This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft File: qBKXsdNqQt446EgLuSm0W8kDDJ0.mft (raw, json) Hash identifier: 1+YiUKqMgxh+801STmRxvOytRAHv7LsFD2FWxys2q8s= Subject key identifier: E3:BF:66:4B:37:CE:93:8E:4C:8D:C9:50:0E:6B:FF:2E:94:B5:5A:F1 Authority key identifier: A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D Certificate issuer: /CN=a81297b1d36a42de38e8480bb929b45bc9030c9d Certificate serial: 019AAC4BB538D608A177DF763CF45BDB52DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft Manifest number: 0641 Signing time: Sat 22 Nov 2025 16:00:33 +0000 Manifest this update: Sat 22 Nov 2025 16:00:33 +0000 Manifest next update: Sun 23 Nov 2025 16:00:33 +0000 Files and hashes: 1: JQfyecuTBe9b0TVcrmo-tSM3WaE.roa (hash: 2itfFVYv64s2jKKBdM91XUWlXntYtRrbHNJzdg5vens=) 2: _hwoOnSYlfjUaTComm-3hBe2zs0.roa (hash: PBuw/FbCVTJ5hqhxHvWYLj5Cm4bbcUK+XRb8x/VJhJI=) 3: qBKXsdNqQt446EgLuSm0W8kDDJ0.crl (hash: ++Y0yO1QU74gUssf8Qy59DD+nRhGc3o/bqCJqjKM1Pc=) 4: svM12JDKJB3e-TFZ2wiCejW_Bfk.roa (hash: QUass/NjIlJuE2HSs5ern4SfiFA+q7m1ESWTARVsCGk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:4b:b5:38:d6:08:a1:77:df:76:3c:f4:5b:db:52:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a81297b1d36a42de38e8480bb929b45bc9030c9d Validity Not Before: Nov 22 16:00:33 2025 GMT Not After : Nov 23 16:00:33 2025 GMT Subject: CN=e3bf664b37ce938e4c8dc9500e6bff2e94b55af1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:6f:de:8e:ed:9f:57:cd:d9:88:54:9f:a4:2d: 2d:e0:7f:b9:5f:8d:1c:a0:fd:c3:1f:dc:1c:2c:9a: 3b:a8:ce:62:16:1b:16:ce:14:2c:36:5c:3b:cf:91: e4:ff:cb:a7:d3:9d:8a:95:0b:62:9d:35:99:69:05: e5:1e:65:d0:a4:42:62:88:ba:80:00:4a:8f:4c:ff: 08:3a:31:02:f0:f8:79:fc:54:27:f0:c6:f9:91:ce: aa:c6:70:75:6e:c9:06:c7:e8:29:16:d2:33:9d:ba: f5:ea:54:ca:6f:d0:61:65:2d:5f:e2:a1:71:b5:a2: 66:d0:24:b1:fe:f9:d4:35:0b:ce:60:d5:dd:f5:04: 3b:7c:47:ca:07:7c:3b:41:32:93:27:34:4d:5d:bd: 77:5e:ce:4c:cf:63:11:b7:45:f8:3f:f5:06:0a:6e: 00:60:2c:3a:1c:8e:d0:22:54:d7:07:e5:ed:89:4b: 46:84:74:23:af:c1:05:94:7a:f6:fb:05:ce:71:93: 54:c7:d7:d5:66:7e:00:3f:9a:81:f5:98:80:08:a3: 90:e2:46:cc:cb:38:56:3e:bd:a8:04:0b:cc:56:22: 0e:34:c5:d4:a9:75:3c:4d:9d:b4:8f:1d:b7:91:bb: df:ab:6b:81:e4:bc:ed:9e:11:62:03:d0:68:e8:30: 6f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:BF:66:4B:37:CE:93:8E:4C:8D:C9:50:0E:6B:FF:2E:94:B5:5A:F1 X509v3 Authority Key Identifier: keyid:A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:10:1e:f4:0e:a7:54:9b:0d:f3:9b:6e:21:62:a5:73:b4:ce: a3:95:8f:29:70:c8:f9:87:ae:03:2d:de:c4:d1:86:4c:ba:ee: 90:47:15:95:4f:d4:09:5d:7d:53:5b:41:4d:c9:df:14:5b:2f: 7c:09:04:77:7e:00:74:27:25:b7:3a:7f:3d:c9:72:07:91:c0: cb:83:ab:59:0c:1c:00:8b:f5:e9:d1:12:10:3d:9a:95:b7:4b: e7:02:92:6d:5f:39:0b:c5:05:82:bc:90:44:a2:75:cb:f1:f6: ee:6e:45:f2:67:62:26:bd:d2:96:0e:5d:b7:d4:48:06:c1:06: 7f:a1:b4:b9:f6:ed:71:95:54:4e:79:ad:02:dc:d2:c1:ab:10: b8:1c:97:a9:b4:43:d7:7b:b4:a6:97:63:ff:e8:a0:7b:0b:29: 23:0a:35:20:ab:72:98:4b:13:dc:53:36:19:13:73:cc:d6:06: a7:d9:fc:d6:3a:9d:27:12:7a:9c:13:df:4f:4f:76:8a:87:e6: a7:3a:d2:9d:2b:6b:ee:1d:03:a3:c0:f0:8c:e7:86:71:9c:2a: 28:7e:18:2e:b1:7e:f9:6c:83:c1:23:a7:fe:ae:05:8e:dd:37: f6:43:bb:68:98:ec:23:40:ac:fa:41:1b:ee:f4:c8:ae:59:99: d0:e2:95:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsS7U41gihd992PPRb21LdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MTI5N2IxZDM2YTQyZGUzOGU4NDgwYmI5MjliNDViYzkw MzBjOWQwHhcNMjUxMTIyMTYwMDMzWhcNMjUxMTIzMTYwMDMzWjAzMTEwLwYDVQQD EyhlM2JmNjY0YjM3Y2U5MzhlNGM4ZGM5NTAwZTZiZmYyZTk0YjU1YWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkm/eju2fV83ZiFSfpC0t4H+5X40c oP3DH9wcLJo7qM5iFhsWzhQsNlw7z5Hk/8un052KlQtinTWZaQXlHmXQpEJiiLqA AEqPTP8IOjEC8Ph5/FQn8Mb5kc6qxnB1bskGx+gpFtIznbr16lTKb9BhZS1f4qFx taJm0CSx/vnUNQvOYNXd9QQ7fEfKB3w7QTKTJzRNXb13Xs5Mz2MRt0X4P/UGCm4A YCw6HI7QIlTXB+XtiUtGhHQjr8EFlHr2+wXOcZNUx9fVZn4AP5qB9ZiACKOQ4kbM yzhWPr2oBAvMViIONMXUqXU8TZ20jx23kbvfq2uB5LztnhFiA9Bo6DBv0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOO/Zks3zpOOTI3JUA5r/y6UtVrxMB8GA1UdIwQY MBaAFKgSl7HTakLeOOhIC7kptFvJAwydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUJLWHNkTnFRdDQ0NkVnTHVTbTBXOGtEREowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83MjBlNWYtN2YzMy00ZDlkLThjZGUt MjJkZDBmMzkyOGQ1LzEvcUJLWHNkTnFRdDQ0NkVnTHVTbTBXOGtEREowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83MjBlNWYtN2YzMy00ZDlkLThjZGUtMjJkZDBmMzkyOGQ1 LzEvcUJLWHNkTnFRdDQ0NkVnTHVTbTBXOGtEREowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHxAe9A6n VJsN85tuIWKlc7TOo5WPKXDI+YeuAy3exNGGTLrukEcVlU/UCV19U1tBTcnfFFsv fAkEd34AdCcltzp/PclyB5HAy4OrWQwcAIv16dESED2albdL5wKSbV85C8UFgryQ RKJ1y/H27m5F8mdiJr3Slg5dt9RIBsEGf6G0ufbtcZVUTnmtAtzSwasQuByXqbRD 13u0ppdj/+igewspIwo1IKtymEsT3FM2GRNzzNYGp9n81jqdJxJ6nBPfT092iofm pzrSnStr7h0Do8DwjOeGcZwqKH4YLrF++WyDwSOn/q4Fjt039kO7aJjsI0Cs+kEb 7vTIrlmZ0OKV+Q== -----END CERTIFICATE-----Generated at Sat Nov 22 21:42:39 2025 by rpki-client