This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft File: qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft (raw, json) Hash identifier: jqHEB+E5m5fs3cXf9gDOBoRp8LkfmqVPPktjKAwaw60= Subject key identifier: 59:1D:6C:03:38:43:62:28:0D:7B:5F:C9:F2:5D:08:8B:0B:C5:C0:0D Authority key identifier: AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3 Certificate issuer: /CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3 Certificate serial: 019AFE43D844274301B83AEB69399280DE8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft Manifest number: 1766 Signing time: Mon 08 Dec 2025 14:00:50 +0000 Manifest this update: Mon 08 Dec 2025 14:00:50 +0000 Manifest next update: Tue 09 Dec 2025 14:00:50 +0000 Files and hashes: 1: 6IkTOlXjuiMiUAcYz6JmNLyjzkI.roa (hash: lvYkGWBMeYPfRVhHecKPB+lCXAgyiJ169VcA0wekGsU=) 2: e4TuQp4c2N02mdWdlxAx2GM5rFg.roa (hash: TkgW2WEclpl44YPmskP1q4vEinXMPrmbVI0ndJ9d/ec=) 3: qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl (hash: vhetY/tAIE6U5hgzyGkIT/dNmtypTW6/u+F/xh75AWo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 14:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:43:d8:44:27:43:01:b8:3a:eb:69:39:92:80:de:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3 Validity Not Before: Dec 8 14:00:50 2025 GMT Not After : Dec 9 14:00:50 2025 GMT Subject: CN=591d6c03384362280d7b5fc9f25d088b0bc5c00d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4c:ba:bb:1d:39:87:bc:4e:7c:1e:15:c9:19: 52:bf:68:aa:93:90:b5:10:64:21:9a:f4:9c:87:d8: 27:07:b5:52:7e:c0:b4:fe:e4:1e:46:3d:35:67:40: 64:99:46:29:8d:bc:4b:b4:8f:c5:7c:a1:65:d3:2d: 76:b3:bb:23:78:0d:22:fa:39:ee:ac:f5:87:29:4c: 76:3c:e6:2f:de:ea:4b:41:09:14:02:3f:80:01:9f: 0b:40:4f:0f:94:82:7b:1d:4f:97:51:20:5f:a9:a1: fa:7f:d7:7f:a0:6d:bb:da:7b:a4:1b:14:61:01:cd: 15:f8:fc:1b:de:eb:a3:12:1a:90:bf:65:39:7c:93: d2:3d:4e:88:89:b2:17:f2:95:91:19:cb:0c:b1:73: ee:4e:83:a1:62:f1:ec:b9:62:1b:d5:a2:51:67:e3: f8:84:77:43:ac:86:e2:2b:a5:8d:89:1c:77:31:b7: b4:6c:22:39:10:b0:1f:10:0b:79:8f:d9:fa:8b:3a: 18:86:4d:7d:20:fc:f2:9e:2f:e2:cc:09:c6:36:05: 40:ce:77:9c:f6:a8:bd:a6:9c:1c:43:1b:84:95:3e: 01:cb:b0:31:36:16:dd:53:a5:d1:5a:6c:25:c7:c5: cb:39:25:27:a7:c0:c9:a8:1b:f1:10:3a:f4:4b:56: 7c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:1D:6C:03:38:43:62:28:0D:7B:5F:C9:F2:5D:08:8B:0B:C5:C0:0D X509v3 Authority Key Identifier: keyid:AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:f9:5e:b5:9d:d7:62:67:00:1d:a5:33:b9:a7:f9:6b:63:81: a3:cd:c9:f2:3e:c8:af:9d:e1:e2:b5:06:3f:3f:3f:53:a5:f5: 84:d2:45:a6:ac:92:72:77:14:b4:30:ac:71:f1:5e:f7:e9:13: e0:7c:b0:3d:09:44:d2:db:a9:0e:a4:ff:57:a9:ec:b4:a3:ca: 02:bf:54:ba:81:2c:a8:fc:fc:da:d7:a8:75:bf:3a:5a:30:fc: 1e:28:e4:38:2f:9d:1a:25:59:d8:f7:fc:e0:e4:9a:8d:31:c5: d6:dd:d3:90:c4:be:2f:14:41:11:86:75:b0:d0:76:a1:3b:6a: d3:d2:2e:44:ac:5a:d8:eb:f5:38:1a:c8:8b:29:03:dc:82:77: 58:a0:47:0a:aa:c6:1f:5e:bb:4b:78:d3:26:d3:df:6a:c2:7b: 0b:87:7c:f0:8d:03:8b:21:53:ce:3a:1c:01:fe:03:ac:e3:d2: 33:d7:04:06:8c:a1:5c:8f:9d:b0:44:2d:12:b1:28:83:57:59: 49:e2:df:a5:f6:40:73:8e:5c:4a:b0:6c:49:c1:3d:d9:bf:38: cc:d4:b0:50:6f:39:6d:11:8e:91:14:77:53:09:e5:f2:59:c6: da:44:4d:06:be:36:1e:e6:ca:f6:08:7b:62:3e:e6:4e:48:3a: 50:04:47:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr+Q9hEJ0MBuDrraTmSgN6LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhM2FlZDkxZjI5YjJjYzdkM2UwNWYyNDBkOTkxMzc1ODFk OWI1YjMwHhcNMjUxMjA4MTQwMDUwWhcNMjUxMjA5MTQwMDUwWjAzMTEwLwYDVQQD Eyg1OTFkNmMwMzM4NDM2MjI4MGQ3YjVmYzlmMjVkMDg4YjBiYzVjMDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUy6ux05h7xOfB4VyRlSv2iqk5C1 EGQhmvSch9gnB7VSfsC0/uQeRj01Z0BkmUYpjbxLtI/FfKFl0y12s7sjeA0i+jnu rPWHKUx2POYv3upLQQkUAj+AAZ8LQE8PlIJ7HU+XUSBfqaH6f9d/oG272nukGxRh Ac0V+Pwb3uujEhqQv2U5fJPSPU6IibIX8pWRGcsMsXPuToOhYvHsuWIb1aJRZ+P4 hHdDrIbiK6WNiRx3Mbe0bCI5ELAfEAt5j9n6izoYhk19IPzyni/izAnGNgVAznec 9qi9ppwcQxuElT4By7AxNhbdU6XRWmwlx8XLOSUnp8DJqBvxEDr0S1Z8awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFkdbAM4Q2IoDXtfyfJdCIsLxcANMB8GA1UdIwQY MBaAFKo67ZHymyzH0+BfJA2ZE3WB2bWzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWpydGtmS2JMTWZUNEY4a0Raa1RkWUhadGJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My84ZTBmNjMtZWY3YS00NjYyLWIwNDYt MDRlMWViMmE5MzI4LzEvcWpydGtmS2JMTWZUNEY4a0Raa1RkWUhadGJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My84ZTBmNjMtZWY3YS00NjYyLWIwNDYtMDRlMWViMmE5MzI4 LzEvcWpydGtmS2JMTWZUNEY4a0Raa1RkWUhadGJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR/letZ3X YmcAHaUzuaf5a2OBo83J8j7Ir53h4rUGPz8/U6X1hNJFpqyScncUtDCscfFe9+kT 4HywPQlE0tupDqT/V6nstKPKAr9UuoEsqPz82teodb86WjD8HijkOC+dGiVZ2Pf8 4OSajTHF1t3TkMS+LxRBEYZ1sNB2oTtq09IuRKxa2Ov1OBrIiykD3IJ3WKBHCqrG H167S3jTJtPfasJ7C4d88I0DiyFTzjocAf4DrOPSM9cEBoyhXI+dsEQtErEog1dZ SeLfpfZAc45cSrBsScE92b84zNSwUG85bRGOkRR3Uwnl8lnG2kRNBr42HubK9gh7 Yj7mTkg6UARHfw== -----END CERTIFICATE-----Generated at Mon Dec 8 23:55:37 2025 by rpki-client