This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft File: qVHmOKLLlcaLvFSicoYFsn9XBoE.mft (raw, json) Hash identifier: 014tfc8IpqyonWM0vJR4m35u5IAIfj5rFQLpMqppWXk= Subject key identifier: BF:2A:1D:52:85:E1:F5:1F:CC:F0:8C:0D:E1:5A:10:BE:4D:52:B1:9A Authority key identifier: A9:51:E6:38:A2:CB:95:C6:8B:BC:54:A2:72:86:05:B2:7F:57:06:81 Certificate issuer: /CN=a951e638a2cb95c68bbc54a2728605b27f570681 Certificate serial: 019B42EE05EC433C289AA4FF5C919B9BD175 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft Manifest number: 0E42 Signing time: Sun 21 Dec 2025 22:00:53 +0000 Manifest this update: Sun 21 Dec 2025 22:00:53 +0000 Manifest next update: Mon 22 Dec 2025 22:00:53 +0000 Files and hashes: 1: HI_761EI5uyGqmjrDCQMeEJHGzc.roa (hash: QB8Dmgi2EHb5963iec21h5u6pDxN6G7ySEepAThURJA=) 2: qVHmOKLLlcaLvFSicoYFsn9XBoE.crl (hash: G+v2i2nsy1i4UbOfYILQ3JmAYHoNvwChYVwlRtclcow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:05:ec:43:3c:28:9a:a4:ff:5c:91:9b:9b:d1:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a951e638a2cb95c68bbc54a2728605b27f570681 Validity Not Before: Dec 21 22:00:53 2025 GMT Not After : Dec 22 22:00:53 2025 GMT Subject: CN=bf2a1d5285e1f51fccf08c0de15a10be4d52b19a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e1:69:fc:0c:85:f1:9c:6b:ab:57:44:9b:a2: 4d:77:7b:a0:ab:e1:2f:da:73:d6:50:1f:14:e1:6a: b6:0c:cf:e0:29:9a:6c:81:84:11:dd:49:9c:9c:4e: b0:b3:b8:22:7a:92:04:9d:52:49:fd:44:6f:f8:cd: 8d:ae:5b:ed:e6:dc:73:0f:a4:0f:31:86:3f:1f:52: 3b:07:a5:51:d8:a4:45:1c:b4:08:ee:2e:0e:2a:f7: 06:d0:9c:f4:9d:fb:5a:5b:64:65:05:bf:db:5d:03: 22:99:96:18:d5:98:03:2d:b5:34:ab:ae:1e:29:b8: d8:33:8f:ca:be:e2:6a:aa:1e:64:37:f2:15:92:56: db:4a:7b:f7:12:72:b3:32:45:26:05:c9:39:31:6d: a1:92:33:42:fa:e4:7c:06:12:ff:f2:bd:c0:64:f7: f9:5d:4d:76:f4:fb:94:45:f3:8d:c1:ce:70:2d:65: 2d:37:64:0b:20:3d:29:a7:60:48:2a:ae:6f:72:cd: 4d:5c:9e:21:7d:82:91:08:7d:e5:10:ec:44:23:06: a9:56:a7:f3:5b:f6:bc:0c:9a:1c:a3:7b:f8:39:72: bf:ff:4c:c9:a4:1a:14:3a:60:a7:0d:9b:d5:3a:dc: e3:15:31:7e:a5:02:fa:07:7c:90:60:53:fd:15:59: 0a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:2A:1D:52:85:E1:F5:1F:CC:F0:8C:0D:E1:5A:10:BE:4D:52:B1:9A X509v3 Authority Key Identifier: keyid:A9:51:E6:38:A2:CB:95:C6:8B:BC:54:A2:72:86:05:B2:7F:57:06:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:6f:62:51:b6:e6:b0:19:21:ab:9f:cb:96:97:23:13:62:f4: 33:08:cb:45:24:71:95:11:46:e3:bf:e3:2c:30:b1:00:eb:d3: 9c:58:e5:ed:e6:79:80:9f:08:31:bd:85:88:4a:ee:4c:ef:2a: e8:71:c2:09:24:ac:86:7f:99:31:ec:34:65:67:37:cc:b2:7a: ac:75:5d:4c:5e:23:b9:6a:f1:9f:d9:7f:41:af:a1:c6:8a:38: b8:52:2c:cd:30:62:6e:6f:5b:1d:a6:2c:2b:24:19:ba:f1:a2: 6d:9d:1a:9d:21:9e:12:65:18:a1:ef:c0:18:a8:0f:1c:65:ff: da:39:cd:17:2e:e5:e6:b3:fd:a8:b4:7f:9a:c6:c2:08:b0:f4: a1:a3:75:b9:04:0c:0f:6d:4f:96:eb:6e:b9:b8:b3:72:e1:b6: 09:aa:d9:7b:5a:91:8c:24:90:e7:87:19:72:fe:9e:0b:eb:5f: 6a:1c:15:22:6a:b1:a4:99:21:45:a7:62:fb:2b:79:a2:e9:53: e9:40:87:e0:0f:af:ad:74:8f:95:04:4b:b6:a1:b3:9f:04:35: d6:d1:8c:dd:6a:0f:d8:0f:3c:00:d9:03:58:6d:de:9f:40:dc: d0:12:bc:ae:36:1e:32:53:14:62:9a:7f:8b:b4:93:c4:70:0b: c7:c1:b7:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7gXsQzwomqT/XJGbm9F1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5NTFlNjM4YTJjYjk1YzY4YmJjNTRhMjcyODYwNWIyN2Y1 NzA2ODEwHhcNMjUxMjIxMjIwMDUzWhcNMjUxMjIyMjIwMDUzWjAzMTEwLwYDVQQD EyhiZjJhMWQ1Mjg1ZTFmNTFmY2NmMDhjMGRlMTVhMTBiZTRkNTJiMTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OFp/AyF8Zxrq1dEm6JNd3ugq+Ev 2nPWUB8U4Wq2DM/gKZpsgYQR3UmcnE6ws7giepIEnVJJ/URv+M2Nrlvt5txzD6QP MYY/H1I7B6VR2KRFHLQI7i4OKvcG0Jz0nftaW2RlBb/bXQMimZYY1ZgDLbU0q64e KbjYM4/KvuJqqh5kN/IVklbbSnv3EnKzMkUmBck5MW2hkjNC+uR8BhL/8r3AZPf5 XU129PuURfONwc5wLWUtN2QLID0pp2BIKq5vcs1NXJ4hfYKRCH3lEOxEIwapVqfz W/a8DJoco3v4OXK//0zJpBoUOmCnDZvVOtzjFTF+pQL6B3yQYFP9FVkKRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL8qHVKF4fUfzPCMDeFaEL5NUrGaMB8GA1UdIwQY MBaAFKlR5jiiy5XGi7xUonKGBbJ/VwaBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVZIbU9LTExsY2FMdkZTaWNvWUZzbjlYQm9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mMDZlNzktZWQyYi00M2Q1LWI0YzEt YWJkZjkwNmM1YWRlLzEvcVZIbU9LTExsY2FMdkZTaWNvWUZzbjlYQm9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9mMDZlNzktZWQyYi00M2Q1LWI0YzEtYWJkZjkwNmM1YWRl LzEvcVZIbU9LTExsY2FMdkZTaWNvWUZzbjlYQm9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZW9iUbbm sBkhq5/LlpcjE2L0MwjLRSRxlRFG47/jLDCxAOvTnFjl7eZ5gJ8IMb2FiEruTO8q 6HHCCSSshn+ZMew0ZWc3zLJ6rHVdTF4juWrxn9l/Qa+hxoo4uFIszTBibm9bHaYs KyQZuvGibZ0anSGeEmUYoe/AGKgPHGX/2jnNFy7l5rP9qLR/msbCCLD0oaN1uQQM D21PlutuubizcuG2CarZe1qRjCSQ54cZcv6eC+tfahwVImqxpJkhRadi+yt5oulT 6UCH4A+vrXSPlQRLtqGznwQ11tGM3WoP2A88ANkDWG3en0Dc0BK8rjYeMlMUYpp/ i7STxHALx8G3xA== -----END CERTIFICATE-----Generated at Mon Dec 22 08:06:28 2025 by rpki-client