This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft File: qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft (raw, json) Hash identifier: n9XnirOlJB8UYsL61xqE/FCN9cIfrjqLxCaAc576d18= Subject key identifier: F0:42:74:0F:DA:FD:FA:88:6B:24:0D:C5:5E:F7:A3:B4:FB:90:06:57 Authority key identifier: A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89 Certificate issuer: /CN=a952d0d266557385836aab7ae3fdced4ca74ad89 Certificate serial: 019B3D5A29712A7FEB0D937F972E6EADFF2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft Manifest number: 0B2E Signing time: Sat 20 Dec 2025 20:01:17 +0000 Manifest this update: Sat 20 Dec 2025 20:01:17 +0000 Manifest next update: Sun 21 Dec 2025 20:01:17 +0000 Files and hashes: 1: 0QN5Ofx6WwMbvcTiOoejeiVWFBY.roa (hash: k+6IIDKqJuYMt9/EhXM2bPBbRQ5u5Kv99iIIWzz5/2A=) 2: 1-SuDyMrxWXM7X2VtIVu9aGgRI9Y.roa (hash: 18EMBTikkSXkhqeBREgORyh2My5yAHMuFmHNML82Td4=) 3: WajP5tLioaX2Ro2cswqvvjdGPQM.roa (hash: sEIrgpW5WhiY7JBDfxS8K7V3ujO4klv15fpTFTGiTlE=) 4: qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl (hash: 50IHGX0YUjFmq6jWjiD3uVHk+VUbBDYFFfk//rVfeC0=) 5: w6nRqqLinLORL7W_fsNehh2pePE.roa (hash: hnUVitPfz7Hljib/HgZzf6AtllwvuxtgqDf0jZ0Pk10=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:29:71:2a:7f:eb:0d:93:7f:97:2e:6e:ad:ff:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a952d0d266557385836aab7ae3fdced4ca74ad89 Validity Not Before: Dec 20 20:01:17 2025 GMT Not After : Dec 21 20:01:17 2025 GMT Subject: CN=f042740fdafdfa886b240dc55ef7a3b4fb900657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:9f:b4:66:46:31:a0:bc:5d:dc:fc:27:af:69: 3d:e1:19:72:58:c9:b5:71:35:63:7b:b1:da:11:ae: 5b:c2:ac:41:e2:44:b3:be:cd:61:ed:a3:cc:b2:29: 36:84:85:e3:be:cf:74:1e:45:25:18:33:2e:36:0a: d0:73:27:5a:72:75:97:a8:44:0b:a1:ab:24:80:4d: 3f:30:b7:23:59:15:73:3d:29:64:b6:f7:10:06:4c: 02:85:70:6c:c6:29:7b:ba:52:70:5e:70:f4:3e:d4: e0:ac:34:ee:7d:00:37:c2:68:38:04:c3:10:7c:21: 10:4d:c2:5f:fa:d4:b7:84:64:4e:42:6f:dd:eb:a2: ce:33:a0:1a:c8:88:42:bb:33:fa:44:33:9e:1a:16: 1c:28:14:5d:8e:86:f3:b5:43:1b:17:f9:71:e8:12: 76:2b:35:70:f0:cc:4b:d3:f3:8a:d2:e0:e4:d9:b5: 34:49:68:7d:00:b9:b8:bf:1b:ff:cc:0f:43:31:65: 2b:8f:0b:24:43:7b:c8:85:21:d4:48:f7:c0:4c:d9: 0b:30:10:93:a7:3b:f1:06:98:d9:d4:70:7b:24:af: 75:e7:2d:9c:07:e2:7f:38:87:65:c3:eb:d3:5c:22: 92:35:6f:b5:51:b0:13:c2:61:41:9d:f3:2b:a3:d7: 01:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:42:74:0F:DA:FD:FA:88:6B:24:0D:C5:5E:F7:A3:B4:FB:90:06:57 X509v3 Authority Key Identifier: keyid:A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:fc:73:a4:28:a6:8c:03:bd:5e:1f:15:98:ab:8d:ec:cc:f6: 71:db:50:54:78:75:7d:94:a6:de:82:4b:21:f5:18:f4:1b:b2: 2c:bf:a0:be:72:0e:2b:49:ed:7d:27:c7:4c:c9:4f:a8:7e:c6: 94:57:15:ef:91:56:e3:b6:a1:a5:82:67:f3:ed:15:9c:93:9b: 94:20:a1:78:ad:1b:21:5d:cc:f1:e0:06:27:f6:14:87:4a:36: 41:ec:1a:40:bd:d7:a4:d5:fc:43:c9:16:b0:a4:3c:92:e7:9c: 34:48:2e:88:2c:3c:24:b1:6d:10:de:86:7b:df:48:39:e2:bc: 02:1a:d6:40:90:5a:bf:a5:2a:a9:31:f1:3d:da:71:f3:78:0c: 37:b3:1f:14:cd:d4:0f:61:c2:a8:4e:31:2b:59:e5:8f:83:50: fa:51:b7:e5:8e:d0:c8:fa:cd:31:2e:92:ef:7b:25:c4:b3:c7: 77:f1:49:b9:6b:6a:fb:ff:58:cf:e7:50:ff:ac:03:5c:3d:49: 97:75:09:05:41:c6:1a:0d:0d:8c:06:e7:c3:f4:c5:2d:54:27: 46:bf:7c:cd:ef:88:20:9a:20:0a:b6:a7:28:d7:12:1e:ac:ca: fe:2a:dd:35:c9:f8:06:33:71:d2:95:79:a2:7b:5d:b6:68:b9: 46:a6:b4:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WilxKn/rDZN/ly5urf8rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5NTJkMGQyNjY1NTczODU4MzZhYWI3YWUzZmRjZWQ0Y2E3 NGFkODkwHhcNMjUxMjIwMjAwMTE3WhcNMjUxMjIxMjAwMTE3WjAzMTEwLwYDVQQD EyhmMDQyNzQwZmRhZmRmYTg4NmIyNDBkYzU1ZWY3YTNiNGZiOTAwNjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4J+0ZkYxoLxd3Pwnr2k94RlyWMm1 cTVje7HaEa5bwqxB4kSzvs1h7aPMsik2hIXjvs90HkUlGDMuNgrQcydacnWXqEQL oaskgE0/MLcjWRVzPSlktvcQBkwChXBsxil7ulJwXnD0PtTgrDTufQA3wmg4BMMQ fCEQTcJf+tS3hGROQm/d66LOM6AayIhCuzP6RDOeGhYcKBRdjobztUMbF/lx6BJ2 KzVw8MxL0/OK0uDk2bU0SWh9ALm4vxv/zA9DMWUrjwskQ3vIhSHUSPfATNkLMBCT pzvxBpjZ1HB7JK915y2cB+J/OIdlw+vTXCKSNW+1UbATwmFBnfMro9cBjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPBCdA/a/fqIayQNxV73o7T7kAZXMB8GA1UdIwQY MBaAFKlS0NJmVXOFg2qreuP9ztTKdK2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVZMUTBtWlZjNFdEYXF0NjRfM08xTXAwcllrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8yNzBhOTEtY2JmZC00NTAzLWI5NjAt NGMyMWE1MDVmMzQ2LzEvcVZMUTBtWlZjNFdEYXF0NjRfM08xTXAwcllrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8yNzBhOTEtY2JmZC00NTAzLWI5NjAtNGMyMWE1MDVmMzQ2 LzEvcVZMUTBtWlZjNFdEYXF0NjRfM08xTXAwcllrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaPxzpCim jAO9Xh8VmKuN7Mz2cdtQVHh1fZSm3oJLIfUY9BuyLL+gvnIOK0ntfSfHTMlPqH7G lFcV75FW47ahpYJn8+0VnJOblCCheK0bIV3M8eAGJ/YUh0o2QewaQL3XpNX8Q8kW sKQ8kuecNEguiCw8JLFtEN6Ge99IOeK8AhrWQJBav6UqqTHxPdpx83gMN7MfFM3U D2HCqE4xK1nlj4NQ+lG35Y7QyPrNMS6S73slxLPHd/FJuWtq+/9Yz+dQ/6wDXD1J l3UJBUHGGg0NjAbnw/TFLVQnRr98ze+IIJogCranKNcSHqzK/irdNcn4BjNx0pV5 ontdtmi5Rqa0xw== -----END CERTIFICATE-----Generated at Sun Dec 21 01:21:44 2025 by rpki-client