This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft File: qoj641tmtN4uQcpe4He17wtKtkk.mft (raw, json) Hash identifier: SEzYTeM8QF7aCCfwC+sWuVG4lPdrmmx7eeUMFrTq4Tc= Subject key identifier: DA:4D:69:C0:79:76:5D:4A:3A:5D:FC:36:2E:30:BE:B3:8A:E5:6C:4B Authority key identifier: AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49 Certificate issuer: /CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649 Certificate serial: 019B424A58B481C80F98E30A7C1874FA00AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft Manifest number: 16F2 Signing time: Sun 21 Dec 2025 19:02:07 +0000 Manifest this update: Sun 21 Dec 2025 19:02:07 +0000 Manifest next update: Mon 22 Dec 2025 19:02:07 +0000 Files and hashes: 1: oS0baXfZNGyY1D73J2ZM4dbyUEc.roa (hash: Etkc7DGAN6PIaAjm/aO1aFavjNa8wspYkBLe0PvWnjU=) 2: qoj641tmtN4uQcpe4He17wtKtkk.crl (hash: +DiojrBYsEcXxBn+d6UbxpflucfThLsCxY5NF8futu8=) 3: r-zsasbUjJEaU71e8kbXi99TukU.roa (hash: gv3XffgL881eMS9I6xI/He9cs/3EXg91NLNFK1oWx0g=) 4: zeGJY-nsOInvvd3T0IdWJNf1k28.roa (hash: p/aKgF7SzmiRfhNkcpLsPCyw0fGJ04jvtIbzFNx9GZw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.crl rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:58:b4:81:c8:0f:98:e3:0a:7c:18:74:fa:00:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649 Validity Not Before: Dec 21 19:02:07 2025 GMT Not After : Dec 22 19:02:07 2025 GMT Subject: CN=da4d69c079765d4a3a5dfc362e30beb38ae56c4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2f:ec:ec:16:29:6b:64:cf:46:00:db:bd:61: c8:48:a1:8f:d9:63:d7:f3:20:85:c8:1d:3f:c3:2d: 50:01:c7:dd:77:60:ed:ba:95:e2:f7:b6:cd:1f:3b: c0:14:8e:24:a6:b5:f3:79:5e:61:ac:87:e9:bd:f6: e7:3d:c5:e6:b5:74:07:c8:1f:1e:7b:da:9e:76:02: 65:41:2f:65:ce:c8:fb:79:d6:6a:e8:4d:ba:89:5d: 70:ca:2c:cd:d4:a1:0d:c3:82:db:d3:9c:33:f3:17: f9:15:38:46:51:db:68:c7:a0:35:2a:fd:ec:1b:99: db:2d:d6:42:70:77:6c:8a:05:e2:4c:ea:e4:32:f6: 11:a2:37:7f:c7:0d:76:34:fe:ca:c1:8d:34:0b:54: b8:af:8a:fe:a5:a8:24:e1:78:6d:bd:ec:8a:d8:fc: 6d:14:e8:e6:f0:ed:ac:0e:e3:35:0a:d9:dc:0e:8e: 11:17:77:9b:82:be:d2:4b:c7:ed:6e:2c:b5:9d:89: fa:08:4c:69:08:8f:de:94:d1:77:5b:6f:62:b5:ec: 3e:63:6b:66:d5:c3:09:82:3a:34:64:76:07:f0:72: c2:65:d8:b5:a7:4d:90:66:97:ee:9a:ae:20:68:9e: b8:4f:1c:2d:26:a1:8a:ce:17:58:6d:04:fd:f7:f4: 51:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:4D:69:C0:79:76:5D:4A:3A:5D:FC:36:2E:30:BE:B3:8A:E5:6C:4B X509v3 Authority Key Identifier: keyid:AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:e2:dd:91:c2:4c:08:79:51:38:09:ae:a9:ba:32:bd:21:50: d5:f2:2d:9a:f8:dd:8d:4c:16:d4:24:cf:48:a5:bb:0e:53:4e: e3:c3:21:b5:7f:a9:7a:b0:66:0d:7e:b9:a5:97:4f:66:00:b9: d4:8e:9b:5c:d2:04:af:f0:ff:df:3f:1a:fa:35:60:c2:0c:58: 33:c8:ff:00:f6:69:1b:50:f4:64:0b:f0:1d:36:05:42:92:11: ca:d1:6f:c1:19:46:51:57:ef:01:cf:5e:de:08:d3:5a:d5:a8: 8d:a1:77:ef:51:e7:7a:39:4d:db:04:e3:7c:64:69:1c:63:6b: b4:d8:bc:f4:e2:8f:06:87:07:04:35:f8:cb:cc:ec:32:b8:ff: 9b:f2:3b:8f:42:d6:7d:87:d1:ae:1c:f4:47:ca:f5:ea:2c:86: 26:57:15:d7:eb:20:a1:00:71:d5:f6:bd:75:bb:e6:b5:53:43: ea:e4:f0:4b:ee:66:6f:dd:2a:1b:82:3d:c1:b9:09:1e:c8:4e: e0:1a:10:df:be:9c:3d:11:fe:ab:ce:6d:c8:43:e1:9e:83:36: 10:b5:3d:63:6f:02:c1:5a:c8:b1:18:7d:b4:14:76:c9:f2:5d: 1d:9b:cd:3e:e9:b8:64:fe:b5:f2:1c:8a:f9:c3:c9:d6:c3:2d: 51:25:0b:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSli0gcgPmOMKfBh0+gCqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhODhmYWUzNWI2NmI0ZGUyZTQxY2E1ZWUwNzdiNWVmMGI0 YWI2NDkwHhcNMjUxMjIxMTkwMjA3WhcNMjUxMjIyMTkwMjA3WjAzMTEwLwYDVQQD EyhkYTRkNjljMDc5NzY1ZDRhM2E1ZGZjMzYyZTMwYmViMzhhZTU2YzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC/s7BYpa2TPRgDbvWHISKGP2WPX 8yCFyB0/wy1QAcfdd2DtupXi97bNHzvAFI4kprXzeV5hrIfpvfbnPcXmtXQHyB8e e9qedgJlQS9lzsj7edZq6E26iV1wyizN1KENw4Lb05wz8xf5FThGUdtox6A1Kv3s G5nbLdZCcHdsigXiTOrkMvYRojd/xw12NP7KwY00C1S4r4r+pagk4XhtveyK2Pxt FOjm8O2sDuM1CtncDo4RF3ebgr7SS8ftbiy1nYn6CExpCI/elNF3W29itew+Y2tm 1cMJgjo0ZHYH8HLCZdi1p02QZpfumq4gaJ64TxwtJqGKzhdYbQT99/RRxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNpNacB5dl1KOl38Ni4wvrOK5WxLMB8GA1UdIwQY MBaAFKqI+uNbZrTeLkHKXuB3te8LSrZJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW9qNjQxdG10TjR1UWNwZTRIZTE3d3RLdGtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS82ZWZkMWItM2UxMC00NDQ2LTkyYzct YjkyY2I2MTEzMDM1LzEvcW9qNjQxdG10TjR1UWNwZTRIZTE3d3RLdGtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS82ZWZkMWItM2UxMC00NDQ2LTkyYzctYjkyY2I2MTEzMDM1 LzEvcW9qNjQxdG10TjR1UWNwZTRIZTE3d3RLdGtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfeLdkcJM CHlROAmuqboyvSFQ1fItmvjdjUwW1CTPSKW7DlNO48MhtX+perBmDX65pZdPZgC5 1I6bXNIEr/D/3z8a+jVgwgxYM8j/APZpG1D0ZAvwHTYFQpIRytFvwRlGUVfvAc9e 3gjTWtWojaF371HnejlN2wTjfGRpHGNrtNi89OKPBocHBDX4y8zsMrj/m/I7j0LW fYfRrhz0R8r16iyGJlcV1+sgoQBx1fa9dbvmtVND6uTwS+5mb90qG4I9wbkJHshO 4BoQ376cPRH+q85tyEPhnoM2ELU9Y28CwVrIsRh9tBR2yfJdHZvNPum4ZP618hyK +cPJ1sMtUSUL2w== -----END CERTIFICATE-----Generated at Mon Dec 22 04:24:08 2025 by rpki-client