This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft File: qEkgTKTw605W4I4Jn-N4XOBv_qo.mft (raw, json) Hash identifier: zGAONGFS3ZIdT/iS+2yZJkJ6J3zYOO50yK42iukVg9Q= Subject key identifier: BF:BE:F4:BB:CD:27:DF:13:1E:71:5B:6A:DB:C5:A4:5D:57:42:2A:08 Authority key identifier: A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA Certificate issuer: /CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa Certificate serial: 019B2F66FAD2161639DDA0337FDF56F4C66D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft Manifest number: 17B2 Signing time: Thu 18 Dec 2025 03:00:36 +0000 Manifest this update: Thu 18 Dec 2025 03:00:36 +0000 Manifest next update: Fri 19 Dec 2025 03:00:36 +0000 Files and hashes: 1: 1-C7o4Sg1w_tMM8v1-Zzbx0qKuw4.roa (hash: 5hM/OQJSa5W9fafk6DZMK61IDj/N7aS0aUIw68dp1I0=) 2: b_NE7DVIfDXKb-MpYj6nT1XXano.roa (hash: p2sDMI4p8wkfemzISoM/DEW8q7cpoFG20Gw6CbldWQQ=) 3: bjYWIiRDJQJHClBhm5lHGbc7p3c.roa (hash: 2CHXRgaX05mE8dTCdvnAxjehUb/UlBCUBvMnngQZ4pY=) 4: e9ro14Q2CkVWo9tx9mS_DRjKoG0.roa (hash: hdEGtzXmNsVqaiQbsKpplmaz4uwwkN9r2YZS335CDho=) 5: eLM1tMA2-Prx-6AJmPfSxPTQ8ws.roa (hash: x3TEJF+lEhYQXreBGO5p/2V/eqc0Q9Afb2MZe1Qg0wg=) 6: qEkgTKTw605W4I4Jn-N4XOBv_qo.crl (hash: NFmPUgxfZYpvGww0kdkx2H0zvEROsoOmXXW/grT0aUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:66:fa:d2:16:16:39:dd:a0:33:7f:df:56:f4:c6:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa Validity Not Before: Dec 18 03:00:36 2025 GMT Not After : Dec 19 03:00:36 2025 GMT Subject: CN=bfbef4bbcd27df131e715b6adbc5a45d57422a08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:28:59:80:01:4a:bc:29:9a:74:42:c1:25:ba: ce:28:bc:4a:9f:51:3b:48:09:26:47:e7:1c:b4:f9: 96:ea:9e:a9:b8:01:4b:e7:71:fe:4f:4a:c1:52:98: 03:28:24:79:ed:2f:11:78:8d:a5:27:2c:df:ec:44: fc:6f:bd:7d:2a:a0:75:69:39:77:71:ad:fd:32:0f: d2:09:89:f4:dc:ea:87:e1:04:22:86:b4:47:65:78: 16:78:26:dc:e7:aa:5b:ec:74:39:64:41:99:af:b1: f9:b6:e6:c5:79:09:f3:c3:07:ac:a4:4b:50:b3:2e: f8:1b:f0:d3:47:3d:b6:fa:c7:7e:17:03:5b:01:ac: 07:d2:1a:09:d9:36:b6:99:9e:5c:84:47:a7:f0:6a: 4b:04:2f:12:14:73:76:33:bb:6a:79:77:b2:6c:af: 2e:7f:4f:e9:25:c3:1a:21:3e:1b:bc:4d:42:48:a3: 61:67:3a:e5:82:1a:5d:96:74:67:4e:30:cd:c2:37: bf:ab:4e:32:ea:8a:32:da:61:38:b2:f2:2c:fe:fe: b8:92:dd:3c:23:b0:dc:b8:a1:38:79:06:66:30:ee: 17:51:e3:0e:a3:09:1c:83:e7:50:8b:8c:58:d1:d8: 71:44:b9:09:a1:02:d7:6f:30:30:2e:07:45:7f:a0: cd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:BE:F4:BB:CD:27:DF:13:1E:71:5B:6A:DB:C5:A4:5D:57:42:2A:08 X509v3 Authority Key Identifier: keyid:A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:3e:80:63:39:2d:6d:4a:5a:26:84:a7:34:46:71:ea:1e:4c: de:4b:6c:36:6c:c0:31:20:97:85:20:0e:77:0c:c6:26:a8:0e: 80:a9:a5:07:a9:ae:23:13:10:81:c5:e1:bf:ab:56:42:f2:20: 78:af:4b:58:4b:d2:ba:a0:6a:5b:02:4a:e4:34:54:cd:e1:52: 8a:29:da:66:b6:de:02:ae:5c:6b:e8:77:42:6e:57:22:15:6f: 9c:39:3d:0c:2d:e3:e4:09:24:37:c1:28:6e:c8:65:af:0f:c4: c9:bd:2e:76:ae:42:f8:54:7f:d0:6b:be:e2:b1:49:0c:78:68: 1d:1e:55:86:64:cf:a9:0d:02:31:d0:ec:bb:db:1c:b8:88:d5: 60:78:06:b7:bf:74:57:bf:2e:e5:61:77:6f:3e:e7:56:74:c2: e5:9d:77:d9:05:5e:e8:47:18:04:af:d5:46:d4:9b:0f:fe:6c: d7:4e:1b:58:3e:28:f1:6a:7c:25:a7:37:d0:52:03:22:8f:e9: 5b:d0:31:92:1e:c5:63:0a:31:20:6d:ff:6a:f3:ad:96:83:f0: 68:32:19:4f:01:c6:a0:2f:09:6b:49:a8:1f:59:89:4f:fd:b0: 36:aa:62:c1:bd:36:f4:b0:1f:d6:41:32:07:ad:02:4a:da:6d: a7:4e:c4:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZvrSFhY53aAzf99W9MZtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NDkyMDRjYTRmMGViNGU1NmUwOGUwOTlmZTM3ODVjZTA2 ZmZlYWEwHhcNMjUxMjE4MDMwMDM2WhcNMjUxMjE5MDMwMDM2WjAzMTEwLwYDVQQD EyhiZmJlZjRiYmNkMjdkZjEzMWU3MTViNmFkYmM1YTQ1ZDU3NDIyYTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwihZgAFKvCmadELBJbrOKLxKn1E7 SAkmR+cctPmW6p6puAFL53H+T0rBUpgDKCR57S8ReI2lJyzf7ET8b719KqB1aTl3 ca39Mg/SCYn03OqH4QQihrRHZXgWeCbc56pb7HQ5ZEGZr7H5tubFeQnzwwespEtQ sy74G/DTRz22+sd+FwNbAawH0hoJ2Ta2mZ5chEen8GpLBC8SFHN2M7tqeXeybK8u f0/pJcMaIT4bvE1CSKNhZzrlghpdlnRnTjDNwje/q04y6ooy2mE4svIs/v64kt08 I7DcuKE4eQZmMO4XUeMOowkcg+dQi4xY0dhxRLkJoQLXbzAwLgdFf6DN8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL++9LvNJ98THnFbatvFpF1XQioIMB8GA1UdIwQY MBaAFKhJIEyk8OtOVuCOCZ/jeFzgb/6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUVrZ1RLVHc2MDVXNEk0Sm4tTjRYT0J2X3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80NWIyM2YtMzAyYi00MWYyLTk0OTYt OWNjYmIwODQyOGZhLzEvcUVrZ1RLVHc2MDVXNEk0Sm4tTjRYT0J2X3FvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi80NWIyM2YtMzAyYi00MWYyLTk0OTYtOWNjYmIwODQyOGZh LzEvcUVrZ1RLVHc2MDVXNEk0Sm4tTjRYT0J2X3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmz6AYzkt bUpaJoSnNEZx6h5M3ktsNmzAMSCXhSAOdwzGJqgOgKmlB6muIxMQgcXhv6tWQvIg eK9LWEvSuqBqWwJK5DRUzeFSiinaZrbeAq5ca+h3Qm5XIhVvnDk9DC3j5AkkN8Eo bshlrw/Eyb0udq5C+FR/0Gu+4rFJDHhoHR5VhmTPqQ0CMdDsu9scuIjVYHgGt790 V78u5WF3bz7nVnTC5Z132QVe6EcYBK/VRtSbD/5s104bWD4o8Wp8Jac30FIDIo/p W9Axkh7FYwoxIG3/avOtloPwaDIZTwHGoC8Ja0moH1mJT/2wNqpiwb029LAf1kEy B60CStptp07Exg== -----END CERTIFICATE-----Generated at Thu Dec 18 09:29:41 2025 by rpki-client