This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft File: QsMDcZht9dVk7mcHRxe2agL_VxI.mft (raw, json) Hash identifier: qYm+CTYLcPy5xJCk1pnPenANCct5dxStqclgYS3Da1c= Subject key identifier: 52:47:3C:9A:4A:DF:F4:D2:E8:95:B6:3D:14:BF:79:38:1B:A5:01:A9 Authority key identifier: 42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12 Certificate issuer: /CN=42c30371986df5d564ee67074717b66a02ff5712 Certificate serial: 019AF5AE547080F57DAFC81E073F176F29A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft Manifest number: 1654 Signing time: Sat 06 Dec 2025 22:00:33 +0000 Manifest this update: Sat 06 Dec 2025 22:00:33 +0000 Manifest next update: Sun 07 Dec 2025 22:00:33 +0000 Files and hashes: 1: QsMDcZht9dVk7mcHRxe2agL_VxI.crl (hash: k6jhvAVswutfyPSoV2iCkhMXMbl7OsAwQauh+gzUwOA=) 2: hyIZ79qkrdHzxjA2nqjpWKRJazw.roa (hash: uN3TIUn6uJGV9mne7uVtH2Vshh9cYXISPUulyaHzlUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:54:70:80:f5:7d:af:c8:1e:07:3f:17:6f:29:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42c30371986df5d564ee67074717b66a02ff5712 Validity Not Before: Dec 6 22:00:33 2025 GMT Not After : Dec 7 22:00:33 2025 GMT Subject: CN=52473c9a4adff4d2e895b63d14bf79381ba501a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:18:1b:f4:25:29:28:4d:a1:68:ae:f9:78:0d: 16:ee:4b:3c:88:e8:b9:91:69:b7:91:7a:c8:92:95: 68:79:c9:8c:47:ac:36:85:ac:78:10:b2:82:b8:5c: 36:7c:d7:f7:58:d3:3b:5b:7f:8d:16:74:09:aa:6c: d3:97:c5:33:7d:67:5d:a7:be:97:2e:b8:bd:8f:2f: 4b:be:0a:46:9a:a2:68:3b:72:ed:84:73:67:43:a3: 22:3e:c0:82:58:03:d5:9b:d9:19:8f:2b:81:52:b3: 6a:25:91:20:60:05:12:1d:91:bb:ca:c2:d4:a6:c5: 5e:d5:f2:32:03:87:a3:89:2e:7f:5a:70:8c:79:6e: 94:da:f0:58:8a:62:9a:15:0c:9e:db:20:9a:8a:91: 55:9b:34:b0:5c:df:74:38:0e:18:be:af:85:be:a8: fa:8d:35:cb:54:45:58:5a:d9:ae:6c:53:68:04:52: cf:ff:44:5f:84:6e:04:37:24:ee:a4:61:1e:46:9d: ac:3d:5a:44:77:9e:c0:d1:9d:f6:92:e3:f9:3e:8d: af:23:b7:f1:d5:28:15:40:c7:f3:3f:7a:0d:bf:60: cb:f6:30:b0:0f:b0:07:1c:fd:8d:90:2d:39:38:90: db:4f:78:e1:2e:e2:f4:0f:f7:1f:55:cc:50:fc:bd: fd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:47:3C:9A:4A:DF:F4:D2:E8:95:B6:3D:14:BF:79:38:1B:A5:01:A9 X509v3 Authority Key Identifier: keyid:42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:b1:a7:80:18:a0:2f:d4:e9:bb:41:3d:a4:c1:e2:4a:42:85: 9d:77:4a:7e:fc:6f:28:f1:61:97:80:e0:3f:69:0c:b4:db:78: 97:94:41:96:50:d4:84:73:a2:35:e8:d0:2f:43:92:83:a3:1b: 36:ae:5a:11:4f:d0:d2:2d:56:2f:b9:bd:77:74:eb:cf:94:7f: 5f:3b:4e:bf:a7:d5:44:18:4c:f8:cb:cd:a2:7f:6e:b2:e7:b8: 2c:08:d1:d8:42:23:c2:81:f4:30:7a:20:bd:4b:c8:0d:b8:fb: 55:95:82:19:a4:4c:a1:47:29:12:79:7a:1c:27:1c:47:b0:d9: 87:8e:7f:01:eb:a6:6a:34:9d:d5:a4:97:a0:3f:72:a2:4a:ce: cc:04:e4:86:8c:8a:c7:f8:02:00:00:5e:c9:65:af:b0:a4:0c: 0e:51:d1:05:7c:54:80:30:63:b8:09:9c:7e:da:e9:ce:91:07: f7:c6:da:b6:b4:dc:c0:a6:fe:3d:ca:4a:00:b4:00:ac:8e:da: 1f:10:fb:9a:c0:3a:d9:4a:06:07:9f:b5:8d:63:29:54:bd:0b: 95:8e:87:6b:7f:8e:33:cc:52:a0:8d:df:43:9d:44:20:cb:e8: 9a:8f:2c:a1:1a:27:3a:a9:2f:4a:e8:74:8d:3f:26:1b:29:de: 79:e7:ef:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rlRwgPV9r8geBz8XbymmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyYzMwMzcxOTg2ZGY1ZDU2NGVlNjcwNzQ3MTdiNjZhMDJm ZjU3MTIwHhcNMjUxMjA2MjIwMDMzWhcNMjUxMjA3MjIwMDMzWjAzMTEwLwYDVQQD Eyg1MjQ3M2M5YTRhZGZmNGQyZTg5NWI2M2QxNGJmNzkzODFiYTUwMWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Bgb9CUpKE2haK75eA0W7ks8iOi5 kWm3kXrIkpVoecmMR6w2hax4ELKCuFw2fNf3WNM7W3+NFnQJqmzTl8UzfWddp76X Lri9jy9LvgpGmqJoO3LthHNnQ6MiPsCCWAPVm9kZjyuBUrNqJZEgYAUSHZG7ysLU psVe1fIyA4ejiS5/WnCMeW6U2vBYimKaFQye2yCaipFVmzSwXN90OA4Yvq+Fvqj6 jTXLVEVYWtmubFNoBFLP/0RfhG4ENyTupGEeRp2sPVpEd57A0Z32kuP5Po2vI7fx 1SgVQMfzP3oNv2DL9jCwD7AHHP2NkC05OJDbT3jhLuL0D/cfVcxQ/L39yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJHPJpK3/TS6JW2PRS/eTgbpQGpMB8GA1UdIwQY MBaAFELDA3GYbfXVZO5nB0cXtmoC/1cSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXNNRGNaaHQ5ZFZrN21jSFJ4ZTJhZ0xfVnhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC84YmEwZGQtMmZiYi00YTZmLTlhMzct YzI0NTRjZTI4ZDQ4LzEvUXNNRGNaaHQ5ZFZrN21jSFJ4ZTJhZ0xfVnhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC84YmEwZGQtMmZiYi00YTZmLTlhMzctYzI0NTRjZTI4ZDQ4 LzEvUXNNRGNaaHQ5ZFZrN21jSFJ4ZTJhZ0xfVnhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPLGngBig L9Tpu0E9pMHiSkKFnXdKfvxvKPFhl4DgP2kMtNt4l5RBllDUhHOiNejQL0OSg6Mb Nq5aEU/Q0i1WL7m9d3Trz5R/XztOv6fVRBhM+MvNon9usue4LAjR2EIjwoH0MHog vUvIDbj7VZWCGaRMoUcpEnl6HCccR7DZh45/AeumajSd1aSXoD9yokrOzATkhoyK x/gCAABeyWWvsKQMDlHRBXxUgDBjuAmcftrpzpEH98batrTcwKb+PcpKALQArI7a HxD7msA62UoGB5+1jWMpVL0LlY6Ha3+OM8xSoI3fQ51EIMvomo8soRonOqkvSuh0 jT8mGyneeefvmw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:33:04 2025 by rpki-client