This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft File: qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft (raw, json) Hash identifier: 6LLjWM5bLdXzcNfxG/VbAnqLHD99UnbMF6TPxaoMkDE= Subject key identifier: E3:23:20:84:1A:B0:0B:A0:39:61:64:2C:2D:6A:CB:94:32:FB:09:4F Authority key identifier: AA:FC:3D:2C:92:97:10:30:6E:84:7C:60:7D:38:11:4A:EB:B3:CC:08 Certificate issuer: /CN=aafc3d2c929710306e847c607d38114aebb3cc08 Certificate serial: 019B51BCF84F12155AA9DC0878E55322CEDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft Manifest number: 1793 Signing time: Wed 24 Dec 2025 19:01:37 +0000 Manifest this update: Wed 24 Dec 2025 19:01:37 +0000 Manifest next update: Thu 25 Dec 2025 19:01:37 +0000 Files and hashes: 1: _apVPFDtoRumkOLoXwsvk68svtc.roa (hash: +ctIxD4w3ARboj6lSoUyjZFSq6bE6ZLRIPRMV/RgDGI=) 2: qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl (hash: a/pjXVvyaNTt8qv4kzLi8uM6qt89qLpm0/QaGJ5dY+U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:f8:4f:12:15:5a:a9:dc:08:78:e5:53:22:ce:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aafc3d2c929710306e847c607d38114aebb3cc08 Validity Not Before: Dec 24 19:01:37 2025 GMT Not After : Dec 25 19:01:37 2025 GMT Subject: CN=e32320841ab00ba03961642c2d6acb9432fb094f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1c:59:78:92:48:74:63:31:2e:80:cf:d6:b9: 55:94:f6:a1:0a:67:02:f7:2d:56:27:51:d8:dd:2c: 5a:8b:26:69:4b:aa:25:94:d4:fa:6a:8e:a4:07:e5: a9:b4:3f:e6:78:2f:c1:50:11:03:40:04:e3:95:04: c0:c0:ad:c2:70:4f:bc:02:aa:36:cf:70:89:d1:55: e6:a6:c5:de:e0:40:f4:41:98:f5:ac:c4:38:be:ba: 03:6a:c9:75:9e:7f:b6:29:b6:0a:f2:91:e7:85:c7: c9:e9:bf:6d:24:ba:69:4d:e9:92:12:33:8b:0f:2f: 83:8e:65:ba:60:15:94:0d:f1:35:a0:4c:b1:8b:f4: aa:a0:2e:b3:59:c9:d2:78:90:97:d6:46:b8:67:65: e5:10:6b:66:6e:a2:7b:50:6d:7f:b9:0e:18:46:f8: 2d:d8:b5:99:75:d6:da:2c:f7:26:33:f0:3d:54:59: 57:65:59:9e:6c:22:35:d5:38:09:4d:84:88:b7:86: ed:4f:73:48:bc:8a:b2:76:3b:1d:f0:da:c4:f6:0a: 27:03:60:05:1e:94:2a:ca:bf:5d:aa:50:c5:1f:d7: 37:a1:1e:37:f1:70:c5:66:b3:02:6d:b0:d1:b8:12: 16:33:21:68:7f:ec:76:ac:f4:01:2d:42:0a:b9:86: b5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:23:20:84:1A:B0:0B:A0:39:61:64:2C:2D:6A:CB:94:32:FB:09:4F X509v3 Authority Key Identifier: keyid:AA:FC:3D:2C:92:97:10:30:6E:84:7C:60:7D:38:11:4A:EB:B3:CC:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:c7:d1:1c:27:87:72:2e:76:40:46:7f:96:e7:5d:b0:d8:f1: f7:81:33:fb:10:16:86:52:f7:13:49:46:e8:84:51:01:81:91: 2d:b0:15:f5:31:4f:f1:b9:22:34:d6:fc:9a:3e:60:ed:83:a6: b4:0e:43:e0:4c:8d:8a:d0:45:b2:25:df:a8:8d:1c:26:43:73: 9b:9d:b1:1b:0e:2b:25:6b:b4:d1:ed:1d:02:ec:ee:5e:ac:b8: 80:8e:94:bf:23:ea:63:fb:b0:aa:40:31:3f:32:31:b7:69:48: bc:02:cf:a5:1c:63:e7:02:6c:13:2d:be:d3:95:6b:ce:11:a2: 1d:31:e6:83:f0:5b:ba:10:a1:ae:e4:ed:b6:f5:ce:b7:03:c8: dc:2e:51:48:e3:94:5d:39:14:73:91:36:3d:69:2b:1f:60:bf: fd:4f:29:35:19:89:b1:b2:9e:a2:a8:b9:b3:74:32:53:94:c4: 9e:43:14:5d:73:33:07:9b:ae:8a:90:1c:c3:7d:19:15:f3:9b: c1:20:37:33:28:7a:68:43:1c:04:f4:67:1b:43:78:fe:e0:fd: 19:d7:b1:d2:65:93:b1:c1:b3:b9:9c:7c:94:f0:f7:fa:45:f1: f7:64:7b:bf:db:8a:44:a8:38:f2:e5:2f:da:44:db:be:46:dd: 39:55:e8:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvPhPEhVaqdwIeOVTIs7cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhZmMzZDJjOTI5NzEwMzA2ZTg0N2M2MDdkMzgxMTRhZWJi M2NjMDgwHhcNMjUxMjI0MTkwMTM3WhcNMjUxMjI1MTkwMTM3WjAzMTEwLwYDVQQD EyhlMzIzMjA4NDFhYjAwYmEwMzk2MTY0MmMyZDZhY2I5NDMyZmIwOTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhxZeJJIdGMxLoDP1rlVlPahCmcC 9y1WJ1HY3SxaiyZpS6ollNT6ao6kB+WptD/meC/BUBEDQATjlQTAwK3CcE+8Aqo2 z3CJ0VXmpsXe4ED0QZj1rMQ4vroDasl1nn+2KbYK8pHnhcfJ6b9tJLppTemSEjOL Dy+DjmW6YBWUDfE1oEyxi/SqoC6zWcnSeJCX1ka4Z2XlEGtmbqJ7UG1/uQ4YRvgt 2LWZddbaLPcmM/A9VFlXZVmebCI11TgJTYSIt4btT3NIvIqydjsd8NrE9gonA2AF HpQqyr9dqlDFH9c3oR438XDFZrMCbbDRuBIWMyFof+x2rPQBLUIKuYa1gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOMjIIQasAugOWFkLC1qy5Qy+wlPMB8GA1UdIwQY MBaAFKr8PSySlxAwboR8YH04EUrrs8wIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXZ3OUxKS1hFREJ1aEh4Z2ZUZ1JTdXV6ekFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82Mzc5NDYtN2JmMi00OWEzLWI1MGMt MTM3ZDg2ZTMwM2M1LzEvcXZ3OUxKS1hFREJ1aEh4Z2ZUZ1JTdXV6ekFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy82Mzc5NDYtN2JmMi00OWEzLWI1MGMtMTM3ZDg2ZTMwM2M1 LzEvcXZ3OUxKS1hFREJ1aEh4Z2ZUZ1JTdXV6ekFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASMfRHCeH ci52QEZ/luddsNjx94Ez+xAWhlL3E0lG6IRRAYGRLbAV9TFP8bkiNNb8mj5g7YOm tA5D4EyNitBFsiXfqI0cJkNzm52xGw4rJWu00e0dAuzuXqy4gI6UvyPqY/uwqkAx PzIxt2lIvALPpRxj5wJsEy2+05VrzhGiHTHmg/BbuhChruTttvXOtwPI3C5RSOOU XTkUc5E2PWkrH2C//U8pNRmJsbKeoqi5s3QyU5TEnkMUXXMzB5uuipAcw30ZFfOb wSA3Myh6aEMcBPRnG0N4/uD9Gdex0mWTscGzuZx8lPD3+kXx92R7v9uKRKg48uUv 2kTbvkbdOVXokg== -----END CERTIFICATE-----Generated at Thu Dec 25 04:31:58 2025 by rpki-client