This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft File: Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft (raw, json) Hash identifier: OpEbro9LI/sDL7wx4oXTuu5syYdCmYLYf8GG+X176gg= Subject key identifier: 9E:7E:1A:CC:34:24:78:3D:FB:0A:7A:6A:99:35:BC:5E:3B:3E:F7:E0 Authority key identifier: 42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4 Certificate issuer: /CN=4268a4cfb6b1b6447da93833321dd315061193d4 Certificate serial: 019AF27721514F8F48C37A2648735C4EF0C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft Manifest number: 0B4C Signing time: Sat 06 Dec 2025 07:01:24 +0000 Manifest this update: Sat 06 Dec 2025 07:01:24 +0000 Manifest next update: Sun 07 Dec 2025 07:01:24 +0000 Files and hashes: 1: 3qRTh1P9OF6YOqHXqOqHDoBD8eg.roa (hash: nQAh302ZIgG0KfyPwfrx+gnhB19jlHvyVNBKKuKcDas=) 2: Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl (hash: TQQKRmcX7MpjPx9HYg7psj1qejSifWTE0Vupd+KMUTs=) 3: ar9bFy5EONuIJfpM6gpX8Ujo7Ug.roa (hash: qSqkt91qWr7MYsAwEDebuK5+OcIZWP3ilBjbrzxA5ck=) 4: qpS5E6zN7Za0_vE5y0g_cgWncv8.roa (hash: pquZUL+QWeP5wqagKXvKjrrNKaLrKYUyFpeUGLpB5cY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:21:51:4f:8f:48:c3:7a:26:48:73:5c:4e:f0:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4268a4cfb6b1b6447da93833321dd315061193d4 Validity Not Before: Dec 6 07:01:24 2025 GMT Not After : Dec 7 07:01:24 2025 GMT Subject: CN=9e7e1acc3424783dfb0a7a6a9935bc5e3b3ef7e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:63:ae:62:da:1d:bb:cd:87:0c:a1:cf:06:1f: f0:d2:59:ec:d0:fd:8c:e8:5b:9c:93:4a:6f:77:c2: 03:75:a4:06:3c:20:b3:61:4a:4f:d4:cb:c7:ba:3e: c0:d9:49:93:9f:f3:50:d9:e3:ce:39:6d:06:41:f6: aa:c7:1d:95:ac:bd:ed:0b:7d:6c:bc:a7:7e:46:cd: fc:c0:19:de:68:ed:b3:dd:c3:3b:b5:68:00:1a:2a: 11:6b:64:bc:82:2e:26:df:cd:9a:5e:b5:1a:e5:f3: 5e:dd:10:30:66:f0:2a:ed:94:05:51:7d:0b:ad:48: f1:38:6b:6b:05:c3:15:80:3a:fc:a8:71:8d:99:30: 62:5b:36:f6:26:a2:4c:80:25:49:d5:aa:de:d3:0f: d2:39:b0:5b:81:03:9e:8f:7d:07:91:84:04:d1:17: e7:2d:9b:58:77:b6:7b:63:48:ef:40:f2:0d:60:56: 0a:e1:15:fe:fb:a6:4c:b7:20:49:31:88:b4:94:8c: 5a:1b:97:48:d6:f4:2e:8e:6a:ad:ab:07:0e:21:27: 10:b2:5d:b2:6a:78:de:b7:55:0a:a3:99:b8:05:22: 36:71:5c:68:be:e5:be:eb:f2:9d:5c:79:fa:d8:7b: 93:8a:7e:6d:d7:e5:71:91:31:21:c2:d4:22:52:76: 5b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:7E:1A:CC:34:24:78:3D:FB:0A:7A:6A:99:35:BC:5E:3B:3E:F7:E0 X509v3 Authority Key Identifier: keyid:42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:da:aa:f3:8c:f6:f1:4e:b2:91:19:00:60:04:bb:c3:79:37: 40:b9:b7:fc:db:64:dd:b8:07:00:b2:f0:32:7c:ab:24:d7:ce: a0:e3:b3:2e:b2:a2:0e:af:42:c1:6e:4a:20:20:a5:02:86:e3: 43:e2:c8:fb:3e:37:55:d4:23:31:4f:ec:08:5f:69:22:a9:18: 5b:f5:3c:84:75:65:89:94:95:c0:99:ef:01:d8:34:97:09:e9: 47:9f:8e:84:b3:71:3c:41:af:ed:31:55:09:c6:20:1b:d2:65: b6:32:9c:df:c1:15:9c:4b:e3:99:94:af:51:94:91:80:6d:53: 40:6c:6d:22:7a:5c:b9:98:3c:e9:cd:18:d4:06:fb:46:58:b7: 17:57:8c:07:20:17:63:1c:fc:ba:74:68:5d:40:5b:2b:7c:fd: 59:74:81:51:2e:a1:73:e2:01:9f:9c:6d:7e:0f:52:86:89:0b: 47:ad:6a:56:fa:a1:6c:02:49:f5:85:d4:bb:df:37:b6:3a:e8: 00:00:74:c3:52:5f:00:0b:58:b6:63:19:b0:56:da:3f:c5:9f: a0:15:31:cd:83:85:59:d2:6b:57:d4:d0:93:cb:b4:db:08:38: 7f:c9:46:c2:34:5b:c8:7c:92:65:fa:65:77:06:09:cc:04:0f: 37:24:d0:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydyFRT49Iw3omSHNcTvDIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNjhhNGNmYjZiMWI2NDQ3ZGE5MzgzMzMyMWRkMzE1MDYx MTkzZDQwHhcNMjUxMjA2MDcwMTI0WhcNMjUxMjA3MDcwMTI0WjAzMTEwLwYDVQQD Eyg5ZTdlMWFjYzM0MjQ3ODNkZmIwYTdhNmE5OTM1YmM1ZTNiM2VmN2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmOuYtodu82HDKHPBh/w0lns0P2M 6Fuck0pvd8IDdaQGPCCzYUpP1MvHuj7A2UmTn/NQ2ePOOW0GQfaqxx2VrL3tC31s vKd+Rs38wBneaO2z3cM7tWgAGioRa2S8gi4m382aXrUa5fNe3RAwZvAq7ZQFUX0L rUjxOGtrBcMVgDr8qHGNmTBiWzb2JqJMgCVJ1are0w/SObBbgQOej30HkYQE0Rfn LZtYd7Z7Y0jvQPINYFYK4RX++6ZMtyBJMYi0lIxaG5dI1vQujmqtqwcOIScQsl2y anjet1UKo5m4BSI2cVxovuW+6/KdXHn62HuTin5t1+VxkTEhwtQiUnZbtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5+Gsw0JHg9+wp6apk1vF47PvfgMB8GA1UdIwQY MBaAFEJopM+2sbZEfak4MzId0xUGEZPUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUW1pa3o3YXh0a1I5cVRnek1oM1RGUVlSazlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS83ZDQzYmItYTFjNi00MDU1LThjNTMt MmZlZThiNjMwOWNiLzEvUW1pa3o3YXh0a1I5cVRnek1oM1RGUVlSazlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS83ZDQzYmItYTFjNi00MDU1LThjNTMtMmZlZThiNjMwOWNi LzEvUW1pa3o3YXh0a1I5cVRnek1oM1RGUVlSazlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU9qq84z2 8U6ykRkAYAS7w3k3QLm3/Ntk3bgHALLwMnyrJNfOoOOzLrKiDq9CwW5KICClAobj Q+LI+z43VdQjMU/sCF9pIqkYW/U8hHVliZSVwJnvAdg0lwnpR5+OhLNxPEGv7TFV CcYgG9JltjKc38EVnEvjmZSvUZSRgG1TQGxtInpcuZg86c0Y1Ab7Rli3F1eMByAX Yxz8unRoXUBbK3z9WXSBUS6hc+IBn5xtfg9ShokLR61qVvqhbAJJ9YXUu983tjro AAB0w1JfAAtYtmMZsFbaP8WfoBUxzYOFWdJrV9TQk8u02wg4f8lGwjRbyHySZfpl dwYJzAQPNyTQ6Q== -----END CERTIFICATE-----Generated at Sat Dec 6 09:30:19 2025 by rpki-client