This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft File: pqqcrek75rp8irsyODGAdjF9YH0.mft (raw, json) Hash identifier: /XCl/i5d5hMZIi9/iGsEF3LpXZOM54Ep9BMXu5FFqUw= Subject key identifier: CB:21:EF:08:7E:CC:84:DC:35:40:21:E2:DE:2F:39:6B:90:C4:8A:34 Authority key identifier: A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D Certificate issuer: /CN=a6aa9cade93be6ba7c8abb3238318076317d607d Certificate serial: 019B360DF91B2A0C18E8C12558E444BF729D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft Manifest number: 0E9E Signing time: Fri 19 Dec 2025 10:00:43 +0000 Manifest this update: Fri 19 Dec 2025 10:00:43 +0000 Manifest next update: Sat 20 Dec 2025 10:00:43 +0000 Files and hashes: 1: S2CydqVU1Bg8JlGW4qN48rRbYzM.roa (hash: BGDB4Vnl+lNKwWJXdwvf53CCXNQUCVk3dMF/mpOaQyY=) 2: pqqcrek75rp8irsyODGAdjF9YH0.crl (hash: yPZcsim2GFbvQo8Zkw5hwA++DBAYIG+FycL42niVdTA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 10:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0d:f9:1b:2a:0c:18:e8:c1:25:58:e4:44:bf:72:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6aa9cade93be6ba7c8abb3238318076317d607d Validity Not Before: Dec 19 10:00:43 2025 GMT Not After : Dec 20 10:00:43 2025 GMT Subject: CN=cb21ef087ecc84dc354021e2de2f396b90c48a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b5:2d:51:ad:60:a0:93:2b:64:ee:96:86:f8: f8:d8:1f:a1:8b:57:b9:01:ad:07:e3:da:37:49:2d: 29:7e:67:bc:2b:0a:80:0b:4a:14:af:4c:5f:a9:ac: 77:56:55:e7:a0:ce:3c:09:dc:77:f2:af:9d:25:ef: a5:f3:40:1a:fa:17:08:17:d0:01:71:f4:45:24:8c: 77:be:54:de:ab:1d:a0:45:81:36:32:2e:0d:17:3e: 60:e4:ca:86:e7:cf:17:4c:6e:ed:c3:0e:a8:ee:21: 4b:e6:fc:58:52:8c:0c:d9:f6:0b:7a:22:cb:56:57: 8a:1b:28:09:7c:f2:2e:5c:c4:5b:c5:fc:a1:24:d9: 1d:a9:2e:71:a7:a5:59:5b:0c:cf:17:42:50:4f:b6: f9:d6:22:66:5e:60:2a:8f:9e:69:af:85:f9:df:84: 2d:9c:6b:9d:cf:52:76:dc:89:41:49:1b:5e:29:9a: 3b:e9:2f:aa:9e:68:a4:11:ec:ba:70:83:9b:e2:f0: e7:9f:d4:43:b9:c5:59:3e:79:3e:52:a8:b3:12:5e: 9f:52:01:37:5f:44:94:90:ae:98:e8:76:21:f5:da: 96:08:a4:57:0e:31:ed:e1:c4:d9:5f:c1:22:7b:c7: 0d:4f:f6:fc:b6:24:b0:4e:54:a6:e0:c9:e1:e9:d5: 2b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:21:EF:08:7E:CC:84:DC:35:40:21:E2:DE:2F:39:6B:90:C4:8A:34 X509v3 Authority Key Identifier: keyid:A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:ae:16:ad:17:50:0f:b9:a6:91:8c:e6:82:49:9a:f3:52:ea: 64:4f:7e:f4:b1:20:15:46:d0:41:f5:49:08:c2:86:bf:97:0a: e7:4b:1b:62:fc:c1:7d:38:a0:b0:8b:e3:07:fa:09:3d:3f:ba: 9a:d0:35:28:46:c4:5c:f5:b8:98:02:30:ca:a1:20:f2:ba:66: 12:bf:32:19:72:44:0e:a9:68:0a:54:47:c4:d7:b1:10:9e:88: 28:91:81:3b:e3:ad:12:80:d1:00:ca:77:21:bb:8e:26:4d:87: 04:fa:2e:d5:a3:c2:30:df:c8:be:7b:34:34:95:18:7d:49:b1: c7:81:e7:97:9b:91:db:3c:48:85:ce:92:fe:2a:c8:26:f0:a6: 10:d3:f4:6f:f9:7a:d3:fa:66:52:82:27:c7:5d:51:c8:44:0b: ad:9f:2a:3f:a0:5b:3c:13:44:f8:75:a9:36:12:87:2f:24:df: 0a:7d:52:af:07:9e:53:18:36:ac:f6:3f:21:d0:21:0b:5d:e9: b6:8e:fc:42:35:ab:8d:df:d5:97:9a:e3:31:cd:44:48:1d:0d: 82:cd:f1:f0:98:f3:29:d4:e3:e1:ee:41:c5:c7:69:71:b2:d3: 14:1e:13:9b:94:17:79:c9:dd:2f:23:2d:ef:26:f3:0b:e8:24: 9e:c9:a7:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DfkbKgwY6MElWOREv3KdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2YWE5Y2FkZTkzYmU2YmE3YzhhYmIzMjM4MzE4MDc2MzE3 ZDYwN2QwHhcNMjUxMjE5MTAwMDQzWhcNMjUxMjIwMTAwMDQzWjAzMTEwLwYDVQQD EyhjYjIxZWYwODdlY2M4NGRjMzU0MDIxZTJkZTJmMzk2YjkwYzQ4YTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLUtUa1goJMrZO6Whvj42B+hi1e5 Aa0H49o3SS0pfme8KwqAC0oUr0xfqax3VlXnoM48Cdx38q+dJe+l80Aa+hcIF9AB cfRFJIx3vlTeqx2gRYE2Mi4NFz5g5MqG588XTG7tww6o7iFL5vxYUowM2fYLeiLL VleKGygJfPIuXMRbxfyhJNkdqS5xp6VZWwzPF0JQT7b51iJmXmAqj55pr4X534Qt nGudz1J23IlBSRteKZo76S+qnmikEey6cIOb4vDnn9RDucVZPnk+UqizEl6fUgE3 X0SUkK6Y6HYh9dqWCKRXDjHt4cTZX8Eie8cNT/b8tiSwTlSm4Mnh6dUr3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMsh7wh+zITcNUAh4t4vOWuQxIo0MB8GA1UdIwQY MBaAFKaqnK3pO+a6fIq7MjgxgHYxfWB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHFxY3Jlazc1cnA4aXJzeU9ER0FkakY5WUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9hOTcwYzYtYzExOC00NTJlLWE1NmYt ZWM0NjdmYTg2MzZlLzEvcHFxY3Jlazc1cnA4aXJzeU9ER0FkakY5WUgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9hOTcwYzYtYzExOC00NTJlLWE1NmYtZWM0NjdmYTg2MzZl LzEvcHFxY3Jlazc1cnA4aXJzeU9ER0FkakY5WUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi64WrRdQ D7mmkYzmgkma81LqZE9+9LEgFUbQQfVJCMKGv5cK50sbYvzBfTigsIvjB/oJPT+6 mtA1KEbEXPW4mAIwyqEg8rpmEr8yGXJEDqloClRHxNexEJ6IKJGBO+OtEoDRAMp3 IbuOJk2HBPou1aPCMN/Ivns0NJUYfUmxx4Hnl5uR2zxIhc6S/irIJvCmENP0b/l6 0/pmUoInx11RyEQLrZ8qP6BbPBNE+HWpNhKHLyTfCn1SrweeUxg2rPY/IdAhC13p to78QjWrjd/Vl5rjMc1ESB0Ngs3x8JjzKdTj4e5BxcdpcbLTFB4Tm5QXecndLyMt 7ybzC+gknsmn1w== -----END CERTIFICATE-----Generated at Fri Dec 19 19:01:49 2025 by rpki-client