This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft File: qjHJjjyrghyE3e_yBp4CJZvW5hw.mft (raw, json) Hash identifier: N9Dm+Me8P8lf0DBRVA4r68ygNBmNmxyJNFF2H2H2xI4= Subject key identifier: AA:16:EA:5B:1B:43:4D:4D:D6:76:44:B1:67:0E:5E:7A:0B:06:29:52 Authority key identifier: AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C Certificate issuer: /CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c Certificate serial: 019B3D907AA53D0CDD6E144E62F2101A3FD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft Manifest number: 0CF9 Signing time: Sat 20 Dec 2025 21:00:37 +0000 Manifest this update: Sat 20 Dec 2025 21:00:37 +0000 Manifest next update: Sun 21 Dec 2025 21:00:37 +0000 Files and hashes: 1: AIeHAMlo02ixYJZr9DxoRfeqC_w.roa (hash: r/OyoKCdS9zD7ksUp6W0p8pqS4rPDdjM46a0P82mb/E=) 2: qjHJjjyrghyE3e_yBp4CJZvW5hw.crl (hash: GzD3Nu1OHOfvUIBkzZ3ibWXrlk+tF2W2mtQ8s2deWZY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:7a:a5:3d:0c:dd:6e:14:4e:62:f2:10:1a:3f:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c Validity Not Before: Dec 20 21:00:37 2025 GMT Not After : Dec 21 21:00:37 2025 GMT Subject: CN=aa16ea5b1b434d4dd67644b1670e5e7a0b062952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a9:e1:a5:1c:7f:fb:b2:6f:3f:12:9d:fd:9c: c5:0d:3c:32:cc:b1:23:9b:2b:bd:9b:2e:01:db:e6: b3:e8:98:5f:5f:98:fa:f7:96:8f:86:df:1d:1c:f0: 41:25:e4:a3:e7:00:18:79:65:55:9a:b7:6b:c6:13: cc:3b:b9:5f:30:37:9c:75:37:3e:0e:d0:25:fa:00: 08:27:fe:c5:4e:18:d4:d8:5b:a3:73:67:a5:73:01: f2:75:c8:de:11:d1:90:a6:78:03:7f:e7:75:b7:92: eb:92:df:43:1b:12:84:3a:3c:53:74:bf:44:65:4d: e6:3d:7b:1a:2b:65:59:10:6c:0e:ba:e4:be:ad:72: e5:ce:2c:1d:5a:76:db:11:7e:4b:a2:fc:9e:98:ed: 29:5b:3c:fe:fd:10:3f:03:39:6e:b6:21:e1:ec:94: 5b:62:5e:2f:e1:b6:c7:21:69:98:fd:69:ee:56:ee: 44:34:ae:95:71:69:f1:03:14:84:4f:c9:22:68:f2: 40:4d:d8:b1:fd:2d:a7:6e:da:73:6e:9c:b0:fb:94: 80:de:a7:98:9e:68:fb:53:96:a3:2e:af:28:7f:0e: dd:5f:4a:64:65:8c:11:da:2d:24:1f:80:ee:c6:fe: 73:21:db:a3:1e:ff:75:14:58:20:ec:94:27:0b:52: 50:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:16:EA:5B:1B:43:4D:4D:D6:76:44:B1:67:0E:5E:7A:0B:06:29:52 X509v3 Authority Key Identifier: keyid:AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:8e:63:f8:25:41:84:2b:80:f8:2e:56:3b:29:e7:81:63:39: b4:ba:b8:3c:70:1a:81:2d:a2:f1:43:0f:41:78:1c:56:5d:68: 26:82:60:36:4f:1f:5c:e3:0c:fe:37:95:ad:68:f5:5d:dc:85: 4d:2b:13:d5:f4:83:92:8f:17:04:9d:54:78:59:63:cd:99:5c: 60:51:02:be:ae:2b:6e:92:7d:fa:c2:1d:ff:64:92:cc:b9:58: 8a:3f:b8:ca:b1:ca:9e:b6:c0:30:cd:0c:b0:95:12:26:72:46: 23:4f:33:46:2c:1e:82:c5:89:86:16:43:01:a5:28:38:51:d1: 00:c6:05:ce:a4:74:9d:2f:db:54:c6:6a:43:70:e0:95:20:66: 62:d4:4e:db:62:63:71:8d:2a:4d:03:e9:10:70:30:3e:1f:57: a5:e2:3c:33:04:b4:8a:13:97:c6:1c:38:43:2f:f9:d2:67:74: 2e:40:9d:71:7c:68:ea:42:b5:a1:59:b8:49:3e:54:60:ee:dd: 26:a3:33:22:e4:7e:5c:73:8f:df:ef:0c:f3:4a:61:2a:1a:4a: 76:3b:4a:4e:02:1a:11:0d:f2:44:b0:9f:57:10:80:bf:8d:47: 5e:5f:a5:b3:58:f5:ea:db:33:2d:ec:c9:90:5b:68:66:f5:0e: 7c:71:e9:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kHqlPQzdbhROYvIQGj/RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMzFjOThlM2NhYjgyMWM4NGRkZWZmMjA2OWUwMjI1OWJk NmU2MWMwHhcNMjUxMjIwMjEwMDM3WhcNMjUxMjIxMjEwMDM3WjAzMTEwLwYDVQQD EyhhYTE2ZWE1YjFiNDM0ZDRkZDY3NjQ0YjE2NzBlNWU3YTBiMDYyOTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsanhpRx/+7JvPxKd/ZzFDTwyzLEj myu9my4B2+az6JhfX5j695aPht8dHPBBJeSj5wAYeWVVmrdrxhPMO7lfMDecdTc+ DtAl+gAIJ/7FThjU2Fujc2elcwHydcjeEdGQpngDf+d1t5Lrkt9DGxKEOjxTdL9E ZU3mPXsaK2VZEGwOuuS+rXLlziwdWnbbEX5LovyemO0pWzz+/RA/AzlutiHh7JRb Yl4v4bbHIWmY/WnuVu5ENK6VcWnxAxSET8kiaPJATdix/S2nbtpzbpyw+5SA3qeY nmj7U5ajLq8ofw7dX0pkZYwR2i0kH4Duxv5zIdujHv91FFgg7JQnC1JQKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKoW6lsbQ01N1nZEsWcOXnoLBilSMB8GA1UdIwQY MBaAFKoxyY48q4IchN3v8gaeAiWb1uYcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWpISmpqeXJnaHlFM2VfeUJwNENKWnZXNWh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny80YjFkNTYtZDI1Zi00ZjY0LThhMGMt MDViZmYzMWM1M2ZlLzEvcWpISmpqeXJnaHlFM2VfeUJwNENKWnZXNWh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny80YjFkNTYtZDI1Zi00ZjY0LThhMGMtMDViZmYzMWM1M2Zl LzEvcWpISmpqeXJnaHlFM2VfeUJwNENKWnZXNWh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM45j+CVB hCuA+C5WOynngWM5tLq4PHAagS2i8UMPQXgcVl1oJoJgNk8fXOMM/jeVrWj1XdyF TSsT1fSDko8XBJ1UeFljzZlcYFECvq4rbpJ9+sId/2SSzLlYij+4yrHKnrbAMM0M sJUSJnJGI08zRiwegsWJhhZDAaUoOFHRAMYFzqR0nS/bVMZqQ3DglSBmYtRO22Jj cY0qTQPpEHAwPh9XpeI8MwS0ihOXxhw4Qy/50md0LkCdcXxo6kK1oVm4ST5UYO7d JqMzIuR+XHOP3+8M80phKhpKdjtKTgIaEQ3yRLCfVxCAv41HXl+ls1j16tszLezJ kFtoZvUOfHHpkA== -----END CERTIFICATE-----Generated at Sun Dec 21 03:56:32 2025 by rpki-client