This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft File: qnthN_WvPCLIWhkI1AspQe4sBvQ.mft (raw, json) Hash identifier: /UZLo0GyOQbFHA5mgvJzpL7nOsE9JyimfEbZfJzvfQI= Subject key identifier: 70:82:E7:E1:2D:4A:F6:B8:97:19:D2:D6:0A:61:FA:92:6C:8A:D6:17 Authority key identifier: AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4 Certificate issuer: /CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4 Certificate serial: 019B0D4968BBD0ECCB98194E0A2933E4E534 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft Manifest number: 0AB9 Signing time: Thu 11 Dec 2025 12:01:13 +0000 Manifest this update: Thu 11 Dec 2025 12:01:13 +0000 Manifest next update: Fri 12 Dec 2025 12:01:13 +0000 Files and hashes: 1: 2XR2jy2pxsivUCWaEQDKm37Kfv8.roa (hash: JYfdJrJXlt+b2LxrGfVDugUW4/PVdSDu77ltGYhWQfw=) 2: fZx-mDB13JnuV_-VzM2j7qkuqi0.roa (hash: zv9S//eX11qAMytqBqLEiGaYvvDY8kAtaLQl7dqZVZU=) 3: qnthN_WvPCLIWhkI1AspQe4sBvQ.crl (hash: 7P59YxjnD3beSuez8FaEcC1Cag9oHMrKXatzPwv2Vdg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 12:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:49:68:bb:d0:ec:cb:98:19:4e:0a:29:33:e4:e5:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4 Validity Not Before: Dec 11 12:01:13 2025 GMT Not After : Dec 12 12:01:13 2025 GMT Subject: CN=7082e7e12d4af6b89719d2d60a61fa926c8ad617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9a:7f:6c:4d:dd:9d:31:7c:e7:cc:92:e2:d5: 99:6f:dc:29:6b:5e:3f:a2:cf:38:8a:ea:89:3f:27: 89:23:cd:70:f3:4b:b6:a3:5d:a5:cf:a9:1f:0a:8d: bc:80:fe:14:87:3c:38:1a:25:e2:8b:8f:75:f4:fb: fe:02:05:96:df:8f:db:44:97:08:27:a3:1a:50:ae: e9:76:2c:6f:d9:4c:4b:e0:51:85:8e:9f:43:ae:d8: c7:3c:a4:24:da:36:1e:9b:55:3b:38:93:0f:c4:c8: 5d:b9:84:24:6a:44:9e:e8:8a:3b:52:ad:70:b1:fd: 67:e4:da:fc:a0:b3:77:97:7a:69:57:d5:4e:7d:d9: 9c:84:eb:1c:f8:0b:16:30:28:5e:5a:7f:2b:d7:3a: 6e:d6:f7:1e:4b:12:c2:7d:9d:79:96:36:df:af:29: c1:bf:6a:85:f1:a5:77:ec:17:42:3e:0c:a6:4d:8b: c1:89:98:b0:80:8b:79:8b:0a:5f:4c:0e:65:66:05: 4f:d4:72:b9:69:8e:d3:d2:4a:5a:70:cf:38:93:92: 43:01:11:84:85:c0:4c:c6:23:27:58:a1:2b:a9:5d: 41:eb:a8:da:3b:75:27:15:a3:bd:3b:3d:90:a0:12: 28:07:4e:fc:64:fe:59:fb:42:1e:0d:18:b5:72:90: ea:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:82:E7:E1:2D:4A:F6:B8:97:19:D2:D6:0A:61:FA:92:6C:8A:D6:17 X509v3 Authority Key Identifier: keyid:AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:0b:70:d9:2a:54:14:21:58:ef:7a:b8:53:83:58:5c:95:45: db:65:0d:60:af:2e:52:ef:f9:4e:bd:e9:0e:12:bd:bf:6a:97: 70:f1:4a:50:86:b7:38:b9:cf:a3:8e:9a:d3:b6:10:4b:7c:02: 6a:2a:5a:e1:5d:16:c4:fc:c2:d1:21:c7:c7:ef:ce:a4:a4:94: 98:f0:dd:6d:6f:9a:a7:9b:45:fb:b7:d5:61:84:a1:b9:88:86: 45:29:1a:b0:fc:da:09:76:66:3a:73:37:77:81:84:e1:ed:26: 58:a1:eb:4a:40:7a:9c:3e:5a:e5:92:98:98:4d:af:4c:8c:51: cc:10:69:47:a1:f5:fd:ed:fb:b8:f1:bf:a0:5f:83:ba:b4:18: b4:e5:23:e1:4f:e4:8f:14:a2:cb:40:d3:6b:87:b3:38:76:51: 40:6f:a6:12:61:16:49:52:df:01:23:ff:5f:be:6c:46:ea:98: 78:3c:e5:d2:ef:e3:c8:92:18:e4:76:41:8e:b0:a7:90:a9:fa: 3c:ba:b5:50:33:d6:7e:3f:cf:b1:aa:69:0b:57:d3:8f:47:c2: 2b:a5:a6:7f:5d:01:54:b6:e5:05:71:e1:f5:a0:d2:c9:c9:bf: db:e1:a9:70:70:93:fb:cc:96:36:45:ad:af:6c:06:45:cf:51: 55:65:be:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNSWi70OzLmBlOCikz5OU0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhN2I2MTM3ZjVhZjNjMjJjODVhMTkwOGQ0MGIyOTQxZWUy YzA2ZjQwHhcNMjUxMjExMTIwMTEzWhcNMjUxMjEyMTIwMTEzWjAzMTEwLwYDVQQD Eyg3MDgyZTdlMTJkNGFmNmI4OTcxOWQyZDYwYTYxZmE5MjZjOGFkNjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5p/bE3dnTF858yS4tWZb9wpa14/ os84iuqJPyeJI81w80u2o12lz6kfCo28gP4Uhzw4GiXii4919Pv+AgWW34/bRJcI J6MaUK7pdixv2UxL4FGFjp9DrtjHPKQk2jYem1U7OJMPxMhduYQkakSe6Io7Uq1w sf1n5Nr8oLN3l3ppV9VOfdmchOsc+AsWMCheWn8r1zpu1vceSxLCfZ15ljbfrynB v2qF8aV37BdCPgymTYvBiZiwgIt5iwpfTA5lZgVP1HK5aY7T0kpacM84k5JDARGE hcBMxiMnWKErqV1B66jaO3UnFaO9Oz2QoBIoB078ZP5Z+0IeDRi1cpDqbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHCC5+EtSva4lxnS1gph+pJsitYXMB8GA1UdIwQY MBaAFKp7YTf1rzwiyFoZCNQLKUHuLAb0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW50aE5fV3ZQQ0xJV2hrSTFBc3BRZTRzQnZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My81ZTA2ZmEtMzdmOS00YTFjLTgxMWEt ZDZhMzA1Y2JmNDZjLzEvcW50aE5fV3ZQQ0xJV2hrSTFBc3BRZTRzQnZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My81ZTA2ZmEtMzdmOS00YTFjLTgxMWEtZDZhMzA1Y2JmNDZj LzEvcW50aE5fV3ZQQ0xJV2hrSTFBc3BRZTRzQnZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKQtw2SpU FCFY73q4U4NYXJVF22UNYK8uUu/5Tr3pDhK9v2qXcPFKUIa3OLnPo46a07YQS3wC aipa4V0WxPzC0SHHx+/OpKSUmPDdbW+ap5tF+7fVYYShuYiGRSkasPzaCXZmOnM3 d4GE4e0mWKHrSkB6nD5a5ZKYmE2vTIxRzBBpR6H1/e37uPG/oF+DurQYtOUj4U/k jxSiy0DTa4ezOHZRQG+mEmEWSVLfASP/X75sRuqYeDzl0u/jyJIY5HZBjrCnkKn6 PLq1UDPWfj/PsappC1fTj0fCK6Wmf10BVLblBXHh9aDSycm/2+GpcHCT+8yWNkWt r2wGRc9RVWW+tw== -----END CERTIFICATE-----Generated at Thu Dec 11 22:53:12 2025 by rpki-client