This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft File: qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft (raw, json) Hash identifier: 3y2CtUbfOtUoLQiYY4pMLwKLRwd2IjBUczaRECAKK38= Subject key identifier: 03:58:61:6B:A5:15:15:4F:9F:03:55:30:8F:8A:3B:AE:DD:45:89:55 Authority key identifier: A9:8E:EB:ED:97:53:F5:80:BE:A7:5B:35:2E:70:63:25:A1:8D:14:47 Certificate issuer: /CN=a98eebed9753f580bea75b352e706325a18d1447 Certificate serial: 019B32D7DD821D3B0D70AFD3A933FE4366B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 19:02:46 +0000 Manifest this update: Thu 18 Dec 2025 19:02:46 +0000 Manifest next update: Fri 19 Dec 2025 19:02:46 +0000 Files and hashes: 1: 1-W8soB7j9APk25v0dLdeJYYGd64.roa (hash: XIj90J/o3h0TEBJj2DW5RTPwW3YKa0Pa3O9Mz8MU5Ho=) 2: qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl (hash: qwlqiQgx2d0Ua9yYDPRJQTS26pnbKAljYAEPipufP+k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:dd:82:1d:3b:0d:70:af:d3:a9:33:fe:43:66:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a98eebed9753f580bea75b352e706325a18d1447 Validity Not Before: Dec 18 19:02:46 2025 GMT Not After : Dec 19 19:02:46 2025 GMT Subject: CN=0358616ba515154f9f0355308f8a3baedd458955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a9:6f:c1:67:00:ec:48:ec:b7:ad:12:75:03: be:27:69:b0:3c:cc:c7:89:d1:15:1b:5a:60:ea:a6: 43:af:bf:4a:7c:38:da:f9:a3:7a:d2:be:2a:c5:b4: 5f:63:ee:ae:c4:52:49:0c:67:cf:13:1e:5c:48:88: 0d:95:ec:84:08:86:e8:f5:8d:35:e2:2b:6e:b4:ac: be:ab:f2:f1:a2:c8:a2:8b:77:1a:9d:76:14:74:96: dd:58:f1:3d:1f:0a:f4:57:ae:fe:38:89:a8:50:b4: 19:b0:fc:c9:91:2a:fa:12:52:f4:7e:3b:d5:12:09: 73:cb:78:ca:e2:13:dc:2e:59:5d:b8:e1:8e:5a:34: 00:a0:b1:57:15:a2:fe:68:fd:aa:9d:2a:20:e2:7d: 6c:b5:4b:23:77:37:35:3b:4b:9c:49:27:07:56:3e: 3b:d9:bf:e7:2a:84:bb:73:3c:ea:3a:33:11:20:63: e1:26:b8:69:c2:46:f2:81:bd:5f:41:30:dc:ee:2f: 27:8c:b1:3a:48:c5:a3:21:0b:40:8b:62:bf:1d:e4: c0:64:0d:4b:bc:23:16:d6:48:ea:91:75:21:54:a2: 6d:29:03:4b:73:95:bf:4c:6b:7a:c4:f7:5a:a5:01: 3d:13:69:28:13:1e:4b:96:37:2b:b4:41:0b:f7:91: ae:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:58:61:6B:A5:15:15:4F:9F:03:55:30:8F:8A:3B:AE:DD:45:89:55 X509v3 Authority Key Identifier: keyid:A9:8E:EB:ED:97:53:F5:80:BE:A7:5B:35:2E:70:63:25:A1:8D:14:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:6d:82:44:26:3a:fc:d8:df:97:15:5c:5f:da:a3:30:9e:00: d9:d3:e1:12:28:c7:30:9b:63:f7:05:ee:f7:97:59:8b:94:57: 20:c1:b0:80:ad:b3:3a:d8:60:8e:fa:5c:6f:96:54:d6:90:bf: fa:40:18:48:b7:f6:75:31:a7:a8:e1:0f:6b:c0:75:b9:a0:52: 77:bb:59:e6:28:ec:a6:ce:ec:d1:2a:0c:bd:82:4f:d8:b0:c4: 42:2a:e1:8a:32:ed:0b:60:02:10:4a:cf:f6:54:c6:29:c4:a9: 51:ae:ec:a0:bf:b1:aa:74:84:6d:3b:5f:01:4a:27:bd:f5:ef: 74:32:b1:55:37:d2:91:c0:05:73:2d:1e:ff:1b:ec:39:5a:0b: e6:5c:60:60:0e:18:9b:4d:ef:db:30:69:18:af:03:36:e6:1d: a4:bd:3c:2d:4e:66:2d:11:f6:9d:d4:c1:31:f1:9e:ad:f0:62: 6e:72:63:7a:4a:66:6b:e6:92:46:90:52:e7:6f:7b:58:5a:bc: 1f:87:3e:d4:3c:2d:c3:48:53:4f:b9:2d:96:4e:cc:1c:81:2a: 60:1b:a4:90:57:7d:4b:c5:00:92:bc:f3:36:1b:1a:ab:60:61: 5c:1f:f3:c3:63:28:cf:08:52:17:6a:c3:4a:fa:09:8c:5d:d0: 02:17:90:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy192CHTsNcK/TqTP+Q2a1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5OGVlYmVkOTc1M2Y1ODBiZWE3NWIzNTJlNzA2MzI1YTE4 ZDE0NDcwHhcNMjUxMjE4MTkwMjQ2WhcNMjUxMjE5MTkwMjQ2WjAzMTEwLwYDVQQD EygwMzU4NjE2YmE1MTUxNTRmOWYwMzU1MzA4ZjhhM2JhZWRkNDU4OTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqlvwWcA7Ejst60SdQO+J2mwPMzH idEVG1pg6qZDr79KfDja+aN60r4qxbRfY+6uxFJJDGfPEx5cSIgNleyECIbo9Y01 4itutKy+q/Lxosiii3canXYUdJbdWPE9Hwr0V67+OImoULQZsPzJkSr6ElL0fjvV Eglzy3jK4hPcLllduOGOWjQAoLFXFaL+aP2qnSog4n1stUsjdzc1O0ucSScHVj47 2b/nKoS7czzqOjMRIGPhJrhpwkbygb1fQTDc7i8njLE6SMWjIQtAi2K/HeTAZA1L vCMW1kjqkXUhVKJtKQNLc5W/TGt6xPdapQE9E2koEx5LljcrtEEL95GuVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFANYYWulFRVPnwNVMI+KO67dRYlVMB8GA1UdIwQY MBaAFKmO6+2XU/WAvqdbNS5wYyWhjRRHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVk3cjdaZFQ5WUMtcDFzMUxuQmpKYUdORkVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hNzQ3NDQtZWQ0OC00NzA3LWE2M2Ut NTJmNjkxOTEzOWM0LzEvcVk3cjdaZFQ5WUMtcDFzMUxuQmpKYUdORkVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9hNzQ3NDQtZWQ0OC00NzA3LWE2M2UtNTJmNjkxOTEzOWM0 LzEvcVk3cjdaZFQ5WUMtcDFzMUxuQmpKYUdORkVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYW2CRCY6 /NjflxVcX9qjMJ4A2dPhEijHMJtj9wXu95dZi5RXIMGwgK2zOthgjvpcb5ZU1pC/ +kAYSLf2dTGnqOEPa8B1uaBSd7tZ5ijsps7s0SoMvYJP2LDEQirhijLtC2ACEErP 9lTGKcSpUa7soL+xqnSEbTtfAUonvfXvdDKxVTfSkcAFcy0e/xvsOVoL5lxgYA4Y m03v2zBpGK8DNuYdpL08LU5mLRH2ndTBMfGerfBibnJjekpma+aSRpBS5297WFq8 H4c+1Dwtw0hTT7ktlk7MHIEqYBukkFd9S8UAkrzzNhsaq2BhXB/zw2MozwhSF2rD SvoJjF3QAheQHg== -----END CERTIFICATE-----Generated at Fri Dec 19 04:38:44 2025 by rpki-client