This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft File: qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft (raw, json) Hash identifier: pJJREZkjmqNX8jezXSz8qFmtWfatR6u+YL2f2uFYk9E= Subject key identifier: 7F:EA:6E:1C:00:CD:B8:9A:BB:71:12:36:23:16:F7:BC:8E:C7:C3:B9 Authority key identifier: AA:A5:34:64:A8:10:AA:38:C9:36:D9:D9:8B:6A:2D:13:2F:CB:FF:58 Certificate issuer: /CN=aaa53464a810aa38c936d9d98b6a2d132fcbff58 Certificate serial: 019ACA8DD0075E51146B723D5553B5F409CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft Manifest number: 174D Signing time: Fri 28 Nov 2025 13:01:22 +0000 Manifest this update: Fri 28 Nov 2025 13:01:22 +0000 Manifest next update: Sat 29 Nov 2025 13:01:22 +0000 Files and hashes: 1: nEGj30N7Wbasb6AnvF-74ldwKOw.roa (hash: 4FClR6vcMY2SCJnOebSa9NEF0JcRgbJiRCF7Wp1Q7zQ=) 2: qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl (hash: ipeUh9gikueYSDbvULz6YPqinBmVyrbru6arxM4N4vc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 13:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ca:8d:d0:07:5e:51:14:6b:72:3d:55:53:b5:f4:09:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaa53464a810aa38c936d9d98b6a2d132fcbff58 Validity Not Before: Nov 28 13:01:22 2025 GMT Not After : Nov 29 13:01:22 2025 GMT Subject: CN=7fea6e1c00cdb89abb7112362316f7bc8ec7c3b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3f:55:7e:e5:33:f7:79:08:1e:d2:20:12:ef: 04:95:52:6e:13:58:1d:3e:c7:b5:7f:49:c8:b7:b0: a1:3f:18:87:e4:3e:e3:d3:54:0d:22:72:9a:68:d7: b0:3b:9c:f0:32:65:ce:47:d5:d1:bd:48:8b:11:4e: b3:70:67:d6:08:53:83:3a:35:4f:cb:17:2a:ba:48: a3:0e:8d:cd:b4:84:f1:fd:95:c2:49:b1:8a:86:5f: c4:ec:ae:70:1f:4d:e1:df:96:43:af:1e:8d:fa:31: 4b:6f:90:95:f1:ab:88:0f:21:5f:cd:a0:b5:b4:17: f2:20:49:2c:d6:e1:6c:0c:09:62:fc:4a:6f:cf:ba: 12:d1:66:ba:24:94:34:e6:70:5d:7d:af:a2:7b:cd: 29:a4:aa:c5:17:d7:7a:6a:02:cf:4f:d2:a6:0d:45: 1b:16:56:f3:35:b9:f9:18:ad:ee:0e:86:a6:67:a3: d4:5d:ac:be:7c:71:8a:95:4d:ac:18:bf:16:c9:4f: 1b:8f:d1:9b:1c:b7:18:5f:cb:2f:9a:d1:23:fb:cb: 25:4c:d7:e2:c5:76:ea:04:3d:f6:38:ac:00:97:41: 3f:74:80:26:fd:43:a3:49:4d:d3:3b:ad:3b:04:48: 4b:35:e3:29:cf:df:2d:ee:3f:54:79:2c:cb:b3:16: b1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:EA:6E:1C:00:CD:B8:9A:BB:71:12:36:23:16:F7:BC:8E:C7:C3:B9 X509v3 Authority Key Identifier: keyid:AA:A5:34:64:A8:10:AA:38:C9:36:D9:D9:8B:6A:2D:13:2F:CB:FF:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:99:4d:02:df:44:be:9c:2b:77:ea:48:36:f0:3e:f5:b4:38: 08:f9:43:e4:11:29:d7:b4:16:85:c5:fa:4f:ba:10:77:58:e1: c8:1d:4a:16:56:ea:fb:bf:4a:c9:7c:e1:3a:d6:5d:c0:67:b9: ea:8b:20:ca:e7:b5:38:cb:a3:10:2e:a1:ad:25:23:ec:dd:a1: 8e:b6:0a:bf:18:23:c2:06:0e:14:fe:ea:1f:fc:98:09:f1:98: 1e:fc:6a:ad:56:c8:9a:41:aa:5e:ec:5a:42:8c:89:97:cb:2a: 82:3e:eb:ae:8a:bd:8a:99:e4:58:70:06:73:16:48:70:e6:51: fb:30:75:15:70:3b:29:1a:dc:24:2b:c9:60:74:7f:a2:34:bb: 8c:7d:52:69:54:4a:af:69:1a:ff:09:0f:bc:ab:70:7f:f6:9b: a5:67:44:2c:00:ad:d8:33:36:e3:de:e5:5f:a6:ca:43:79:5f: 36:49:42:ab:f3:3e:fe:a8:4b:87:82:ab:f7:f7:c5:d8:e1:96: 53:49:43:ab:bf:50:5d:52:00:22:ea:19:56:ff:12:cd:a8:c3: 48:7e:8d:70:aa:a9:49:1b:a9:fc:fc:5f:fa:7a:53:c9:03:67: 5d:36:de:e4:07:61:9c:7e:c3:30:b6:94:57:90:04:88:00:12: 90:e9:18:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrKjdAHXlEUa3I9VVO19AnPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhYTUzNDY0YTgxMGFhMzhjOTM2ZDlkOThiNmEyZDEzMmZj YmZmNTgwHhcNMjUxMTI4MTMwMTIyWhcNMjUxMTI5MTMwMTIyWjAzMTEwLwYDVQQD Eyg3ZmVhNmUxYzAwY2RiODlhYmI3MTEyMzYyMzE2ZjdiYzhlYzdjM2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArj9VfuUz93kIHtIgEu8ElVJuE1gd Pse1f0nIt7ChPxiH5D7j01QNInKaaNewO5zwMmXOR9XRvUiLEU6zcGfWCFODOjVP yxcqukijDo3NtITx/ZXCSbGKhl/E7K5wH03h35ZDrx6N+jFLb5CV8auIDyFfzaC1 tBfyIEks1uFsDAli/Epvz7oS0Wa6JJQ05nBdfa+ie80ppKrFF9d6agLPT9KmDUUb FlbzNbn5GK3uDoamZ6PUXay+fHGKlU2sGL8WyU8bj9GbHLcYX8svmtEj+8slTNfi xXbqBD32OKwAl0E/dIAm/UOjSU3TO607BEhLNeMpz98t7j9UeSzLsxaxhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH/qbhwAzbiau3ESNiMW97yOx8O5MB8GA1UdIwQY MBaAFKqlNGSoEKo4yTbZ2YtqLRMvy/9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXFVMFpLZ1FxampKTnRuWmkyb3RFeV9MXzFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC82NGRlMmYtNWYzNS00Zjc3LWE4NDQt NDNkNzRjMDAwN2U2LzEvcXFVMFpLZ1FxampKTnRuWmkyb3RFeV9MXzFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC82NGRlMmYtNWYzNS00Zjc3LWE4NDQtNDNkNzRjMDAwN2U2 LzEvcXFVMFpLZ1FxampKTnRuWmkyb3RFeV9MXzFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApJlNAt9E vpwrd+pINvA+9bQ4CPlD5BEp17QWhcX6T7oQd1jhyB1KFlbq+79KyXzhOtZdwGe5 6osgyue1OMujEC6hrSUj7N2hjrYKvxgjwgYOFP7qH/yYCfGYHvxqrVbImkGqXuxa QoyJl8sqgj7rroq9ipnkWHAGcxZIcOZR+zB1FXA7KRrcJCvJYHR/ojS7jH1SaVRK r2ka/wkPvKtwf/abpWdELACt2DM2497lX6bKQ3lfNklCq/M+/qhLh4Kr9/fF2OGW U0lDq79QXVIAIuoZVv8SzajDSH6NcKqpSRup/Pxf+npTyQNnXTbe5AdhnH7DMLaU V5AEiAASkOkY2w== -----END CERTIFICATE-----Generated at Fri Nov 28 17:43:34 2025 by rpki-client