This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft File: qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft (raw, json) Hash identifier: 27HBxZIo/Mlod7G4VB7GWIdxf+/sQar8M+FKBWHFZUM= Subject key identifier: 00:AE:88:7F:FA:8B:10:92:9B:FD:7B:AD:B9:41:FC:83:5E:89:76:F0 Authority key identifier: AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E Certificate issuer: /CN=aafc41aafbbccaa96711849745ef722a5260ac7e Certificate serial: 019B3FB5AF22A7AA217226BBB505B385438A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft Manifest number: 1762 Signing time: Sun 21 Dec 2025 07:00:30 +0000 Manifest this update: Sun 21 Dec 2025 07:00:30 +0000 Manifest next update: Mon 22 Dec 2025 07:00:30 +0000 Files and hashes: 1: EtuX617xzyrB71Hjc1hl3WMzRjI.roa (hash: QSVoTvnTqOuhcGfy2h2iEu7xdB5mNRvXSamlWm6WYuo=) 2: MBp32VcQqAbMoARjt7V1PCPscvg.roa (hash: pI5Os3fewlyJzy3/SsAFuRA7NUz4NSu4MCASZkD0XZY=) 3: qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl (hash: 8NzFS/6qWbzFNOjdYkfSpLXBcea53v8bqDAXePLVgOg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b5:af:22:a7:aa:21:72:26:bb:b5:05:b3:85:43:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aafc41aafbbccaa96711849745ef722a5260ac7e Validity Not Before: Dec 21 07:00:30 2025 GMT Not After : Dec 22 07:00:30 2025 GMT Subject: CN=00ae887ffa8b10929bfd7badb941fc835e8976f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:08:94:5e:e8:be:15:0c:ac:85:37:b4:8b:12: 62:4e:79:6a:10:aa:34:4b:28:ca:0d:a2:bd:13:ec: 40:f1:29:22:18:96:90:15:d6:93:bb:b4:8d:33:35: d3:90:22:16:45:b4:7a:ad:8c:5d:ee:0f:ba:42:c9: 86:33:f5:9c:2b:63:88:ef:c9:2a:6c:3a:e5:63:ea: 1c:b2:fe:98:ec:00:0c:0f:b8:85:11:11:c4:f7:f6: 75:f7:56:bc:0d:3b:93:9f:ed:97:84:2e:1e:df:bf: 8c:83:93:92:85:5f:6d:43:7b:a2:05:0d:b4:1d:d8: 1a:58:69:cf:13:a1:b5:ce:09:12:e0:8e:ea:ae:7c: ec:a2:35:c7:73:3c:ec:47:e3:5e:99:69:bd:2b:9e: e9:61:e7:eb:02:60:05:a0:b7:36:c2:f9:7c:3e:5c: 26:96:bb:4a:8d:27:15:37:86:b6:08:5e:25:38:a2: 0f:7a:4f:fb:ff:ba:ff:32:ac:a8:11:54:aa:89:f9: f2:42:9f:36:78:cb:a4:c8:60:d1:c7:d3:ff:c4:ee: d9:35:73:c8:81:b0:85:51:c4:27:fe:d7:a8:ee:28: 15:85:33:12:be:8b:d4:fe:b0:f7:ea:ff:1a:c9:26: a0:da:ee:59:14:e7:0c:43:01:a0:7a:7a:58:db:63: 04:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:AE:88:7F:FA:8B:10:92:9B:FD:7B:AD:B9:41:FC:83:5E:89:76:F0 X509v3 Authority Key Identifier: keyid:AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:36:a0:6a:ba:7d:0d:8f:a9:d5:a9:11:4d:46:cb:bd:92:00: aa:1a:35:05:50:9e:62:79:bf:a3:3e:0a:47:33:55:db:f3:45: 01:6c:9f:5e:81:41:27:b5:f8:07:34:d3:5d:c3:3e:91:65:0f: 19:b7:95:38:11:6e:c5:0a:3d:77:b7:4e:7c:0a:40:78:e9:f0: 5d:0c:62:ad:51:de:2a:67:ad:29:57:85:47:c4:82:4c:94:11: 1c:48:78:bc:f1:28:8a:59:b7:e5:eb:de:16:3b:1f:c0:8c:ab: 9a:aa:40:c5:7b:39:ee:f8:16:92:c9:4d:0b:6d:72:d0:cb:4b: 2c:64:86:c0:71:10:69:db:1c:d8:0a:08:af:61:cf:e2:88:d6: f4:72:7e:71:8e:de:f2:f3:e7:71:3b:df:7f:c0:bd:48:a9:30: 2c:dd:bc:89:fd:72:af:e7:ea:9d:a9:93:c6:4e:08:22:7c:d2: 73:9b:14:4b:7c:6a:4d:00:24:40:c8:db:19:8c:21:1d:f9:b2: 2c:55:16:bd:ab:18:8d:3d:1e:44:87:24:2b:86:3c:cc:65:61: be:ce:18:34:a3:08:5c:c5:6c:f5:dc:51:a7:4e:c8:76:65:77: d5:58:32:d6:2c:64:d4:ab:39:56:a3:92:0b:78:eb:29:ae:55: 9b:27:95:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/ta8ip6ohcia7tQWzhUOKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhZmM0MWFhZmJiY2NhYTk2NzExODQ5NzQ1ZWY3MjJhNTI2 MGFjN2UwHhcNMjUxMjIxMDcwMDMwWhcNMjUxMjIyMDcwMDMwWjAzMTEwLwYDVQQD EygwMGFlODg3ZmZhOGIxMDkyOWJmZDdiYWRiOTQxZmM4MzVlODk3NmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywiUXui+FQyshTe0ixJiTnlqEKo0 SyjKDaK9E+xA8SkiGJaQFdaTu7SNMzXTkCIWRbR6rYxd7g+6QsmGM/WcK2OI78kq bDrlY+ocsv6Y7AAMD7iFERHE9/Z191a8DTuTn+2XhC4e37+Mg5OShV9tQ3uiBQ20 HdgaWGnPE6G1zgkS4I7qrnzsojXHczzsR+NemWm9K57pYefrAmAFoLc2wvl8Plwm lrtKjScVN4a2CF4lOKIPek/7/7r/MqyoEVSqifnyQp82eMukyGDRx9P/xO7ZNXPI gbCFUcQn/teo7igVhTMSvovU/rD36v8aySag2u5ZFOcMQwGgenpY22MElQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFACuiH/6ixCSm/17rblB/INeiXbwMB8GA1UdIwQY MBaAFKr8Qar7vMqpZxGEl0XvcipSYKx+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXZ4QnF2dTh5cWxuRVlTWFJlOXlLbEpnckg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85ZmRkZDQtNTI2YS00ODA3LWIxMjct MWJjMzFjNjI0MDFmLzEvcXZ4QnF2dTh5cWxuRVlTWFJlOXlLbEpnckg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS85ZmRkZDQtNTI2YS00ODA3LWIxMjctMWJjMzFjNjI0MDFm LzEvcXZ4QnF2dTh5cWxuRVlTWFJlOXlLbEpnckg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWzagarp9 DY+p1akRTUbLvZIAqho1BVCeYnm/oz4KRzNV2/NFAWyfXoFBJ7X4BzTTXcM+kWUP GbeVOBFuxQo9d7dOfApAeOnwXQxirVHeKmetKVeFR8SCTJQRHEh4vPEoilm35eve FjsfwIyrmqpAxXs57vgWkslNC21y0MtLLGSGwHEQadsc2AoIr2HP4ojW9HJ+cY7e 8vPncTvff8C9SKkwLN28if1yr+fqnamTxk4IInzSc5sUS3xqTQAkQMjbGYwhHfmy LFUWvasYjT0eRIckK4Y8zGVhvs4YNKMIXMVs9dxRp07IdmV31Vgy1ixk1Ks5VqOS C3jrKa5VmyeVYA== -----END CERTIFICATE-----Generated at Sun Dec 21 08:17:28 2025 by rpki-client