This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft File: qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft (raw, json) Hash identifier: sOkD7zmuZ2onVHg2xY2DGoqWr1Ec/QCFjdyzWRO52dY= Subject key identifier: FA:2F:7E:04:D8:73:E3:C8:AC:A3:F5:BB:BC:BD:EA:7E:77:17:FF:03 Authority key identifier: AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E Certificate issuer: /CN=aafc41aafbbccaa96711849745ef722a5260ac7e Certificate serial: 019B0D80B801DA9CEA6DF8603C132F50A9BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft Manifest number: 1748 Signing time: Thu 11 Dec 2025 13:01:37 +0000 Manifest this update: Thu 11 Dec 2025 13:01:37 +0000 Manifest next update: Fri 12 Dec 2025 13:01:37 +0000 Files and hashes: 1: EtuX617xzyrB71Hjc1hl3WMzRjI.roa (hash: QSVoTvnTqOuhcGfy2h2iEu7xdB5mNRvXSamlWm6WYuo=) 2: MBp32VcQqAbMoARjt7V1PCPscvg.roa (hash: pI5Os3fewlyJzy3/SsAFuRA7NUz4NSu4MCASZkD0XZY=) 3: qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl (hash: fukfa76AACCUjWqcU8K9O48EdnrPE+/MivLx5Is8mSA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 13:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:80:b8:01:da:9c:ea:6d:f8:60:3c:13:2f:50:a9:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aafc41aafbbccaa96711849745ef722a5260ac7e Validity Not Before: Dec 11 13:01:37 2025 GMT Not After : Dec 12 13:01:37 2025 GMT Subject: CN=fa2f7e04d873e3c8aca3f5bbbcbdea7e7717ff03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b1:09:1e:7a:6d:fb:6f:a0:43:c2:4e:93:0d: 7d:f6:fb:d4:dd:df:d9:a2:d1:bd:42:e3:da:4c:fe: 1b:b3:ef:80:99:d1:22:d9:c7:e0:b6:b7:49:b7:6f: 1b:44:aa:86:d3:40:cd:38:68:ac:98:8a:85:5f:ce: 68:a3:64:d1:a2:31:78:2c:00:7b:58:b0:83:86:11: 70:93:db:45:72:fa:68:31:fb:75:24:c1:d5:5f:17: d7:5a:e2:d2:53:fa:8d:81:07:34:1d:31:40:af:76: b2:5c:9d:cf:33:2c:85:ec:e4:77:d0:3e:b0:db:76: 58:8b:79:08:69:29:10:6f:1a:62:e3:11:f4:56:ce: da:56:94:b5:84:46:2c:d3:d8:d5:17:fd:1c:39:78: e4:52:20:6f:c9:a3:a6:c8:2d:ee:b6:6d:dc:92:87: 67:9f:59:3f:66:a3:32:51:83:f6:04:fe:0e:e0:12: d4:a7:3b:22:0f:da:9d:70:01:a0:1c:01:a1:af:0f: 18:68:4b:9c:f1:53:f1:f5:fe:77:ec:df:b4:44:d7: 11:23:48:9b:45:1e:65:57:4c:32:a1:21:35:7a:b1: 05:6a:42:e9:ef:9d:d1:3d:78:0b:c7:68:39:a9:fc: 5f:d4:55:71:5b:ef:b7:4c:3b:2f:29:99:a3:79:3f: 2d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:2F:7E:04:D8:73:E3:C8:AC:A3:F5:BB:BC:BD:EA:7E:77:17:FF:03 X509v3 Authority Key Identifier: keyid:AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:e5:0b:63:6e:b2:36:04:38:88:9a:94:6d:2c:bb:d5:f2:ec: 9a:dc:fa:c5:cd:79:e0:57:a5:69:9d:5e:28:1d:6d:12:23:f9: 10:e8:89:b3:4b:c0:9f:de:42:7e:25:d1:66:44:d9:e0:0a:b6: 03:10:89:1c:3e:0c:33:fc:7f:47:72:1e:79:a0:67:e2:0b:10: 3a:0c:46:d7:72:3d:b7:8e:78:c2:02:2e:e4:a7:bf:2a:4d:02: 67:05:23:07:c0:3d:94:4f:0c:4b:34:6c:25:57:43:a8:35:1b: 8d:d5:11:9b:c2:5b:27:32:98:d1:bd:2c:2a:78:79:6e:d0:76: de:2f:eb:e4:d1:65:90:ce:f4:00:44:a0:88:1c:e2:47:0d:b2: da:36:cd:28:64:f0:c3:a1:66:39:b1:17:c0:91:42:c3:89:54: 2b:f7:f8:20:c2:6a:c2:23:64:91:97:a6:84:d4:b9:63:a0:4b: 18:9b:da:b0:37:09:20:30:e4:83:58:89:69:60:ff:b8:b0:29: 7a:5f:00:67:68:e7:b5:1c:a7:3a:f4:5d:fb:de:ff:59:28:d4: 77:52:08:8f:26:04:10:db:9c:c9:f3:6b:f2:df:7f:b4:95:4b: 04:72:c9:ae:27:95:10:09:05:58:51:75:bb:6b:47:bc:31:30: 19:28:bd:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNgLgB2pzqbfhgPBMvUKm6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhZmM0MWFhZmJiY2NhYTk2NzExODQ5NzQ1ZWY3MjJhNTI2 MGFjN2UwHhcNMjUxMjExMTMwMTM3WhcNMjUxMjEyMTMwMTM3WjAzMTEwLwYDVQQD EyhmYTJmN2UwNGQ4NzNlM2M4YWNhM2Y1YmJiY2JkZWE3ZTc3MTdmZjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLEJHnpt+2+gQ8JOkw199vvU3d/Z otG9QuPaTP4bs++AmdEi2cfgtrdJt28bRKqG00DNOGismIqFX85oo2TRojF4LAB7 WLCDhhFwk9tFcvpoMft1JMHVXxfXWuLSU/qNgQc0HTFAr3ayXJ3PMyyF7OR30D6w 23ZYi3kIaSkQbxpi4xH0Vs7aVpS1hEYs09jVF/0cOXjkUiBvyaOmyC3utm3ckodn n1k/ZqMyUYP2BP4O4BLUpzsiD9qdcAGgHAGhrw8YaEuc8VPx9f537N+0RNcRI0ib RR5lV0wyoSE1erEFakLp753RPXgLx2g5qfxf1FVxW++3TDsvKZmjeT8tewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPovfgTYc+PIrKP1u7y96n53F/8DMB8GA1UdIwQY MBaAFKr8Qar7vMqpZxGEl0XvcipSYKx+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXZ4QnF2dTh5cWxuRVlTWFJlOXlLbEpnckg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85ZmRkZDQtNTI2YS00ODA3LWIxMjct MWJjMzFjNjI0MDFmLzEvcXZ4QnF2dTh5cWxuRVlTWFJlOXlLbEpnckg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS85ZmRkZDQtNTI2YS00ODA3LWIxMjctMWJjMzFjNjI0MDFm LzEvcXZ4QnF2dTh5cWxuRVlTWFJlOXlLbEpnckg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhuULY26y NgQ4iJqUbSy71fLsmtz6xc154FelaZ1eKB1tEiP5EOiJs0vAn95CfiXRZkTZ4Aq2 AxCJHD4MM/x/R3IeeaBn4gsQOgxG13I9t454wgIu5Ke/Kk0CZwUjB8A9lE8MSzRs JVdDqDUbjdURm8JbJzKY0b0sKnh5btB23i/r5NFlkM70AESgiBziRw2y2jbNKGTw w6FmObEXwJFCw4lUK/f4IMJqwiNkkZemhNS5Y6BLGJvasDcJIDDkg1iJaWD/uLAp el8AZ2jntRynOvRd+97/WSjUd1IIjyYEENucyfNr8t9/tJVLBHLJrieVEAkFWFF1 u2tHvDEwGSi9lQ== -----END CERTIFICATE-----Generated at Thu Dec 11 23:12:42 2025 by rpki-client