This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft File: qTnMFiHuMBCumOEnvSVKeDP9KCc.mft (raw, json) Hash identifier: xDAzC0jpZlRaHF1+gp6odFpXm3ByJ74UicSzRWrQtJ8= Subject key identifier: 0A:89:00:5B:E9:CE:95:A1:FF:1F:B7:DE:E7:ED:35:FD:E3:C4:91:E0 Authority key identifier: A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27 Certificate issuer: /CN=a939cc1621ee3010ae98e127bd254a7833fd2827 Certificate serial: 019B3EDA9677ED10B226FB9CA845B9CEBB4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft Manifest number: 10A6 Signing time: Sun 21 Dec 2025 03:01:11 +0000 Manifest this update: Sun 21 Dec 2025 03:01:11 +0000 Manifest next update: Mon 22 Dec 2025 03:01:11 +0000 Files and hashes: 1: I8M09wEb8pPy5aE1tmLVBA1QjII.roa (hash: H2KzL98idyYXiGDF46vhI9MdVSfKRRTkQwlTKnfvbNE=) 2: kE5clAT_On1-sKoap2EGHHtO9ks.roa (hash: 2Gqvz4gyypjZzZQdA4iyMYqLbiLT02xiEIZm2TleSrU=) 3: m8QWxGjBijSQKviqiwGPDVQObsM.roa (hash: 0nynt3B6pt+z65wp6r175QdY0trgb8BxBMo+4Klvl7g=) 4: qTnMFiHuMBCumOEnvSVKeDP9KCc.crl (hash: p7FzLSnb6s7/NzhxGIWtjCe4eLBJHXMJIKaiB1f5uvY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 03:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:96:77:ed:10:b2:26:fb:9c:a8:45:b9:ce:bb:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a939cc1621ee3010ae98e127bd254a7833fd2827 Validity Not Before: Dec 21 03:01:11 2025 GMT Not After : Dec 22 03:01:11 2025 GMT Subject: CN=0a89005be9ce95a1ff1fb7dee7ed35fde3c491e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e1:bb:06:87:0a:77:81:92:a5:bf:9b:58:d1: 7d:4c:58:11:4c:12:4f:c3:92:75:02:c2:3b:ef:25: ba:1a:11:e9:32:d8:70:67:2e:51:3f:17:eb:38:fa: 0c:a8:0a:e6:6b:ec:da:47:6e:02:80:fb:be:e7:3a: 7e:51:21:cf:11:21:f5:4b:0a:c9:bf:f8:11:5a:a6: f3:be:b4:16:b1:fd:06:bc:46:90:ff:d0:44:2d:94: 9e:a9:d4:e4:15:30:48:68:81:6a:4d:b1:9d:c2:56: 2f:93:ce:e5:34:10:95:7b:3c:5e:bd:9b:70:e4:8f: 4f:bd:e8:7c:ff:6c:c1:db:ea:d6:0a:45:18:27:7a: 76:d2:70:a0:a3:58:18:0c:78:9e:34:89:92:0e:d9: d0:34:ef:60:4c:9f:dd:28:c9:af:12:56:57:1c:2b: b1:23:62:6e:76:c8:3c:d2:10:c0:31:38:08:f7:b0: 17:55:73:50:d8:51:bf:60:4d:e2:49:8c:98:af:34: 80:12:d6:fd:41:fc:79:ee:5f:1b:03:3e:b2:f2:a1: b3:8f:1f:6d:86:2a:45:a8:e9:9a:78:9d:a4:4a:27: e6:99:c8:af:e6:91:5a:9c:1a:58:64:e2:c0:c7:76: db:dd:05:f4:ce:19:4e:c8:99:d0:8e:e3:94:e7:95: ca:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:89:00:5B:E9:CE:95:A1:FF:1F:B7:DE:E7:ED:35:FD:E3:C4:91:E0 X509v3 Authority Key Identifier: keyid:A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:16:bc:ff:3f:5a:33:81:f3:c5:f7:be:01:4c:b9:23:2f:41: 78:47:db:3f:55:8d:ca:41:2e:b4:69:77:86:cc:68:ab:79:07: 34:ad:ba:23:a5:9b:55:28:b5:8f:22:51:32:72:04:90:0e:29: c2:bb:f1:36:b4:a7:0c:ca:f0:0e:de:b7:7c:4b:d5:01:2c:a0: 0f:11:2a:c8:94:b7:2b:44:b8:4b:d3:e6:45:41:a5:7c:6f:46: 8f:00:38:53:68:a0:76:6d:a7:37:19:26:2e:78:51:45:f8:9b: e1:22:4d:e2:09:6d:04:2c:c0:6c:c3:67:a8:c2:24:7e:97:f0: 1a:55:60:4b:81:b6:f8:0c:c1:5c:29:58:78:b5:e8:53:39:df: 43:3b:1a:ef:f1:3a:73:18:e5:fe:ef:07:1c:e3:fd:97:fd:c1: f1:9a:4d:d5:ff:a0:1d:98:14:30:03:55:ef:06:60:a6:9d:a9: cd:fd:09:b6:36:6c:04:a8:f4:68:13:d8:ac:ad:82:49:de:6a: 52:50:c0:59:83:5b:ff:38:98:7d:54:fe:07:30:37:32:4d:7a: 01:5a:4e:26:7c:63:55:a8:c6:60:e7:95:5f:b4:de:8c:fc:28: 9f:7d:9b:e8:62:30:45:46:74:ee:19:05:40:8b:17:b7:30:f3: 86:7f:51:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2pZ37RCyJvucqEW5zrtPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MzljYzE2MjFlZTMwMTBhZTk4ZTEyN2JkMjU0YTc4MzNm ZDI4MjcwHhcNMjUxMjIxMDMwMTExWhcNMjUxMjIyMDMwMTExWjAzMTEwLwYDVQQD EygwYTg5MDA1YmU5Y2U5NWExZmYxZmI3ZGVlN2VkMzVmZGUzYzQ5MWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+G7BocKd4GSpb+bWNF9TFgRTBJP w5J1AsI77yW6GhHpMthwZy5RPxfrOPoMqArma+zaR24CgPu+5zp+USHPESH1SwrJ v/gRWqbzvrQWsf0GvEaQ/9BELZSeqdTkFTBIaIFqTbGdwlYvk87lNBCVezxevZtw 5I9Pveh8/2zB2+rWCkUYJ3p20nCgo1gYDHieNImSDtnQNO9gTJ/dKMmvElZXHCux I2Judsg80hDAMTgI97AXVXNQ2FG/YE3iSYyYrzSAEtb9Qfx57l8bAz6y8qGzjx9t hipFqOmaeJ2kSifmmciv5pFanBpYZOLAx3bb3QX0zhlOyJnQjuOU55XKsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAqJAFvpzpWh/x+33uftNf3jxJHgMB8GA1UdIwQY MBaAFKk5zBYh7jAQrpjhJ70lSngz/SgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVRuTUZpSHVNQkN1bU9FbnZTVktlRFA5S0NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9kNWJmNzItMzExNS00YzcxLWExYmYt YjA2MTk0ZDEzYzZiLzEvcVRuTUZpSHVNQkN1bU9FbnZTVktlRFA5S0NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9kNWJmNzItMzExNS00YzcxLWExYmYtYjA2MTk0ZDEzYzZi LzEvcVRuTUZpSHVNQkN1bU9FbnZTVktlRFA5S0NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnRa8/z9a M4Hzxfe+AUy5Iy9BeEfbP1WNykEutGl3hsxoq3kHNK26I6WbVSi1jyJRMnIEkA4p wrvxNrSnDMrwDt63fEvVASygDxEqyJS3K0S4S9PmRUGlfG9GjwA4U2igdm2nNxkm LnhRRfib4SJN4gltBCzAbMNnqMIkfpfwGlVgS4G2+AzBXClYeLXoUznfQzsa7/E6 cxjl/u8HHOP9l/3B8ZpN1f+gHZgUMANV7wZgpp2pzf0JtjZsBKj0aBPYrK2CSd5q UlDAWYNb/ziYfVT+BzA3Mk16AVpOJnxjVajGYOeVX7TejPwon32b6GIwRUZ07hkF QIsXtzDzhn9RWA== -----END CERTIFICATE-----Generated at Sun Dec 21 10:51:42 2025 by rpki-client