This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft File: qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft (raw, json) Hash identifier: 0TBos1hLgAHfrAXbgt7NG7h7YxdtvOXBGGQdy6Mqg0g= Subject key identifier: D9:6E:63:CC:12:90:7A:06:AF:FC:62:E6:20:67:94:87:A3:02:CA:EA Authority key identifier: AA:44:E2:E8:12:F0:9A:C4:FE:2B:47:E4:26:9C:E1:A0:20:21:CA:0E Certificate issuer: /CN=aa44e2e812f09ac4fe2b47e4269ce1a02021ca0e Certificate serial: 019B424A3ACE619D35409B46814522380E85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 19:01:59 +0000 Manifest this update: Sun 21 Dec 2025 19:01:59 +0000 Manifest next update: Mon 22 Dec 2025 19:01:59 +0000 Files and hashes: 1: Ksr0uLkRk2xgBxHqi3sQnitvzew.roa (hash: WSC+ZUBgflwaiPFD1qCd7YKaOxvqrLSTyitqpFIOSP4=) 2: qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl (hash: E/Z6835uDuoppaN6R983JvHMqwOyQEz/3JHJ8hqpzgk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:3a:ce:61:9d:35:40:9b:46:81:45:22:38:0e:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa44e2e812f09ac4fe2b47e4269ce1a02021ca0e Validity Not Before: Dec 21 19:01:59 2025 GMT Not After : Dec 22 19:01:59 2025 GMT Subject: CN=d96e63cc12907a06affc62e620679487a302caea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:dc:5d:80:90:2e:2e:22:40:17:ff:70:9d:1b: 39:b8:00:fd:57:71:8f:76:da:e7:cd:87:12:25:1c: c3:d4:7b:4b:41:5b:6b:54:5f:9e:d9:f7:c4:1a:76: ab:bd:f7:78:4d:d2:9a:33:25:fd:23:53:6a:aa:ee: 48:8b:df:be:86:4e:76:f4:6a:13:f0:f9:a5:83:09: 8b:28:62:b8:c3:8d:88:01:50:fa:19:d7:5b:d2:78: 72:c2:36:6a:87:89:c7:b9:fd:7b:99:d0:65:ed:13: fc:10:75:06:55:b7:37:87:6c:02:54:7e:7b:4f:ed: ca:af:79:ca:99:9c:22:04:84:54:8e:98:8d:76:7d: e9:55:27:7d:99:72:3e:8e:36:1c:a8:c9:ff:90:38: 41:63:ae:4d:1d:77:e6:51:27:cc:a0:52:80:a0:7c: 97:ea:85:15:c8:1b:e9:59:14:29:b2:eb:b7:6d:04: e0:32:c0:7f:bd:9f:22:e9:c8:a4:df:7d:de:30:7c: b2:69:aa:62:9c:a8:fe:09:e3:69:16:59:27:7c:64: cd:3d:57:05:68:4b:94:ca:d2:f8:3d:68:e7:c7:73: 19:e3:71:0c:6e:dc:b6:9a:d9:46:cb:5a:77:0f:f2: f8:ec:8a:ce:d8:f3:45:97:64:cf:b8:91:5c:15:77: c2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6E:63:CC:12:90:7A:06:AF:FC:62:E6:20:67:94:87:A3:02:CA:EA X509v3 Authority Key Identifier: keyid:AA:44:E2:E8:12:F0:9A:C4:FE:2B:47:E4:26:9C:E1:A0:20:21:CA:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:9b:66:53:3d:89:52:10:02:2c:d9:0b:d2:ad:85:5c:22:3f: 83:f9:75:c3:4e:18:d2:15:54:81:02:be:c6:62:cb:cc:54:f4: e0:33:7d:8e:cd:06:7c:ed:39:26:5a:d6:da:d9:57:19:1a:c1: 87:8a:d9:9e:33:d3:54:f4:f9:41:1c:68:b0:14:ac:ab:9b:c1: 5a:58:05:07:13:e5:db:f4:ec:e2:72:b7:cc:d7:bf:5a:bf:a9: 2f:cf:0d:fb:ba:1b:99:27:f3:ad:4e:de:6e:eb:f2:93:2a:82: c8:aa:09:ab:60:be:fc:6b:f0:f4:9b:6c:d4:7a:c9:09:15:97: a3:5b:fb:ab:49:ba:92:08:19:d6:f2:4d:b4:86:e3:3d:39:75: 61:fd:e9:e8:b7:86:99:b1:74:0b:a3:ac:05:8b:61:04:ef:63: b3:8f:2b:7e:4f:a9:fd:05:df:85:c4:58:1f:29:aa:47:f7:65: 0e:3a:48:5d:1d:df:cf:91:95:3d:58:ad:3a:48:0e:98:26:df: 04:2f:2d:38:c9:a1:a3:1d:85:39:11:3b:a6:15:7a:d0:11:d1: bb:75:46:5a:7b:59:04:d4:f8:5a:76:03:98:38:b3:f8:9b:70: d7:a4:df:5e:31:55:96:89:ba:5d:67:0e:1b:1d:44:0a:39:a9: 12:7e:f5:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSjrOYZ01QJtGgUUiOA6FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNDRlMmU4MTJmMDlhYzRmZTJiNDdlNDI2OWNlMWEwMjAy MWNhMGUwHhcNMjUxMjIxMTkwMTU5WhcNMjUxMjIyMTkwMTU5WjAzMTEwLwYDVQQD EyhkOTZlNjNjYzEyOTA3YTA2YWZmYzYyZTYyMDY3OTQ4N2EzMDJjYWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndxdgJAuLiJAF/9wnRs5uAD9V3GP dtrnzYcSJRzD1HtLQVtrVF+e2ffEGnarvfd4TdKaMyX9I1Nqqu5Ii9++hk529GoT 8PmlgwmLKGK4w42IAVD6Gddb0nhywjZqh4nHuf17mdBl7RP8EHUGVbc3h2wCVH57 T+3Kr3nKmZwiBIRUjpiNdn3pVSd9mXI+jjYcqMn/kDhBY65NHXfmUSfMoFKAoHyX 6oUVyBvpWRQpsuu3bQTgMsB/vZ8i6cik333eMHyyaapinKj+CeNpFlknfGTNPVcF aEuUytL4PWjnx3MZ43EMbty2mtlGy1p3D/L47IrO2PNFl2TPuJFcFXfCDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNluY8wSkHoGr/xi5iBnlIejAsrqMB8GA1UdIwQY MBaAFKpE4ugS8JrE/itH5Cac4aAgIcoOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWtUaTZCTHdtc1QtSzBma0pwemhvQ0FoeWc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9lYTZhMjQtODA3NS00N2RlLWIxZTYt ODY2NDBmY2EzM2JmLzEvcWtUaTZCTHdtc1QtSzBma0pwemhvQ0FoeWc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9lYTZhMjQtODA3NS00N2RlLWIxZTYtODY2NDBmY2EzM2Jm LzEvcWtUaTZCTHdtc1QtSzBma0pwemhvQ0FoeWc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX5tmUz2J UhACLNkL0q2FXCI/g/l1w04Y0hVUgQK+xmLLzFT04DN9js0GfO05JlrW2tlXGRrB h4rZnjPTVPT5QRxosBSsq5vBWlgFBxPl2/Ts4nK3zNe/Wr+pL88N+7obmSfzrU7e buvykyqCyKoJq2C+/Gvw9Jts1HrJCRWXo1v7q0m6kggZ1vJNtIbjPTl1Yf3p6LeG mbF0C6OsBYthBO9js48rfk+p/QXfhcRYHymqR/dlDjpIXR3fz5GVPVitOkgOmCbf BC8tOMmhox2FORE7phV60BHRu3VGWntZBNT4WnYDmDiz+Jtw16TfXjFVlom6XWcO Gx1ECjmpEn71cA== -----END CERTIFICATE-----Generated at Mon Dec 22 00:50:39 2025 by rpki-client