This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft File: qnp9oeIjsYMKC5G11hyDrSYMERs.mft (raw, json) Hash identifier: 0dgQ3hjoU8wpW+Xs/yQoB28Fyq4rKpBvf9OUqHRjZeo= Subject key identifier: 02:96:23:CF:2B:7A:D3:7B:9A:9E:A7:95:F8:17:7F:28:9B:B0:0B:4D Authority key identifier: AA:7A:7D:A1:E2:23:B1:83:0A:0B:91:B5:D6:1C:83:AD:26:0C:11:1B Certificate issuer: /CN=aa7a7da1e223b1830a0b91b5d61c83ad260c111b Certificate serial: 019B34C635F3D599A24599DF65397BD0E780 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft Manifest number: 134D Signing time: Fri 19 Dec 2025 04:02:43 +0000 Manifest this update: Fri 19 Dec 2025 04:02:43 +0000 Manifest next update: Sat 20 Dec 2025 04:02:43 +0000 Files and hashes: 1: B2uv5t_GiMUr8rM-r5uKbUdnEoQ.roa (hash: YpVmIqGmMDZopEuL6KgYwvjCxwixGKfs5u+qFRIV/jw=) 2: qnp9oeIjsYMKC5G11hyDrSYMERs.crl (hash: YzcQ/+po58Z8KFLLk/N2ONdUkqzSNtVBE/1KvMR+Vzo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c6:35:f3:d5:99:a2:45:99:df:65:39:7b:d0:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa7a7da1e223b1830a0b91b5d61c83ad260c111b Validity Not Before: Dec 19 04:02:43 2025 GMT Not After : Dec 20 04:02:43 2025 GMT Subject: CN=029623cf2b7ad37b9a9ea795f8177f289bb00b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:89:76:e0:73:d5:bb:33:02:9d:1d:39:91:5a: 4a:97:98:da:2e:c1:de:44:8b:43:ea:e6:fa:65:5c: 7d:73:d1:40:b6:30:d1:27:eb:9d:9f:13:fb:1d:66: 54:98:46:9e:65:8e:08:92:54:fd:e0:e7:a7:7d:2a: 1a:e6:41:bd:a6:c3:95:8a:35:80:eb:ca:21:49:5e: 60:0c:28:95:76:1e:ba:7f:f3:b8:e3:a6:a5:9f:7a: 37:b1:93:0a:f7:2e:2d:d5:d6:bd:4b:54:db:f0:8f: fe:7c:7b:78:78:eb:c3:00:61:50:bb:9d:24:ee:96: 0b:b3:d9:bb:c7:87:64:7e:91:92:03:01:79:62:74: 25:d8:60:4c:9c:52:18:9c:ba:54:0f:95:54:93:e1: 15:c8:31:6e:16:91:0c:bc:91:59:bf:2f:ed:92:db: 80:2a:69:ae:c0:86:e8:b8:a6:97:1d:f4:f4:09:a9: a7:e8:9f:3b:30:30:13:6c:35:02:c3:95:91:e2:1f: af:e0:53:ed:5d:11:b8:83:d9:58:9c:d7:6b:f1:4a: 0c:11:99:27:db:48:06:08:75:65:37:52:20:2a:9a: 3e:13:92:0d:ac:7d:76:ee:54:07:4f:e9:b7:fc:eb: c8:a6:b3:63:81:cb:fa:e2:d8:f2:46:12:9c:e3:ad: 99:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:96:23:CF:2B:7A:D3:7B:9A:9E:A7:95:F8:17:7F:28:9B:B0:0B:4D X509v3 Authority Key Identifier: keyid:AA:7A:7D:A1:E2:23:B1:83:0A:0B:91:B5:D6:1C:83:AD:26:0C:11:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:04:ad:a7:a0:d2:8a:fd:7b:8e:eb:a5:99:5e:4e:c6:44:db: e4:c9:6e:ed:41:9d:ba:3d:f4:73:b4:9f:45:e4:2d:e4:b7:83: 1c:44:5f:3b:6a:67:37:33:cf:3e:89:6b:5b:4d:d3:29:1b:b7: db:05:bf:85:68:54:d2:e4:a3:82:b6:d1:95:ad:11:b2:8e:7c: 89:95:c5:da:69:af:f6:8c:b8:78:49:ad:19:b5:aa:b7:42:d2: 7b:ca:74:41:01:91:8b:24:c0:a2:27:51:88:cf:77:5e:a0:52: ad:bb:43:a0:85:b0:08:f5:75:39:b0:bf:b4:94:ea:bb:28:b5: e7:88:d1:fa:4a:62:1b:74:5c:81:84:ef:e3:5c:52:43:07:76: 03:7a:f0:8f:d1:80:a4:df:7d:95:09:e8:23:d5:6b:6e:97:fd: 72:01:8f:e2:d3:2d:99:0e:3e:c7:33:c3:cf:d2:cf:a0:95:2d: 36:d7:f5:0b:8d:cd:c0:98:06:9c:fc:a6:b8:49:e4:43:f8:ed: ac:c4:75:49:12:a1:6a:53:c7:23:b9:ef:aa:cf:c5:40:bc:05: 2d:9b:e6:27:d0:5b:77:1b:79:38:10:dd:83:29:d6:25:0c:18: 75:a6:93:53:09:28:64:88:39:75:b7:27:3c:38:fd:8c:ad:0e: 55:ac:ed:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xjXz1ZmiRZnfZTl70OeAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhN2E3ZGExZTIyM2IxODMwYTBiOTFiNWQ2MWM4M2FkMjYw YzExMWIwHhcNMjUxMjE5MDQwMjQzWhcNMjUxMjIwMDQwMjQzWjAzMTEwLwYDVQQD EygwMjk2MjNjZjJiN2FkMzdiOWE5ZWE3OTVmODE3N2YyODliYjAwYjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwol24HPVuzMCnR05kVpKl5jaLsHe RItD6ub6ZVx9c9FAtjDRJ+udnxP7HWZUmEaeZY4IklT94OenfSoa5kG9psOVijWA 68ohSV5gDCiVdh66f/O446aln3o3sZMK9y4t1da9S1Tb8I/+fHt4eOvDAGFQu50k 7pYLs9m7x4dkfpGSAwF5YnQl2GBMnFIYnLpUD5VUk+EVyDFuFpEMvJFZvy/tktuA KmmuwIbouKaXHfT0Camn6J87MDATbDUCw5WR4h+v4FPtXRG4g9lYnNdr8UoMEZkn 20gGCHVlN1IgKpo+E5INrH127lQHT+m3/OvIprNjgcv64tjyRhKc462ZeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAKWI88retN7mp6nlfgXfyibsAtNMB8GA1UdIwQY MBaAFKp6faHiI7GDCguRtdYcg60mDBEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW5wOW9lSWpzWU1LQzVHMTFoeURyU1lNRVJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lNTdmYjEtMmQ1YS00NjYxLTgwMWQt MGViOGYzN2EwMTc5LzEvcW5wOW9lSWpzWU1LQzVHMTFoeURyU1lNRVJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9lNTdmYjEtMmQ1YS00NjYxLTgwMWQtMGViOGYzN2EwMTc5 LzEvcW5wOW9lSWpzWU1LQzVHMTFoeURyU1lNRVJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVwStp6DS iv17juulmV5OxkTb5Mlu7UGduj30c7SfReQt5LeDHERfO2pnNzPPPolrW03TKRu3 2wW/hWhU0uSjgrbRla0Rso58iZXF2mmv9oy4eEmtGbWqt0LSe8p0QQGRiyTAoidR iM93XqBSrbtDoIWwCPV1ObC/tJTquyi154jR+kpiG3RcgYTv41xSQwd2A3rwj9GA pN99lQnoI9Vrbpf9cgGP4tMtmQ4+xzPDz9LPoJUtNtf1C43NwJgGnPymuEnkQ/jt rMR1SRKhalPHI7nvqs/FQLwFLZvmJ9Bbdxt5OBDdgynWJQwYdaaTUwkoZIg5dbcn PDj9jK0OVaztdw== -----END CERTIFICATE-----Generated at Fri Dec 19 06:40:06 2025 by rpki-client