This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft File: qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft (raw, json) Hash identifier: 3MV/zQc9JTMf6CMlbOnMw/wimcwkEEkcOzOcP395OZg= Subject key identifier: 7E:7F:A5:C6:81:C2:4B:9F:9C:EA:53:3A:01:BC:F6:9F:4D:67:5A:66 Authority key identifier: AA:44:E2:E8:12:F0:9A:C4:FE:2B:47:E4:26:9C:E1:A0:20:21:CA:0E Certificate issuer: /CN=aa44e2e812f09ac4fe2b47e4269ce1a02021ca0e Certificate serial: 019B38A241E9659638B977076A738E42B190 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 22:01:56 +0000 Manifest this update: Fri 19 Dec 2025 22:01:56 +0000 Manifest next update: Sat 20 Dec 2025 22:01:56 +0000 Files and hashes: 1: Ksr0uLkRk2xgBxHqi3sQnitvzew.roa (hash: WSC+ZUBgflwaiPFD1qCd7YKaOxvqrLSTyitqpFIOSP4=) 2: qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl (hash: Yg78/qAwwPikzsi7yBO7f47ZHlukp5xPuXnStAqPYVw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:41:e9:65:96:38:b9:77:07:6a:73:8e:42:b1:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa44e2e812f09ac4fe2b47e4269ce1a02021ca0e Validity Not Before: Dec 19 22:01:56 2025 GMT Not After : Dec 20 22:01:56 2025 GMT Subject: CN=7e7fa5c681c24b9f9cea533a01bcf69f4d675a66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b4:dc:8a:d7:63:07:16:a9:7a:85:09:7a:5d: 4c:82:2f:49:80:00:47:af:d1:fa:e0:bb:e1:cf:ad: 56:aa:79:67:6b:14:b3:6e:a3:2a:85:c0:00:2f:44: d8:1d:4e:79:d6:4b:5c:87:57:bb:61:b7:37:46:8d: 62:e1:b1:10:f7:54:b7:f3:d4:6c:18:56:af:b1:3e: 59:55:f1:24:d1:d5:cb:ed:c4:98:90:6f:29:d9:1a: 82:a3:fa:62:a0:fa:f1:66:09:28:d8:0e:8e:96:c4: 7a:50:3e:bf:02:ab:7c:41:b6:7a:71:70:82:1f:84: 6c:06:98:22:3b:12:95:4c:d9:c9:a5:e3:fe:c6:5e: 7c:18:dd:76:b4:9e:2c:7c:5d:28:1c:8a:6a:e3:22: 88:23:6d:53:66:1b:c8:e5:ee:fd:72:d4:95:47:a0: 33:4e:7d:7f:68:22:ce:3e:66:90:ae:8d:8e:9e:e7: fd:14:15:22:a2:b1:00:66:a8:32:1c:32:fa:30:80: e2:27:7d:a5:ee:54:94:8e:45:7e:cd:bb:25:42:e9: 79:37:a9:55:54:96:c6:f4:61:c5:00:30:90:4e:8e: ea:8c:57:4b:1c:cf:0a:7e:ba:ee:b7:97:4d:83:e3: 9d:94:6a:f5:cc:b9:b1:d0:17:30:9a:45:63:96:a0: 95:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:7F:A5:C6:81:C2:4B:9F:9C:EA:53:3A:01:BC:F6:9F:4D:67:5A:66 X509v3 Authority Key Identifier: keyid:AA:44:E2:E8:12:F0:9A:C4:FE:2B:47:E4:26:9C:E1:A0:20:21:CA:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:e8:f0:40:f9:3a:bb:8d:06:4b:68:5a:22:09:65:33:43:c4: fe:9b:39:21:b5:0f:a0:3a:b1:79:97:90:89:db:05:0d:e5:43: e8:cf:78:86:1c:7a:63:03:f9:0d:53:6d:05:5f:a7:e5:8f:49: 76:c6:75:28:a3:78:a1:ae:33:78:34:60:78:7f:50:ac:5b:36: c0:b4:c4:50:39:43:81:03:57:e1:9b:9d:2b:96:dc:42:5a:89: af:11:8a:25:2c:5b:3d:38:6f:52:18:4a:df:75:99:b8:fe:d8: f2:d8:6b:69:12:ea:11:99:f3:a2:17:9c:4a:bf:62:a4:4e:6f: 51:5e:5f:47:e0:c7:d1:29:2a:d7:22:c0:b6:7a:4e:53:ab:24: d5:f4:75:09:89:79:d4:f6:08:69:1e:23:7e:ab:f3:71:ad:c7: d8:ab:37:25:6f:72:9c:fe:46:e4:3e:5e:95:87:d0:52:32:ba: 86:e4:eb:77:08:71:ab:d9:de:77:a5:78:66:e6:1f:79:84:33: 1b:3c:30:74:85:bb:7a:91:3b:f7:2f:3a:b6:ca:62:8e:f9:58: 4c:98:5b:f2:4e:0b:91:42:f7:05:09:71:79:6e:9c:20:c1:55: e5:31:9d:24:3d:df:37:46:08:f9:41:8d:c3:5d:c2:38:e5:7c: 58:3d:9a:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4okHpZZY4uXcHanOOQrGQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNDRlMmU4MTJmMDlhYzRmZTJiNDdlNDI2OWNlMWEwMjAy MWNhMGUwHhcNMjUxMjE5MjIwMTU2WhcNMjUxMjIwMjIwMTU2WjAzMTEwLwYDVQQD Eyg3ZTdmYTVjNjgxYzI0YjlmOWNlYTUzM2EwMWJjZjY5ZjRkNjc1YTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rTcitdjBxapeoUJel1Mgi9JgABH r9H64Lvhz61WqnlnaxSzbqMqhcAAL0TYHU551ktch1e7Ybc3Ro1i4bEQ91S389Rs GFavsT5ZVfEk0dXL7cSYkG8p2RqCo/pioPrxZgko2A6OlsR6UD6/Aqt8QbZ6cXCC H4RsBpgiOxKVTNnJpeP+xl58GN12tJ4sfF0oHIpq4yKII21TZhvI5e79ctSVR6Az Tn1/aCLOPmaQro2Onuf9FBUiorEAZqgyHDL6MIDiJ32l7lSUjkV+zbslQul5N6lV VJbG9GHFADCQTo7qjFdLHM8Kfrrut5dNg+OdlGr1zLmx0BcwmkVjlqCVQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH5/pcaBwkufnOpTOgG89p9NZ1pmMB8GA1UdIwQY MBaAFKpE4ugS8JrE/itH5Cac4aAgIcoOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWtUaTZCTHdtc1QtSzBma0pwemhvQ0FoeWc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9lYTZhMjQtODA3NS00N2RlLWIxZTYt ODY2NDBmY2EzM2JmLzEvcWtUaTZCTHdtc1QtSzBma0pwemhvQ0FoeWc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9lYTZhMjQtODA3NS00N2RlLWIxZTYtODY2NDBmY2EzM2Jm LzEvcWtUaTZCTHdtc1QtSzBma0pwemhvQ0FoeWc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGejwQPk6 u40GS2haIgllM0PE/ps5IbUPoDqxeZeQidsFDeVD6M94hhx6YwP5DVNtBV+n5Y9J dsZ1KKN4oa4zeDRgeH9QrFs2wLTEUDlDgQNX4ZudK5bcQlqJrxGKJSxbPThvUhhK 33WZuP7Y8thraRLqEZnzohecSr9ipE5vUV5fR+DH0Skq1yLAtnpOU6sk1fR1CYl5 1PYIaR4jfqvzca3H2Ks3JW9ynP5G5D5elYfQUjK6huTrdwhxq9ned6V4ZuYfeYQz GzwwdIW7epE79y86tspijvlYTJhb8k4LkUL3BQlxeW6cIMFV5TGdJD3fN0YI+UGN w13COOV8WD2a6g== -----END CERTIFICATE-----Generated at Sat Dec 20 07:34:25 2025 by rpki-client