This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft File: qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft (raw, json) Hash identifier: mij86IG4psdrXxZL5UwmnDIZ6f1mbn94j4wn/oaq0+I= Subject key identifier: BE:71:A1:A3:34:0E:5E:F3:AF:79:44:D6:EA:BE:5B:C5:CB:97:F3:E2 Authority key identifier: AB:06:90:58:B4:D3:67:61:2B:E4:80:73:72:B5:E5:93:E0:34:77:66 Certificate issuer: /CN=ab069058b4d367612be4807372b5e593e0347766 Certificate serial: 019B3F7F2594E0BD514FF39A6C02E40650C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 06:00:55 +0000 Manifest this update: Sun 21 Dec 2025 06:00:55 +0000 Manifest next update: Mon 22 Dec 2025 06:00:55 +0000 Files and hashes: 1: Ttl-1h1-V-nLfHGl50XIPqBaOuw.roa (hash: 4ysW7rFsdP6sSTiTROvgg5H3SFvIB36uqjjGielYpHo=) 2: qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl (hash: EiZRrRKpKV+1u7WFVj8Ljg7HwG1JOCJWwN+peOljOV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:25:94:e0:bd:51:4f:f3:9a:6c:02:e4:06:50:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab069058b4d367612be4807372b5e593e0347766 Validity Not Before: Dec 21 06:00:55 2025 GMT Not After : Dec 22 06:00:55 2025 GMT Subject: CN=be71a1a3340e5ef3af7944d6eabe5bc5cb97f3e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ad:45:95:55:dc:2e:7e:57:ce:8a:88:b9:16: f7:4b:12:ea:dd:f8:6f:b1:8c:4c:a5:19:88:14:41: 7e:f0:89:72:5a:d5:1b:0d:f3:2c:34:db:10:4b:28: ca:4a:5a:f7:a1:a2:22:3b:d7:49:13:c9:bc:3c:4a: a5:a3:98:d3:4e:3b:ce:f6:b7:49:af:a7:07:aa:32: d8:26:a0:51:9e:fa:d6:a9:e5:4a:2d:de:d2:1b:50: ad:a1:a6:a6:bc:87:ec:56:63:ab:dd:24:d8:93:73: f5:01:58:58:b4:d6:a3:ae:ba:9f:d3:d9:75:00:74: 79:17:7c:2f:30:26:a8:9a:6e:54:8e:34:25:9a:63: ac:50:25:82:fe:fa:3d:d1:ff:e8:69:16:3e:07:30: bc:82:f9:85:89:ee:94:02:8d:e8:7b:e6:e5:7b:dc: a1:3a:db:ed:12:54:eb:77:a4:d1:92:54:fa:d2:c9: 71:88:70:19:6f:6a:6a:36:b5:81:d5:c7:c3:90:de: 7f:77:0d:78:76:4f:fa:7d:a1:3a:9f:d4:4b:59:c1: 61:88:db:35:91:7c:a9:30:f4:a5:74:0c:9d:c2:26: 7b:c8:dc:1e:34:4f:81:db:e7:c8:16:50:77:6b:bb: 09:a2:f5:ea:78:84:e4:19:ec:09:e0:7d:e6:e9:2d: e8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:71:A1:A3:34:0E:5E:F3:AF:79:44:D6:EA:BE:5B:C5:CB:97:F3:E2 X509v3 Authority Key Identifier: keyid:AB:06:90:58:B4:D3:67:61:2B:E4:80:73:72:B5:E5:93:E0:34:77:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:ee:4a:2b:40:d8:79:c1:e5:c0:ba:f4:09:1c:8b:e3:98:85: b6:49:7a:22:87:e3:c1:b9:f9:ff:78:95:4b:48:d1:8a:a4:f8: 21:0e:49:16:69:a3:57:ee:0b:bb:fe:35:1d:dc:e3:b8:fc:3d: 5e:e6:1e:25:09:25:59:7f:72:7b:46:d8:bd:51:e0:94:f7:85: 72:07:f7:cf:fe:d7:ac:10:32:31:08:2d:35:ea:39:a9:56:ff: 8f:de:9a:3e:ab:99:09:5a:c6:ea:43:fa:58:df:61:7d:79:70: 71:a7:50:3d:a9:25:5d:58:1d:c8:18:d1:b5:c4:b8:29:e2:be: 80:b8:30:ec:fc:63:4a:29:30:31:db:ff:de:1e:f2:2e:99:ff: 2a:7c:13:d9:a7:91:e4:8e:9c:fe:d3:8c:ff:69:38:1e:20:a4: 91:d9:57:62:c8:1e:af:73:81:df:fe:89:31:8b:24:7d:60:4c: 4b:0d:70:40:4c:6d:08:99:a0:a1:c8:bc:73:ea:cd:d5:1e:b3: 2c:9b:b8:5b:1c:bf:e4:df:13:66:7d:5c:fd:0b:c5:39:5b:29: dd:de:5b:ff:7f:ee:34:b9:28:55:9c:ed:05:b9:e1:5e:80:d9: a7:58:a0:89:de:9b:31:43:d0:9e:07:db:da:f6:22:04:8c:79: 4c:ea:ff:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fyWU4L1RT/OabALkBlDEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDY5MDU4YjRkMzY3NjEyYmU0ODA3MzcyYjVlNTkzZTAz NDc3NjYwHhcNMjUxMjIxMDYwMDU1WhcNMjUxMjIyMDYwMDU1WjAzMTEwLwYDVQQD EyhiZTcxYTFhMzM0MGU1ZWYzYWY3OTQ0ZDZlYWJlNWJjNWNiOTdmM2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxq1FlVXcLn5XzoqIuRb3SxLq3fhv sYxMpRmIFEF+8IlyWtUbDfMsNNsQSyjKSlr3oaIiO9dJE8m8PEqlo5jTTjvO9rdJ r6cHqjLYJqBRnvrWqeVKLd7SG1CtoaamvIfsVmOr3STYk3P1AVhYtNajrrqf09l1 AHR5F3wvMCaomm5UjjQlmmOsUCWC/vo90f/oaRY+BzC8gvmFie6UAo3oe+ble9yh OtvtElTrd6TRklT60slxiHAZb2pqNrWB1cfDkN5/dw14dk/6faE6n9RLWcFhiNs1 kXypMPSldAydwiZ7yNweNE+B2+fIFlB3a7sJovXqeITkGewJ4H3m6S3ooQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL5xoaM0Dl7zr3lE1uq+W8XLl/PiMB8GA1UdIwQY MBaAFKsGkFi002dhK+SAc3K15ZPgNHdmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdhUVdMVFRaMkVyNUlCemNyWGxrLUEwZDJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84N2IwOWEtY2NmYS00OGVhLWFlYjUt NTY2NzQxOWY0NGU4LzEvcXdhUVdMVFRaMkVyNUlCemNyWGxrLUEwZDJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84N2IwOWEtY2NmYS00OGVhLWFlYjUtNTY2NzQxOWY0NGU4 LzEvcXdhUVdMVFRaMkVyNUlCemNyWGxrLUEwZDJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo+5KK0DY ecHlwLr0CRyL45iFtkl6Iofjwbn5/3iVS0jRiqT4IQ5JFmmjV+4Lu/41HdzjuPw9 XuYeJQklWX9ye0bYvVHglPeFcgf3z/7XrBAyMQgtNeo5qVb/j96aPquZCVrG6kP6 WN9hfXlwcadQPaklXVgdyBjRtcS4KeK+gLgw7PxjSikwMdv/3h7yLpn/KnwT2aeR 5I6c/tOM/2k4HiCkkdlXYsger3OB3/6JMYskfWBMSw1wQExtCJmgoci8c+rN1R6z LJu4Wxy/5N8TZn1c/QvFOVsp3d5b/3/uNLkoVZztBbnhXoDZp1igid6bMUPQngfb 2vYiBIx5TOr/Wg== -----END CERTIFICATE-----Generated at Sun Dec 21 09:44:51 2025 by rpki-client