This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft File: qoXGfyIwng2EwwtUJSlyUyhgUVE.mft (raw, json) Hash identifier: 2vXsFCkdi0GGaJB6pXHh+ZVe3q2vIDBQsiAMlIw9hF0= Subject key identifier: 63:BD:0E:90:54:68:B9:DD:70:F7:14:D8:7F:A1:76:26:06:90:B4:87 Authority key identifier: AA:85:C6:7F:22:30:9E:0D:84:C3:0B:54:25:29:72:53:28:60:51:51 Certificate issuer: /CN=aa85c67f22309e0d84c30b542529725328605151 Certificate serial: 019B3A8FFC9EACDE53511E9E98913A85A014 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft Manifest number: 0E08 Signing time: Sat 20 Dec 2025 07:01:13 +0000 Manifest this update: Sat 20 Dec 2025 07:01:13 +0000 Manifest next update: Sun 21 Dec 2025 07:01:13 +0000 Files and hashes: 1: U6h0E3CpWcLE4IcpdPD5N0_flWE.roa (hash: /MeOIU5IzJfeECJ9wAs+zMCbOflzuiKPgRuM31+tyrU=) 2: qoXGfyIwng2EwwtUJSlyUyhgUVE.crl (hash: bsFMhy9gNEydXuczT/aJMESRdQ1/xJ8M3z2RLpONGxQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.crl rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:fc:9e:ac:de:53:51:1e:9e:98:91:3a:85:a0:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa85c67f22309e0d84c30b542529725328605151 Validity Not Before: Dec 20 07:01:13 2025 GMT Not After : Dec 21 07:01:13 2025 GMT Subject: CN=63bd0e905468b9dd70f714d87fa176260690b487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f1:83:1f:06:3f:d7:a5:7e:c4:8a:ba:12:87: 2e:70:a9:99:42:14:ed:89:f3:d5:61:06:bb:50:76: 61:0c:84:ad:a5:b1:50:b2:1f:0b:bb:7b:4c:56:d4: 19:fb:5f:73:f4:27:17:a9:c3:eb:5a:e2:b5:4e:d1: 12:7d:25:95:79:30:45:f5:ea:fd:0f:2f:23:9a:71: 14:20:4d:52:b8:78:54:29:17:93:f5:b7:78:dc:84: 34:7b:e8:f2:8d:86:29:e9:49:32:78:d5:e1:c1:c2: 59:fe:30:5e:d2:cc:c7:2a:f0:d0:0e:a9:e4:63:93: e4:67:e9:2c:1a:7a:54:ae:f7:cb:66:ac:66:60:c8: b4:45:e6:54:3a:b7:87:03:24:ad:d3:e6:47:0b:29: 33:17:a6:14:08:4d:29:ac:28:3b:04:70:0f:28:e9: 24:a5:89:0b:14:99:20:22:91:64:10:25:f6:5b:51: ae:0c:71:6a:dc:dc:de:ca:ac:91:c8:b4:fa:79:8a: 16:58:8d:55:dd:d7:72:49:22:b6:53:09:de:a4:02: db:d5:82:54:c5:8a:bc:32:9d:d5:1a:f8:1c:c4:e0: df:61:3b:47:86:58:98:38:d6:00:fc:80:a9:00:22: a6:53:1b:a8:2e:e7:84:5c:38:21:30:d9:ea:ac:c8: c7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:BD:0E:90:54:68:B9:DD:70:F7:14:D8:7F:A1:76:26:06:90:B4:87 X509v3 Authority Key Identifier: keyid:AA:85:C6:7F:22:30:9E:0D:84:C3:0B:54:25:29:72:53:28:60:51:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:1d:26:ce:70:97:6f:cf:e6:cb:9d:28:af:71:80:d4:28:f9: 3d:1e:b9:db:6e:2e:ad:e2:49:a0:e7:2d:db:a2:ae:a9:1a:d0: 4e:cc:80:1d:18:06:e6:66:c6:6f:e5:b2:e6:20:7d:e1:6a:d7: 6b:de:b0:73:84:e8:69:02:4e:6d:07:cd:87:fb:af:e8:22:29: b3:9a:0c:ee:90:af:a6:4c:7f:87:37:01:9a:ea:0e:33:f2:34: 3d:66:cb:85:1c:20:ab:2e:cd:35:8f:0e:33:23:62:b0:58:44: 20:1e:f4:93:44:ab:f5:af:11:98:16:1f:ab:9a:1c:0e:90:91: 65:bd:54:93:4b:c2:10:7f:39:b2:de:7d:70:5b:0b:36:4e:99: fe:a7:ba:dc:6a:6f:a3:11:0f:ff:73:8c:67:1a:49:49:2d:27: 7f:bd:9c:17:d0:cf:5b:37:89:1c:0f:60:28:4a:e7:fc:f5:dc: a7:b3:a4:96:10:9e:44:76:eb:97:d9:2c:b1:11:6e:72:e6:7e: dd:15:3c:0b:a6:fa:19:b4:bb:e0:b9:8f:ca:de:b0:db:82:ba: 1f:d0:70:3a:c2:35:0d:fe:62:82:5b:c9:ed:34:e7:9a:1c:d0: 58:70:f1:af:3b:23:39:d7:8e:ab:91:0d:bc:67:d2:51:ff:fe: 85:1b:2c:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j/yerN5TUR6emJE6haAUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhODVjNjdmMjIzMDllMGQ4NGMzMGI1NDI1Mjk3MjUzMjg2 MDUxNTEwHhcNMjUxMjIwMDcwMTEzWhcNMjUxMjIxMDcwMTEzWjAzMTEwLwYDVQQD Eyg2M2JkMGU5MDU0NjhiOWRkNzBmNzE0ZDg3ZmExNzYyNjA2OTBiNDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvGDHwY/16V+xIq6EocucKmZQhTt ifPVYQa7UHZhDIStpbFQsh8Lu3tMVtQZ+19z9CcXqcPrWuK1TtESfSWVeTBF9er9 Dy8jmnEUIE1SuHhUKReT9bd43IQ0e+jyjYYp6UkyeNXhwcJZ/jBe0szHKvDQDqnk Y5PkZ+ksGnpUrvfLZqxmYMi0ReZUOreHAySt0+ZHCykzF6YUCE0prCg7BHAPKOkk pYkLFJkgIpFkECX2W1GuDHFq3NzeyqyRyLT6eYoWWI1V3ddySSK2UwnepALb1YJU xYq8Mp3VGvgcxODfYTtHhliYONYA/ICpACKmUxuoLueEXDghMNnqrMjHgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGO9DpBUaLndcPcU2H+hdiYGkLSHMB8GA1UdIwQY MBaAFKqFxn8iMJ4NhMMLVCUpclMoYFFRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW9YR2Z5SXduZzJFd3d0VUpTbHlVeWhnVVZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9lNzkyMDItYWNhYi00YjFhLTk5MmIt MmEyZWQ0NWUyNzEyLzEvcW9YR2Z5SXduZzJFd3d0VUpTbHlVeWhnVVZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9lNzkyMDItYWNhYi00YjFhLTk5MmItMmEyZWQ0NWUyNzEy LzEvcW9YR2Z5SXduZzJFd3d0VUpTbHlVeWhnVVZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXh0mznCX b8/my50or3GA1Cj5PR65224ureJJoOct26KuqRrQTsyAHRgG5mbGb+Wy5iB94WrX a96wc4ToaQJObQfNh/uv6CIps5oM7pCvpkx/hzcBmuoOM/I0PWbLhRwgqy7NNY8O MyNisFhEIB70k0Sr9a8RmBYfq5ocDpCRZb1Uk0vCEH85st59cFsLNk6Z/qe63Gpv oxEP/3OMZxpJSS0nf72cF9DPWzeJHA9gKErn/PXcp7OklhCeRHbrl9kssRFucuZ+ 3RU8C6b6GbS74LmPyt6w24K6H9BwOsI1Df5iglvJ7TTnmhzQWHDxrzsjOdeOq5EN vGfSUf/+hRssvw== -----END CERTIFICATE-----Generated at Sat Dec 20 14:39:36 2025 by rpki-client