This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft File: qujptNjblGuyDM9RJ5cHXIr9g80.mft (raw, json) Hash identifier: utQsagJZ5uUIjOPZF/9PePQZNyL7+tv0T7NrctdapFI= Subject key identifier: 96:12:97:D3:94:6D:ED:3E:3A:6F:4E:D6:D2:B9:B8:1A:9E:74:1A:3C Authority key identifier: AA:E8:E9:B4:D8:DB:94:6B:B2:0C:CF:51:27:97:07:5C:8A:FD:83:CD Certificate issuer: /CN=aae8e9b4d8db946bb20ccf512797075c8afd83cd Certificate serial: 019B6CC6D8A4DC5FA7918246C40782708788 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft Manifest number: 05FB Signing time: Tue 30 Dec 2025 01:02:09 +0000 Manifest this update: Tue 30 Dec 2025 01:02:09 +0000 Manifest next update: Wed 31 Dec 2025 01:02:09 +0000 Files and hashes: 1: ABD8LSpm9Ko-5zn9g0r9GsemMIA.roa (hash: 1zcaf+BfE0QK77Rl0YVNTPqdqeAJJr/C/HmAQhJgCmY=) 2: qujptNjblGuyDM9RJ5cHXIr9g80.crl (hash: l0gidHms70nqonB4WhjMb2kPIXN2fZWlxs8wkkSfdsI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c6:d8:a4:dc:5f:a7:91:82:46:c4:07:82:70:87:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aae8e9b4d8db946bb20ccf512797075c8afd83cd Validity Not Before: Dec 30 01:02:09 2025 GMT Not After : Dec 31 01:02:09 2025 GMT Subject: CN=961297d3946ded3e3a6f4ed6d2b9b81a9e741a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2b:dc:b1:79:af:ea:4d:75:19:fc:db:f2:ca: 8e:02:7e:45:2a:f7:f1:94:a6:0d:43:99:76:2c:5d: 7e:58:13:44:6f:0c:05:d7:b7:26:0a:a4:a6:81:de: 61:1f:0d:16:e4:71:3d:6d:02:5b:94:d6:bf:2a:6e: 28:df:33:54:a4:d4:70:18:b6:89:ee:98:46:06:c6: e7:6e:55:fe:58:41:94:e7:a3:fc:ea:83:14:df:6c: 93:b2:60:ca:72:23:91:89:66:0e:e3:04:c2:87:1a: ca:30:cc:b6:4e:32:a4:58:1e:40:2d:b9:a8:6c:4f: 3c:ea:7d:27:a2:85:7a:c8:38:77:f3:ce:93:a8:bc: 3d:5f:59:1d:3e:90:eb:17:25:5b:28:d3:2d:91:bd: 2d:4b:5e:50:b1:81:64:70:e7:08:19:7a:e9:20:6f: 18:f6:dc:df:82:1f:30:76:e8:72:49:fe:cf:b2:8d: b0:6a:75:c6:37:cd:95:4d:50:8f:c7:c3:6c:8e:92: 94:9f:d2:7b:8a:56:65:41:2d:3f:56:33:27:a7:29: 24:8d:92:20:4e:b7:e5:d1:f0:cb:0d:29:20:43:ce: 55:7f:94:84:79:52:aa:29:d8:96:9d:3c:f4:72:ca: 5e:08:87:65:9f:ba:e4:72:1b:84:52:79:8d:6f:6d: 3f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:12:97:D3:94:6D:ED:3E:3A:6F:4E:D6:D2:B9:B8:1A:9E:74:1A:3C X509v3 Authority Key Identifier: keyid:AA:E8:E9:B4:D8:DB:94:6B:B2:0C:CF:51:27:97:07:5C:8A:FD:83:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:d2:8b:34:c5:81:1c:28:f6:a0:62:e9:c5:ab:1b:41:ef:88: b6:62:ef:54:3b:9a:19:a9:e7:f9:2f:20:40:45:d1:3b:c8:c8: 38:19:40:92:cd:5b:7f:28:24:53:e6:24:97:a6:5b:3c:30:b1: 38:11:5a:8f:f6:50:8d:e7:41:5c:e5:9e:5d:8e:02:90:a4:bf: 6c:86:c0:61:01:44:4a:25:65:c7:83:74:9b:4d:d4:6a:72:0f: 7c:a4:f6:00:ee:82:72:1b:cc:62:7f:1b:b1:63:0e:25:2f:b4: 7a:a9:eb:08:69:0f:36:a0:11:ef:2d:69:11:5b:83:aa:e8:a1: d6:51:06:97:52:06:93:03:6b:24:24:dc:86:e9:3b:fa:2f:9b: 2a:3f:da:de:1f:c4:5f:30:bc:7c:4b:7f:e3:c3:d1:ab:f5:3d: 04:cb:c5:9b:13:3b:ff:02:14:f5:4a:36:88:fa:87:7b:c3:41: 70:fe:d3:b7:1c:29:f0:b0:6d:95:dc:2b:e0:f0:46:f2:8c:aa: d6:04:53:07:54:8f:5a:b9:48:74:82:69:b6:4f:e9:85:a7:ff: 97:f3:30:ae:52:2c:bf:bf:2d:8f:d4:1a:d8:d2:88:a6:d1:70: e9:e7:09:79:56:dd:91:06:51:32:53:7d:a0:f6:64:75:b4:c3: 36:d6:43:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxtik3F+nkYJGxAeCcIeIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhZThlOWI0ZDhkYjk0NmJiMjBjY2Y1MTI3OTcwNzVjOGFm ZDgzY2QwHhcNMjUxMjMwMDEwMjA5WhcNMjUxMjMxMDEwMjA5WjAzMTEwLwYDVQQD Eyg5NjEyOTdkMzk0NmRlZDNlM2E2ZjRlZDZkMmI5YjgxYTllNzQxYTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSvcsXmv6k11Gfzb8sqOAn5FKvfx lKYNQ5l2LF1+WBNEbwwF17cmCqSmgd5hHw0W5HE9bQJblNa/Km4o3zNUpNRwGLaJ 7phGBsbnblX+WEGU56P86oMU32yTsmDKciORiWYO4wTChxrKMMy2TjKkWB5ALbmo bE886n0nooV6yDh3886TqLw9X1kdPpDrFyVbKNMtkb0tS15QsYFkcOcIGXrpIG8Y 9tzfgh8wduhySf7Pso2wanXGN82VTVCPx8NsjpKUn9J7ilZlQS0/VjMnpykkjZIg Trfl0fDLDSkgQ85Vf5SEeVKqKdiWnTz0cspeCIdln7rkchuEUnmNb20/LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJYSl9OUbe0+Om9O1tK5uBqedBo8MB8GA1UdIwQY MBaAFKro6bTY25RrsgzPUSeXB1yK/YPNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXVqcHROamJsR3V5RE05Uko1Y0hYSXI5ZzgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8xZTg3MmYtODg1MS00ZDE3LTkxNDgt Zjg5MDU2NzJlNTlkLzEvcXVqcHROamJsR3V5RE05Uko1Y0hYSXI5ZzgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8xZTg3MmYtODg1MS00ZDE3LTkxNDgtZjg5MDU2NzJlNTlk LzEvcXVqcHROamJsR3V5RE05Uko1Y0hYSXI5ZzgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr9KLNMWB HCj2oGLpxasbQe+ItmLvVDuaGann+S8gQEXRO8jIOBlAks1bfygkU+Ykl6ZbPDCx OBFaj/ZQjedBXOWeXY4CkKS/bIbAYQFESiVlx4N0m03UanIPfKT2AO6CchvMYn8b sWMOJS+0eqnrCGkPNqAR7y1pEVuDquih1lEGl1IGkwNrJCTchuk7+i+bKj/a3h/E XzC8fEt/48PRq/U9BMvFmxM7/wIU9Uo2iPqHe8NBcP7Ttxwp8LBtldwr4PBG8oyq 1gRTB1SPWrlIdIJptk/phaf/l/MwrlIsv78tj9Qa2NKIptFw6ecJeVbdkQZRMlN9 oPZkdbTDNtZDbA== -----END CERTIFICATE-----Generated at Tue Dec 30 10:32:44 2025 by rpki-client