This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft File: rqAyAc2mqK295P6ARuxl-WrGqWw.mft (raw, json) Hash identifier: SjHEwPXM8oQBmv3Qr421wTxKEPvUCeahsEfxG44POfA= Subject key identifier: A6:95:8F:B1:1A:2A:08:AB:15:B6:6E:A9:A3:70:A0:02:82:EA:F9:2C Authority key identifier: AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C Certificate issuer: /CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c Certificate serial: 019B3D905E14A6380576E4C0A1EA0FE8C443 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft Manifest number: 02DF Signing time: Sat 20 Dec 2025 21:00:29 +0000 Manifest this update: Sat 20 Dec 2025 21:00:29 +0000 Manifest next update: Sun 21 Dec 2025 21:00:29 +0000 Files and hashes: 1: OHSgHk7806-Y3EiMMODqh70dnpA.roa (hash: dwELo2G8zKa9A3mOV9vawf+jeFFyKXxpSg3LwUytDM8=) 2: ZfKmgCC5shqdiJ4oG4WQU2IlAJs.roa (hash: xPdeleCRUgq2S3wQBazj5FbP5YRWDoq9gRuAfQMqJJU=) 3: rqAyAc2mqK295P6ARuxl-WrGqWw.crl (hash: aSSeQfOqS1626byiw4dFNjcCgjH8drN9kkW3imHXmb8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:5e:14:a6:38:05:76:e4:c0:a1:ea:0f:e8:c4:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c Validity Not Before: Dec 20 21:00:29 2025 GMT Not After : Dec 21 21:00:29 2025 GMT Subject: CN=a6958fb11a2a08ab15b66ea9a370a00282eaf92c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4b:16:0c:59:46:2d:15:ac:15:26:87:ab:a7: 9d:c3:01:bd:5a:98:07:7d:c3:17:55:ea:e6:c5:9f: 6e:d8:c5:2c:5c:5a:d4:cd:be:46:a7:07:87:33:7b: 93:e4:c2:ac:c4:79:bc:9c:17:f6:1c:86:d2:06:bf: 2e:69:2b:9f:04:43:ec:e2:b3:4e:4b:ac:36:54:e0: 33:b8:33:4e:49:2b:87:8b:6c:7b:af:aa:cd:8b:0c: 3f:72:47:d7:69:24:cb:79:48:d4:44:9e:6c:5d:d8: ff:2e:f8:41:b3:dc:1a:88:91:29:37:30:55:e9:9b: 1a:43:8b:4a:9c:f9:63:80:60:a4:82:6b:e7:52:e8: 87:03:ec:de:56:34:53:a7:b0:8a:f8:cf:e0:20:e9: e7:95:68:89:3f:11:fb:d6:d8:b0:cb:92:97:e9:5e: 52:be:98:78:fc:b7:77:b7:d2:57:b3:e4:ed:0f:12: 13:1c:46:b7:49:f2:16:4b:a6:ee:a1:2d:5a:43:0d: fe:1e:53:fd:52:82:ff:04:e0:dc:5a:3c:8b:56:0d: 22:3a:15:9d:a7:af:ca:d0:f0:71:7a:23:4d:d2:92: 24:d2:9d:92:52:2e:15:87:f2:d9:92:18:db:16:e5: 34:22:f6:4a:e2:88:dc:56:81:75:b0:e2:73:22:97: f6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:95:8F:B1:1A:2A:08:AB:15:B6:6E:A9:A3:70:A0:02:82:EA:F9:2C X509v3 Authority Key Identifier: keyid:AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:63:fc:18:ed:49:1f:1a:0f:e9:94:76:4c:3b:0e:d3:8e:d0: a5:5a:e8:8d:2d:db:47:7d:b3:1c:65:90:12:f8:9b:2a:25:a2: 20:e8:55:cd:bf:51:ad:30:f9:fc:12:15:c1:da:d3:28:fd:06: 4a:d7:13:44:78:76:c9:1e:45:8a:de:fc:3c:e2:d6:bc:12:00: 08:71:e9:af:b3:ce:71:ab:c4:82:11:cc:8b:0c:46:62:9e:80: b3:05:eb:4a:58:cc:de:b5:8d:cf:84:c5:3b:f4:eb:e1:71:1a: 87:a4:b9:51:34:c1:c7:d1:25:82:00:0b:03:78:25:8e:66:a0: f6:d7:5e:b5:4a:0e:a3:54:b3:00:ea:72:46:bb:ae:de:04:15: c3:4e:e1:90:bb:9b:ce:72:81:a1:a4:8e:e4:60:19:8c:90:5b: 8d:c8:b4:db:75:be:60:2e:f5:2b:99:11:93:65:77:86:11:4f: 84:df:cd:3d:aa:d5:34:17:6b:2a:30:d8:07:ea:f9:bd:14:01: f3:4b:53:68:96:8d:f9:d7:78:47:a2:83:6f:7c:34:f1:2f:a3: b4:2a:45:f4:6b:94:e5:15:39:95:b5:3a:e6:ca:a6:d3:b8:52: 8c:16:b4:c7:1b:38:c2:5d:70:a9:07:d3:5b:6b:d6:27:40:8e: a2:4c:3d:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kF4UpjgFduTAoeoP6MRDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYTAzMjAxY2RhNmE4YWRiZGU0ZmU4MDQ2ZWM2NWY5NmFj NmE5NmMwHhcNMjUxMjIwMjEwMDI5WhcNMjUxMjIxMjEwMDI5WjAzMTEwLwYDVQQD EyhhNjk1OGZiMTFhMmEwOGFiMTViNjZlYTlhMzcwYTAwMjgyZWFmOTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEsWDFlGLRWsFSaHq6edwwG9WpgH fcMXVermxZ9u2MUsXFrUzb5GpweHM3uT5MKsxHm8nBf2HIbSBr8uaSufBEPs4rNO S6w2VOAzuDNOSSuHi2x7r6rNiww/ckfXaSTLeUjURJ5sXdj/LvhBs9waiJEpNzBV 6ZsaQ4tKnPljgGCkgmvnUuiHA+zeVjRTp7CK+M/gIOnnlWiJPxH71tiwy5KX6V5S vph4/Ld3t9JXs+TtDxITHEa3SfIWS6buoS1aQw3+HlP9UoL/BODcWjyLVg0iOhWd p6/K0PBxeiNN0pIk0p2SUi4Vh/LZkhjbFuU0IvZK4ojcVoF1sOJzIpf2/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKaVj7EaKgirFbZuqaNwoAKC6vksMB8GA1UdIwQY MBaAFK6gMgHNpqitveT+gEbsZflqxqlsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnFBeUFjMm1xSzI5NVA2QVJ1eGwtV3JHcVd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9kZDA5ZGMtMjQ3Mi00NTE3LTllMmQt ZWE0MTJmMjFlMjMwLzEvcnFBeUFjMm1xSzI5NVA2QVJ1eGwtV3JHcVd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9kZDA5ZGMtMjQ3Mi00NTE3LTllMmQtZWE0MTJmMjFlMjMw LzEvcnFBeUFjMm1xSzI5NVA2QVJ1eGwtV3JHcVd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp2P8GO1J HxoP6ZR2TDsO047QpVrojS3bR32zHGWQEvibKiWiIOhVzb9RrTD5/BIVwdrTKP0G StcTRHh2yR5Fit78POLWvBIACHHpr7POcavEghHMiwxGYp6AswXrSljM3rWNz4TF O/Tr4XEah6S5UTTBx9ElggALA3gljmag9tdetUoOo1SzAOpyRruu3gQVw07hkLub znKBoaSO5GAZjJBbjci023W+YC71K5kRk2V3hhFPhN/NParVNBdrKjDYB+r5vRQB 80tTaJaN+dd4R6KDb3w08S+jtCpF9GuU5RU5lbU65sqm07hSjBa0xxs4wl1wqQfT W2vWJ0COokw9jw== -----END CERTIFICATE-----Generated at Sun Dec 21 03:06:08 2025 by rpki-client