This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft File: qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft (raw, json) Hash identifier: /oWZxB6taoqj6xa/sXk+zRUB8VgFkzdOIVtisOIsqzc= Subject key identifier: 28:72:8A:23:3E:48:70:35:92:EB:CE:DD:27:2A:70:09:6D:D9:9F:F3 Authority key identifier: AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39 Certificate issuer: /CN=aa8551e851e69db165c6c632af45f21715512939 Certificate serial: 019B706B1774B4D5E7D949596BE2E1E7ED40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft Manifest number: 1572 Signing time: Tue 30 Dec 2025 18:00:25 +0000 Manifest this update: Tue 30 Dec 2025 18:00:25 +0000 Manifest next update: Wed 31 Dec 2025 18:00:25 +0000 Files and hashes: 1: 1-3qrdz_tzhFoK7Ucjl6tCL0s2OM.roa (hash: kxTjIhZmXXDDNlqbd3Q2+gkjPCT2RJ+wWhOvQVmko/I=) 2: CvzVIxPE_Xl1M87JmAYQt0uyDD8.roa (hash: 2wAD/UrmgnStcRFk04oSlNoJEw3MlH57DosRki5ZylE=) 3: qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl (hash: X92WeNFsnDv7zA8NQ6RQHovHKfOIBpgDxYBOCTZSBx0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:6b:17:74:b4:d5:e7:d9:49:59:6b:e2:e1:e7:ed:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa8551e851e69db165c6c632af45f21715512939 Validity Not Before: Dec 30 18:00:25 2025 GMT Not After : Dec 31 18:00:25 2025 GMT Subject: CN=28728a233e48703592ebcedd272a70096dd99ff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:de:26:d3:ab:83:1d:01:2c:74:eb:9d:e2:38: e5:26:25:a4:b6:a6:b1:c5:50:c7:45:79:3c:80:fd: d0:d1:cc:08:ae:4a:98:0c:c1:57:8d:5c:74:ae:9b: d1:9d:c0:65:95:ff:6c:2b:bd:fe:35:7d:c6:f2:12: 88:98:67:00:43:f3:80:10:f1:cf:09:f6:75:72:60: 1e:35:2d:59:4c:fb:80:2d:6b:f0:68:50:4c:99:f4: 3d:27:a4:6a:ac:82:af:45:f6:ff:60:1f:2d:c5:00: 0f:58:b4:93:37:82:85:86:df:83:96:e6:71:e3:1a: c6:f1:00:b6:31:bf:09:5a:22:f0:5a:5c:c8:49:e2: 60:45:ad:aa:15:dc:ad:1b:18:fe:ef:1a:09:d7:f3: 62:0a:b7:52:cf:36:9d:57:54:90:93:0f:56:6f:a6: 95:c6:d4:59:08:e9:e9:29:a1:11:47:e7:2b:71:48: 65:68:56:b5:b1:75:4e:30:39:5e:72:55:06:11:a4: 37:e1:1b:fe:99:76:c3:40:ac:a2:87:4b:79:51:94: bd:35:4a:e0:4a:2e:5a:bc:2c:17:49:a1:84:e7:54: 8c:36:93:b8:30:ed:6f:ae:a6:97:db:3b:87:b1:e2: d5:6d:1a:1d:22:54:f3:d5:de:76:e1:44:a7:58:26: bb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:72:8A:23:3E:48:70:35:92:EB:CE:DD:27:2A:70:09:6D:D9:9F:F3 X509v3 Authority Key Identifier: keyid:AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:99:a8:79:58:ed:41:66:13:4e:c4:2f:cd:07:1d:3f:a5:59: dc:e1:b5:cf:c3:ee:00:ac:f7:79:a6:25:3a:60:a4:64:1e:40: 0e:b6:c3:a3:cb:ee:b0:88:41:9a:fd:43:d8:e8:a8:1b:32:c4: b1:f5:6f:3f:ba:99:b5:96:2d:38:98:b6:98:9d:4c:29:7e:50: ed:b1:cb:95:c5:95:fb:21:1c:3a:67:e8:92:ed:ec:bd:7b:d0: 98:a7:8c:b1:db:10:1d:f9:85:e1:4b:fd:01:e0:af:7b:26:5f: 66:ba:fd:6f:76:19:f6:9e:17:a9:64:8b:af:64:19:8d:ef:44: 77:4d:a4:6f:e6:03:21:69:b4:65:7e:c5:00:54:f1:70:05:98: 87:ae:d2:d9:de:65:ce:7e:d5:62:bb:80:21:71:5d:4a:8b:82: 76:fb:67:ce:7d:34:56:5c:39:34:7b:84:3f:1b:f5:77:e1:f3: df:90:87:8b:c7:a5:41:60:5c:8a:2d:c2:45:a0:96:23:08:ab: 98:c6:22:fc:30:9b:16:b5:8e:b3:bb:01:a9:1f:3a:8c:dc:09: cf:5c:9b:78:7a:29:ac:1a:65:79:f1:ba:d0:d2:5f:54:07:d1: 6b:9e:22:68:e4:f6:3c:fb:5b:43:cb:2e:5d:e2:ce:c3:52:34: 90:7f:20:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtwaxd0tNXn2UlZa+Lh5+1AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhODU1MWU4NTFlNjlkYjE2NWM2YzYzMmFmNDVmMjE3MTU1 MTI5MzkwHhcNMjUxMjMwMTgwMDI1WhcNMjUxMjMxMTgwMDI1WjAzMTEwLwYDVQQD EygyODcyOGEyMzNlNDg3MDM1OTJlYmNlZGQyNzJhNzAwOTZkZDk5ZmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx94m06uDHQEsdOud4jjlJiWktqax xVDHRXk8gP3Q0cwIrkqYDMFXjVx0rpvRncBllf9sK73+NX3G8hKImGcAQ/OAEPHP CfZ1cmAeNS1ZTPuALWvwaFBMmfQ9J6RqrIKvRfb/YB8txQAPWLSTN4KFht+DluZx 4xrG8QC2Mb8JWiLwWlzISeJgRa2qFdytGxj+7xoJ1/NiCrdSzzadV1SQkw9Wb6aV xtRZCOnpKaERR+crcUhlaFa1sXVOMDleclUGEaQ34Rv+mXbDQKyih0t5UZS9NUrg Si5avCwXSaGE51SMNpO4MO1vrqaX2zuHseLVbRodIlTz1d524USnWCa7KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFChyiiM+SHA1kuvO3ScqcAlt2Z/zMB8GA1UdIwQY MBaAFKqFUehR5p2xZcbGMq9F8hcVUSk5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW9WUjZGSG1uYkZseHNZeXIwWHlGeFZSS1RrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9kZTk2MTUtMGJjMC00ZTVlLTgzMTgt ZmIxZDk5MmRlMDAxLzEvcW9WUjZGSG1uYkZseHNZeXIwWHlGeFZSS1RrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9kZTk2MTUtMGJjMC00ZTVlLTgzMTgtZmIxZDk5MmRlMDAx LzEvcW9WUjZGSG1uYkZseHNZeXIwWHlGeFZSS1RrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq5moeVjt QWYTTsQvzQcdP6VZ3OG1z8PuAKz3eaYlOmCkZB5ADrbDo8vusIhBmv1D2OioGzLE sfVvP7qZtZYtOJi2mJ1MKX5Q7bHLlcWV+yEcOmfoku3svXvQmKeMsdsQHfmF4Uv9 AeCveyZfZrr9b3YZ9p4XqWSLr2QZje9Ed02kb+YDIWm0ZX7FAFTxcAWYh67S2d5l zn7VYruAIXFdSouCdvtnzn00Vlw5NHuEPxv1d+Hz35CHi8elQWBcii3CRaCWIwir mMYi/DCbFrWOs7sBqR86jNwJz1ybeHoprBplefG60NJfVAfRa54iaOT2PPtbQ8su XeLOw1I0kH8gwQ== -----END CERTIFICATE-----Generated at Wed Dec 31 00:10:11 2025 by rpki-client