This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft File: qvpFpixehQq5yHJqWam_qZLTcbI.mft (raw, json) Hash identifier: q7RRjQ1gF0s8UgiNIMAmAMiJ/UuaMuBwTcHxdI4Eqg4= Subject key identifier: 81:46:D3:35:38:22:EF:FA:89:A8:6C:A0:8B:66:D5:6C:17:59:8E:12 Authority key identifier: AA:FA:45:A6:2C:5E:85:0A:B9:C8:72:6A:59:A9:BF:A9:92:D3:71:B2 Certificate issuer: /CN=aafa45a62c5e850ab9c8726a59a9bfa992d371b2 Certificate serial: 019B21E3638D37C7F7FDBB5E9956509B00AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvpFpixehQq5yHJqWam_qZLTcbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft Manifest number: 177D Signing time: Mon 15 Dec 2025 12:01:48 +0000 Manifest this update: Mon 15 Dec 2025 12:01:48 +0000 Manifest next update: Tue 16 Dec 2025 12:01:48 +0000 Files and hashes: 1: FUCX9OW5znsVvJDFK2DPDP4kaXw.roa (hash: 7Yn8lQlQu+p9EOSUqkrA7N+uYFCRbQJhJNvyuVgdZVs=) 2: qvpFpixehQq5yHJqWam_qZLTcbI.crl (hash: MmjwF91x14kOW0YWXzWZsQTHZk2uX2TTeXni6A/CGeM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.crl rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft rsync://rpki.ripe.net/repository/DEFAULT/qvpFpixehQq5yHJqWam_qZLTcbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e3:63:8d:37:c7:f7:fd:bb:5e:99:56:50:9b:00:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aafa45a62c5e850ab9c8726a59a9bfa992d371b2 Validity Not Before: Dec 15 12:01:48 2025 GMT Not After : Dec 16 12:01:48 2025 GMT Subject: CN=8146d3353822effa89a86ca08b66d56c17598e12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c7:54:26:be:06:f8:a8:13:e5:57:aa:81:12: 3e:d7:4e:23:41:2c:c6:8b:d1:c8:34:4b:7f:c7:63: b4:e7:31:44:58:59:42:cf:73:a0:9b:3a:68:06:31: bc:fe:fd:98:29:e4:d7:0b:04:93:79:d4:f4:3e:3c: a6:53:de:98:02:2c:0e:71:6b:62:d9:39:d3:3d:cb: c2:91:02:5d:aa:c3:db:c3:94:6d:59:e8:73:77:b3: c7:2d:71:a1:24:ac:f8:5d:9b:13:88:4e:1d:75:87: 72:fb:3d:ee:66:18:66:25:3b:a9:59:4e:b6:61:94: 03:04:c4:dc:8b:bf:98:63:dc:4b:c6:81:1a:94:be: ff:1c:9a:01:f9:c0:d7:e0:a2:a4:06:47:05:6d:21: d1:08:c1:a8:eb:82:1d:93:bc:92:a3:ea:36:f2:52: 2e:1f:7e:c0:89:bf:08:68:aa:38:84:ed:dc:f3:5b: bc:12:fe:4e:64:b0:6a:9e:35:41:16:2c:3b:c0:6b: 80:99:88:43:8c:b3:a2:46:94:74:7c:8b:79:21:f5: 48:4f:14:27:07:2e:73:67:27:c3:60:6d:92:d9:7e: 9f:33:64:4d:07:bc:58:0a:bd:bb:30:25:26:42:c4: 16:82:87:74:fb:d8:15:aa:37:49:88:90:cd:ce:ac: fc:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:46:D3:35:38:22:EF:FA:89:A8:6C:A0:8B:66:D5:6C:17:59:8E:12 X509v3 Authority Key Identifier: keyid:AA:FA:45:A6:2C:5E:85:0A:B9:C8:72:6A:59:A9:BF:A9:92:D3:71:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvpFpixehQq5yHJqWam_qZLTcbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:18:1b:30:36:97:29:9e:d4:aa:af:bc:65:f0:8a:b0:b4:ee: ba:e5:16:18:63:ca:40:fd:70:21:16:94:a9:1f:10:bb:b0:0d: 20:58:2d:0b:70:aa:7a:4e:d7:a8:f9:03:5b:c8:b1:f8:c9:c6: f0:0e:10:3a:a3:2f:82:f6:2b:62:12:b5:ed:cc:dd:a2:51:2b: f0:b3:20:0e:f1:7f:42:89:dc:e5:75:a0:84:4d:16:39:1a:b5: 65:a5:d8:41:50:fb:29:3f:36:66:25:77:d0:8e:f4:e0:12:40: 9e:7c:28:3e:e9:89:07:a2:a8:db:0b:2f:26:0a:46:a5:ef:e3: 7d:4d:21:0f:f0:04:72:72:aa:80:52:a8:26:dd:a3:d6:51:d3: 96:39:0a:51:45:47:e8:ba:c6:c8:5a:98:67:76:c8:f3:b4:7b: fb:2f:bd:05:e0:e3:45:46:a6:83:a0:9c:d2:28:cc:68:61:5f: 67:a6:e6:4e:94:82:b3:3f:05:16:6c:36:4b:dc:22:d0:dc:a1: 33:2e:4b:bb:69:d7:ba:73:a7:7a:84:89:10:b1:ca:c2:4d:5a: 84:82:2d:e4:5c:e6:30:50:4e:33:e5:89:a1:b0:ca:40:a8:f5: 9e:04:b8:ff:19:4a:09:bb:c0:c7:45:8a:1d:e9:c7:c5:08:50: 1e:96:cb:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh42ONN8f3/btemVZQmwCrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhZmE0NWE2MmM1ZTg1MGFiOWM4NzI2YTU5YTliZmE5OTJk MzcxYjIwHhcNMjUxMjE1MTIwMTQ4WhcNMjUxMjE2MTIwMTQ4WjAzMTEwLwYDVQQD Eyg4MTQ2ZDMzNTM4MjJlZmZhODlhODZjYTA4YjY2ZDU2YzE3NTk4ZTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMdUJr4G+KgT5VeqgRI+104jQSzG i9HINEt/x2O05zFEWFlCz3OgmzpoBjG8/v2YKeTXCwSTedT0PjymU96YAiwOcWti 2TnTPcvCkQJdqsPbw5RtWehzd7PHLXGhJKz4XZsTiE4ddYdy+z3uZhhmJTupWU62 YZQDBMTci7+YY9xLxoEalL7/HJoB+cDX4KKkBkcFbSHRCMGo64Idk7ySo+o28lIu H37Aib8IaKo4hO3c81u8Ev5OZLBqnjVBFiw7wGuAmYhDjLOiRpR0fIt5IfVITxQn By5zZyfDYG2S2X6fM2RNB7xYCr27MCUmQsQWgod0+9gVqjdJiJDNzqz8XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIFG0zU4Iu/6iahsoItm1WwXWY4SMB8GA1UdIwQY MBaAFKr6RaYsXoUKuchyalmpv6mS03GyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXZwRnBpeGVoUXE1eUhKcVdhbV9xWkxUY2JJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy85N2E5YWEtNjk3MC00OWM4LThkMGEt MmIzZGRiY2I3MjM4LzEvcXZwRnBpeGVoUXE1eUhKcVdhbV9xWkxUY2JJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy85N2E5YWEtNjk3MC00OWM4LThkMGEtMmIzZGRiY2I3MjM4 LzEvcXZwRnBpeGVoUXE1eUhKcVdhbV9xWkxUY2JJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVBgbMDaX KZ7Uqq+8ZfCKsLTuuuUWGGPKQP1wIRaUqR8Qu7ANIFgtC3Cqek7XqPkDW8ix+MnG 8A4QOqMvgvYrYhK17czdolEr8LMgDvF/Qonc5XWghE0WORq1ZaXYQVD7KT82ZiV3 0I704BJAnnwoPumJB6Ko2wsvJgpGpe/jfU0hD/AEcnKqgFKoJt2j1lHTljkKUUVH 6LrGyFqYZ3bI87R7+y+9BeDjRUamg6Cc0ijMaGFfZ6bmTpSCsz8FFmw2S9wi0Nyh My5Lu2nXunOneoSJELHKwk1ahIIt5FzmMFBOM+WJobDKQKj1ngS4/xlKCbvAx0WK HenHxQhQHpbL8w== -----END CERTIFICATE-----Generated at Mon Dec 15 13:32:49 2025 by rpki-client