This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft File: 1qqJ97ciJ5wDKULc8khl9tctZQE.mft (raw, json) Hash identifier: H5aX7sJStmMr5Dz2fNPg0EAyEnDMs9fHvf4eB5s0MUs= Subject key identifier: 51:03:D3:87:9B:0C:3B:D4:8E:6C:F6:A9:D7:5B:DB:E7:67:C4:97:3A Authority key identifier: D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01 Certificate issuer: /CN=d6aa89f7b722279c032942dcf24865f6d72d6501 Certificate serial: 019AAC14A32FF081074CDC05BE180A8E2561 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft Manifest number: 1231 Signing time: Sat 22 Nov 2025 15:00:24 +0000 Manifest this update: Sat 22 Nov 2025 15:00:24 +0000 Manifest next update: Sun 23 Nov 2025 15:00:24 +0000 Files and hashes: 1: 1qqJ97ciJ5wDKULc8khl9tctZQE.crl (hash: B6PwKp9eiYLquU5QPvTRk4aps6TwnnbDfrf/OtBTapU=) 2: AgasgsgRMARsZv6ZL1FMUAMH49o.roa (hash: rP0A/zCy7W2yRJEKVS59R2RHbWAgc1CTX30QoNq6GK4=) 3: kIQph00YRfR7VyoSJ5QKs9_47CM.roa (hash: T6/F9gO6dDf2HDaMUJjHPMQQkg1ian0JLCMBF3Ug9u4=) 4: qtgbnELTyW65aNCYZpJqV2m2-Jw.roa (hash: BZNYV9kq2qBJjfITSVC14VQZO/Cg3QnROE1UWyqLr8U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:14:a3:2f:f0:81:07:4c:dc:05:be:18:0a:8e:25:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6aa89f7b722279c032942dcf24865f6d72d6501 Validity Not Before: Nov 22 15:00:24 2025 GMT Not After : Nov 23 15:00:24 2025 GMT Subject: CN=5103d3879b0c3bd48e6cf6a9d75bdbe767c4973a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:42:99:b9:e8:d5:60:b8:c0:76:91:e1:2c:31: fb:dc:c3:6c:f6:73:ed:dc:f2:24:5b:13:fa:b7:87: 75:43:95:a7:80:ae:56:96:ac:b2:b0:15:99:cc:d4: 0b:9d:18:c4:b3:17:4e:29:38:33:e5:07:c3:6f:fa: 32:29:51:2e:21:44:c4:53:ea:94:37:a7:e4:b5:6c: c5:e1:34:f3:ab:7c:45:bb:63:2c:99:ae:48:71:ad: 7c:35:b7:c5:f6:01:36:9d:4c:30:d3:fe:5f:df:36: ef:7f:73:50:80:7a:e7:40:8c:5f:be:5d:fa:10:b3: fb:48:93:0b:30:c9:74:47:fa:8a:1a:ab:2a:73:08: fe:1b:13:09:31:8b:4e:01:4e:3b:bf:5a:d6:a2:3b: 60:4f:f2:7f:1a:da:26:90:b2:fc:da:b3:53:e6:1a: f0:48:58:4c:02:ba:c4:8b:40:96:b6:20:24:1f:ea: 24:36:6e:a7:da:ca:6d:dc:74:07:ea:72:ac:63:58: fd:38:16:88:0e:6f:23:1c:49:9a:d2:44:13:e1:54: 63:99:f0:08:0d:37:5a:20:5d:0d:5b:90:3b:d6:3c: f7:44:66:3b:aa:f2:0b:39:a3:4d:50:ef:65:58:c1: 5a:df:9e:ad:83:ba:c6:a0:e5:06:70:a6:19:69:34: 0f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:03:D3:87:9B:0C:3B:D4:8E:6C:F6:A9:D7:5B:DB:E7:67:C4:97:3A X509v3 Authority Key Identifier: keyid:D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:93:b2:56:ea:fc:4d:1b:0a:ed:6f:23:01:6c:92:35:c9:74: 5c:e4:95:f2:5a:bc:e0:f1:b9:6c:5f:91:7d:fe:65:20:c8:1f: ed:0c:3c:c9:de:b6:35:9c:81:fa:3d:39:73:bb:1c:4f:b8:31: e4:60:46:3c:e4:f2:a9:e8:80:ed:57:b3:22:d2:0a:c4:fd:ad: ad:df:3b:0d:68:27:89:f3:c3:15:66:f0:a0:df:6c:c5:65:7c: 23:fa:45:09:d1:7b:c0:85:c1:ba:29:e7:64:04:d3:e5:ef:8c: 6c:03:6c:88:12:42:e6:c4:53:71:32:b0:65:80:83:e3:59:72: 0b:f2:d6:a2:77:d4:02:53:6c:15:06:82:e8:be:9c:ac:ee:34: 7a:22:bc:72:19:1f:44:81:e5:aa:4d:f6:7b:46:f9:24:b6:a3: 5a:af:dc:84:07:82:5f:68:81:c0:ad:d4:c3:da:48:de:89:68: 2b:04:4e:f1:8d:99:4b:9a:d6:97:0f:af:02:6b:3b:fa:8d:c7: ff:cc:d3:42:c4:14:1a:b5:8c:ee:a7:4a:16:a0:95:44:8a:b1: cb:ac:30:a7:75:c8:c6:c9:da:59:ca:6a:24:13:c6:48:40:fb: ba:79:a9:ef:94:52:47:1d:0a:19:5b:f0:86:5a:71:af:06:ee: ff:d9:3c:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsFKMv8IEHTNwFvhgKjiVhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2YWE4OWY3YjcyMjI3OWMwMzI5NDJkY2YyNDg2NWY2ZDcy ZDY1MDEwHhcNMjUxMTIyMTUwMDI0WhcNMjUxMTIzMTUwMDI0WjAzMTEwLwYDVQQD Eyg1MTAzZDM4NzliMGMzYmQ0OGU2Y2Y2YTlkNzViZGJlNzY3YzQ5NzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkKZuejVYLjAdpHhLDH73MNs9nPt 3PIkWxP6t4d1Q5WngK5WlqyysBWZzNQLnRjEsxdOKTgz5QfDb/oyKVEuIUTEU+qU N6fktWzF4TTzq3xFu2Msma5Ica18NbfF9gE2nUww0/5f3zbvf3NQgHrnQIxfvl36 ELP7SJMLMMl0R/qKGqsqcwj+GxMJMYtOAU47v1rWojtgT/J/GtomkLL82rNT5hrw SFhMArrEi0CWtiAkH+okNm6n2spt3HQH6nKsY1j9OBaIDm8jHEma0kQT4VRjmfAI DTdaIF0NW5A71jz3RGY7qvILOaNNUO9lWMFa356tg7rGoOUGcKYZaTQPEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFED04ebDDvUjmz2qddb2+dnxJc6MB8GA1UdIwQY MBaAFNaqife3IiecAylC3PJIZfbXLWUBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXFxSjk3Y2lKNXdES1VMYzhraGw5dGN0WlFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wZTdlMjgtYTgyOS00N2QyLTgwZTYt OGJhNjg4ODY2OWNmLzEvMXFxSjk3Y2lKNXdES1VMYzhraGw5dGN0WlFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8wZTdlMjgtYTgyOS00N2QyLTgwZTYtOGJhNjg4ODY2OWNm LzEvMXFxSjk3Y2lKNXdES1VMYzhraGw5dGN0WlFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd5OyVur8 TRsK7W8jAWySNcl0XOSV8lq84PG5bF+Rff5lIMgf7Qw8yd62NZyB+j05c7scT7gx 5GBGPOTyqeiA7VezItIKxP2trd87DWgnifPDFWbwoN9sxWV8I/pFCdF7wIXBuinn ZATT5e+MbANsiBJC5sRTcTKwZYCD41lyC/LWonfUAlNsFQaC6L6crO40eiK8chkf RIHlqk32e0b5JLajWq/chAeCX2iBwK3Uw9pI3oloKwRO8Y2ZS5rWlw+vAms7+o3H /8zTQsQUGrWM7qdKFqCVRIqxy6wwp3XIxsnaWcpqJBPGSED7unmp75RSRx0KGVvw hlpxrwbu/9k8Nw== -----END CERTIFICATE-----Generated at Sat Nov 22 21:42:52 2025 by rpki-client