This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft File: q0ZoYAiowQHoTqh4MYrljrcc7II.mft (raw, json) Hash identifier: vMHoHsB3Bs9StnVOVxV6hlKxhyJ3NM4SEHeZrz3HqQQ= Subject key identifier: 65:53:DB:DA:7A:C4:69:5C:09:9F:50:59:60:40:1E:E8:BF:83:CB:FF Authority key identifier: AB:46:68:60:08:A8:C1:01:E8:4E:A8:78:31:8A:E5:8E:B7:1C:EC:82 Certificate issuer: /CN=ab46686008a8c101e84ea878318ae58eb71cec82 Certificate serial: 019B0F006451E2F876D9C56C171A5FB10A25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft Manifest number: 0E51 Signing time: Thu 11 Dec 2025 20:00:42 +0000 Manifest this update: Thu 11 Dec 2025 20:00:42 +0000 Manifest next update: Fri 12 Dec 2025 20:00:42 +0000 Files and hashes: 1: EMySEwRrF4bq2LUNRJSbJLGHINA.roa (hash: DrdEgmoEeO2eKUnBVDonWL4YHyVw8zsXK3sYKFvyya8=) 2: q0ZoYAiowQHoTqh4MYrljrcc7II.crl (hash: Y83Zb2/IOOfkrSiNv6fLiyR9Km/z9tTWQv4Gof/ABCE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:64:51:e2:f8:76:d9:c5:6c:17:1a:5f:b1:0a:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab46686008a8c101e84ea878318ae58eb71cec82 Validity Not Before: Dec 11 20:00:42 2025 GMT Not After : Dec 12 20:00:42 2025 GMT Subject: CN=6553dbda7ac4695c099f505960401ee8bf83cbff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:49:06:a5:67:ac:04:f3:b6:58:4c:64:3d:81: 21:90:2e:79:ee:69:a8:9e:cf:72:53:23:ba:ee:c3: f5:d0:b7:4e:55:83:72:ac:f2:c3:3b:50:e2:88:7a: 27:7d:5e:fc:fd:0e:5d:a6:54:b5:8f:0d:e4:ac:9b: 61:a5:75:b5:84:d6:bd:e4:b7:84:1b:c0:10:fa:8b: cc:7c:f9:db:4c:c2:a4:d5:00:06:2a:9a:ee:bd:1f: cd:99:14:eb:a9:de:02:bc:cb:fb:d7:22:ad:ca:6f: a0:0e:db:66:2b:55:f7:c3:05:7e:be:20:56:60:8b: ec:5c:fb:21:c5:ef:c6:d7:8d:68:bd:e7:73:2e:ac: 47:02:1c:f3:dc:a2:bf:37:a0:2d:e4:a9:68:29:eb: 6b:8a:56:b6:c6:a7:6f:d3:41:1f:51:7a:53:d4:4a: 0b:15:80:6e:5a:a2:0d:a1:97:02:51:12:d1:58:44: 17:5d:e8:6f:37:ff:32:65:7e:e9:91:e2:55:de:eb: 9b:7d:33:38:48:db:bd:30:77:b0:c6:60:a5:e2:99: cf:22:95:1e:e1:b0:87:2c:f9:07:54:eb:ce:67:76: 1a:eb:91:af:65:7a:73:b2:c3:bc:11:92:85:2a:30: 5c:fb:34:3c:ba:af:6e:c9:44:e0:52:6a:d6:d1:52: d3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:53:DB:DA:7A:C4:69:5C:09:9F:50:59:60:40:1E:E8:BF:83:CB:FF X509v3 Authority Key Identifier: keyid:AB:46:68:60:08:A8:C1:01:E8:4E:A8:78:31:8A:E5:8E:B7:1C:EC:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:c4:07:dc:f6:7f:37:95:10:f1:9a:65:42:54:ce:67:23:de: 0f:77:7e:b7:78:cf:39:05:9a:7b:37:92:c0:90:14:ed:bf:45: e4:a4:eb:31:a2:19:86:87:b9:5e:99:ab:3f:c0:5c:c1:3d:20: 46:15:90:f0:cf:8b:02:30:30:c4:96:81:60:a6:13:43:60:2c: 27:a7:8b:73:cc:37:4d:9c:01:6b:19:0c:a0:a0:59:12:57:28: d5:e2:24:95:ce:dd:f7:02:93:7b:84:41:29:02:b7:9a:4e:9d: 92:5b:37:52:4b:07:cb:d4:76:de:6b:e1:9a:13:27:ae:f2:e8: cf:54:f4:01:7f:34:78:aa:d0:2a:58:20:95:49:71:d5:37:16: 20:aa:65:11:7d:e0:a0:f8:24:92:c5:38:74:6f:60:0e:51:47: 48:2b:84:c6:dc:41:1a:8c:4f:33:da:e6:85:e6:0a:76:7c:ab: cd:40:58:81:09:fe:c0:54:a3:f5:02:4e:bb:01:74:ea:7e:9d: 40:f9:45:ae:36:1b:33:47:47:17:30:e8:ac:27:84:b6:dc:1d: 7c:44:93:1d:ce:1a:af:b7:59:40:9c:cc:d6:75:ee:02:30:77: ba:bc:c5:2c:30:a9:90:98:e8:83:9c:95:ab:41:09:ee:b8:e1: f4:5d:b9:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAGRR4vh22cVsFxpfsQolMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNDY2ODYwMDhhOGMxMDFlODRlYTg3ODMxOGFlNThlYjcx Y2VjODIwHhcNMjUxMjExMjAwMDQyWhcNMjUxMjEyMjAwMDQyWjAzMTEwLwYDVQQD Eyg2NTUzZGJkYTdhYzQ2OTVjMDk5ZjUwNTk2MDQwMWVlOGJmODNjYmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUkGpWesBPO2WExkPYEhkC557mmo ns9yUyO67sP10LdOVYNyrPLDO1DiiHonfV78/Q5dplS1jw3krJthpXW1hNa95LeE G8AQ+ovMfPnbTMKk1QAGKpruvR/NmRTrqd4CvMv71yKtym+gDttmK1X3wwV+viBW YIvsXPshxe/G141ovedzLqxHAhzz3KK/N6At5KloKetrila2xqdv00EfUXpT1EoL FYBuWqINoZcCURLRWEQXXehvN/8yZX7pkeJV3uubfTM4SNu9MHewxmCl4pnPIpUe 4bCHLPkHVOvOZ3Ya65GvZXpzssO8EZKFKjBc+zQ8uq9uyUTgUmrW0VLTlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGVT29p6xGlcCZ9QWWBAHui/g8v/MB8GA1UdIwQY MBaAFKtGaGAIqMEB6E6oeDGK5Y63HOyCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTBab1lBaW93UUhvVHFoNE1ZcmxqcmNjN0lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi83MjY0ZDYtM2JmZC00ZGU5LThmZmIt ZjMzNjNjYmQ0MjRjLzEvcTBab1lBaW93UUhvVHFoNE1ZcmxqcmNjN0lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi83MjY0ZDYtM2JmZC00ZGU5LThmZmItZjMzNjNjYmQ0MjRj LzEvcTBab1lBaW93UUhvVHFoNE1ZcmxqcmNjN0lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACMQH3PZ/ N5UQ8ZplQlTOZyPeD3d+t3jPOQWaezeSwJAU7b9F5KTrMaIZhoe5XpmrP8BcwT0g RhWQ8M+LAjAwxJaBYKYTQ2AsJ6eLc8w3TZwBaxkMoKBZElco1eIklc7d9wKTe4RB KQK3mk6dkls3UksHy9R23mvhmhMnrvLoz1T0AX80eKrQKlgglUlx1TcWIKplEX3g oPgkksU4dG9gDlFHSCuExtxBGoxPM9rmheYKdnyrzUBYgQn+wFSj9QJOuwF06n6d QPlFrjYbM0dHFzDorCeEttwdfESTHc4ar7dZQJzM1nXuAjB3urzFLDCpkJjog5yV q0EJ7rjh9F25wg== -----END CERTIFICATE-----Generated at Fri Dec 12 00:35:08 2025 by rpki-client