This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft File: qkHJOeqVoh87dCkB3-BfJqV3dYE.mft (raw, json) Hash identifier: Vq0ggG0yCzOos93BjVEQiMLUBFzR8j2jHDUaSno0vng= Subject key identifier: F1:43:C2:CE:DA:B4:96:2E:43:9B:01:C2:97:CD:D8:E7:26:7E:68:D3 Authority key identifier: AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81 Certificate issuer: /CN=aa41c939ea95a21f3b742901dfe05f26a5777581 Certificate serial: 019B698E1AA2E65889F451E6DB8CB2F21F21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft Manifest number: 0C82 Signing time: Mon 29 Dec 2025 10:01:19 +0000 Manifest this update: Mon 29 Dec 2025 10:01:19 +0000 Manifest next update: Tue 30 Dec 2025 10:01:19 +0000 Files and hashes: 1: qkHJOeqVoh87dCkB3-BfJqV3dYE.crl (hash: YdSh8T8rizdMbMWdUmWS9YJG0r7c9bu5CoN2EwG2hR4=) 2: wcccpGaeYTilF5ncbceAk7mBvqQ.roa (hash: gOA2BhosHOf6qCEMFAHb8yTCso/K7yQdwGzJmIy7AF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 10:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:8e:1a:a2:e6:58:89:f4:51:e6:db:8c:b2:f2:1f:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa41c939ea95a21f3b742901dfe05f26a5777581 Validity Not Before: Dec 29 10:01:19 2025 GMT Not After : Dec 30 10:01:19 2025 GMT Subject: CN=f143c2cedab4962e439b01c297cdd8e7267e68d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:85:16:f0:f5:e9:2d:25:e2:21:26:d9:12:4b: 0e:27:d8:f3:6a:e8:a5:30:c2:ee:42:c0:46:91:13: 96:06:dc:24:49:f9:13:cc:9d:01:64:c0:fd:7e:19: 0b:a4:04:3b:d8:9b:70:32:5a:58:d0:6a:31:dd:98: 25:b5:5b:9f:d3:f9:e9:ea:4a:5e:ac:ce:e8:16:a9: 29:1a:5a:c6:19:25:2c:37:79:9e:72:b0:e9:da:4b: f5:ba:ba:51:27:e2:12:ca:fc:52:fb:5a:c3:df:ae: 7a:c2:01:dc:dc:e4:df:7e:c9:8d:f1:b9:5c:fb:16: 10:ec:50:cc:d9:bb:a5:34:79:ed:f7:4b:fb:6b:98: a7:37:7c:41:4b:5c:6e:49:ee:8c:e0:ea:13:0c:0c: 6d:d2:4d:3f:40:94:e1:22:2e:5e:d4:c7:63:56:d8: 11:46:e1:bc:04:d9:da:cf:75:89:22:3d:5a:80:49: e0:68:3a:ea:83:0d:aa:04:de:14:bf:66:27:30:dd: 6f:a3:ce:14:52:83:29:be:d9:5c:24:90:3e:03:72: 5f:29:89:70:21:13:53:57:61:cb:88:02:4e:e5:59: 15:b4:4d:1d:f5:38:50:7c:b2:df:c8:08:3a:69:4d: 8b:84:5d:87:33:bc:3d:5e:07:27:91:8e:96:ac:a0: 4c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:43:C2:CE:DA:B4:96:2E:43:9B:01:C2:97:CD:D8:E7:26:7E:68:D3 X509v3 Authority Key Identifier: keyid:AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:b6:16:20:70:a3:82:4e:21:89:25:31:78:a6:5f:fa:fa:28: 90:62:26:c5:d3:24:73:b1:fa:57:db:bc:6b:7f:cb:5a:ff:6a: 4f:23:64:ad:8f:91:83:c3:a5:48:aa:4e:a3:b2:c4:e8:ed:c8: 33:b5:94:f0:a5:21:16:5d:3a:5b:12:a6:79:9e:46:d8:f3:06: ad:69:68:b4:90:ba:31:d6:42:6a:e0:22:cf:f1:62:97:7b:01: ec:85:0e:dd:51:cd:fe:ba:26:c7:a8:10:e1:68:48:8e:85:18: 8a:32:9a:55:1b:cf:6a:64:4b:72:46:d5:1a:1f:69:14:b6:ba: bc:9f:8d:03:32:b1:10:5a:1d:c9:a7:61:de:4c:99:d0:cb:04: 92:f7:ec:ea:20:1c:5c:eb:a5:0e:75:23:91:ae:e4:23:84:e4: 50:17:d2:3f:9c:df:8b:9d:5d:3b:0f:f1:0c:2f:b0:a6:09:a2: 16:c4:7f:43:e1:16:9c:9a:45:b8:d8:56:cc:aa:38:3d:e1:81: ef:52:ed:f1:99:21:b8:21:58:e1:34:7a:f0:d8:6c:f5:ac:1a: 9f:e1:31:25:a2:97:0b:9f:ff:dc:02:4c:d8:a4:9b:c8:ca:13: e2:03:b4:e3:e1:02:2d:06:d9:bf:93:fc:60:e9:9a:a5:e5:ec: a1:da:90:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpjhqi5liJ9FHm24yy8h8hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNDFjOTM5ZWE5NWEyMWYzYjc0MjkwMWRmZTA1ZjI2YTU3 Nzc1ODEwHhcNMjUxMjI5MTAwMTE5WhcNMjUxMjMwMTAwMTE5WjAzMTEwLwYDVQQD EyhmMTQzYzJjZWRhYjQ5NjJlNDM5YjAxYzI5N2NkZDhlNzI2N2U2OGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYUW8PXpLSXiISbZEksOJ9jzauil MMLuQsBGkROWBtwkSfkTzJ0BZMD9fhkLpAQ72JtwMlpY0Gox3ZgltVuf0/np6kpe rM7oFqkpGlrGGSUsN3mecrDp2kv1urpRJ+ISyvxS+1rD3656wgHc3OTffsmN8blc +xYQ7FDM2bulNHnt90v7a5inN3xBS1xuSe6M4OoTDAxt0k0/QJThIi5e1MdjVtgR RuG8BNnaz3WJIj1agEngaDrqgw2qBN4Uv2YnMN1vo84UUoMpvtlcJJA+A3JfKYlw IRNTV2HLiAJO5VkVtE0d9ThQfLLfyAg6aU2LhF2HM7w9XgcnkY6WrKBMvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPFDws7atJYuQ5sBwpfN2OcmfmjTMB8GA1UdIwQY MBaAFKpByTnqlaIfO3QpAd/gXyald3WBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWtISk9lcVZvaDg3ZENrQjMtQmZKcVYzZFlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy85ODFmYjEtOTA0ZC00OTlhLWI5M2Et NjA3Y2EwMjViOTRmLzEvcWtISk9lcVZvaDg3ZENrQjMtQmZKcVYzZFlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy85ODFmYjEtOTA0ZC00OTlhLWI5M2EtNjA3Y2EwMjViOTRm LzEvcWtISk9lcVZvaDg3ZENrQjMtQmZKcVYzZFlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc7YWIHCj gk4hiSUxeKZf+vookGImxdMkc7H6V9u8a3/LWv9qTyNkrY+Rg8OlSKpOo7LE6O3I M7WU8KUhFl06WxKmeZ5G2PMGrWlotJC6MdZCauAiz/Fil3sB7IUO3VHN/romx6gQ 4WhIjoUYijKaVRvPamRLckbVGh9pFLa6vJ+NAzKxEFodyadh3kyZ0MsEkvfs6iAc XOulDnUjka7kI4TkUBfSP5zfi51dOw/xDC+wpgmiFsR/Q+EWnJpFuNhWzKo4PeGB 71Lt8ZkhuCFY4TR68Nhs9awan+ExJaKXC5//3AJM2KSbyMoT4gO04+ECLQbZv5P8 YOmapeXsodqQPg== -----END CERTIFICATE-----Generated at Mon Dec 29 18:00:28 2025 by rpki-client