This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft File: qnNO9a4hwOiX-hhkRxhOya1K4p0.mft (raw, json) Hash identifier: /8qjnOgnygOXz36Ga9pzQBRKmfdih9N5F0LvyfJIkZI= Subject key identifier: 74:71:2A:A7:F8:89:AA:F0:E8:4D:55:6D:FA:E3:9A:30:93:CA:2F:EC Authority key identifier: AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D Certificate issuer: /CN=aa734ef5ae21c0e897fa186447184ec9ad4ae29d Certificate serial: 019B1BAA4ACD25B4288EE0DBC16751AF347C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft Manifest number: 0929 Signing time: Sun 14 Dec 2025 07:01:43 +0000 Manifest this update: Sun 14 Dec 2025 07:01:43 +0000 Manifest next update: Mon 15 Dec 2025 07:01:43 +0000 Files and hashes: 1: Ot7K37c41MVu-6Ir2VOkUuixgHw.roa (hash: 7Ylv6CILYrMD9u/uD4SkYHlbdsDQ05xlERBBPqPUVnQ=) 2: ga4DK68qwsMkTd-ni1B6iXRQTdQ.roa (hash: H3sXkj62Xj83aypXZVaDV2Gzb10/TmB5L1/CDA3jxj0=) 3: qnNO9a4hwOiX-hhkRxhOya1K4p0.crl (hash: KXn8jN45kfrkGwZwQsq1zysyJWn1q7X4xqQepkL0Ni8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:aa:4a:cd:25:b4:28:8e:e0:db:c1:67:51:af:34:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa734ef5ae21c0e897fa186447184ec9ad4ae29d Validity Not Before: Dec 14 07:01:43 2025 GMT Not After : Dec 15 07:01:43 2025 GMT Subject: CN=74712aa7f889aaf0e84d556dfae39a3093ca2fec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9d:f2:c3:bd:49:16:29:c6:e7:76:d4:fc:ae: b7:8b:79:2c:3c:2c:7e:2a:82:1d:61:0f:68:fe:18: d3:b8:27:8d:9c:0f:51:c8:79:68:d7:e1:68:0f:b1: e9:b8:c6:58:1c:e6:2a:0c:9b:74:e4:bf:1c:7c:42: ec:d3:19:92:8f:4b:c4:e1:c5:bf:cd:5c:37:1f:0c: 70:b7:1e:94:ec:17:4e:f3:75:ba:5d:b8:90:42:54: 31:16:bc:04:73:10:55:bd:31:3f:73:90:95:21:0a: b4:ec:3e:1b:32:e4:c6:70:ea:6f:3f:5e:32:bc:3d: 89:39:cf:fd:eb:b8:f8:2c:66:e9:5a:75:af:ca:98: c1:ea:a4:86:d7:22:f1:96:8b:0b:d4:11:cb:56:c1: e1:96:7f:fa:a7:a8:05:97:d8:0a:23:31:fc:be:da: 19:8e:59:6a:8f:a6:db:c7:31:e8:90:82:d5:ee:77: da:26:4c:63:4d:6f:a5:44:c1:b5:32:1c:ae:4b:b6: 7f:29:7a:4e:f7:a1:ee:b8:0c:34:98:4d:e9:4c:a3: 8a:6d:4c:b9:cd:8c:9a:40:ad:8f:11:c8:dc:05:da: 26:e1:86:5a:d3:88:f6:b8:09:17:bc:9d:2b:61:2a: e5:1c:3c:a5:19:93:38:60:4c:57:eb:7c:70:ce:16: df:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:71:2A:A7:F8:89:AA:F0:E8:4D:55:6D:FA:E3:9A:30:93:CA:2F:EC X509v3 Authority Key Identifier: keyid:AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:1e:fc:c5:5a:c7:dd:72:95:b1:1a:ee:07:42:88:52:e7:44: 6c:88:ba:48:4a:18:0c:b5:0c:02:f4:98:ce:fb:1a:b0:41:34: 40:1e:d1:61:71:b6:01:10:4e:ef:3c:43:18:7d:b6:57:8a:c0: 31:93:55:51:59:15:9e:e1:6d:95:a7:6f:bb:1f:14:9a:e5:7a: 49:bb:41:48:71:30:3c:af:93:48:c6:93:17:b2:17:96:c9:22: a0:12:a2:3b:85:cd:db:e9:4f:ad:bb:cf:06:71:80:1f:39:98: 00:1e:a3:cb:94:5b:2d:78:e7:a4:5d:62:c7:f5:93:3e:47:d8: 75:50:30:d7:ed:df:9f:fd:04:90:b5:61:01:53:79:92:aa:bf: 6d:d8:6d:eb:0f:ed:8b:6d:57:2d:e4:25:67:10:3f:6e:50:c4: 73:a2:65:6c:3b:99:e9:40:6f:a9:c6:bc:ae:b4:94:38:1c:12: b5:f0:13:21:31:ec:7b:71:02:ca:7e:c4:d4:6d:87:4f:f0:bd: 1e:b6:93:aa:86:6c:f5:6a:a3:93:ca:7f:fe:91:0c:3f:ac:f1: e6:0d:c2:18:69:9f:69:25:bb:2d:9d:6d:d3:d4:cf:99:1d:e2: f7:a1:da:3c:38:83:19:ed:b6:5b:be:22:08:37:cb:dd:db:53: a8:46:b1:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbqkrNJbQojuDbwWdRrzR8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNzM0ZWY1YWUyMWMwZTg5N2ZhMTg2NDQ3MTg0ZWM5YWQ0 YWUyOWQwHhcNMjUxMjE0MDcwMTQzWhcNMjUxMjE1MDcwMTQzWjAzMTEwLwYDVQQD Eyg3NDcxMmFhN2Y4ODlhYWYwZTg0ZDU1NmRmYWUzOWEzMDkzY2EyZmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp53yw71JFinG53bU/K63i3ksPCx+ KoIdYQ9o/hjTuCeNnA9RyHlo1+FoD7HpuMZYHOYqDJt05L8cfELs0xmSj0vE4cW/ zVw3Hwxwtx6U7BdO83W6XbiQQlQxFrwEcxBVvTE/c5CVIQq07D4bMuTGcOpvP14y vD2JOc/967j4LGbpWnWvypjB6qSG1yLxlosL1BHLVsHhln/6p6gFl9gKIzH8vtoZ jllqj6bbxzHokILV7nfaJkxjTW+lRMG1MhyuS7Z/KXpO96HuuAw0mE3pTKOKbUy5 zYyaQK2PEcjcBdom4YZa04j2uAkXvJ0rYSrlHDylGZM4YExX63xwzhbfNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHRxKqf4iarw6E1VbfrjmjCTyi/sMB8GA1UdIwQY MBaAFKpzTvWuIcDol/oYZEcYTsmtSuKdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW5OTzlhNGh3T2lYLWhoa1J4aE95YTFLNHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS83NDgxMTEtMGUxMC00NzkyLTliMWIt ZGE3ODBjZmI5OWE0LzEvcW5OTzlhNGh3T2lYLWhoa1J4aE95YTFLNHAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS83NDgxMTEtMGUxMC00NzkyLTliMWItZGE3ODBjZmI5OWE0 LzEvcW5OTzlhNGh3T2lYLWhoa1J4aE95YTFLNHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKx78xVrH 3XKVsRruB0KIUudEbIi6SEoYDLUMAvSYzvsasEE0QB7RYXG2ARBO7zxDGH22V4rA MZNVUVkVnuFtladvux8UmuV6SbtBSHEwPK+TSMaTF7IXlskioBKiO4XN2+lPrbvP BnGAHzmYAB6jy5RbLXjnpF1ix/WTPkfYdVAw1+3fn/0EkLVhAVN5kqq/bdht6w/t i21XLeQlZxA/blDEc6JlbDuZ6UBvqca8rrSUOBwStfATITHse3ECyn7E1G2HT/C9 HraTqoZs9Wqjk8p//pEMP6zx5g3CGGmfaSW7LZ1t09TPmR3i96HaPDiDGe22W74i CDfL3dtTqEaxNw== -----END CERTIFICATE-----Generated at Sun Dec 14 08:45:14 2025 by rpki-client