This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft File: qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft (raw, json) Hash identifier: OKyJ0DjBedN5MMmnjeiA8dnIz8oIP8Op65QmlqsPbPo= Subject key identifier: 9C:43:3D:8E:AC:48:D4:B9:5B:16:3B:B4:E9:F8:94:B4:C2:66:87:7B Authority key identifier: A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5 Certificate issuer: /CN=a8010ceb20f2e076a3f000271a5c375761bec2f5 Certificate serial: 019B2475C2A083BC0B6BAA0FFC2A359C5DBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft Manifest number: 0CBE Signing time: Tue 16 Dec 2025 00:00:55 +0000 Manifest this update: Tue 16 Dec 2025 00:00:55 +0000 Manifest next update: Wed 17 Dec 2025 00:00:55 +0000 Files and hashes: 1: cTUW6h8O7oJIMmgLFdy8XjEMwQM.roa (hash: GWLeGo5Tx1NQYnIt9PV3FBH+YZ+jq0YpS9g5boQS2IE=) 2: hefvQQC5HBlbQ-EPV5xNwJ9mr8s.roa (hash: Ud9jnh2NMlpw3d8NsGfrdGK8oljkEFrFbqnJTHG6eJE=) 3: qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl (hash: h90xrjzYi+qfW+4Qds7tDZhuqAP0YtK+q11x/ru0N5c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:75:c2:a0:83:bc:0b:6b:aa:0f:fc:2a:35:9c:5d:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8010ceb20f2e076a3f000271a5c375761bec2f5 Validity Not Before: Dec 16 00:00:55 2025 GMT Not After : Dec 17 00:00:55 2025 GMT Subject: CN=9c433d8eac48d4b95b163bb4e9f894b4c266877b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:63:71:fb:ee:a7:74:0e:f5:5a:76:53:24:6a: cf:e2:a6:1e:42:9f:3b:0f:b7:55:c3:7e:dc:53:f1: a4:de:45:09:6e:1e:54:4e:98:ef:88:87:3e:53:fb: 42:ca:cb:2c:a3:82:91:ac:42:60:c2:70:64:33:67: 07:a6:b7:36:5f:33:20:f4:0a:69:a8:7e:7d:0b:9e: cc:b7:a3:db:3a:0e:d7:34:96:4c:da:69:a2:34:92: 57:2d:0e:68:75:71:25:27:77:a4:30:99:18:69:13: dc:21:58:c3:f8:41:9a:10:b9:f5:b8:55:53:6b:31: cf:43:23:78:7b:a7:98:3b:2a:6c:c9:1e:5f:8e:93: 0e:bf:c0:32:d6:82:59:48:a3:58:1b:d0:e0:e0:91: 36:42:dc:5c:55:06:b4:b6:17:6b:c5:31:1a:e4:ca: 8a:ef:8e:c7:16:4e:2a:73:63:44:dd:e4:0e:eb:1e: 8d:82:a0:f9:93:51:79:e4:c5:49:3a:91:81:dc:eb: 68:14:0d:0e:9d:f2:2d:c0:90:54:d1:b8:c5:93:d1: 16:ac:ed:68:b4:4a:33:0e:19:00:4b:4c:d4:39:af: d5:cc:14:7a:e3:da:46:4a:a8:f4:26:cd:17:aa:10: ab:a6:b4:4d:62:0e:34:26:03:40:37:85:b0:33:b3: 18:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:43:3D:8E:AC:48:D4:B9:5B:16:3B:B4:E9:F8:94:B4:C2:66:87:7B X509v3 Authority Key Identifier: keyid:A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:ed:bd:e8:9f:b8:11:0f:73:fe:98:2b:91:d8:01:ba:4d:eb: 1e:52:c3:96:4d:12:4a:47:92:ed:17:24:05:df:80:73:64:22: 52:81:70:57:e3:a9:69:52:74:c0:90:ef:60:ff:a9:59:c2:f4: d6:72:87:6a:88:e7:b9:88:a2:70:da:23:2f:74:50:47:46:16: 2e:23:d4:57:85:43:7d:b3:ec:36:77:50:6e:c9:d3:fd:17:46: c4:9b:f5:ad:4f:c1:84:de:7e:57:a8:02:e8:f9:87:8d:31:00: af:fa:4f:20:93:7f:30:a8:44:3e:20:f9:a2:f0:3e:9b:c5:29: 14:0c:77:07:ef:6d:fb:6e:40:dd:91:09:6a:5a:96:00:c6:1d: 33:2e:a8:29:98:15:d4:9d:93:de:62:8a:f3:42:20:7a:d4:01: 7a:b0:8d:ab:52:c6:a0:ae:32:22:37:59:26:17:b1:1d:a0:af: 8a:ed:87:14:21:8b:8a:fc:be:84:d7:36:e0:6b:57:ab:fd:a6: 78:43:63:26:0d:da:a2:f0:a8:09:06:ed:47:5c:56:f8:28:d2: 9e:2e:12:2f:53:0b:07:6e:b0:5c:cb:16:c7:71:cc:f2:6b:f0: 50:c3:de:cb:af:9d:9f:60:e1:f8:08:7d:e7:06:b0:a4:28:48: d6:c9:e6:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskdcKgg7wLa6oP/Co1nF29MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MDEwY2ViMjBmMmUwNzZhM2YwMDAyNzFhNWMzNzU3NjFi ZWMyZjUwHhcNMjUxMjE2MDAwMDU1WhcNMjUxMjE3MDAwMDU1WjAzMTEwLwYDVQQD Eyg5YzQzM2Q4ZWFjNDhkNGI5NWIxNjNiYjRlOWY4OTRiNGMyNjY4NzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGNx++6ndA71WnZTJGrP4qYeQp87 D7dVw37cU/Gk3kUJbh5UTpjviIc+U/tCyssso4KRrEJgwnBkM2cHprc2XzMg9App qH59C57Mt6PbOg7XNJZM2mmiNJJXLQ5odXElJ3ekMJkYaRPcIVjD+EGaELn1uFVT azHPQyN4e6eYOypsyR5fjpMOv8Ay1oJZSKNYG9Dg4JE2QtxcVQa0thdrxTEa5MqK 747HFk4qc2NE3eQO6x6NgqD5k1F55MVJOpGB3OtoFA0OnfItwJBU0bjFk9EWrO1o tEozDhkAS0zUOa/VzBR649pGSqj0Js0XqhCrprRNYg40JgNAN4WwM7MYAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJxDPY6sSNS5WxY7tOn4lLTCZod7MB8GA1UdIwQY MBaAFKgBDOsg8uB2o/AAJxpcN1dhvsL1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUFFTTZ5RHk0SGFqOEFBbkdsdzNWMkctd3ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mNDQ0YWEtYWU4Yy00ZDE0LWEzYTMt NDlmNjVjNmE0OGJmLzEvcUFFTTZ5RHk0SGFqOEFBbkdsdzNWMkctd3ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9mNDQ0YWEtYWU4Yy00ZDE0LWEzYTMtNDlmNjVjNmE0OGJm LzEvcUFFTTZ5RHk0SGFqOEFBbkdsdzNWMkctd3ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfO296J+4 EQ9z/pgrkdgBuk3rHlLDlk0SSkeS7RckBd+Ac2QiUoFwV+OpaVJ0wJDvYP+pWcL0 1nKHaojnuYiicNojL3RQR0YWLiPUV4VDfbPsNndQbsnT/RdGxJv1rU/BhN5+V6gC 6PmHjTEAr/pPIJN/MKhEPiD5ovA+m8UpFAx3B+9t+25A3ZEJalqWAMYdMy6oKZgV 1J2T3mKK80IgetQBerCNq1LGoK4yIjdZJhexHaCviu2HFCGLivy+hNc24GtXq/2m eENjJg3aovCoCQbtR1xW+CjSni4SL1MLB26wXMsWx3HM8mvwUMPey6+dn2Dh+Ah9 5wawpChI1snmRg== -----END CERTIFICATE-----Generated at Tue Dec 16 09:45:01 2025 by rpki-client