This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft File: qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft (raw, json) Hash identifier: Lzt9epK2dHJvblTqHPbRSFiLGa/u0eB4mmEDITYUyWM= Subject key identifier: B8:58:DA:6C:01:1E:79:79:19:32:21:DD:8D:7D:0F:E3:41:BC:8F:C5 Authority key identifier: AB:06:90:58:B4:D3:67:61:2B:E4:80:73:72:B5:E5:93:E0:34:77:66 Certificate issuer: /CN=ab069058b4d367612be4807372b5e593e0347766 Certificate serial: 019B0F3768F68F063C0E71109068FEC08A4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft Manifest number: 1772 Signing time: Thu 11 Dec 2025 21:00:48 +0000 Manifest this update: Thu 11 Dec 2025 21:00:48 +0000 Manifest next update: Fri 12 Dec 2025 21:00:48 +0000 Files and hashes: 1: Ttl-1h1-V-nLfHGl50XIPqBaOuw.roa (hash: 4ysW7rFsdP6sSTiTROvgg5H3SFvIB36uqjjGielYpHo=) 2: qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl (hash: Wd3dU9hNT1MaedvMbLvN0RpxAOkmrYriZJMVpwzRwvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:68:f6:8f:06:3c:0e:71:10:90:68:fe:c0:8a:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab069058b4d367612be4807372b5e593e0347766 Validity Not Before: Dec 11 21:00:48 2025 GMT Not After : Dec 12 21:00:48 2025 GMT Subject: CN=b858da6c011e7979193221dd8d7d0fe341bc8fc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e7:41:b2:5b:33:9c:c6:2e:92:70:95:8a:57: 43:b5:e6:44:6a:67:95:63:ad:a7:12:90:02:93:1d: 7a:02:a8:15:39:cd:81:b3:53:1c:8f:82:dc:bc:b5: b0:3f:33:dc:63:2b:3f:0e:bd:3f:5a:7b:7c:49:20: 6c:69:c7:09:79:f0:e5:5b:05:cd:54:3e:aa:bb:ed: 61:5a:18:19:69:f5:0d:25:22:59:d8:0e:ac:4f:f7: 68:3b:49:60:96:81:5d:67:c5:00:8a:6f:ee:7a:19: d7:b5:90:aa:68:b6:aa:74:b2:9b:c0:6c:b8:22:73: ff:4f:9f:4f:d0:88:ed:5f:99:73:f5:7c:ba:14:1b: 0e:93:92:25:ed:c9:1a:3c:05:6d:34:ed:1b:86:3f: 91:23:ef:a1:b5:ad:11:6b:fb:94:15:0a:58:97:f6: 8b:84:a1:d5:52:32:4b:76:2f:4d:a5:b9:65:7a:ba: f5:52:ac:a2:de:f6:ea:c2:a5:cd:83:81:3b:a3:b8: ed:37:52:0c:cc:8e:78:f7:d9:9f:43:28:e4:9d:ab: f9:de:b6:94:84:33:f8:f6:eb:48:78:d6:30:c8:09: 11:46:60:85:df:e0:6d:d5:d7:fb:39:5c:a0:65:34: 1c:ec:e3:ea:ea:71:dd:fd:fb:70:5f:e6:0b:7b:e0: a7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:58:DA:6C:01:1E:79:79:19:32:21:DD:8D:7D:0F:E3:41:BC:8F:C5 X509v3 Authority Key Identifier: keyid:AB:06:90:58:B4:D3:67:61:2B:E4:80:73:72:B5:E5:93:E0:34:77:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:99:91:6e:6e:59:c9:97:37:72:00:fe:38:a5:54:cf:59:cf: c8:bd:bf:a6:ee:4b:33:f3:24:97:c6:32:7f:d4:44:48:e7:8b: 7e:a4:87:34:21:08:ee:aa:4d:25:11:0a:8e:f7:15:53:6b:45: 18:8c:8e:05:5f:71:c4:d0:8d:b6:92:ce:7d:49:9a:09:6c:02: 1f:76:ec:ad:dc:0e:3e:66:c6:4e:9a:56:ae:e9:01:ac:74:b1: 56:b0:51:35:7e:e7:ce:12:b4:0e:83:10:d7:77:03:04:bc:d5: 8c:e9:fc:92:d6:dd:3d:99:1a:1a:fa:be:dd:8e:a2:c2:77:f7: 22:44:d3:f8:45:d5:e6:91:8b:e6:6c:ba:20:93:7a:2d:47:a2: bc:a7:30:07:24:59:95:ab:d2:30:1f:c6:af:00:5f:16:ad:54: ec:2f:31:d2:a2:d2:45:a4:35:a1:81:ef:20:df:4f:bf:bf:2a: 20:e6:45:64:43:b9:83:15:d3:89:3a:df:7c:ea:49:9b:92:b6: 4b:1f:70:fb:2f:08:30:83:63:a7:5b:d7:bf:5b:12:b5:a2:bb: 11:ad:aa:d6:e7:e6:78:92:af:7e:76:88:e2:1f:90:a9:9b:bd: 9c:88:16:fe:e4:83:6a:e5:7d:7b:bf:ee:e9:f2:7d:5c:51:93: 85:30:e3:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN2j2jwY8DnEQkGj+wIpNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDY5MDU4YjRkMzY3NjEyYmU0ODA3MzcyYjVlNTkzZTAz NDc3NjYwHhcNMjUxMjExMjEwMDQ4WhcNMjUxMjEyMjEwMDQ4WjAzMTEwLwYDVQQD EyhiODU4ZGE2YzAxMWU3OTc5MTkzMjIxZGQ4ZDdkMGZlMzQxYmM4ZmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOdBslsznMYuknCVildDteZEameV Y62nEpACkx16AqgVOc2Bs1Mcj4LcvLWwPzPcYys/Dr0/Wnt8SSBsaccJefDlWwXN VD6qu+1hWhgZafUNJSJZ2A6sT/doO0lgloFdZ8UAim/uehnXtZCqaLaqdLKbwGy4 InP/T59P0IjtX5lz9Xy6FBsOk5Il7ckaPAVtNO0bhj+RI++hta0Ra/uUFQpYl/aL hKHVUjJLdi9Npbllerr1Uqyi3vbqwqXNg4E7o7jtN1IMzI5499mfQyjknav53raU hDP49utIeNYwyAkRRmCF3+Bt1df7OVygZTQc7OPq6nHd/ftwX+YLe+CnRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLhY2mwBHnl5GTIh3Y19D+NBvI/FMB8GA1UdIwQY MBaAFKsGkFi002dhK+SAc3K15ZPgNHdmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdhUVdMVFRaMkVyNUlCemNyWGxrLUEwZDJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84N2IwOWEtY2NmYS00OGVhLWFlYjUt NTY2NzQxOWY0NGU4LzEvcXdhUVdMVFRaMkVyNUlCemNyWGxrLUEwZDJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84N2IwOWEtY2NmYS00OGVhLWFlYjUtNTY2NzQxOWY0NGU4 LzEvcXdhUVdMVFRaMkVyNUlCemNyWGxrLUEwZDJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV5mRbm5Z yZc3cgD+OKVUz1nPyL2/pu5LM/Mkl8Yyf9RESOeLfqSHNCEI7qpNJREKjvcVU2tF GIyOBV9xxNCNtpLOfUmaCWwCH3bsrdwOPmbGTppWrukBrHSxVrBRNX7nzhK0DoMQ 13cDBLzVjOn8ktbdPZkaGvq+3Y6iwnf3IkTT+EXV5pGL5my6IJN6LUeivKcwByRZ lavSMB/GrwBfFq1U7C8x0qLSRaQ1oYHvIN9Pv78qIOZFZEO5gxXTiTrffOpJm5K2 Sx9w+y8IMINjp1vXv1sStaK7Ea2q1ufmeJKvfnaI4h+QqZu9nIgW/uSDauV9e7/u 6fJ9XFGThTDjbQ== -----END CERTIFICATE-----Generated at Fri Dec 12 03:41:12 2025 by rpki-client