This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft File: qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft (raw, json) Hash identifier: Pwfk8ANPqo66peciIIxhe50tMUUmIl+nFZPNMsvkdYM= Subject key identifier: 4A:58:67:9E:78:8E:7B:5D:0D:31:57:AB:5A:43:8B:B3:2A:47:AF:DD Authority key identifier: A9:BE:16:CE:7D:B3:BE:69:05:B1:AB:EF:8B:E2:1A:23:19:B0:E4:3E Certificate issuer: /CN=a9be16ce7db3be6905b1abef8be21a2319b0e43e Certificate serial: 019B2C2F3A481BA3EA5476D8A0DA94060AFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qb4Wzn2zvmkFsavvi-IaIxmw5D4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 12:00:51 +0000 Manifest this update: Wed 17 Dec 2025 12:00:51 +0000 Manifest next update: Thu 18 Dec 2025 12:00:51 +0000 Files and hashes: 1: 1qwW0uRF0uaIMOZUzvFdP6iUIGc.roa (hash: XnlKdK7HSE5Z4YnaNQLgBs+MxP6gmaSDYHLIExtRWFg=) 2: qb4Wzn2zvmkFsavvi-IaIxmw5D4.crl (hash: qbug+/YUQsK3rlD5PGtG6ln/mIDw2ylxbjVHBHs8IrQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.crl rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft rsync://rpki.ripe.net/repository/DEFAULT/qb4Wzn2zvmkFsavvi-IaIxmw5D4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 12:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:3a:48:1b:a3:ea:54:76:d8:a0:da:94:06:0a:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9be16ce7db3be6905b1abef8be21a2319b0e43e Validity Not Before: Dec 17 12:00:51 2025 GMT Not After : Dec 18 12:00:51 2025 GMT Subject: CN=4a58679e788e7b5d0d3157ab5a438bb32a47afdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e1:e2:dc:85:c8:8c:a8:8c:f4:bc:27:a9:55: 31:6e:df:82:05:61:a4:5b:98:7f:e1:bc:31:d3:d2: c2:d8:59:ba:61:9e:e1:c4:5e:f3:74:3e:1b:c4:9d: 3c:70:48:53:52:54:0b:d9:9d:f6:d0:4d:8b:40:ee: 85:46:2a:38:7c:e7:a4:d4:25:fa:7c:70:8d:d2:77: 98:2a:74:bc:b0:a5:c7:90:9e:92:c2:be:50:b3:92: 7f:11:5f:65:d9:e3:09:ec:15:a2:0a:f7:02:1f:fa: 2f:24:92:bc:57:8b:2f:1a:76:c6:c3:17:9d:f8:da: 06:68:95:01:1e:3e:df:d3:e4:e8:71:a5:da:20:89: 2f:29:e8:30:43:bc:74:ce:49:aa:ef:8f:1b:7c:63: 8b:91:5f:dd:9e:10:cd:fa:b2:1b:3b:f4:3a:02:27: 39:ed:85:5f:86:48:32:91:b1:af:0e:5a:70:18:96: d1:cf:d4:f2:0d:84:db:76:2d:c4:ff:98:69:38:72: 38:42:15:01:aa:0d:7a:4f:a8:fc:66:8e:19:15:8c: 7d:07:8b:f8:6a:8a:3b:2a:54:45:82:ae:ba:d1:a7: ea:8b:c1:c6:47:82:56:46:07:1d:c1:62:73:0f:6e: 77:be:d9:8c:b9:bf:ba:1a:f9:5f:a2:b1:45:0d:68: 46:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:58:67:9E:78:8E:7B:5D:0D:31:57:AB:5A:43:8B:B3:2A:47:AF:DD X509v3 Authority Key Identifier: keyid:A9:BE:16:CE:7D:B3:BE:69:05:B1:AB:EF:8B:E2:1A:23:19:B0:E4:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qb4Wzn2zvmkFsavvi-IaIxmw5D4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:a4:a4:75:7e:7c:9e:5e:e1:3c:26:dd:8b:34:21:bc:89:8c: a7:b4:a5:f1:9c:7b:d0:2c:32:24:bd:f0:58:47:6a:a9:d3:c7: e2:30:9c:9b:b0:63:3c:1c:8e:76:58:1f:87:f9:eb:b4:c2:b1: 11:ce:e9:51:3c:f9:36:f8:6f:f6:e7:13:9f:bb:36:db:3d:48: 3f:63:9f:c0:c3:2e:d7:10:ff:a6:51:2c:cd:36:e5:db:32:84: a0:cd:f9:a0:f5:8a:38:d5:5b:9f:fa:b8:79:a1:4c:ce:8e:c7: 76:67:55:c4:7f:2e:f2:86:64:c7:90:f8:a1:7c:a8:65:16:a5: 18:3d:d4:cd:79:d3:ee:8c:09:bd:28:c1:af:62:e8:e7:78:30: fd:05:32:27:36:48:82:d5:dc:e0:51:e1:7d:ec:53:65:bc:6a: 09:66:6d:ad:98:46:a6:15:9a:58:9f:38:3f:8a:a4:74:87:43: 6e:c8:fe:59:6e:a7:80:db:db:6a:c9:d6:7a:4d:5c:a5:77:90: cc:5f:8d:d7:2c:b6:ff:fc:93:10:c4:c5:ce:59:25:14:65:ac: df:26:7e:2e:25:77:07:35:e4:63:4c:3b:ef:02:ee:ef:42:df: e2:e0:19:b7:12:c9:92:3a:7c:90:9a:56:f1:87:0e:af:5d:70: d3:1c:ba:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssLzpIG6PqVHbYoNqUBgr7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5YmUxNmNlN2RiM2JlNjkwNWIxYWJlZjhiZTIxYTIzMTli MGU0M2UwHhcNMjUxMjE3MTIwMDUxWhcNMjUxMjE4MTIwMDUxWjAzMTEwLwYDVQQD Eyg0YTU4Njc5ZTc4OGU3YjVkMGQzMTU3YWI1YTQzOGJiMzJhNDdhZmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOHi3IXIjKiM9LwnqVUxbt+CBWGk W5h/4bwx09LC2Fm6YZ7hxF7zdD4bxJ08cEhTUlQL2Z320E2LQO6FRio4fOek1CX6 fHCN0neYKnS8sKXHkJ6Swr5Qs5J/EV9l2eMJ7BWiCvcCH/ovJJK8V4svGnbGwxed +NoGaJUBHj7f0+TocaXaIIkvKegwQ7x0zkmq748bfGOLkV/dnhDN+rIbO/Q6Aic5 7YVfhkgykbGvDlpwGJbRz9TyDYTbdi3E/5hpOHI4QhUBqg16T6j8Zo4ZFYx9B4v4 aoo7KlRFgq660afqi8HGR4JWRgcdwWJzD253vtmMub+6GvlforFFDWhGYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEpYZ554jntdDTFXq1pDi7MqR6/dMB8GA1UdIwQY MBaAFKm+Fs59s75pBbGr74viGiMZsOQ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWI0V3puMnp2bWtGc2F2dmktSWFJeG13NUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8xNmViNTktNjhhMy00MjE1LTgwOWYt NzliMmU0MGUyYmQ4LzEvcWI0V3puMnp2bWtGc2F2dmktSWFJeG13NUQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS8xNmViNTktNjhhMy00MjE1LTgwOWYtNzliMmU0MGUyYmQ4 LzEvcWI0V3puMnp2bWtGc2F2dmktSWFJeG13NUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABqSkdX58 nl7hPCbdizQhvImMp7Sl8Zx70CwyJL3wWEdqqdPH4jCcm7BjPByOdlgfh/nrtMKx Ec7pUTz5Nvhv9ucTn7s22z1IP2OfwMMu1xD/plEszTbl2zKEoM35oPWKONVbn/q4 eaFMzo7HdmdVxH8u8oZkx5D4oXyoZRalGD3UzXnT7owJvSjBr2Lo53gw/QUyJzZI gtXc4FHhfexTZbxqCWZtrZhGphWaWJ84P4qkdIdDbsj+WW6ngNvbasnWek1cpXeQ zF+N1yy2//yTEMTFzlklFGWs3yZ+LiV3BzXkY0w77wLu70Lf4uAZtxLJkjp8kJpW 8YcOr11w0xy6Og== -----END CERTIFICATE-----Generated at Wed Dec 17 21:07:19 2025 by rpki-client