This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.mft File: qjHuUSwaViq56UEKgx9y_UMYiS4.mft (raw, json) Hash identifier: 8k6DWIRlndMDnmDEhjKWYTZ2c4MbxNA4GrVhQ1VEwVs= Subject key identifier: 7D:16:48:04:24:61:74:77:F6:32:60:98:24:80:54:A6:99:B7:C2:16 Authority key identifier: AA:31:EE:51:2C:1A:56:2A:B9:E9:41:0A:83:1F:72:FD:43:18:89:2E Certificate issuer: /CN=aa31ee512c1a562ab9e9410a831f72fd4318892e Certificate serial: 019B6FFD5549AE26ADA00C52896E12273FAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjHuUSwaViq56UEKgx9y_UMYiS4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.mft Manifest number: 0A7C Signing time: Tue 30 Dec 2025 16:00:31 +0000 Manifest this update: Tue 30 Dec 2025 16:00:31 +0000 Manifest next update: Wed 31 Dec 2025 16:00:31 +0000 Files and hashes: 1: TrtR0Owq5Xkx-biJC8Ej_IhK1Ag.roa (hash: a1F6oMMLvEFRIYoQInrH9FMRLmJcoCgIJF0JoxM2u7Q=) 2: qjHuUSwaViq56UEKgx9y_UMYiS4.crl (hash: tsxwF1cIgoDceu5LV14LvXI4FBTW2n/Ac9bbxHzuHsA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.mft rsync://rpki.ripe.net/repository/DEFAULT/qjHuUSwaViq56UEKgx9y_UMYiS4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:fd:55:49:ae:26:ad:a0:0c:52:89:6e:12:27:3f:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31ee512c1a562ab9e9410a831f72fd4318892e Validity Not Before: Dec 30 16:00:31 2025 GMT Not After : Dec 31 16:00:31 2025 GMT Subject: CN=7d16480424617477f6326098248054a699b7c216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:0c:20:7f:7a:78:d3:b6:e6:d8:e2:5a:d1:9f: 8d:4d:34:fc:81:47:d8:8b:49:f7:bd:f7:0d:c6:e0: 57:26:5c:02:81:23:d4:5a:41:28:4c:16:d4:ca:4e: 7f:83:70:d5:ff:42:2d:da:fd:7c:a8:2e:f2:8c:a4: 00:b1:bf:58:c1:3d:bd:54:24:94:9d:c4:17:d9:e6: 30:e3:ec:d6:a2:6e:82:49:13:7e:bb:72:2c:55:03: 22:7a:ea:61:62:d5:96:cd:b5:3d:3f:8e:92:91:de: 4a:cb:f0:b1:4d:3f:6b:49:c5:25:77:ea:00:62:c2: 4d:65:73:14:fe:44:82:b3:cd:9a:16:97:f0:2b:5a: 56:fa:14:63:21:43:f4:44:bf:f4:f6:b1:d4:8f:58: f5:6e:81:f5:03:02:2c:67:57:0b:d9:ab:cb:b4:be: eb:6a:5d:8b:11:1b:aa:6d:40:9f:48:cb:ae:5a:82: 37:a9:cc:2d:1b:27:5d:a8:43:91:31:dc:dd:a7:70: 7d:fb:e8:04:40:e3:dd:9a:3b:43:6b:e4:2c:ba:87: 71:17:88:4d:a8:3d:de:f7:3b:06:e0:63:3b:43:b9: b4:c4:e2:a7:cb:c9:74:c4:5a:9d:e9:f9:ee:18:c1: 3c:f3:8c:c0:6a:e1:92:8a:a3:e5:fd:4f:d2:b9:76: 7b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:16:48:04:24:61:74:77:F6:32:60:98:24:80:54:A6:99:B7:C2:16 X509v3 Authority Key Identifier: keyid:AA:31:EE:51:2C:1A:56:2A:B9:E9:41:0A:83:1F:72:FD:43:18:89:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjHuUSwaViq56UEKgx9y_UMYiS4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:46:bc:6f:74:9b:3e:38:74:57:b4:99:95:d7:4d:e0:c7:45: f2:b4:4e:af:10:22:bb:9b:df:1e:ca:d4:b3:f5:cc:38:ab:7e: cf:fc:2c:09:55:31:25:5e:b2:d6:7a:23:a9:25:b9:13:8c:fa: 33:7f:63:07:72:38:58:8d:94:b6:c0:6d:e0:ad:f5:b2:b2:ab: 77:46:ba:25:28:8c:c3:8b:4a:8f:4d:85:e8:92:4e:ab:5c:21: 0f:70:0f:f0:23:7c:7a:28:5b:c6:99:8a:7a:dc:36:a2:a0:2e: 40:42:10:d3:3c:62:d9:0a:23:35:b4:38:96:32:19:93:1f:99: 39:f6:a7:b4:23:d7:ba:c3:7b:da:aa:9b:d5:8a:55:a1:7d:99: a9:1f:f1:04:30:46:b3:ad:3d:41:e3:85:e3:9a:44:24:5a:5a: cb:51:c7:d7:d7:ce:c9:88:91:2b:aa:ab:b1:ed:e7:f4:91:80: 81:d7:95:d6:de:93:91:fa:4f:4d:4b:c9:2d:87:0b:24:e1:ba: d0:66:1a:24:e0:49:66:c4:d1:5c:5c:fc:39:1b:6a:7d:d7:38: ac:40:e3:17:65:09:be:f1:de:5d:da:42:3a:0f:2a:5a:89:61: 16:2f:ff:8b:4d:1a:0f:19:47:14:10:8e:81:7f:ca:03:85:b5: a9:61:22:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtv/VVJriatoAxSiW4SJz+rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMzFlZTUxMmMxYTU2MmFiOWU5NDEwYTgzMWY3MmZkNDMx ODg5MmUwHhcNMjUxMjMwMTYwMDMxWhcNMjUxMjMxMTYwMDMxWjAzMTEwLwYDVQQD Eyg3ZDE2NDgwNDI0NjE3NDc3ZjYzMjYwOTgyNDgwNTRhNjk5YjdjMjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Qwgf3p407bm2OJa0Z+NTTT8gUfY i0n3vfcNxuBXJlwCgSPUWkEoTBbUyk5/g3DV/0It2v18qC7yjKQAsb9YwT29VCSU ncQX2eYw4+zWom6CSRN+u3IsVQMieuphYtWWzbU9P46Skd5Ky/CxTT9rScUld+oA YsJNZXMU/kSCs82aFpfwK1pW+hRjIUP0RL/09rHUj1j1boH1AwIsZ1cL2avLtL7r al2LERuqbUCfSMuuWoI3qcwtGyddqEORMdzdp3B9++gEQOPdmjtDa+QsuodxF4hN qD3e9zsG4GM7Q7m0xOKny8l0xFqd6fnuGME884zAauGSiqPl/U/SuXZ7FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0WSAQkYXR39jJgmCSAVKaZt8IWMB8GA1UdIwQY MBaAFKox7lEsGlYquelBCoMfcv1DGIkuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWpIdVVTd2FWaXE1NlVFS2d4OXlfVU1ZaVM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9lN2VmNTQtYmRiMC00NTBhLTg2NDYt ZWUwODE0NmUzNzEzLzEvcWpIdVVTd2FWaXE1NlVFS2d4OXlfVU1ZaVM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9lN2VmNTQtYmRiMC00NTBhLTg2NDYtZWUwODE0NmUzNzEz LzEvcWpIdVVTd2FWaXE1NlVFS2d4OXlfVU1ZaVM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZUa8b3Sb Pjh0V7SZlddN4MdF8rROrxAiu5vfHsrUs/XMOKt+z/wsCVUxJV6y1nojqSW5E4z6 M39jB3I4WI2UtsBt4K31srKrd0a6JSiMw4tKj02F6JJOq1whD3AP8CN8eihbxpmK etw2oqAuQEIQ0zxi2QojNbQ4ljIZkx+ZOfantCPXusN72qqb1YpVoX2ZqR/xBDBG s609QeOF45pEJFpay1HH19fOyYiRK6qrse3n9JGAgdeV1t6TkfpPTUvJLYcLJOG6 0GYaJOBJZsTRXFz8ORtqfdc4rEDjF2UJvvHeXdpCOg8qWolhFi//i00aDxlHFBCO gX/KA4W1qWEisA== -----END CERTIFICATE-----Generated at Tue Dec 30 18:44:53 2025 by rpki-client