This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft File: qQ35UgJATbHy5A7D3n7sON1qn-4.mft (raw, json) Hash identifier: g/PgxhNbQrlh4M9gzMuAsReB2VjWYefhwFkhlLdqRsM= Subject key identifier: 4F:F3:78:40:C5:60:C2:CA:A4:01:D7:29:26:65:47:D8:88:E7:10:15 Authority key identifier: A9:0D:F9:52:02:40:4D:B1:F2:E4:0E:C3:DE:7E:EC:38:DD:6A:9F:EE Certificate issuer: /CN=a90df95202404db1f2e40ec3de7eec38dd6a9fee Certificate serial: 019B6EEA8AE71C7C8DDE18BBFBF8DC5E056B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ35UgJATbHy5A7D3n7sON1qn-4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft Manifest number: 0337 Signing time: Tue 30 Dec 2025 11:00:22 +0000 Manifest this update: Tue 30 Dec 2025 11:00:22 +0000 Manifest next update: Wed 31 Dec 2025 11:00:22 +0000 Files and hashes: 1: qQ35UgJATbHy5A7D3n7sON1qn-4.crl (hash: rSUzCsyVQ4TZM61gPnRGYAHWCoq0NC/D+/ZaZ1OZRrk=) 2: xDaTSU1r08U3icbYzh9eT36EBN4.roa (hash: AXlgpTaBb24aHDSoXt8sy77THaBujLte6mCP+q3Zt1Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.crl rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft rsync://rpki.ripe.net/repository/DEFAULT/qQ35UgJATbHy5A7D3n7sON1qn-4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 11:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:ea:8a:e7:1c:7c:8d:de:18:bb:fb:f8:dc:5e:05:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a90df95202404db1f2e40ec3de7eec38dd6a9fee Validity Not Before: Dec 30 11:00:22 2025 GMT Not After : Dec 31 11:00:22 2025 GMT Subject: CN=4ff37840c560c2caa401d729266547d888e71015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d3:c5:d4:7c:9e:64:fd:56:d2:93:3a:68:98: 2a:19:51:bd:d4:33:57:8f:7f:c4:fe:76:e4:78:c7: 4f:25:a5:0e:af:74:17:29:a5:9b:21:6d:ea:79:33: 14:1d:99:30:61:0e:1a:d8:41:24:67:c5:8e:b6:68: c3:45:02:04:29:af:10:27:81:9d:2d:15:d9:d9:c5: 6a:c8:d9:6d:61:40:8c:a5:eb:97:be:00:d1:48:53: 6e:08:a3:db:a1:1f:16:3f:72:de:81:c4:4e:15:85: 1f:04:c2:8f:96:e5:39:57:0b:0c:c5:eb:78:d0:8f: db:8b:d7:3f:7b:fc:88:bc:e6:26:f4:b8:b3:3d:11: fe:e3:12:dc:8f:14:1c:e7:91:36:a0:f0:47:be:56: 61:30:ca:ea:c1:93:84:bf:e6:30:d4:ec:75:11:55: d4:0e:90:99:d9:f7:77:ac:6d:90:fb:db:8d:ce:41: e2:a2:cf:c5:ae:3d:c5:54:9d:54:b8:c8:b6:13:77: f6:c7:d1:6a:2b:7d:9a:f0:4b:92:e6:84:e4:e5:6a: 31:17:4c:84:2c:7a:51:74:ad:aa:3f:3d:3d:89:7f: 81:8a:25:83:80:4d:b8:e8:9d:bb:22:1e:61:3d:4d: 93:8a:0f:83:b6:61:53:57:3a:ca:63:73:76:b3:37: 15:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:F3:78:40:C5:60:C2:CA:A4:01:D7:29:26:65:47:D8:88:E7:10:15 X509v3 Authority Key Identifier: keyid:A9:0D:F9:52:02:40:4D:B1:F2:E4:0E:C3:DE:7E:EC:38:DD:6A:9F:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ35UgJATbHy5A7D3n7sON1qn-4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:25:ee:21:76:a6:f8:cb:40:1d:ee:76:25:fc:51:9c:9a:b8: a8:78:88:ba:a4:aa:2b:ce:d8:6d:e0:bf:c1:de:dc:2e:2e:89: a3:cb:15:1f:ec:5e:ac:36:ae:41:1e:0e:b1:90:df:71:36:db: a9:d5:05:00:aa:5b:05:83:8e:7c:78:a0:c0:23:71:6e:67:de: 28:e6:c7:2c:3d:01:c8:13:cf:95:67:ad:2b:a7:b1:a5:50:6a: a3:c8:9a:62:2c:25:be:4e:ba:5b:02:bc:4d:91:d8:12:d5:6a: 81:68:40:46:19:d8:3c:14:94:e3:8e:5a:17:12:5b:73:ec:6b: da:1b:91:6c:de:bb:3a:c1:c0:da:bc:7d:26:6a:dc:8c:a4:c1: c3:90:40:fb:df:c2:ce:53:fe:b6:e8:65:d3:d9:c7:7a:21:be: b3:e6:1e:f5:92:e6:95:95:0d:92:7e:eb:05:98:1e:80:ae:9b: 2c:3f:32:f5:91:6b:70:56:c8:ce:74:8a:26:e8:79:5c:02:16: b0:e1:e2:44:a3:76:04:e3:7e:e5:2f:0f:31:81:cd:ad:c4:57: be:e5:f1:71:3c:a6:8c:fa:a3:35:fa:c5:a6:55:17:fb:0d:48: a4:fa:6d:22:50:4a:e7:29:0e:f9:b4:b5:28:bd:41:34:19:af: 30:bc:49:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtu6ornHHyN3hi7+/jcXgVrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MGRmOTUyMDI0MDRkYjFmMmU0MGVjM2RlN2VlYzM4ZGQ2 YTlmZWUwHhcNMjUxMjMwMTEwMDIyWhcNMjUxMjMxMTEwMDIyWjAzMTEwLwYDVQQD Eyg0ZmYzNzg0MGM1NjBjMmNhYTQwMWQ3MjkyNjY1NDdkODg4ZTcxMDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltPF1HyeZP1W0pM6aJgqGVG91DNX j3/E/nbkeMdPJaUOr3QXKaWbIW3qeTMUHZkwYQ4a2EEkZ8WOtmjDRQIEKa8QJ4Gd LRXZ2cVqyNltYUCMpeuXvgDRSFNuCKPboR8WP3LegcROFYUfBMKPluU5VwsMxet4 0I/bi9c/e/yIvOYm9LizPRH+4xLcjxQc55E2oPBHvlZhMMrqwZOEv+Yw1Ox1EVXU DpCZ2fd3rG2Q+9uNzkHios/Frj3FVJ1UuMi2E3f2x9FqK32a8EuS5oTk5WoxF0yE LHpRdK2qPz09iX+BiiWDgE246J27Ih5hPU2Tig+DtmFTVzrKY3N2szcVBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/zeEDFYMLKpAHXKSZlR9iI5xAVMB8GA1UdIwQY MBaAFKkN+VICQE2x8uQOw95+7Djdap/uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVEzNVVnSkFUYkh5NUE3RDNuN3NPTjFxbi00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kOGUzMjAtYTU1NS00MDFhLTgwZmYt YmY3MzFmZTk5ZDNhLzEvcVEzNVVnSkFUYkh5NUE3RDNuN3NPTjFxbi00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9kOGUzMjAtYTU1NS00MDFhLTgwZmYtYmY3MzFmZTk5ZDNh LzEvcVEzNVVnSkFUYkh5NUE3RDNuN3NPTjFxbi00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwiXuIXam +MtAHe52JfxRnJq4qHiIuqSqK87YbeC/wd7cLi6Jo8sVH+xerDauQR4OsZDfcTbb qdUFAKpbBYOOfHigwCNxbmfeKObHLD0ByBPPlWetK6expVBqo8iaYiwlvk66WwK8 TZHYEtVqgWhARhnYPBSU445aFxJbc+xr2huRbN67OsHA2rx9JmrcjKTBw5BA+9/C zlP+tuhl09nHeiG+s+Ye9ZLmlZUNkn7rBZgegK6bLD8y9ZFrcFbIznSKJuh5XAIW sOHiRKN2BON+5S8PMYHNrcRXvuXxcTymjPqjNfrFplUX+w1IpPptIlBK5ykO+bS1 KL1BNBmvMLxJnQ== -----END CERTIFICATE-----Generated at Tue Dec 30 16:32:50 2025 by rpki-client