This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft File: qyftHOpDIcScPKEPOv-v29rVMsI.mft (raw, json) Hash identifier: EsOKdxk/kfUozg+cnJGnT3YSNgCFBy3xBQdnrPka00M= Subject key identifier: 36:3F:85:21:95:A5:06:56:40:25:3B:9F:CB:87:B7:4B:8B:78:B1:74 Authority key identifier: AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2 Certificate issuer: /CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2 Certificate serial: 019B0F6E792EBAEB4CBDF186DB616D87AA26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft Manifest number: 1777 Signing time: Thu 11 Dec 2025 22:00:56 +0000 Manifest this update: Thu 11 Dec 2025 22:00:56 +0000 Manifest next update: Fri 12 Dec 2025 22:00:56 +0000 Files and hashes: 1: LsR5OcLI6gweexv7IGg_v67BF8g.roa (hash: wQT4g6ONPKKCv+h71REBPVqXb0/wIS8oFMXQ2jJwDUM=) 2: agUI1vHmqHIc2nUx-x5wLY_TV_A.roa (hash: FA12851IZb0A3QT14G2l2dek6vgakWfjtEihLLMc5Fo=) 3: qyftHOpDIcScPKEPOv-v29rVMsI.crl (hash: zz9hQgp4wpHBSlmGO6b9nx9kw3EwxfKlPHPPtMG5Dmg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:79:2e:ba:eb:4c:bd:f1:86:db:61:6d:87:aa:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2 Validity Not Before: Dec 11 22:00:56 2025 GMT Not After : Dec 12 22:00:56 2025 GMT Subject: CN=363f852195a5065640253b9fcb87b74b8b78b174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5f:88:d7:c6:37:8a:3b:52:91:1e:8c:9e:b7: ff:5b:f6:62:2a:dc:4c:1a:ef:1c:d4:3c:f4:a2:09: c9:d4:2a:aa:fc:33:3f:e6:c8:a7:8b:b3:f7:da:ed: 7a:0f:03:6f:70:6c:bd:47:59:85:7d:1c:8e:18:29: 22:5f:0b:0b:51:e6:f7:5a:02:e3:c3:64:f7:68:55: 3f:13:f8:ec:f6:e6:2f:e5:19:01:74:43:13:4d:2f: f8:29:e9:33:46:6b:50:36:72:da:da:ae:47:31:29: 06:73:e9:70:3a:58:94:05:96:66:0a:2d:49:62:f5: 86:41:1c:11:22:65:f7:0a:44:d9:70:b5:6e:ed:31: df:70:82:09:11:38:2e:d6:bc:1e:8c:7d:ac:32:0d: d8:57:80:85:fb:b6:7f:87:88:67:81:24:93:90:72: fe:d2:0c:6a:6a:84:8d:da:8d:8c:95:25:b1:07:49: cd:78:5c:a1:cd:13:75:b7:5c:a4:6a:52:48:20:f1: d9:23:91:80:d1:2e:2a:4e:bb:a0:3a:05:7a:d2:a4: 0f:10:d1:1b:36:ed:04:3f:f6:83:46:40:01:e2:20: a3:fb:14:f9:18:6c:9b:e7:fb:b6:97:89:9b:d0:ec: b3:fd:a2:57:78:96:b9:a4:a2:ef:9b:f2:00:d9:0b: ab:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:3F:85:21:95:A5:06:56:40:25:3B:9F:CB:87:B7:4B:8B:78:B1:74 X509v3 Authority Key Identifier: keyid:AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:5a:2f:f2:4c:92:a0:9e:3d:6d:68:8a:27:45:57:96:71:88: 1f:d3:dc:ba:49:19:2d:8a:34:8b:06:54:24:50:14:c2:ff:61: 21:e0:48:a6:5e:9f:49:07:d4:5e:ea:16:33:9e:f2:7d:77:ec: 05:e6:a2:49:02:6e:68:09:bc:ce:4b:91:7a:31:31:48:2f:35: cb:3d:4a:1b:3e:d6:85:b9:b7:17:92:7c:43:f0:e0:40:b6:b4: b7:20:18:4a:51:9f:d6:46:29:3f:02:0c:90:83:ec:19:7e:f4: fd:0b:53:f9:c3:ae:cb:3b:3b:88:05:49:b0:c5:85:67:45:74: 1a:b2:ae:b5:6a:74:52:eb:fa:37:f9:21:8b:ac:57:6d:00:f8: a9:81:c7:da:c0:20:3b:d0:28:97:b2:55:0a:62:67:78:3f:33: a0:b6:45:5a:40:82:ca:75:f5:f9:ee:b9:8f:01:ee:10:56:7d: 89:6d:cc:5b:b6:3e:d5:7d:1a:53:71:7d:e3:cc:cc:ad:f2:4e: 0f:0f:b6:58:16:8a:1b:d7:a6:a1:66:cc:d3:d7:34:6f:e1:c2: bb:69:63:fd:e9:44:88:9c:19:10:ad:ef:ce:7b:5a:b3:2c:d7: 69:c7:bc:e8:9d:c5:24:ba:ed:b2:37:3e:42:37:28:bb:bc:53: 41:e3:16:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbnkuuutMvfGG22Fth6omMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMjdlZDFjZWE0MzIxYzQ5YzNjYTEwZjNhZmZhZmRiZGFk NTMyYzIwHhcNMjUxMjExMjIwMDU2WhcNMjUxMjEyMjIwMDU2WjAzMTEwLwYDVQQD EygzNjNmODUyMTk1YTUwNjU2NDAyNTNiOWZjYjg3Yjc0YjhiNzhiMTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF+I18Y3ijtSkR6Mnrf/W/ZiKtxM Gu8c1Dz0ognJ1Cqq/DM/5sini7P32u16DwNvcGy9R1mFfRyOGCkiXwsLUeb3WgLj w2T3aFU/E/js9uYv5RkBdEMTTS/4KekzRmtQNnLa2q5HMSkGc+lwOliUBZZmCi1J YvWGQRwRImX3CkTZcLVu7THfcIIJETgu1rwejH2sMg3YV4CF+7Z/h4hngSSTkHL+ 0gxqaoSN2o2MlSWxB0nNeFyhzRN1t1ykalJIIPHZI5GA0S4qTrugOgV60qQPENEb Nu0EP/aDRkAB4iCj+xT5GGyb5/u2l4mb0Oyz/aJXeJa5pKLvm/IA2QurWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDY/hSGVpQZWQCU7n8uHt0uLeLF0MB8GA1UdIwQY MBaAFKsn7RzqQyHEnDyhDzr/r9va1TLCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXlmdEhPcERJY1NjUEtFUE92LXYyOXJWTXNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84NjU0OTAtNzhlNy00M2I0LWIyZmQt MWQwYmY1MjA4ZjkwLzEvcXlmdEhPcERJY1NjUEtFUE92LXYyOXJWTXNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi84NjU0OTAtNzhlNy00M2I0LWIyZmQtMWQwYmY1MjA4Zjkw LzEvcXlmdEhPcERJY1NjUEtFUE92LXYyOXJWTXNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATFov8kyS oJ49bWiKJ0VXlnGIH9PcukkZLYo0iwZUJFAUwv9hIeBIpl6fSQfUXuoWM57yfXfs BeaiSQJuaAm8zkuRejExSC81yz1KGz7Whbm3F5J8Q/DgQLa0tyAYSlGf1kYpPwIM kIPsGX70/QtT+cOuyzs7iAVJsMWFZ0V0GrKutWp0Uuv6N/khi6xXbQD4qYHH2sAg O9Aol7JVCmJneD8zoLZFWkCCynX1+e65jwHuEFZ9iW3MW7Y+1X0aU3F948zMrfJO Dw+2WBaKG9emoWbM09c0b+HCu2lj/elEiJwZEK3vzntasyzXace86J3FJLrtsjc+ Qjcou7xTQeMWlA== -----END CERTIFICATE-----Generated at Fri Dec 12 01:41:18 2025 by rpki-client