This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.mft File: qk1y7NwVN4vnF7tMoJcQcNV2SaM.mft (raw, json) Hash identifier: NClOb4IuQxopEQNNvKBPZzYAGkMoTGwuVWXCE+oa6f0= Subject key identifier: 3C:9A:C8:83:AB:58:F5:CB:12:8F:2A:40:86:37:BC:49:E8:74:BF:0B Authority key identifier: AA:4D:72:EC:DC:15:37:8B:E7:17:BB:4C:A0:97:10:70:D5:76:49:A3 Certificate issuer: /CN=aa4d72ecdc15378be717bb4ca0971070d57649a3 Certificate serial: 019B0E9338BFDDA5EC0652027766A9CF429B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qk1y7NwVN4vnF7tMoJcQcNV2SaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.mft Manifest number: 0629 Signing time: Thu 11 Dec 2025 18:01:27 +0000 Manifest this update: Thu 11 Dec 2025 18:01:27 +0000 Manifest next update: Fri 12 Dec 2025 18:01:27 +0000 Files and hashes: 1: dr0aQwlMd5wprYGuM-4A6wgZRyk.roa (hash: 5kfUYUIepAA22bF94//hZe6cokijIGlywb6OIAlIy1Y=) 2: qk1y7NwVN4vnF7tMoJcQcNV2SaM.crl (hash: 32I0+WybaAlt0lGe4tbnLCFSsGVFvB9ctj0isRt+zSw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.crl rsync://rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.mft rsync://rpki.ripe.net/repository/DEFAULT/qk1y7NwVN4vnF7tMoJcQcNV2SaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:38:bf:dd:a5:ec:06:52:02:77:66:a9:cf:42:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa4d72ecdc15378be717bb4ca0971070d57649a3 Validity Not Before: Dec 11 18:01:27 2025 GMT Not After : Dec 12 18:01:27 2025 GMT Subject: CN=3c9ac883ab58f5cb128f2a408637bc49e874bf0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:03:49:19:f4:85:1c:f2:ed:81:7c:9f:9e:72: 32:0d:ce:2c:74:23:aa:d6:76:da:df:fd:44:44:4e: 6d:fb:0a:90:f4:b2:30:f1:57:1f:4d:89:56:07:e9: 84:66:89:fd:c4:12:93:68:9b:b1:a8:55:54:4c:b1: c3:87:17:3f:49:eb:43:c4:4a:23:37:8f:54:c8:7b: 7b:d0:3b:3b:c3:ee:b9:19:13:31:db:f7:1e:14:8f: 0a:90:3b:b5:9a:55:b5:33:66:34:7c:f4:22:bc:29: 54:38:c2:b5:a0:62:a7:16:0e:9b:c5:bc:be:3f:80: 61:f9:95:11:72:bb:09:e1:94:51:48:db:35:6a:06: a0:22:69:04:81:98:f5:9d:9a:e2:31:8c:46:6e:42: 4a:e9:f9:40:35:de:6e:76:a1:c0:8f:52:e6:1b:d6: af:97:89:55:fc:78:6f:7c:50:ea:ef:e2:77:91:cb: 0c:4e:35:7d:81:67:f2:80:3a:f3:31:da:cb:c7:2e: 58:b1:20:bb:57:1a:19:48:ba:b6:1f:29:ca:9c:c1: 47:b9:8b:19:4f:d7:6a:a9:24:68:d9:40:39:29:bb: 35:60:ba:d0:49:f7:2c:59:b4:77:b1:20:d9:15:b0: d2:40:e8:97:82:bd:6d:75:c1:03:ac:fe:37:2d:2b: d2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:9A:C8:83:AB:58:F5:CB:12:8F:2A:40:86:37:BC:49:E8:74:BF:0B X509v3 Authority Key Identifier: keyid:AA:4D:72:EC:DC:15:37:8B:E7:17:BB:4C:A0:97:10:70:D5:76:49:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qk1y7NwVN4vnF7tMoJcQcNV2SaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:63:6f:fc:77:35:4a:ab:25:d8:35:f2:6e:cf:d6:e8:3a:f2: fb:1b:20:fd:e0:bc:10:f2:46:6c:09:f2:c9:eb:4e:df:0f:be: 84:65:8a:71:34:cd:4e:a6:b6:2d:42:c8:e4:a7:45:f9:99:a8: e9:2e:b8:f5:02:0a:09:3a:0e:fe:2c:d9:09:12:f9:e6:7e:53: b8:a7:27:94:5d:db:9e:95:69:c9:93:7e:03:d4:75:12:25:be: 6c:53:4a:0f:b2:ec:09:fd:64:b7:3e:d9:a5:ca:24:d5:a8:53: d2:e3:95:2a:b1:f5:a2:95:d1:0c:d7:e3:22:95:08:9c:60:dd: 7e:bf:b4:f9:4d:e7:56:f3:d5:76:9b:7b:2b:75:09:89:a1:09: a2:6a:33:cb:a0:80:b4:ed:eb:7c:dd:2f:12:3a:3f:97:9a:e8: 3d:cc:0f:5d:8d:17:4e:40:81:0f:7e:d0:c1:a3:a5:e1:41:62: a6:14:1e:60:bf:25:48:24:cd:f7:00:76:b7:19:be:2b:5b:cc: d0:26:9e:31:0a:86:ff:e5:d2:9a:24:a5:2f:22:b5:81:c0:10: 96:35:92:22:80:b0:1c:76:19:59:af:65:91:1e:2a:b9:cc:97: 5e:db:17:ca:04:46:5a:89:16:81:d6:82:bc:6b:66:54:60:ba: 75:ad:db:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkzi/3aXsBlICd2apz0KbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNGQ3MmVjZGMxNTM3OGJlNzE3YmI0Y2EwOTcxMDcwZDU3 NjQ5YTMwHhcNMjUxMjExMTgwMTI3WhcNMjUxMjEyMTgwMTI3WjAzMTEwLwYDVQQD EygzYzlhYzg4M2FiNThmNWNiMTI4ZjJhNDA4NjM3YmM0OWU4NzRiZjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwNJGfSFHPLtgXyfnnIyDc4sdCOq 1nba3/1ERE5t+wqQ9LIw8VcfTYlWB+mEZon9xBKTaJuxqFVUTLHDhxc/SetDxEoj N49UyHt70Ds7w+65GRMx2/ceFI8KkDu1mlW1M2Y0fPQivClUOMK1oGKnFg6bxby+ P4Bh+ZURcrsJ4ZRRSNs1agagImkEgZj1nZriMYxGbkJK6flANd5udqHAj1LmG9av l4lV/HhvfFDq7+J3kcsMTjV9gWfygDrzMdrLxy5YsSC7VxoZSLq2HynKnMFHuYsZ T9dqqSRo2UA5Kbs1YLrQSfcsWbR3sSDZFbDSQOiXgr1tdcEDrP43LSvSAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDyayIOrWPXLEo8qQIY3vEnodL8LMB8GA1UdIwQY MBaAFKpNcuzcFTeL5xe7TKCXEHDVdkmjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWsxeTdOd1ZONHZuRjd0TW9KY1FjTlYyU2FNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC81MDdhNTctNGE2Mi00Yjk1LWIxYTMt YjQwNTc2MjFiYmE2LzEvcWsxeTdOd1ZONHZuRjd0TW9KY1FjTlYyU2FNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC81MDdhNTctNGE2Mi00Yjk1LWIxYTMtYjQwNTc2MjFiYmE2 LzEvcWsxeTdOd1ZONHZuRjd0TW9KY1FjTlYyU2FNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgWNv/Hc1 Sqsl2DXybs/W6Dry+xsg/eC8EPJGbAnyyetO3w++hGWKcTTNTqa2LULI5KdF+Zmo 6S649QIKCToO/izZCRL55n5TuKcnlF3bnpVpyZN+A9R1EiW+bFNKD7LsCf1ktz7Z pcok1ahT0uOVKrH1opXRDNfjIpUInGDdfr+0+U3nVvPVdpt7K3UJiaEJomozy6CA tO3rfN0vEjo/l5roPcwPXY0XTkCBD37QwaOl4UFiphQeYL8lSCTN9wB2txm+K1vM 0CaeMQqG/+XSmiSlLyK1gcAQljWSIoCwHHYZWa9lkR4qucyXXtsXygRGWokWgdaC vGtmVGC6da3bhQ== -----END CERTIFICATE-----Generated at Thu Dec 11 23:13:17 2025 by rpki-client