This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft File: qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft (raw, json) Hash identifier: u8uFix8sSEWaoxonS5ROropuIwedzN7z367wjZbyoa0= Subject key identifier: 9C:99:77:E4:8B:9A:63:51:24:67:F5:ED:25:DF:48:39:BD:1C:BF:95 Authority key identifier: A8:BB:D4:D9:85:8A:B5:28:07:00:EF:7E:95:C0:41:60:F3:D2:CB:48 Certificate issuer: /CN=a8bbd4d9858ab5280700ef7e95c04160f3d2cb48 Certificate serial: 019B4581B56C7691222D726E0FAE29ED6355 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft Manifest number: 0678 Signing time: Mon 22 Dec 2025 10:01:27 +0000 Manifest this update: Mon 22 Dec 2025 10:01:27 +0000 Manifest next update: Tue 23 Dec 2025 10:01:27 +0000 Files and hashes: 1: EIr__RLMMt-7cOeUxPceAyVLfLA.roa (hash: I7nOwl/EmoWFHPn01B2Q9SwyfzZiNKdHb9+3iK0TA1M=) 2: qLvU2YWKtSgHAO9-lcBBYPPSy0g.crl (hash: pk3b5TdmsCrBuybFdILPaiIrEhDF8wYtDK60ZwCxBmw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft rsync://rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:81:b5:6c:76:91:22:2d:72:6e:0f:ae:29:ed:63:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8bbd4d9858ab5280700ef7e95c04160f3d2cb48 Validity Not Before: Dec 22 10:01:27 2025 GMT Not After : Dec 23 10:01:27 2025 GMT Subject: CN=9c9977e48b9a63512467f5ed25df4839bd1cbf95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a5:08:22:93:6a:19:16:cf:9d:8e:06:50:71: 24:67:f9:49:82:86:ce:64:9d:48:53:38:60:15:7a: 41:1c:83:10:3e:ef:a2:65:89:a2:40:7a:de:58:95: 1a:3c:39:00:4a:24:12:32:9e:25:e8:a5:28:1f:45: d6:3e:5b:a6:87:b8:44:a8:79:3e:36:20:a2:20:22: 0d:f9:59:00:da:ad:1f:f1:c6:91:8e:11:2f:29:d0: aa:b9:dc:09:f0:61:21:55:aa:fc:77:29:52:79:af: 41:bb:c0:fc:31:0e:fb:b3:b6:38:69:cb:c0:a6:b5: 4b:67:87:f4:b8:35:ba:c0:02:a4:dd:60:e9:c9:8e: c0:8e:b8:cd:92:dd:2c:2d:75:a0:04:08:c1:ee:75: a0:58:f7:07:10:6e:7d:ed:f0:1d:62:28:61:0b:6f: 2a:59:d1:45:c5:c6:c7:7a:7c:8d:de:74:93:ff:9d: b5:3f:1c:6d:02:f3:54:6c:2e:93:db:3e:d0:fd:bb: ac:75:d3:05:e5:2f:ec:3e:91:d2:7e:32:0d:0e:17: 52:79:6a:84:d9:01:35:af:63:3a:16:04:cc:92:95: 8d:29:0d:16:96:9a:08:cb:d0:85:7b:6b:a9:b9:bd: d4:9f:51:53:75:c7:3f:5b:89:72:33:f9:3e:c7:69: af:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:99:77:E4:8B:9A:63:51:24:67:F5:ED:25:DF:48:39:BD:1C:BF:95 X509v3 Authority Key Identifier: keyid:A8:BB:D4:D9:85:8A:B5:28:07:00:EF:7E:95:C0:41:60:F3:D2:CB:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:08:b3:3a:95:78:34:95:04:a5:9d:e4:6c:e9:84:b1:bf:0b: cf:27:cc:3a:49:34:d6:28:c9:fd:bf:cf:c3:e5:a2:68:35:a3: 44:91:eb:b7:18:f9:7c:ba:8a:6f:c9:9d:e8:aa:cd:4b:58:1d: 49:1b:7f:9e:b2:0a:7f:c8:7d:1d:b4:fc:ef:77:2a:4e:26:8f: 49:da:b8:ce:b8:81:fd:56:c5:10:ed:35:a8:da:f7:47:63:6e: 45:8a:ff:1b:26:fc:5d:8b:79:46:9c:88:53:7c:ca:3a:44:ab: 8a:a8:15:49:88:45:7e:ad:93:d8:02:bc:9a:ae:7f:99:05:1c: 23:98:6e:34:37:52:2b:40:8a:98:b5:d8:db:6c:c2:9f:9d:0c: 39:0d:b8:62:a9:97:0e:db:99:d3:63:ad:2f:57:eb:bc:8a:51: e7:a3:42:39:1f:f1:b6:c4:d5:ab:b4:89:fe:fc:6e:1c:66:c9: 0d:d4:fa:75:3a:25:60:ff:fa:df:7b:62:96:4d:4b:dd:1d:04: 68:22:b9:4a:21:f1:ff:5e:7c:29:9e:64:4c:df:b1:ff:73:10: 7e:a4:00:99:26:5c:7c:17:6b:34:df:b1:a4:99:9a:b5:56:ea: 87:7c:81:4c:d2:c7:6b:5f:17:c1:85:60:90:c2:e1:d6:66:ed: b8:69:53:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFgbVsdpEiLXJuD64p7WNVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4YmJkNGQ5ODU4YWI1MjgwNzAwZWY3ZTk1YzA0MTYwZjNk MmNiNDgwHhcNMjUxMjIyMTAwMTI3WhcNMjUxMjIzMTAwMTI3WjAzMTEwLwYDVQQD Eyg5Yzk5NzdlNDhiOWE2MzUxMjQ2N2Y1ZWQyNWRmNDgzOWJkMWNiZjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaUIIpNqGRbPnY4GUHEkZ/lJgobO ZJ1IUzhgFXpBHIMQPu+iZYmiQHreWJUaPDkASiQSMp4l6KUoH0XWPlumh7hEqHk+ NiCiICIN+VkA2q0f8caRjhEvKdCqudwJ8GEhVar8dylSea9Bu8D8MQ77s7Y4acvA prVLZ4f0uDW6wAKk3WDpyY7AjrjNkt0sLXWgBAjB7nWgWPcHEG597fAdYihhC28q WdFFxcbHenyN3nST/521PxxtAvNUbC6T2z7Q/busddMF5S/sPpHSfjINDhdSeWqE 2QE1r2M6FgTMkpWNKQ0WlpoIy9CFe2upub3Un1FTdcc/W4lyM/k+x2mvwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJyZd+SLmmNRJGf17SXfSDm9HL+VMB8GA1UdIwQY MBaAFKi71NmFirUoBwDvfpXAQWDz0stIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUx2VTJZV0t0U2dIQU85LWxjQkJZUFBTeTBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83YWFkOWMtZDY1Ny00NWJkLWIwMTYt MThiMmZkNDMyMGY1LzEvcUx2VTJZV0t0U2dIQU85LWxjQkJZUFBTeTBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83YWFkOWMtZDY1Ny00NWJkLWIwMTYtMThiMmZkNDMyMGY1 LzEvcUx2VTJZV0t0U2dIQU85LWxjQkJZUFBTeTBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJQizOpV4 NJUEpZ3kbOmEsb8LzyfMOkk01ijJ/b/Pw+WiaDWjRJHrtxj5fLqKb8md6KrNS1gd SRt/nrIKf8h9HbT873cqTiaPSdq4zriB/VbFEO01qNr3R2NuRYr/Gyb8XYt5RpyI U3zKOkSriqgVSYhFfq2T2AK8mq5/mQUcI5huNDdSK0CKmLXY22zCn50MOQ24YqmX DtuZ02OtL1frvIpR56NCOR/xtsTVq7SJ/vxuHGbJDdT6dTolYP/633tilk1L3R0E aCK5SiHx/158KZ5kTN+x/3MQfqQAmSZcfBdrNN+xpJmatVbqh3yBTNLHa18XwYVg kMLh1mbtuGlTJw== -----END CERTIFICATE-----Generated at Mon Dec 22 15:39:47 2025 by rpki-client