This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.mft File: qjWMwGHja-A6Ttkq1nF4DwZYm-M.mft (raw, json) Hash identifier: xqwgEBl46JrSPYxzeZIu7V0pERj5A31RenL2t4/Fmgg= Subject key identifier: C5:B9:6E:A9:99:FB:F4:13:08:A8:3F:70:87:93:58:4C:3A:66:21:94 Authority key identifier: AA:35:8C:C0:61:E3:6B:E0:3A:4E:D9:2A:D6:71:78:0F:06:58:9B:E3 Certificate issuer: /CN=aa358cc061e36be03a4ed92ad671780f06589be3 Certificate serial: 019B44005801E90B6B5926927A5DAEB4BB29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjWMwGHja-A6Ttkq1nF4DwZYm-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.mft Manifest number: 32 Signing time: Mon 22 Dec 2025 03:00:31 +0000 Manifest this update: Mon 22 Dec 2025 03:00:31 +0000 Manifest next update: Tue 23 Dec 2025 03:00:31 +0000 Files and hashes: 1: qjWMwGHja-A6Ttkq1nF4DwZYm-M.crl (hash: mqDXTLqRvxayrj6EKW6ApyVuSARAr3y/RgMlJEmjQN4=) 2: xGT7f1yz0oOuqABfbGti4wD4D3s.roa (hash: J+lIBSZRZBhEjrU06xcunhlHb1vFZR3PRfSda8JyHCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.mft rsync://rpki.ripe.net/repository/DEFAULT/qjWMwGHja-A6Ttkq1nF4DwZYm-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 03:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:00:58:01:e9:0b:6b:59:26:92:7a:5d:ae:b4:bb:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa358cc061e36be03a4ed92ad671780f06589be3 Validity Not Before: Dec 22 03:00:31 2025 GMT Not After : Dec 23 03:00:31 2025 GMT Subject: CN=c5b96ea999fbf41308a83f708793584c3a662194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9c:e4:b7:ba:55:02:32:4a:98:b6:4e:0f:d2: 53:5f:c8:a1:ee:ef:d2:72:2c:3e:e0:22:bb:25:da: 57:9a:40:6e:ed:e2:e6:d0:13:ed:c0:2e:a3:64:7a: 88:d6:c8:83:fb:4a:52:4b:45:29:e6:e4:d0:62:a9: 1a:f2:d2:bd:b5:36:08:ef:f3:a8:a6:58:66:1c:26: 51:e8:15:cb:8f:10:21:f3:e0:ec:5e:09:35:b6:78: ed:fe:23:ee:02:54:c5:f7:ea:0a:a5:74:11:6a:da: c5:3b:d8:38:95:d0:d7:ac:24:2f:92:e3:fb:76:53: d3:09:23:61:f9:db:89:41:ff:03:2f:63:ef:20:aa: 57:ef:ae:9d:0a:74:55:e0:44:d2:37:5a:02:99:37: 52:0d:8a:0c:7f:72:d4:94:11:c5:ff:5e:ac:77:ad: 2e:4f:c7:64:a3:43:5b:e0:00:50:b1:20:4a:a3:e6: 47:3e:9e:43:48:81:32:a8:52:ed:21:e9:c9:86:48: ea:26:01:a2:f0:f3:c0:4d:5f:85:40:c0:89:4c:5d: 84:96:ea:60:75:59:3b:fa:cb:b6:2a:e0:b6:41:fb: 9a:2b:39:d5:f3:d5:6b:ee:e2:ec:16:3a:06:44:e2: 3e:47:ce:ca:12:40:9f:ae:b3:85:7e:96:d6:98:b8: 52:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B9:6E:A9:99:FB:F4:13:08:A8:3F:70:87:93:58:4C:3A:66:21:94 X509v3 Authority Key Identifier: keyid:AA:35:8C:C0:61:E3:6B:E0:3A:4E:D9:2A:D6:71:78:0F:06:58:9B:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjWMwGHja-A6Ttkq1nF4DwZYm-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:a3:df:51:e8:22:38:3f:03:e0:10:e8:d9:57:6b:71:bb:bf: 2b:9e:83:24:70:89:bb:1d:0f:79:7b:55:ba:61:d1:03:7a:df: 3c:08:bc:93:78:00:54:3c:5b:e3:2e:44:39:db:96:74:28:28: f9:61:b2:ca:b2:7d:83:54:29:2a:b8:12:17:06:4c:82:a0:89: 07:b9:71:66:1e:f9:0b:9f:a9:87:62:c8:db:82:b0:75:49:17: 44:8b:df:b5:29:61:13:57:2e:38:1d:d8:06:40:4a:ba:3f:ad: 27:42:bf:14:cc:e1:1a:49:8a:36:75:29:f6:2c:df:e5:69:27: e6:03:23:dc:16:85:0a:d9:46:53:ba:0b:68:33:27:ab:27:0f: 83:dd:00:32:12:9c:e5:fa:a6:5b:fe:b7:c9:f4:41:7f:9e:3d: f4:43:ae:98:b4:bc:a8:eb:b6:35:76:6d:fc:f7:ca:2d:c0:71: bb:9c:0f:54:4f:25:19:0f:a3:4f:6a:8f:18:21:e8:89:8f:4f: 54:40:d0:7a:60:88:d9:e8:b3:d5:6c:78:9f:ac:7a:10:08:48: c1:cc:8e:dc:37:91:dc:34:7d:18:6e:2a:3a:3a:19:0c:d4:17: 83:39:76:a5:46:48:e1:c0:73:40:8d:bb:0d:1a:cd:99:50:18: e7:88:d2:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEAFgB6QtrWSaSel2utLspMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMzU4Y2MwNjFlMzZiZTAzYTRlZDkyYWQ2NzE3ODBmMDY1 ODliZTMwHhcNMjUxMjIyMDMwMDMxWhcNMjUxMjIzMDMwMDMxWjAzMTEwLwYDVQQD EyhjNWI5NmVhOTk5ZmJmNDEzMDhhODNmNzA4NzkzNTg0YzNhNjYyMTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZzkt7pVAjJKmLZOD9JTX8ih7u/S ciw+4CK7JdpXmkBu7eLm0BPtwC6jZHqI1siD+0pSS0Up5uTQYqka8tK9tTYI7/Oo plhmHCZR6BXLjxAh8+DsXgk1tnjt/iPuAlTF9+oKpXQRatrFO9g4ldDXrCQvkuP7 dlPTCSNh+duJQf8DL2PvIKpX766dCnRV4ETSN1oCmTdSDYoMf3LUlBHF/16sd60u T8dko0Nb4ABQsSBKo+ZHPp5DSIEyqFLtIenJhkjqJgGi8PPATV+FQMCJTF2Elupg dVk7+su2KuC2QfuaKznV89Vr7uLsFjoGROI+R87KEkCfrrOFfpbWmLhSFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMW5bqmZ+/QTCKg/cIeTWEw6ZiGUMB8GA1UdIwQY MBaAFKo1jMBh42vgOk7ZKtZxeA8GWJvjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWpXTXdHSGphLUE2VHRrcTFuRjREd1pZbS1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8wOGIyYzctNTkwNy00MzVmLThlZTYt YWJkYWEyYmEyYzdmLzEvcWpXTXdHSGphLUE2VHRrcTFuRjREd1pZbS1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC8wOGIyYzctNTkwNy00MzVmLThlZTYtYWJkYWEyYmEyYzdm LzEvcWpXTXdHSGphLUE2VHRrcTFuRjREd1pZbS1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqqPfUegi OD8D4BDo2Vdrcbu/K56DJHCJux0PeXtVumHRA3rfPAi8k3gAVDxb4y5EOduWdCgo +WGyyrJ9g1QpKrgSFwZMgqCJB7lxZh75C5+ph2LI24KwdUkXRIvftSlhE1cuOB3Y BkBKuj+tJ0K/FMzhGkmKNnUp9izf5Wkn5gMj3BaFCtlGU7oLaDMnqycPg90AMhKc 5fqmW/63yfRBf5499EOumLS8qOu2NXZt/PfKLcBxu5wPVE8lGQ+jT2qPGCHoiY9P VEDQemCI2eiz1Wx4n6x6EAhIwcyO3DeR3DR9GG4qOjoZDNQXgzl2pUZI4cBzQI27 DRrNmVAY54jSLg== -----END CERTIFICATE-----Generated at Mon Dec 22 09:39:08 2025 by rpki-client