This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft File: qIrVRvGg74z3XJKnSL1chjYuIJs.mft (raw, json) Hash identifier: ZagAH23vadl0+GcjDsDoweeqohqhW+YvuJUGX7aackg= Subject key identifier: 39:C2:9E:D3:2B:CE:50:EB:EA:69:B6:15:FF:B7:15:0A:73:79:35:0D Authority key identifier: A8:8A:D5:46:F1:A0:EF:8C:F7:5C:92:A7:48:BD:5C:86:36:2E:20:9B Certificate issuer: /CN=a88ad546f1a0ef8cf75c92a748bd5c86362e209b Certificate serial: 019B09DA7C569B6204EA23248B11E4CF7E22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft Manifest number: 111A Signing time: Wed 10 Dec 2025 20:01:12 +0000 Manifest this update: Wed 10 Dec 2025 20:01:12 +0000 Manifest next update: Thu 11 Dec 2025 20:01:12 +0000 Files and hashes: 1: Y18PuvKbRb3I33NFZERrmAggZBw.roa (hash: ulNop87p1OPj11wBSOeR/0XOStdPoDj14N+Cgskicec=) 2: qIrVRvGg74z3XJKnSL1chjYuIJs.crl (hash: FHtNrIO+0HC3+BR70iPSOiejvXFss6bvMl43v5g5hGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.crl rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:09:da:7c:56:9b:62:04:ea:23:24:8b:11:e4:cf:7e:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a88ad546f1a0ef8cf75c92a748bd5c86362e209b Validity Not Before: Dec 10 20:01:12 2025 GMT Not After : Dec 11 20:01:12 2025 GMT Subject: CN=39c29ed32bce50ebea69b615ffb7150a7379350d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2f:a1:13:82:71:ac:5a:5d:5f:1d:ef:b6:c1: 93:3f:dd:97:ef:e0:75:af:d9:1e:4f:50:43:af:5e: 39:9e:d3:65:bc:1c:24:95:7f:69:ea:c2:6e:99:1a: 1f:46:e5:aa:51:cf:ca:6c:ca:f8:c4:16:7c:cf:3c: 09:07:70:83:62:db:c3:a1:cf:53:cc:39:a3:bf:f0: 26:a4:5c:5b:db:24:4d:ce:79:bb:97:34:44:9a:f7: 9e:19:90:83:a9:05:72:fe:3f:22:13:83:b9:50:c2: b4:be:ff:96:d8:be:fd:67:bd:f7:1e:ce:c3:00:ea: a6:b4:b4:b7:a1:b5:7d:68:f5:83:ea:72:01:30:12: 51:28:61:b3:9b:54:71:f0:d0:b7:43:9b:8f:3c:64: 33:bb:05:ab:48:e3:f1:e1:2c:76:43:46:77:45:25: 59:46:2d:7e:ae:7e:17:b1:1c:5f:a9:f2:f0:0b:54: 19:26:37:68:36:df:11:77:d3:00:12:03:61:4f:84: a8:5b:7a:03:53:1b:6c:ce:21:02:8d:f4:bc:9f:31: cf:b8:7c:af:f3:a0:5c:85:b5:d3:fd:67:27:18:47: ed:7b:4e:a8:db:92:5c:35:ec:a5:9d:45:bb:97:79: 99:cd:3f:64:03:c4:11:57:16:ac:b9:23:ea:82:3d: ff:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C2:9E:D3:2B:CE:50:EB:EA:69:B6:15:FF:B7:15:0A:73:79:35:0D X509v3 Authority Key Identifier: keyid:A8:8A:D5:46:F1:A0:EF:8C:F7:5C:92:A7:48:BD:5C:86:36:2E:20:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:f7:54:1d:5f:31:e7:c8:d0:bc:a4:b3:17:bf:9c:37:14:3b: 53:b2:f4:d6:6c:8e:c2:47:4a:19:61:d7:03:eb:ba:fa:31:4a: 18:de:3b:f8:4d:5b:2f:c6:16:6b:fa:0c:ff:72:51:d2:79:5e: fb:65:58:31:15:fd:77:ad:d3:44:33:f3:b3:ad:f3:c4:be:b4: 0f:7c:a8:05:fa:19:59:02:ca:0d:4a:49:81:82:4c:48:2a:52: be:41:4b:16:e0:68:79:25:28:6b:9f:06:d9:53:b2:1e:36:a5: 9f:dd:e0:05:f4:3d:49:7d:36:cf:1e:58:8d:9d:ac:03:60:93: 4f:4b:2c:cd:7d:30:07:27:70:a4:94:5b:00:52:ed:71:4a:8b: a9:c6:7b:ef:24:fa:3d:2d:01:8d:99:bb:e1:2b:c0:cf:df:2f: 25:c1:ba:eb:c4:65:59:8d:4a:fe:18:4e:7a:11:cf:6d:24:1c: 0e:87:fc:8d:ec:b4:bc:b4:d8:28:b1:68:1a:23:c2:09:37:d5: db:1a:c2:5e:fd:0b:75:cf:76:22:0e:65:70:cb:b8:39:32:8e: 28:1c:ae:ee:41:7a:5c:14:e6:dd:e7:63:fd:84:3e:d7:3b:53: 85:82:b1:e2:54:54:a2:33:dd:85:f5:5d:4b:77:d5:47:0d:e1: fb:db:71:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsJ2nxWm2IE6iMkixHkz34iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4OGFkNTQ2ZjFhMGVmOGNmNzVjOTJhNzQ4YmQ1Yzg2MzYy ZTIwOWIwHhcNMjUxMjEwMjAwMTEyWhcNMjUxMjExMjAwMTEyWjAzMTEwLwYDVQQD EygzOWMyOWVkMzJiY2U1MGViZWE2OWI2MTVmZmI3MTUwYTczNzkzNTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAti+hE4JxrFpdXx3vtsGTP92X7+B1 r9keT1BDr145ntNlvBwklX9p6sJumRofRuWqUc/KbMr4xBZ8zzwJB3CDYtvDoc9T zDmjv/AmpFxb2yRNznm7lzREmveeGZCDqQVy/j8iE4O5UMK0vv+W2L79Z733Hs7D AOqmtLS3obV9aPWD6nIBMBJRKGGzm1Rx8NC3Q5uPPGQzuwWrSOPx4Sx2Q0Z3RSVZ Ri1+rn4XsRxfqfLwC1QZJjdoNt8Rd9MAEgNhT4SoW3oDUxtsziECjfS8nzHPuHyv 86BchbXT/WcnGEfte06o25JcNeylnUW7l3mZzT9kA8QRVxasuSPqgj3/cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDnCntMrzlDr6mm2Ff+3FQpzeTUNMB8GA1UdIwQY MBaAFKiK1UbxoO+M91ySp0i9XIY2LiCbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUlyVlJ2R2c3NHozWEpLblNMMWNoall1SUpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS81MDBhOGMtNmEyZC00MzRiLTk2ZjEt MThlYjc3OWE2NDk3LzEvcUlyVlJ2R2c3NHozWEpLblNMMWNoall1SUpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS81MDBhOGMtNmEyZC00MzRiLTk2ZjEtMThlYjc3OWE2NDk3 LzEvcUlyVlJ2R2c3NHozWEpLblNMMWNoall1SUpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoPdUHV8x 58jQvKSzF7+cNxQ7U7L01myOwkdKGWHXA+u6+jFKGN47+E1bL8YWa/oM/3JR0nle +2VYMRX9d63TRDPzs63zxL60D3yoBfoZWQLKDUpJgYJMSCpSvkFLFuBoeSUoa58G 2VOyHjaln93gBfQ9SX02zx5YjZ2sA2CTT0sszX0wBydwpJRbAFLtcUqLqcZ77yT6 PS0BjZm74SvAz98vJcG668RlWY1K/hhOehHPbSQcDof8jey0vLTYKLFoGiPCCTfV 2xrCXv0Ldc92Ig5lcMu4OTKOKByu7kF6XBTm3edj/YQ+1ztThYKx4lRUojPdhfVd S3fVRw3h+9tx9g== -----END CERTIFICATE-----Generated at Thu Dec 11 00:26:17 2025 by rpki-client