This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft File: _qJ-2VhOB8dA_utA17nlfMrF6VA.mft (raw, json) Hash identifier: xN9vLN/HIy+AHLG8xFBBtq0gBeB1NYeAdpkskiKmH6U= Subject key identifier: 79:75:2E:49:3B:36:16:67:88:87:4E:EE:5D:64:13:32:2A:12:98:65 Authority key identifier: FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50 Certificate issuer: /CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950 Certificate serial: 019B19BCA45753B4219FAE8117188FE65293 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft Manifest number: 11F8 Signing time: Sat 13 Dec 2025 22:02:31 +0000 Manifest this update: Sat 13 Dec 2025 22:02:31 +0000 Manifest next update: Sun 14 Dec 2025 22:02:31 +0000 Files and hashes: 1: 8Ua36sQPiROOdvji9D_u-a0zjio.roa (hash: D8ltqCdiAwJv/weW61AlTvYiDIAQY9oit7+M2ExP4Bs=) 2: _qJ-2VhOB8dA_utA17nlfMrF6VA.crl (hash: MvJGrgFpsmlCdr1pixS6J+KS0LUAu95hdjQ+T0Q0GK0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.crl rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bc:a4:57:53:b4:21:9f:ae:81:17:18:8f:e6:52:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950 Validity Not Before: Dec 13 22:02:31 2025 GMT Not After : Dec 14 22:02:31 2025 GMT Subject: CN=79752e493b36166788874eee5d6413322a129865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7c:8f:28:9e:ce:b8:e4:2c:44:2e:ef:05:f5: f3:40:34:5d:1f:52:21:0a:c8:9a:a1:d4:41:d3:47: ee:c3:f3:ba:06:39:c9:d0:85:20:c8:7c:0c:85:36: 13:f9:e9:b0:9f:04:65:78:e8:fe:49:5a:64:3d:ff: f9:61:ce:1c:29:b9:ee:bd:75:d1:8b:35:a3:f5:44: 8d:dd:9f:ef:40:be:d1:9c:b5:b0:ff:e1:b8:7c:27: dc:94:c2:4a:2d:bc:7d:c4:8a:26:2f:68:50:47:fa: e2:19:64:b8:30:1d:07:c3:cd:9f:3e:6a:40:ae:85: 94:8d:a0:d5:e5:0e:87:66:71:d6:03:37:16:31:91: ea:5d:8d:e3:c8:47:f7:a8:3e:a3:9b:b2:5e:b0:b8: 3a:9c:17:cd:09:44:27:18:56:2c:90:ef:77:8f:f5: 18:ca:25:32:ab:37:6e:c4:9a:7c:a0:41:7e:b8:09: ef:14:23:2d:56:d7:2e:a1:9a:0e:68:84:43:11:ac: 8f:56:b5:a8:62:79:9b:f0:78:05:7f:13:77:ff:0b: dc:25:1a:52:02:80:a3:66:de:5e:ac:c6:85:55:fd: d7:bc:b3:cc:51:27:a7:93:5e:80:7f:39:fe:12:7a: e7:80:9c:5e:68:13:bc:18:9a:8e:ca:be:fd:c8:dd: fa:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:75:2E:49:3B:36:16:67:88:87:4E:EE:5D:64:13:32:2A:12:98:65 X509v3 Authority Key Identifier: keyid:FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:b5:e1:a1:23:29:dd:dd:37:be:b6:42:e7:80:7d:e3:fb:33: 49:03:e1:bc:8a:22:a0:6c:76:97:01:e9:79:64:79:cf:19:bc: cb:b3:5a:0d:59:bf:03:7c:dd:53:52:c5:0e:cd:6a:f9:c6:3c: 7e:76:93:66:52:ef:e8:41:fc:70:2b:d8:b9:1d:e7:e5:ad:73: c7:8e:32:ad:66:46:01:53:fe:dc:0e:ba:2b:3c:40:df:84:66: 95:bb:cd:ea:81:0c:4f:65:fe:a4:6b:82:76:11:d3:ab:86:b5: cd:b9:c1:6a:ed:7a:ce:10:36:55:2d:d6:1f:36:a3:9b:1e:98: d1:20:a4:7f:01:95:c2:1e:de:3b:05:a7:11:62:ec:b8:a8:28: 74:11:f0:92:6f:62:7b:58:4a:47:8f:5c:ae:63:d0:78:f2:6e: c8:b0:e4:be:e8:dc:b1:58:71:c2:bb:ac:b1:63:e7:7a:74:a6: 1c:a6:39:f4:cb:a6:83:d2:f9:90:54:57:05:5f:ca:9d:d8:23: 00:0f:f1:7b:82:24:5a:84:a1:5f:5b:eb:c9:93:12:45:d1:86: e0:0e:f2:5e:4d:e4:d1:21:b0:85:f5:01:43:e6:db:d9:f0:03: c9:62:29:ec:79:32:fe:e2:45:3b:96:0e:cc:5a:16:d3:58:c2: 2d:53:de:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZvKRXU7Qhn66BFxiP5lKTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYTI3ZWQ5NTg0ZTA3Yzc0MGZlZWI0MGQ3YjllNTdjY2Fj NWU5NTAwHhcNMjUxMjEzMjIwMjMxWhcNMjUxMjE0MjIwMjMxWjAzMTEwLwYDVQQD Eyg3OTc1MmU0OTNiMzYxNjY3ODg4NzRlZWU1ZDY0MTMzMjJhMTI5ODY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnyPKJ7OuOQsRC7vBfXzQDRdH1Ih CsiaodRB00fuw/O6BjnJ0IUgyHwMhTYT+emwnwRleOj+SVpkPf/5Yc4cKbnuvXXR izWj9USN3Z/vQL7RnLWw/+G4fCfclMJKLbx9xIomL2hQR/riGWS4MB0Hw82fPmpA roWUjaDV5Q6HZnHWAzcWMZHqXY3jyEf3qD6jm7JesLg6nBfNCUQnGFYskO93j/UY yiUyqzduxJp8oEF+uAnvFCMtVtcuoZoOaIRDEayPVrWoYnmb8HgFfxN3/wvcJRpS AoCjZt5erMaFVf3XvLPMUSenk16Afzn+EnrngJxeaBO8GJqOyr79yN36bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHl1Lkk7NhZniIdO7l1kEzIqEphlMB8GA1UdIwQY MBaAFP6iftlYTgfHQP7rQNe55XzKxelQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3FKLTJWaE9COGRBX3V0QTE3bmxmTXJGNlZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wMGVlOTMtOWIwNi00NDkwLTgwM2Qt OTliNDU2ZmRkOTU0LzEvX3FKLTJWaE9COGRBX3V0QTE3bmxmTXJGNlZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8wMGVlOTMtOWIwNi00NDkwLTgwM2QtOTliNDU2ZmRkOTU0 LzEvX3FKLTJWaE9COGRBX3V0QTE3bmxmTXJGNlZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMrXhoSMp 3d03vrZC54B94/szSQPhvIoioGx2lwHpeWR5zxm8y7NaDVm/A3zdU1LFDs1q+cY8 fnaTZlLv6EH8cCvYuR3n5a1zx44yrWZGAVP+3A66KzxA34RmlbvN6oEMT2X+pGuC dhHTq4a1zbnBau16zhA2VS3WHzajmx6Y0SCkfwGVwh7eOwWnEWLsuKgodBHwkm9i e1hKR49crmPQePJuyLDkvujcsVhxwrussWPnenSmHKY59Mumg9L5kFRXBV/Kndgj AA/xe4IkWoShX1vryZMSRdGG4A7yXk3k0SGwhfUBQ+bb2fADyWIp7Hky/uJFO5YO zFoW01jCLVPexg== -----END CERTIFICATE-----Generated at Sun Dec 14 01:05:15 2025 by rpki-client