b:a2:a8:a6: f1:d2:95:e4:01:38:fe:3c:6a:11:c6:8b:0a:d7:32:ad:a4:81: 95:25:34:16:55:89:de:53:3f:fa:12:9d:8d:0b:cc:80:f6:59: cd:07:d0:0a:c8:6a:33:19:69:f7:0d:88:58:21:cc:ed:06:09: 1d:4d:7e:e4:0a:3e:7a:ad:46:e6:66:c9:d8:4a:c8:97:0e:bb: 6c:32:f5:5d:38:ca:1b:8b:bd:05:8c:d1:01:ea:e4:f5:b4:48: da:7f:1f:7e:f9:96:77:af:e2:6a:6e:e6:a2:31:c2:e6:d1:61: 26:14:b6:0b:23:b9:ec:c9:d5:6e:25:fb:d9:bc:fb:2a:33:ce: a7:7a:94:8e:12:79:d3:cd:7f:b0:48:63:3c:bf:96:5f:fe:b0: 2e:5e:32:7b:2b:5f:fe:49:e8:f6:65:ef:91:1d:7d:ed:02:9a: 90:f7:3c:34:7f:0e:21:e9:82:3d:b9:18:d8:c4:14:6d:65:a9: a0:22:18:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fv7ZCuFMdG4UB1OC4cXoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MDEwY2ViMjBmMmUwNzZhM2YwMDAyNzFhNWMzNzU3NjFi ZWMyZjUwHhcNMjUxMjIxMDYwMDQ1WhcNMjUxMjIyMDYwMDQ1WjAzMTEwLwYDVQQD EyhmOTQyMDYyMWVjOTdhYmU5YzJmMTllNGU3YTlhMTEyMmIxNWVmMzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqDBaZfk3a6O/OxAA3oLjT98+Bg8 Owt5p6LkOgTrOsdH+Wn6iXjRhinB5matVLRj+GPQntUdGl4x0w8BZoE3PqvT5SeH W9d4zO8z7adkinsatciGSyEFQ8wGzkBb5L5LvbzuFdp7FAqkJx5E+GoCg8ADIH83 PcME/3CH+sYw/s7rWhuAzIuh5C2Mf++Yjh0gncZ6tkF53ODKDgaChKiFLvjwahBR VyNCXQQD+Jkz+CH16f2JZN5UlsRVQF0GolPBbpU/c6XSkN5X0RtpP3c8meT0ml1a ZQk8bs+mQRZ1P7FoDlVr/BjstU8uCJ+qlTC/ILdO6zSOOXmuIjqHmOZj7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPlCBiHsl6vpwvGeTnqaESKxXvNxMB8GA1UdIwQY MBaAFKgBDOsg8uB2o/AAJxpcN1dhvsL1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUFFTTZ5RHk0SGFqOEFBbkdsdzNWMkctd3ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mNDQ0YWEtYWU4Yy00ZDE0LWEzYTMt NDlmNjVjNmE0OGJmLzEvcUFFTTZ5RHk0SGFqOEFBbkdsdzNWMkctd3ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9mNDQ0YWEtYWU4Yy00ZDE0LWEzYTMtNDlmNjVjNmE0OGJm LzEvcUFFTTZ5RHk0SGFqOEFBbkdsdzNWMkctd3ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS2DanCRo 3EBtzBV+XKiM2IJyStuek3/oqcyCszapmsoPJsb4YLQwQc8cAQHkq63JAkfxksCb JmZ6IU6QBQ3pKPIWtGYroqim8dKV5AE4/jxqEcaLCtcyraSBlSU0FlWJ3lM/+hKd jQvMgPZZzQfQCshqMxlp9w2IWCHM7QYJHU1+5Ao+eq1G5mbJ2ErIlw67bDL1XTjK G4u9BYzRAerk9bRI2n8ffvmWd6/iam7mojHC5tFhJhS2CyO57MnVbiX72bz7KjPO p3qUjhJ5081/sEhjPL+WX/6wLl4yeytf/kno9mXvkR197QKakPc8NH8OIemCPbkY 2MQUbWWpoCIYrQ== -----END CERTIFICATE-----Generated at Sun Dec 21 12:04:03 2025 by rpki-client