This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft File: qpoWTGVkErfar66FccxnnMb1h9A.mft (raw, json) Hash identifier: pr3jWCoZw0EwUcSEOWSl4y1YUU8zVQN6wXiZ9HsFlRY= Subject key identifier: 6A:7D:B7:5C:F8:DF:F1:EB:F4:CB:DF:86:C3:2D:BC:05:C1:50:CE:FE Authority key identifier: AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0 Certificate issuer: /CN=aa9a164c656412b7daafae8571cc679cc6f587d0 Certificate serial: 019B0A490CAA7F79987C18317F90240A413C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft Manifest number: 1773 Signing time: Wed 10 Dec 2025 22:01:58 +0000 Manifest this update: Wed 10 Dec 2025 22:01:58 +0000 Manifest next update: Thu 11 Dec 2025 22:01:58 +0000 Files and hashes: 1: VnsTdGec-3pHRJVLeuucM8lE74g.roa (hash: VZlx25MKWdF5CVCWwcXrJ37GBCTfmMAe38xqZnEYBGw=) 2: _1ATULCZ98sbSKA4UnZIqchgnFI.roa (hash: dqzQIeMxGMrNSZ+FakLTrNvjbHnx3VcQtBASfsN8WNM=) 3: qpoWTGVkErfar66FccxnnMb1h9A.crl (hash: 5+yReyaXSNUwtecbyNoJoS0hpEstMf+Xd4+jpPAHFDE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0a:49:0c:aa:7f:79:98:7c:18:31:7f:90:24:0a:41:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa9a164c656412b7daafae8571cc679cc6f587d0 Validity Not Before: Dec 10 22:01:58 2025 GMT Not After : Dec 11 22:01:58 2025 GMT Subject: CN=6a7db75cf8dff1ebf4cbdf86c32dbc05c150cefe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b9:73:08:63:ad:8b:44:73:f5:6c:33:b2:1f: 41:fc:dd:d2:2d:39:7b:a1:d5:04:4e:77:63:16:ac: 7a:8f:7f:b2:3d:d7:a1:15:3e:72:52:73:fd:1e:fb: 3e:4c:64:78:af:71:cb:f7:67:f1:0e:50:3a:01:69: 6f:20:d7:bf:30:72:64:77:07:8f:c9:7d:ae:d4:05: a2:e3:99:cd:d5:c7:b8:89:a2:cb:13:91:99:c3:b4: 03:d1:99:71:49:5a:89:45:a7:7c:6b:f5:2f:5e:b4: 66:a8:ea:01:cd:1f:7b:30:ae:5b:21:0c:9f:85:f3: ac:88:c1:d8:0a:44:f1:04:73:3c:d8:12:38:d9:fd: ab:3c:a5:36:b3:40:f2:c2:7c:18:e3:7a:20:b9:61: af:c6:7d:82:8e:df:ed:49:9c:80:35:7b:84:ea:fa: cb:6c:a4:47:03:13:fb:81:12:b7:4c:d4:aa:1e:2c: 76:2d:ef:60:8f:8b:f4:ac:4f:2a:8b:dc:6c:16:41: 38:65:a2:fe:bb:78:6c:ad:1a:7d:fd:1c:8a:46:db: b8:5b:dd:fc:b0:76:37:3d:15:ff:1e:43:c8:a3:9e: aa:e5:99:f0:73:92:c0:13:c9:4a:23:75:ac:c4:1f: 0b:2a:9f:ed:32:bc:97:b5:7f:f4:6b:1b:9f:35:1a: b7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:7D:B7:5C:F8:DF:F1:EB:F4:CB:DF:86:C3:2D:BC:05:C1:50:CE:FE X509v3 Authority Key Identifier: keyid:AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:25:60:0e:64:9e:c6:76:5c:7b:04:38:0f:a4:c8:26:d2:7e: 90:7a:a0:e0:80:a4:bc:85:53:09:73:6c:5b:a7:72:7b:2f:5c: 72:1d:21:1c:c8:ea:cf:24:e5:c8:8b:fa:28:ea:3e:92:d5:12: bd:49:a3:c0:62:11:66:f6:ab:46:86:12:4a:da:fd:32:e4:38: 74:b7:02:ca:8d:46:d7:b6:2c:6b:13:fe:56:ee:ac:83:f8:d6: 94:ff:db:d8:17:55:dd:99:f7:f0:bd:ad:5e:7b:ad:d1:78:04: 2e:3e:e8:a4:39:04:26:53:cc:e0:6c:52:b0:46:40:c9:aa:6f: ce:62:f3:68:87:5c:d1:2a:09:92:30:d7:dd:92:cd:7a:80:a2: 05:51:c1:d3:9c:36:2e:a5:f1:65:f0:41:2c:5f:3d:06:e2:bf: 26:8f:c5:ae:20:c2:70:bb:6a:82:ee:eb:87:10:4d:a1:19:a1: f4:34:5a:08:94:2c:88:0b:fa:81:21:b5:79:f6:4d:e7:91:bb: 6b:e9:99:bc:25:19:19:10:6e:7d:d4:75:a9:f3:05:37:70:52: fe:77:a8:ba:31:28:4d:8e:ef:09:3e:3d:3b:a6:a5:1f:da:e3: 82:20:5a:12:f6:dc:83:7a:ea:d4:ff:3d:c3:ee:57:68:06:dd: 8d:0a:da:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsKSQyqf3mYfBgxf5AkCkE8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhOWExNjRjNjU2NDEyYjdkYWFmYWU4NTcxY2M2NzljYzZm NTg3ZDAwHhcNMjUxMjEwMjIwMTU4WhcNMjUxMjExMjIwMTU4WjAzMTEwLwYDVQQD Eyg2YTdkYjc1Y2Y4ZGZmMWViZjRjYmRmODZjMzJkYmMwNWMxNTBjZWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LlzCGOti0Rz9Wwzsh9B/N3SLTl7 odUETndjFqx6j3+yPdehFT5yUnP9Hvs+TGR4r3HL92fxDlA6AWlvINe/MHJkdweP yX2u1AWi45nN1ce4iaLLE5GZw7QD0ZlxSVqJRad8a/UvXrRmqOoBzR97MK5bIQyf hfOsiMHYCkTxBHM82BI42f2rPKU2s0DywnwY43oguWGvxn2Cjt/tSZyANXuE6vrL bKRHAxP7gRK3TNSqHix2Le9gj4v0rE8qi9xsFkE4ZaL+u3hsrRp9/RyKRtu4W938 sHY3PRX/HkPIo56q5Znwc5LAE8lKI3WsxB8LKp/tMryXtX/0axufNRq3NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGp9t1z43/Hr9MvfhsMtvAXBUM7+MB8GA1UdIwQY MBaAFKqaFkxlZBK32q+uhXHMZ5zG9YfQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXBvV1RHVmtFcmZhcjY2RmNjeG5uTWIxaDlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9hZmRhOWEtNjYzMC00YTlmLWI1MjIt Mjg4MjljMDNjNjlhLzEvcXBvV1RHVmtFcmZhcjY2RmNjeG5uTWIxaDlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9hZmRhOWEtNjYzMC00YTlmLWI1MjItMjg4MjljMDNjNjlh LzEvcXBvV1RHVmtFcmZhcjY2RmNjeG5uTWIxaDlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbiVgDmSe xnZcewQ4D6TIJtJ+kHqg4ICkvIVTCXNsW6dyey9cch0hHMjqzyTlyIv6KOo+ktUS vUmjwGIRZvarRoYSStr9MuQ4dLcCyo1G17YsaxP+Vu6sg/jWlP/b2BdV3Zn38L2t Xnut0XgELj7opDkEJlPM4GxSsEZAyapvzmLzaIdc0SoJkjDX3ZLNeoCiBVHB05w2 LqXxZfBBLF89BuK/Jo/FriDCcLtqgu7rhxBNoRmh9DRaCJQsiAv6gSG1efZN55G7 a+mZvCUZGRBufdR1qfMFN3BS/neoujEoTY7vCT49O6alH9rjgiBaEvbcg3rq1P89 w+5XaAbdjQrakA== -----END CERTIFICATE-----Generated at Thu Dec 11 05:18:35 2025 by rpki-client