This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft File: qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft (raw, json) Hash identifier: J4Ie/7Cs/7GwrmkcPRIf+gUFOpTRjeiIL00s8kW/+4k= Subject key identifier: 27:64:A3:6D:03:B9:B7:E5:71:40:9C:D4:00:58:DD:6D:3E:EF:21:F8 Authority key identifier: AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39 Certificate issuer: /CN=aa8551e851e69db165c6c632af45f21715512939 Certificate serial: 019AAB7002877061123A46898817BA28463B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft Manifest number: 150C Signing time: Sat 22 Nov 2025 12:00:35 +0000 Manifest this update: Sat 22 Nov 2025 12:00:35 +0000 Manifest next update: Sun 23 Nov 2025 12:00:35 +0000 Files and hashes: 1: 1-3qrdz_tzhFoK7Ucjl6tCL0s2OM.roa (hash: kxTjIhZmXXDDNlqbd3Q2+gkjPCT2RJ+wWhOvQVmko/I=) 2: CvzVIxPE_Xl1M87JmAYQt0uyDD8.roa (hash: 2wAD/UrmgnStcRFk04oSlNoJEw3MlH57DosRki5ZylE=) 3: qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl (hash: TOey+piAuD0/Hhx6JER89feRAHN/uMz9m6Q+dGAY7aY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ab:70:02:87:70:61:12:3a:46:89:88:17:ba:28:46:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa8551e851e69db165c6c632af45f21715512939 Validity Not Before: Nov 22 12:00:35 2025 GMT Not After : Nov 23 12:00:35 2025 GMT Subject: CN=2764a36d03b9b7e571409cd40058dd6d3eef21f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:96:66:1a:29:b1:bc:cf:4f:1c:c5:eb:0c:ce: 46:e1:a3:f5:6f:8d:a1:a6:c7:81:c5:52:ef:c7:15: 34:0c:71:b0:ec:98:fc:4f:86:c3:61:69:26:b6:24: 5e:69:51:1a:2f:ac:14:43:82:42:3e:26:d7:5c:cd: 49:81:43:45:22:10:7f:8b:d0:95:15:75:5c:54:5d: 98:b4:fb:b8:31:c7:b8:f8:85:7f:13:46:54:58:4d: 9b:cf:16:ff:c0:a8:b4:9b:92:cd:3a:36:c4:c7:40: f7:f1:81:74:29:85:92:fc:23:fd:ed:9a:60:5d:fb: a7:0d:3e:83:87:74:fc:ab:3f:77:7a:b7:e7:dd:25: f6:56:91:ea:97:40:e4:92:84:a3:8d:17:35:99:54: 24:b2:1e:ae:24:c8:1d:c3:11:52:4e:fd:12:de:68: f1:4a:20:43:fc:93:e7:96:57:d9:be:af:0d:79:fd: 9b:50:f5:f2:87:4e:f1:92:1d:49:0d:d1:7f:59:df: be:5c:2a:0f:e6:6b:11:e7:8f:18:be:ba:84:50:f1: b9:43:1d:e7:8f:ad:e7:57:34:5b:6c:c0:d9:57:24: bc:5c:bc:85:e2:d0:97:a8:d0:7b:be:47:9e:4b:9e: cf:e3:7e:4e:b3:9e:15:f9:e8:e0:06:b1:e3:13:3f: 41:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:64:A3:6D:03:B9:B7:E5:71:40:9C:D4:00:58:DD:6D:3E:EF:21:F8 X509v3 Authority Key Identifier: keyid:AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:2f:2d:44:b3:30:b0:94:d3:30:cd:eb:f3:c5:e0:c7:2b:4b: a5:68:c4:69:8a:89:89:ed:54:d8:5b:53:26:ba:13:88:41:ef: e9:08:84:0c:cc:ee:57:21:ca:02:8f:73:c3:f1:ef:ba:b8:a9: 19:91:8c:72:7d:2f:67:e5:b4:f5:25:54:c1:54:5b:81:2b:68: bb:66:42:f5:00:b6:0e:3e:83:68:eb:64:90:07:c2:d9:12:72: aa:23:07:c1:b1:eb:92:9a:a3:01:59:7a:6d:37:19:1a:94:69: 8a:49:c1:23:53:fb:9e:4b:a5:8c:18:00:39:7e:27:83:39:ab: e8:ca:76:d8:59:20:67:ef:c7:f5:b6:9b:b8:a1:66:0f:9f:f6: db:26:43:55:43:d7:74:80:b3:ad:89:5c:09:0f:e3:03:13:7a: 18:63:30:bf:c0:66:1b:55:17:a1:bc:4d:8b:54:7b:7e:01:f5: dd:bc:23:f2:12:d6:12:e1:48:46:52:dc:51:e4:25:df:ea:52: f9:c0:35:10:62:7f:c5:9d:01:b7:00:1f:f7:62:a3:06:a5:50: 5c:58:92:a6:4b:28:bd:1a:de:8b:da:01:d8:75:12:b8:18:c6: e9:2a:03:a9:ca:2d:dc:7c:dd:5e:3b:56:98:03:d3:7f:26:62: 90:af:22:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqrcAKHcGESOkaJiBe6KEY7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhODU1MWU4NTFlNjlkYjE2NWM2YzYzMmFmNDVmMjE3MTU1 MTI5MzkwHhcNMjUxMTIyMTIwMDM1WhcNMjUxMTIzMTIwMDM1WjAzMTEwLwYDVQQD EygyNzY0YTM2ZDAzYjliN2U1NzE0MDljZDQwMDU4ZGQ2ZDNlZWYyMWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5ZmGimxvM9PHMXrDM5G4aP1b42h pseBxVLvxxU0DHGw7Jj8T4bDYWkmtiReaVEaL6wUQ4JCPibXXM1JgUNFIhB/i9CV FXVcVF2YtPu4Mce4+IV/E0ZUWE2bzxb/wKi0m5LNOjbEx0D38YF0KYWS/CP97Zpg XfunDT6Dh3T8qz93erfn3SX2VpHql0DkkoSjjRc1mVQksh6uJMgdwxFSTv0S3mjx SiBD/JPnllfZvq8Nef2bUPXyh07xkh1JDdF/Wd++XCoP5msR548YvrqEUPG5Qx3n j63nVzRbbMDZVyS8XLyF4tCXqNB7vkeeS57P435Os54V+ejgBrHjEz9BsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCdko20DubflcUCc1ABY3W0+7yH4MB8GA1UdIwQY MBaAFKqFUehR5p2xZcbGMq9F8hcVUSk5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW9WUjZGSG1uYkZseHNZeXIwWHlGeFZSS1RrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9kZTk2MTUtMGJjMC00ZTVlLTgzMTgt ZmIxZDk5MmRlMDAxLzEvcW9WUjZGSG1uYkZseHNZeXIwWHlGeFZSS1RrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9kZTk2MTUtMGJjMC00ZTVlLTgzMTgtZmIxZDk5MmRlMDAx LzEvcW9WUjZGSG1uYkZseHNZeXIwWHlGeFZSS1RrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIy8tRLMw sJTTMM3r88XgxytLpWjEaYqJie1U2FtTJroTiEHv6QiEDMzuVyHKAo9zw/Hvurip GZGMcn0vZ+W09SVUwVRbgStou2ZC9QC2Dj6DaOtkkAfC2RJyqiMHwbHrkpqjAVl6 bTcZGpRpiknBI1P7nkuljBgAOX4ngzmr6Mp22FkgZ+/H9babuKFmD5/22yZDVUPX dICzrYlcCQ/jAxN6GGMwv8BmG1UXobxNi1R7fgH13bwj8hLWEuFIRlLcUeQl3+pS +cA1EGJ/xZ0BtwAf92KjBqVQXFiSpksovRrei9oB2HUSuBjG6SoDqcot3HzdXjtW mAPTfyZikK8iAw== -----END CERTIFICATE-----Generated at Sat Nov 22 21:56:42 2025 by rpki-client