This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft File: r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft (raw, json) Hash identifier: Nfxs8cayd88Wn9SpWg8pamsN2sydCWPURgfTjGmR/1s= Subject key identifier: 93:75:EB:41:B5:FF:A0:D7:46:05:2F:6A:A3:84:33:E6:87:B9:9A:E9 Authority key identifier: AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED Certificate issuer: /CN=aff4242c10e438537e169ab002bf6be81fa2a5ed Certificate serial: 019B3B34B375E18D646DA97757AEE51C27C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft Manifest number: 147C Signing time: Sat 20 Dec 2025 10:01:07 +0000 Manifest this update: Sat 20 Dec 2025 10:01:07 +0000 Manifest next update: Sun 21 Dec 2025 10:01:07 +0000 Files and hashes: 1: KgttFz6IodgLZeLta7RLneUK6Ro.roa (hash: IYP5zin82ggYoVWQmz/dnK+iP1pdsQlzD5cbI7kYfRQ=) 2: T1_HIEmvBSvtxZPEKcCF4aZsCPs.roa (hash: 0CEooqGIOmFXehL8CMLN24SE73s+yk1wsCLjJu3HBUc=) 3: r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl (hash: 4N1+CRgVVi4Euf5xrg2r/PvkVCmfFpN0YGOdw3z9+xU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:b3:75:e1:8d:64:6d:a9:77:57:ae:e5:1c:27:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff4242c10e438537e169ab002bf6be81fa2a5ed Validity Not Before: Dec 20 10:01:07 2025 GMT Not After : Dec 21 10:01:07 2025 GMT Subject: CN=9375eb41b5ffa0d746052f6aa38433e687b99ae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a6:99:4c:c1:d8:ff:a0:c4:41:0d:a9:56:e1: 34:f8:cd:58:1e:bf:ef:ca:fa:b3:38:e3:f7:84:24: 1b:cf:c0:47:a5:28:7a:6d:ea:f9:f0:4f:20:18:c0: 15:4a:68:a0:b9:3a:35:7e:4b:37:97:ee:95:5f:33: c1:4c:68:1d:8b:95:e7:9f:10:66:86:04:9b:d0:c2: 42:2d:c6:3e:48:ca:1e:13:78:bd:ea:8a:47:5f:de: 52:65:39:a3:ca:2a:ad:3c:ab:b2:b6:a3:de:2c:f3: f3:ee:ab:37:48:ca:ba:e2:b1:16:3a:10:e0:e1:36: 53:8b:ac:c0:2e:5c:da:e6:0e:0f:7b:9a:60:7d:3c: c7:17:cc:e4:93:c6:f4:ac:6f:85:7d:23:7d:7c:d6: f2:41:01:be:cb:e8:50:79:7a:21:29:88:8e:4c:f3: 32:3e:ab:98:d5:60:f5:84:97:b7:93:6a:3f:df:7b: 8f:da:63:25:d3:d0:a7:71:3d:c9:66:9a:c0:ab:75: ef:3c:58:f4:23:3c:23:37:e6:54:6c:30:96:04:c5: 47:02:6f:05:69:23:d6:2a:8b:16:d9:a7:97:80:24: 16:49:0f:92:aa:b7:09:76:f8:ce:cc:67:42:d7:28: d0:3c:6e:bc:02:8c:a6:db:32:bd:f8:56:24:bd:28: 2a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:75:EB:41:B5:FF:A0:D7:46:05:2F:6A:A3:84:33:E6:87:B9:9A:E9 X509v3 Authority Key Identifier: keyid:AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:65:3f:89:e7:f2:a5:ae:0a:b6:df:43:c0:d0:46:06:81:e6: c2:57:67:24:0b:15:1c:b5:25:8a:7c:eb:b7:6b:cf:e4:59:11: 38:07:68:b6:06:f1:d3:0d:bd:de:c2:8e:73:34:74:71:bd:a1: dd:c0:d6:d4:cf:84:3c:6c:ae:b7:3a:6e:69:4b:46:41:f6:3c: 22:d7:d5:9d:53:55:0d:e0:44:d5:60:7c:0d:1f:8c:5f:82:90: ff:5c:7d:b0:f7:b5:26:d3:2c:d3:c4:e8:b0:da:0a:d4:53:6f: bb:c4:e9:92:4e:04:c0:83:8b:5c:cc:72:3d:16:3c:e7:6e:b5: f3:f4:7b:d6:f5:ed:7a:d7:dc:ab:6a:ba:76:c7:a4:6e:a6:70: bc:23:4f:d8:05:5f:19:ba:60:a8:05:18:c8:f9:da:cd:e6:51: 0a:35:db:b6:09:99:4b:d2:7a:97:8b:90:dd:8f:7b:27:05:d3: f8:b1:fc:eb:bc:09:05:bf:17:73:ad:01:2a:e3:2f:c3:fe:f2: e9:db:58:51:af:c5:fb:78:2b:b4:67:96:3a:08:f8:cd:34:80: be:47:2b:b9:94:0c:ec:3f:09:32:9a:7f:5c:8c:d7:62:bd:5e: 4b:ee:ca:8a:f1:51:61:ee:70:66:ae:90:58:f8:28:e9:56:00: 16:a6:cd:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NLN14Y1kbal3V67lHCfCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZjQyNDJjMTBlNDM4NTM3ZTE2OWFiMDAyYmY2YmU4MWZh MmE1ZWQwHhcNMjUxMjIwMTAwMTA3WhcNMjUxMjIxMTAwMTA3WjAzMTEwLwYDVQQD Eyg5Mzc1ZWI0MWI1ZmZhMGQ3NDYwNTJmNmFhMzg0MzNlNjg3Yjk5YWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKaZTMHY/6DEQQ2pVuE0+M1YHr/v yvqzOOP3hCQbz8BHpSh6ber58E8gGMAVSmiguTo1fks3l+6VXzPBTGgdi5XnnxBm hgSb0MJCLcY+SMoeE3i96opHX95SZTmjyiqtPKuytqPeLPPz7qs3SMq64rEWOhDg 4TZTi6zALlza5g4Pe5pgfTzHF8zkk8b0rG+FfSN9fNbyQQG+y+hQeXohKYiOTPMy PquY1WD1hJe3k2o/33uP2mMl09CncT3JZprAq3XvPFj0IzwjN+ZUbDCWBMVHAm8F aSPWKosW2aeXgCQWSQ+SqrcJdvjOzGdC1yjQPG68Aoym2zK9+FYkvSgq6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJN160G1/6DXRgUvaqOEM+aHuZrpMB8GA1UdIwQY MBaAFK/0JCwQ5DhTfhaasAK/a+gfoqXtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcl9Ra0xCRGtPRk4tRnBxd0FyOXI2Qi1pcGUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iOWEyODMtNWM4ZC00NjI4LTgwYmMt ZWU3YmEwZTlmN2NhLzEvcl9Ra0xCRGtPRk4tRnBxd0FyOXI2Qi1pcGUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iOWEyODMtNWM4ZC00NjI4LTgwYmMtZWU3YmEwZTlmN2Nh LzEvcl9Ra0xCRGtPRk4tRnBxd0FyOXI2Qi1pcGUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEmU/iefy pa4Ktt9DwNBGBoHmwldnJAsVHLUlinzrt2vP5FkROAdotgbx0w293sKOczR0cb2h 3cDW1M+EPGyutzpuaUtGQfY8ItfVnVNVDeBE1WB8DR+MX4KQ/1x9sPe1JtMs08To sNoK1FNvu8Tpkk4EwIOLXMxyPRY852618/R71vXtetfcq2q6dsekbqZwvCNP2AVf GbpgqAUYyPnazeZRCjXbtgmZS9J6l4uQ3Y97JwXT+LH867wJBb8Xc60BKuMvw/7y 6dtYUa/F+3grtGeWOgj4zTSAvkcruZQM7D8JMpp/XIzXYr1eS+7KivFRYe5wZq6Q WPgo6VYAFqbNbQ== -----END CERTIFICATE-----Generated at Sat Dec 20 13:59:30 2025 by rpki-client