This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft File: qbdbZNXaF9cLur2BGjmmAt2vljo.mft (raw, json) Hash identifier: RWijo2/G5UWbzOwEI9Cq5h1jKPsjIs/5OeEOeNCrXio= Subject key identifier: 92:D5:9F:EE:A5:DF:3A:72:DE:81:D8:BC:7B:DD:9B:E0:C6:E7:AD:3B Authority key identifier: A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A Certificate issuer: /CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a Certificate serial: 019B08C803C29B82EF312573F42DD970EE87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft Manifest number: 177A Signing time: Wed 10 Dec 2025 15:01:24 +0000 Manifest this update: Wed 10 Dec 2025 15:01:24 +0000 Manifest next update: Thu 11 Dec 2025 15:01:24 +0000 Files and hashes: 1: 24lvsSxh7MUVQcE3eg7_Djq-Tso.asa (hash: Hjss/TGOcmwG6GtuhM5X9Ph0gtLBzHScnu3DTiqPa9c=) 2: 36K8uvuxLLbczf1YXC_ASJxPbng.asa (hash: 870+pBNRKYWmY6ePML/QQK6e/MrQo9VBr7qVr3BXzBw=) 3: FWYopd6TlSta9pASbYNvraqyvNM.asa (hash: I8ABTTre9KM0IJfOp7PT39kOwRj4TE5ZVbXeJW/G+gk=) 4: Q1epDLLNnUzfsf-xFW4a-Y2XkJQ.roa (hash: w84BOAfcBqYsqabALnnfg1Wuoyv3VSmyIx6zia+PYNA=) 5: gLJC-FPMB6JG4uvuoXfj1y1VVB4.roa (hash: bJcY81wfY+5zVAZK4pJVEqgscj1+3rGIYBuBLom9f1Q=) 6: j51vgTDCax1tLhOyiZp4zqvzOKU.roa (hash: bN88IoNu8hIQldCCMN1vfnD2HLAoTn8gvr6w/tzj/KM=) 7: qbdbZNXaF9cLur2BGjmmAt2vljo.crl (hash: asKo0fzWUetxr5Y2VVeerRIE0XgaKfzFQEUs/4ugcUU=) 8: z5yYOxFSpOQ1zd8dnbyl44cA2Cc.roa (hash: rTNzicdR5UxEu+zSwQpGpaPQg7acnJ6eKVlTT5jJQ8s=) 9: zG5x_Fm1P67jb96qcZkE3Ol2eTY.roa (hash: db5+QXNKRG2BQO2CHQMOqU0fUStvszTNPuMXFPPnliI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:c8:03:c2:9b:82:ef:31:25:73:f4:2d:d9:70:ee:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a Validity Not Before: Dec 10 15:01:24 2025 GMT Not After : Dec 11 15:01:24 2025 GMT Subject: CN=92d59feea5df3a72de81d8bc7bdd9be0c6e7ad3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2e:9f:2e:7b:3c:65:4b:0b:82:9e:61:2b:f6: 87:a5:e6:2d:3b:bf:83:a1:05:e8:98:0e:5e:ea:64: 11:1f:31:1f:ca:15:d1:ca:f1:ee:a8:7b:a7:54:03: ba:99:70:57:98:f3:b7:af:2b:c4:a6:0a:86:00:06: 0f:e8:ff:73:df:2e:d8:2d:3f:87:90:2b:9f:f8:8d: d3:4f:05:7f:db:d2:1a:d6:84:92:62:3e:0d:b8:e0: 93:d4:da:88:a3:81:2c:9a:de:67:69:7b:cd:70:fd: e1:8d:b9:5c:d4:56:f5:75:1b:54:33:89:dd:13:50: eb:66:97:a1:31:97:57:b5:d4:47:45:98:8d:11:29: 62:44:59:05:d9:5c:9c:88:0b:0e:3c:9c:98:68:ed: c5:68:14:71:4e:ff:6d:1f:bb:6c:a3:9f:9f:44:f6: f9:b9:24:8f:86:cf:73:15:5a:32:50:12:8e:7a:59: 8c:fe:e4:ef:8f:c5:30:f2:fb:24:90:be:fd:81:ce: 15:60:36:15:f8:2a:1e:22:7c:db:28:00:e6:d0:3d: 54:d2:ac:44:e6:fa:95:ed:0d:68:d1:80:8b:ea:cb: dd:42:ac:80:7d:8c:20:15:96:17:4d:a9:9b:7e:6d: 68:cb:fa:a1:4f:45:09:81:22:4a:50:48:de:fb:48: 63:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D5:9F:EE:A5:DF:3A:72:DE:81:D8:BC:7B:DD:9B:E0:C6:E7:AD:3B X509v3 Authority Key Identifier: keyid:A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:54:2b:72:45:42:05:bc:0b:9b:d5:64:73:c9:36:8c:4e:08: 4b:4e:72:df:82:f4:e9:4d:e7:31:6d:4f:2e:a4:80:3a:bf:d8: b1:d5:92:3e:1e:44:0a:24:c4:af:e3:cf:16:0c:21:89:3e:09: bf:92:0f:c4:da:6d:0f:79:cf:d2:9f:56:c9:30:f2:3d:58:b4: 79:16:fb:7f:e3:c0:ab:40:45:1b:17:eb:3a:a8:c7:f2:9b:69: 05:20:c3:2b:14:61:94:34:5d:3f:bf:6d:d4:dc:50:11:4c:ba: f2:70:00:61:67:79:b1:cc:99:1a:61:12:64:16:0e:f5:43:79: e5:43:53:a7:22:c8:2c:b1:4b:a3:de:ae:12:03:45:f4:b7:f4: 27:29:91:67:96:9b:ed:16:94:7f:d0:5a:85:ff:63:13:b2:ed: ac:14:9b:8a:0e:66:b7:87:64:b9:15:ce:95:85:84:d6:df:92: a2:25:1d:8a:25:dc:53:12:c7:26:d8:ac:63:bc:c0:e1:42:78: 66:a3:2a:1a:c3:84:7c:b2:5a:de:ff:6e:6a:c6:ac:d5:40:46: d0:c8:13:93:45:ed:78:09:7c:2e:12:03:cc:6f:ec:9a:29:54: 18:7d:23:8b:a4:2b:9e:98:69:86:c3:c4:55:a1:85:de:d3:cf: 1f:b5:7c:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIyAPCm4LvMSVz9C3ZcO6HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5Yjc1YjY0ZDVkYTE3ZDcwYmJhYmQ4MTFhMzlhNjAyZGRh Zjk2M2EwHhcNMjUxMjEwMTUwMTI0WhcNMjUxMjExMTUwMTI0WjAzMTEwLwYDVQQD Eyg5MmQ1OWZlZWE1ZGYzYTcyZGU4MWQ4YmM3YmRkOWJlMGM2ZTdhZDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi6fLns8ZUsLgp5hK/aHpeYtO7+D oQXomA5e6mQRHzEfyhXRyvHuqHunVAO6mXBXmPO3ryvEpgqGAAYP6P9z3y7YLT+H kCuf+I3TTwV/29Ia1oSSYj4NuOCT1NqIo4Esmt5naXvNcP3hjblc1Fb1dRtUM4nd E1DrZpehMZdXtdRHRZiNESliRFkF2VyciAsOPJyYaO3FaBRxTv9tH7tso5+fRPb5 uSSPhs9zFVoyUBKOelmM/uTvj8Uw8vskkL79gc4VYDYV+CoeInzbKADm0D1U0qxE 5vqV7Q1o0YCL6svdQqyAfYwgFZYXTambfm1oy/qhT0UJgSJKUEje+0hjcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJLVn+6l3zpy3oHYvHvdm+DG5607MB8GA1UdIwQY MBaAFKm3W2TV2hfXC7q9gRo5pgLdr5Y6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9kYTg1ZTctYTQ1Mi00YjFkLWI1YWUt OWIxMTgwNGVjZDM5LzEvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9kYTg1ZTctYTQ1Mi00YjFkLWI1YWUtOWIxMTgwNGVjZDM5 LzEvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN1QrckVC BbwLm9Vkc8k2jE4IS05y34L06U3nMW1PLqSAOr/YsdWSPh5ECiTEr+PPFgwhiT4J v5IPxNptD3nP0p9WyTDyPVi0eRb7f+PAq0BFGxfrOqjH8ptpBSDDKxRhlDRdP79t 1NxQEUy68nAAYWd5scyZGmESZBYO9UN55UNTpyLILLFLo96uEgNF9Lf0JymRZ5ab 7RaUf9Bahf9jE7LtrBSbig5mt4dkuRXOlYWE1t+SoiUdiiXcUxLHJtisY7zA4UJ4 ZqMqGsOEfLJa3v9uasas1UBG0MgTk0XteAl8LhIDzG/smilUGH0ji6QrnphphsPE VaGF3tPPH7V88w== -----END CERTIFICATE-----Generated at Wed Dec 10 17:45:14 2025 by rpki-client