This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.mft File: qqthEeAEwqBE8Wi40oJzz2dE86g.mft (raw, json) Hash identifier: muOQaz0G422ucKmKQ+aHbJAehE6BpyK7/RJ9n9KH398= Subject key identifier: 4F:B8:9C:D8:96:5D:90:D7:2B:84:D8:E7:2A:91:E5:09:C0:AB:AF:C4 Authority key identifier: AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8 Certificate issuer: /CN=aaab6111e004c2a044f168b8d28273cf6744f3a8 Certificate serial: 019B19BC7A6A182AEB018A7A3C4AF209147E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.mft Manifest number: 1779 Signing time: Sat 13 Dec 2025 22:02:21 +0000 Manifest this update: Sat 13 Dec 2025 22:02:21 +0000 Manifest next update: Sun 14 Dec 2025 22:02:21 +0000 Files and hashes: 1: 43ITMqjm9zNwDIyvPhKPJbFoowM.roa (hash: ItPmOpwL3uCg5y8usfxiTk7wzxxLuNjwWzxccHuTdEI=) 2: 5W0xSirT6C1CiMZou6nPx-j2tZ0.roa (hash: Yy5ahpZ052eGFW05fr9TBioYLRU2U0IPVK4rrj4Nsvo=) 3: 6QrRaQgEDEW94ibCtl94XG-cNo8.roa (hash: gVo0FFoXqD/aGsK6YPk59eIbOT2OP162DfbC2dzkqj4=) 4: 8yCq7gWrNtSGUAwhbKMYXo5sVuM.roa (hash: 490w7F1y4o1yoJe8DWbaKwN62Kay5Tc/NkagYt79lV4=) 5: orOsP0rs2ff7STwYpI2t2_50MTo.roa (hash: o5pPTCCPZuPMBRMWmMSYExhsj/8nITrHMx5Um0qrkAo=) 6: qqthEeAEwqBE8Wi40oJzz2dE86g.crl (hash: 7+LBCGattgtWPBwA2JnfkzNTQrs/7S/m6ElvYLLN6Pw=) 7: v3pVfUjy4X_Jk5Ymo8xwhRDG6ho.roa (hash: WvXW8cKBuenjm6GrqbAc1s5MZXRWgg4MxpYkVeSUO6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.crl rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.mft rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bc:7a:6a:18:2a:eb:01:8a:7a:3c:4a:f2:09:14:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaab6111e004c2a044f168b8d28273cf6744f3a8 Validity Not Before: Dec 13 22:02:21 2025 GMT Not After : Dec 14 22:02:21 2025 GMT Subject: CN=4fb89cd8965d90d72b84d8e72a91e509c0abafc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b0:fc:66:c1:7e:c3:07:44:cc:57:5b:fe:47: 1a:85:df:f8:3a:4b:b7:10:2a:16:cd:45:a8:9b:0c: 0d:1b:2d:94:79:c5:b4:37:73:53:a5:1d:6b:81:41: c0:10:29:a8:b2:bc:7c:f5:9e:67:73:94:d2:28:3d: b4:4c:27:72:38:50:d3:e2:56:77:b0:5a:1e:f9:ea: c8:e3:dc:89:04:b4:de:c0:3f:8f:43:d1:98:e6:5d: 9a:c5:07:ee:98:52:06:fa:f1:fc:8a:ea:67:64:aa: 65:a4:df:f1:cc:f1:c2:34:0e:51:8a:2c:03:28:35: f9:c2:57:c0:8d:1a:c9:8a:35:dc:dd:90:de:00:cb: 44:df:d7:ee:ca:cb:7f:4d:0a:45:99:10:f5:df:40: 6b:4b:16:e8:53:9d:a3:42:3d:b0:02:7d:48:d3:94: c6:46:97:09:da:66:33:1c:b5:ab:17:72:a6:7e:2b: 8e:89:dc:64:0a:be:a1:65:75:15:9c:2c:7e:a7:ea: 6c:ad:80:27:88:83:a0:a3:b6:d1:77:f6:a1:81:c3: 70:72:70:1b:b8:a4:6f:cf:bb:16:3c:fd:a6:c8:13: c4:d0:c0:34:80:d0:ed:50:9b:b2:c2:40:43:09:79: 23:a4:80:73:ff:ba:df:91:83:e1:a8:14:68:f2:a6: b3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B8:9C:D8:96:5D:90:D7:2B:84:D8:E7:2A:91:E5:09:C0:AB:AF:C4 X509v3 Authority Key Identifier: keyid:AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:2b:2c:e9:3e:d9:46:4b:57:b7:cc:a7:ed:97:4d:79:17:8a: 43:ad:1a:e4:c0:7d:3b:f2:47:d8:9a:20:e7:8f:77:58:81:2c: b2:34:e4:65:c8:0a:57:b9:1e:82:dd:c1:d2:7f:f1:d1:91:0c: ee:bd:17:a7:3a:62:63:e2:0f:ca:85:0c:d2:17:da:73:1e:cb: 96:75:59:89:6f:fe:7b:9e:00:68:24:73:d2:90:b0:c8:5e:5e: b2:69:1a:ea:23:63:da:50:09:29:12:3e:56:ac:c1:94:95:2a: 80:0c:15:bb:62:d5:b1:b9:e6:d2:ca:b3:45:5f:67:c9:8f:a3: cd:72:42:9e:6b:54:e5:d3:c5:0f:1e:5f:11:ea:d5:50:6d:24: 20:96:fe:5f:c7:7a:3e:dd:19:63:6e:57:91:94:05:48:11:49: d6:ae:2c:e4:82:10:3b:71:eb:69:b0:80:1c:20:ce:14:10:e6: 46:c0:f0:d4:d1:ba:41:13:6c:43:7e:1f:e1:a4:c5:82:c2:2f: 3c:35:63:41:71:d9:c1:e1:db:28:d8:39:a7:26:a8:2e:9d:3d: 4f:b4:19:37:e8:2a:02:00:af:2a:6e:05:ba:0c:54:a0:6c:10: d4:71:59:b3:ff:0a:6f:eb:b2:5d:e0:b8:ab:d2:ca:64:d8:93: 13:4b:89:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZvHpqGCrrAYp6PEryCRR+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhYWI2MTExZTAwNGMyYTA0NGYxNjhiOGQyODI3M2NmNjc0 NGYzYTgwHhcNMjUxMjEzMjIwMjIxWhcNMjUxMjE0MjIwMjIxWjAzMTEwLwYDVQQD Eyg0ZmI4OWNkODk2NWQ5MGQ3MmI4NGQ4ZTcyYTkxZTUwOWMwYWJhZmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7D8ZsF+wwdEzFdb/kcahd/4Oku3 ECoWzUWomwwNGy2UecW0N3NTpR1rgUHAECmosrx89Z5nc5TSKD20TCdyOFDT4lZ3 sFoe+erI49yJBLTewD+PQ9GY5l2axQfumFIG+vH8iupnZKplpN/xzPHCNA5RiiwD KDX5wlfAjRrJijXc3ZDeAMtE39fuyst/TQpFmRD130BrSxboU52jQj2wAn1I05TG RpcJ2mYzHLWrF3KmfiuOidxkCr6hZXUVnCx+p+psrYAniIOgo7bRd/ahgcNwcnAb uKRvz7sWPP2myBPE0MA0gNDtUJuywkBDCXkjpIBz/7rfkYPhqBRo8qazwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE+4nNiWXZDXK4TY5yqR5QnAq6/EMB8GA1UdIwQY MBaAFKqrYRHgBMKgRPFouNKCc89nRPOoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXF0aEVlQUV3cUJFOFdpNDBvSnp6MmRFODZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mNGFkMGYtMGIzMC00MWZmLWE4ZDkt ODJlZGVkYTdmZTdhLzEvcXF0aEVlQUV3cUJFOFdpNDBvSnp6MmRFODZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9mNGFkMGYtMGIzMC00MWZmLWE4ZDktODJlZGVkYTdmZTdh LzEvcXF0aEVlQUV3cUJFOFdpNDBvSnp6MmRFODZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXSss6T7Z RktXt8yn7ZdNeReKQ60a5MB9O/JH2Jog5493WIEssjTkZcgKV7kegt3B0n/x0ZEM 7r0XpzpiY+IPyoUM0hfacx7LlnVZiW/+e54AaCRz0pCwyF5esmka6iNj2lAJKRI+ VqzBlJUqgAwVu2LVsbnm0sqzRV9nyY+jzXJCnmtU5dPFDx5fEerVUG0kIJb+X8d6 Pt0ZY25XkZQFSBFJ1q4s5IIQO3HrabCAHCDOFBDmRsDw1NG6QRNsQ34f4aTFgsIv PDVjQXHZweHbKNg5pyaoLp09T7QZN+gqAgCvKm4FugxUoGwQ1HFZs/8Kb+uyXeC4 q9LKZNiTE0uJmw== -----END CERTIFICATE-----Generated at Sun Dec 14 06:07:13 2025 by rpki-client