This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft File: qZtHOUN7VflE0iKdFrbm-lmRloc.mft (raw, json) Hash identifier: PzU9LpGehefkqAKBROsynjsqrA5ZkPP6AStCo7GKY2o= Subject key identifier: C2:7A:C8:E8:66:35:B8:97:A9:AE:78:F8:75:47:73:81:86:2A:BD:CD Authority key identifier: A9:9B:47:39:43:7B:55:F9:44:D2:22:9D:16:B6:E6:FA:59:91:96:87 Certificate issuer: /CN=a99b4739437b55f944d2229d16b6e6fa59919687 Certificate serial: 019B1E741D5564259DAAFEC4CDEE81C4CFE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft Manifest number: 1778 Signing time: Sun 14 Dec 2025 20:01:24 +0000 Manifest this update: Sun 14 Dec 2025 20:01:24 +0000 Manifest next update: Mon 15 Dec 2025 20:01:24 +0000 Files and hashes: 1: qMxnjU0y2BirW8Msof1Jf0nPV6Y.roa (hash: mETKuHxxI80kK1mEz5SE5kB8etbeHSydtbh41gdDMVo=) 2: qZtHOUN7VflE0iKdFrbm-lmRloc.crl (hash: ytq4tEJGzzm89tkREkhN0AHByY1IruSWnK4qjxQ8j54=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 20:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:74:1d:55:64:25:9d:aa:fe:c4:cd:ee:81:c4:cf:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a99b4739437b55f944d2229d16b6e6fa59919687 Validity Not Before: Dec 14 20:01:24 2025 GMT Not After : Dec 15 20:01:24 2025 GMT Subject: CN=c27ac8e86635b897a9ae78f875477381862abdcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:56:ac:5b:b5:e6:2e:a4:ed:94:1b:db:7b:a1: 19:9b:63:b8:90:ca:e6:e4:5c:b6:c7:d1:fe:c9:58: b0:9c:ee:e5:38:06:7a:d1:e6:39:d2:b8:f5:33:18: 19:01:22:d1:97:7d:fb:ef:18:0e:c0:7c:8e:d8:cf: 1b:b8:86:1a:00:d5:ff:74:75:9d:03:7c:f9:cd:ff: 62:54:27:48:b1:3c:6b:b6:49:ef:5e:dd:be:e2:90: cb:12:f5:d7:7d:f7:f7:d2:14:6b:5a:e7:af:19:16: 4a:b6:c4:11:6a:3f:20:a2:38:93:e1:c5:1a:16:db: ff:38:75:8a:2d:d5:3b:d9:34:96:14:10:12:01:5f: 28:76:41:3e:b5:52:8d:18:d2:41:ab:3c:d4:55:c7: ae:66:58:71:db:e2:44:68:51:46:1c:fc:39:a2:2c: 58:cd:3f:c9:b8:1d:e7:79:a7:52:16:80:e5:3b:6e: 15:80:06:fe:73:09:84:b1:cb:7a:cc:07:b7:cb:98: 80:fd:2b:b8:5a:8e:e7:a7:96:43:f9:6d:0d:7f:35: 77:50:dc:1b:c3:86:54:1c:73:96:69:14:24:ef:db: 55:2d:43:67:20:fe:6b:4d:91:28:e1:e4:35:e8:47: 57:4e:13:0e:03:c0:3c:67:bf:19:af:7b:0a:1c:45: 7b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:7A:C8:E8:66:35:B8:97:A9:AE:78:F8:75:47:73:81:86:2A:BD:CD X509v3 Authority Key Identifier: keyid:A9:9B:47:39:43:7B:55:F9:44:D2:22:9D:16:B6:E6:FA:59:91:96:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:60:25:1e:a1:a5:c2:1d:92:4d:f2:6e:26:9d:37:f6:b4:60: 28:74:e9:a6:b0:74:5b:a3:8b:d5:2d:0b:58:54:53:2d:f2:38: 60:0f:46:d6:27:b6:4b:2f:3e:71:56:00:60:77:58:5a:f3:b5: b1:be:00:7c:5f:51:c6:4a:65:0c:9f:d8:a9:93:e1:79:fc:00: bf:77:45:5e:e2:f4:aa:5c:9f:2b:0c:d9:da:ae:d3:ad:3c:f1: 3a:3b:a8:e2:70:c4:80:ae:d1:ad:25:36:70:24:9e:36:79:05: 77:a1:aa:b3:4e:69:8d:81:92:5a:dc:bd:91:c8:c2:a7:db:c8: d4:46:c0:0d:25:6a:d8:0c:d0:18:0e:ca:db:da:87:1c:e3:90: d5:1c:f0:22:7e:b8:4c:24:1c:17:cf:45:9d:e9:d5:93:69:ce: e6:7a:68:a1:e0:db:3b:82:a2:a1:ca:7b:90:79:33:91:73:4e: e4:49:be:fe:b2:1a:bb:27:77:2e:00:fc:cd:36:b2:4e:cc:32: e8:c6:18:88:af:51:70:6b:c0:6e:ac:b7:d7:d2:5f:a0:71:02: 8e:c4:ca:c7:0e:16:d5:be:63:da:ae:70:5a:62:14:e6:32:15: d1:bf:61:3e:d9:ab:e5:37:71:5a:02:2b:7c:80:2e:43:96:b9: 59:dd:48:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsedB1VZCWdqv7Eze6BxM/pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5OWI0NzM5NDM3YjU1Zjk0NGQyMjI5ZDE2YjZlNmZhNTk5 MTk2ODcwHhcNMjUxMjE0MjAwMTI0WhcNMjUxMjE1MjAwMTI0WjAzMTEwLwYDVQQD EyhjMjdhYzhlODY2MzViODk3YTlhZTc4Zjg3NTQ3NzM4MTg2MmFiZGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFasW7XmLqTtlBvbe6EZm2O4kMrm 5Fy2x9H+yViwnO7lOAZ60eY50rj1MxgZASLRl3377xgOwHyO2M8buIYaANX/dHWd A3z5zf9iVCdIsTxrtknvXt2+4pDLEvXXfff30hRrWuevGRZKtsQRaj8gojiT4cUa Ftv/OHWKLdU72TSWFBASAV8odkE+tVKNGNJBqzzUVceuZlhx2+JEaFFGHPw5oixY zT/JuB3neadSFoDlO24VgAb+cwmEsct6zAe3y5iA/Su4Wo7np5ZD+W0NfzV3UNwb w4ZUHHOWaRQk79tVLUNnIP5rTZEo4eQ16EdXThMOA8A8Z78Zr3sKHEV7cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJ6yOhmNbiXqa54+HVHc4GGKr3NMB8GA1UdIwQY MBaAFKmbRzlDe1X5RNIinRa25vpZkZaHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVp0SE9VTjdWZmxFMGlLZEZyYm0tbG1SbG9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9hNDExNGUtZGIxNC00NGI0LTliMjUt ZTQ3NTY0Y2QwYmFlLzEvcVp0SE9VTjdWZmxFMGlLZEZyYm0tbG1SbG9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9hNDExNGUtZGIxNC00NGI0LTliMjUtZTQ3NTY0Y2QwYmFl LzEvcVp0SE9VTjdWZmxFMGlLZEZyYm0tbG1SbG9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJGAlHqGl wh2STfJuJp039rRgKHTpprB0W6OL1S0LWFRTLfI4YA9G1ie2Sy8+cVYAYHdYWvO1 sb4AfF9RxkplDJ/YqZPhefwAv3dFXuL0qlyfKwzZ2q7TrTzxOjuo4nDEgK7RrSU2 cCSeNnkFd6Gqs05pjYGSWty9kcjCp9vI1EbADSVq2AzQGA7K29qHHOOQ1RzwIn64 TCQcF89FnenVk2nO5npooeDbO4Kiocp7kHkzkXNO5Em+/rIauyd3LgD8zTayTswy 6MYYiK9RcGvAbqy319JfoHECjsTKxw4W1b5j2q5wWmIU5jIV0b9hPtmr5TdxWgIr fIAuQ5a5Wd1Iqw== -----END CERTIFICATE-----Generated at Mon Dec 15 04:53:30 2025 by rpki-client