This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft File: QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft (raw, json) Hash identifier: E+VXFDaumbi7txRFdWU03RoSUrOAL9aX9c2xoX/gYF4= Subject key identifier: 19:F1:90:6C:30:89:2C:59:EF:3B:98:6C:49:0B:DB:E2:46:30:EB:C7 Authority key identifier: 40:08:C4:86:EF:56:17:0C:41:2F:26:61:5D:0A:40:94:BC:A1:FB:2C Certificate issuer: /CN=4008c486ef56170c412f26615d0a4094bca1fb2c Certificate serial: 019B2219D89F7DF35E44A9AF11EF69CD00E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft Manifest number: 29 Signing time: Mon 15 Dec 2025 13:01:17 +0000 Manifest this update: Mon 15 Dec 2025 13:01:17 +0000 Manifest next update: Tue 16 Dec 2025 13:01:17 +0000 Files and hashes: 1: FqM_4ho7rDPE7pDj9ai4ZCxjf0Y.roa (hash: sB6SR2FfNoPpo3As5YllIxl1OQtiH7GgdCRzbnjbe40=) 2: QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl (hash: T3w1gTm3X0ZHCNaK4mCHl4vJRWEGd5XFk6Vopdjq/T4=) 3: WaBQatp7bxnpNTXTPfC8eRzxQ-E.roa (hash: kMmmhH+gENIlBcbPRiM9Rm2om/0TywtTPFc2kMZZ7xc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:19:d8:9f:7d:f3:5e:44:a9:af:11:ef:69:cd:00:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4008c486ef56170c412f26615d0a4094bca1fb2c Validity Not Before: Dec 15 13:01:17 2025 GMT Not After : Dec 16 13:01:17 2025 GMT Subject: CN=19f1906c30892c59ef3b986c490bdbe24630ebc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cf:d9:c5:17:02:b9:07:14:f2:63:01:19:4c: ba:15:59:42:e8:41:f1:e8:ef:cb:2b:e6:c0:5d:c8: 5d:d8:82:f9:eb:59:8b:1c:c9:78:f9:94:e6:92:96: e9:9f:f8:3f:80:1c:98:15:3a:3e:89:33:3d:6f:9a: 31:50:79:e8:85:bc:f7:4c:7c:7e:82:f0:dc:c0:40: 07:7c:19:eb:f4:5e:30:85:2d:d6:13:99:78:3d:f1: 27:a9:be:8c:b4:dc:27:c3:42:02:db:53:15:45:82: 92:44:d9:21:39:9c:9a:2a:0e:45:d7:84:4b:63:e4: 79:72:c2:e1:fb:d0:29:fd:ab:d5:85:22:7d:e8:32: 17:6a:9e:64:c9:dc:16:6a:90:01:f4:09:f6:23:cf: ec:4d:b4:3b:0a:c7:da:71:50:e2:02:a9:8f:d4:67: 25:6b:4c:28:5c:df:e9:ed:b3:3d:e8:2b:ae:2c:93: 04:34:43:55:64:92:f2:44:e1:1c:bc:8b:1b:4d:0d: 4f:ec:76:f0:36:cd:e9:31:86:13:14:c6:28:c4:e9: a0:10:a1:09:e1:37:d5:17:00:ed:2d:5d:8d:bb:c5: be:12:29:d2:51:a5:fb:3e:32:bf:9a:57:9d:f9:5b: 3b:38:2a:d4:8c:07:a2:49:b2:e4:e5:fd:ed:26:21: 3d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F1:90:6C:30:89:2C:59:EF:3B:98:6C:49:0B:DB:E2:46:30:EB:C7 X509v3 Authority Key Identifier: keyid:40:08:C4:86:EF:56:17:0C:41:2F:26:61:5D:0A:40:94:BC:A1:FB:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:65:3c:d0:de:2b:18:a7:82:a4:cb:f9:8e:0a:60:77:1d:7f: 5e:a8:6d:bd:f6:cf:9e:06:5b:f5:73:8c:c0:0a:53:dd:f2:04: 9e:c1:aa:de:51:97:0c:88:0e:7d:88:3e:4e:47:62:85:7a:66: 53:0b:b2:1e:21:57:c2:bd:8d:6a:cc:6a:23:9b:16:e6:f8:b8: ba:ab:d9:67:e1:be:87:4d:d2:0e:d4:d0:b8:7b:78:69:df:a6: dc:42:82:a8:22:6b:3f:e4:44:dc:a2:f6:57:4e:54:25:64:c9: 0c:cb:4e:38:b2:cb:33:1d:be:c2:26:e4:db:99:4a:60:ac:96: 65:8e:6a:c0:52:43:76:be:16:b7:f3:24:5f:cb:40:17:a6:6f: 82:d9:bb:73:d5:24:d6:1f:8e:aa:b0:b7:74:48:d7:b1:e7:d3: de:aa:4c:83:97:aa:97:ca:5b:ce:39:6b:66:c7:6c:b3:11:c3: 49:f7:f5:86:d5:08:5b:fd:b4:e9:d2:9f:66:4a:d5:ba:de:e0: c4:9a:b8:18:c2:e3:c9:62:34:6f:a8:69:37:21:43:5d:49:1f: eb:b8:9b:1f:a4:cd:49:17:68:ac:f4:58:ce:51:fa:9b:9c:91: fe:61:da:e0:44:5f:87:51:e7:d0:c3:43:a3:4d:ee:b6:b0:f0: 69:49:67:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiGdifffNeRKmvEe9pzQDkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMDhjNDg2ZWY1NjE3MGM0MTJmMjY2MTVkMGE0MDk0YmNh MWZiMmMwHhcNMjUxMjE1MTMwMTE3WhcNMjUxMjE2MTMwMTE3WjAzMTEwLwYDVQQD EygxOWYxOTA2YzMwODkyYzU5ZWYzYjk4NmM0OTBiZGJlMjQ2MzBlYmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmM/ZxRcCuQcU8mMBGUy6FVlC6EHx 6O/LK+bAXchd2IL561mLHMl4+ZTmkpbpn/g/gByYFTo+iTM9b5oxUHnohbz3THx+ gvDcwEAHfBnr9F4whS3WE5l4PfEnqb6MtNwnw0IC21MVRYKSRNkhOZyaKg5F14RL Y+R5csLh+9Ap/avVhSJ96DIXap5kydwWapAB9An2I8/sTbQ7CsfacVDiAqmP1Gcl a0woXN/p7bM96CuuLJMENENVZJLyROEcvIsbTQ1P7HbwNs3pMYYTFMYoxOmgEKEJ 4TfVFwDtLV2Nu8W+EinSUaX7PjK/mled+Vs7OCrUjAeiSbLk5f3tJiE9MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBnxkGwwiSxZ7zuYbEkL2+JGMOvHMB8GA1UdIwQY MBaAFEAIxIbvVhcMQS8mYV0KQJS8ofssMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUFqRWh1OVdGd3hCTHlaaFhRcEFsTHloLXl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hOTdmOWYtM2RmMC00NTQ2LTljZTct ZTkyYTI1NDkxY2VkLzEvUUFqRWh1OVdGd3hCTHlaaFhRcEFsTHloLXl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9hOTdmOWYtM2RmMC00NTQ2LTljZTctZTkyYTI1NDkxY2Vk LzEvUUFqRWh1OVdGd3hCTHlaaFhRcEFsTHloLXl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqGU80N4r GKeCpMv5jgpgdx1/XqhtvfbPngZb9XOMwApT3fIEnsGq3lGXDIgOfYg+TkdihXpm UwuyHiFXwr2NasxqI5sW5vi4uqvZZ+G+h03SDtTQuHt4ad+m3EKCqCJrP+RE3KL2 V05UJWTJDMtOOLLLMx2+wibk25lKYKyWZY5qwFJDdr4Wt/MkX8tAF6Zvgtm7c9Uk 1h+OqrC3dEjXsefT3qpMg5eql8pbzjlrZsdssxHDSff1htUIW/206dKfZkrVut7g xJq4GMLjyWI0b6hpNyFDXUkf67ibH6TNSRdorPRYzlH6m5yR/mHa4ERfh1Hn0MND o03utrDwaUlnSw== -----END CERTIFICATE-----Generated at Mon Dec 15 19:27:53 2025 by rpki-client